Request for support for Protobuf Java 4.x.x (specifically 4.32.1) in TensorFlow Java
还没有人认领这个 Issue。
- 主要语言
- Java
- 星标
- 928
- 派生
- 227
- PR 合并指标
- 30 天内没有已合并 PR
描述
Please make sure that this is a feature request. As per our GitHub Policy, we only address code/doc bugs, performance issues, feature requests and build/installation issues on GitHub. tag:feature_template
Hi Everyone 👋
I have a project where I am using a java/python hybrid of Tensorflow in a Machine Learning. My project was based on
System information
- TensorFlow version (you are using): 1.2.0-SNAPSHOT
- Are you willing to contribute it (Yes/No): No
Describe the feature and the current behavior/state.
In my project, I am working with a hybrid TensorFlow setup using both Python and Java. The Python side uses TensorFlow 2.15 and protobuf 3.20.3, while the Java side uses TensorFlow 0.5.0 and protobuf 3.21.7.
Due to a security vulnerability (CVE-2025-4565), I need to update the Python protobuf from 3.20.3 to 4.25.8. After upgrading, I encountered an intermittent issue stemming from descriptor changes between protobuf versions 3.x.x and 4.x.x. TensorFlow Python supports protobuf 4.25.8, but TensorFlow Java (1.2.0-SNAPSHOT) only supports protobuf Java 3.21.9.
Given that protobuf Java has since been updated (to version 4.32.1 as of this writing), I would like to request official support for protobuf Java 4.x.x, particularly 4.32.1, in TensorFlow Java to ensure compatibility with the updated Python side of my project.
Will this change the current api? How?
Yes, this change will require updating the dependencies in the TensorFlow Java ecosystem to include protobuf Java 4.x.x support. This update may involve changes to how descriptors and certain functions are handled, so users may need to adjust their code to accommodate those changes.
Who will benefit with this feature?
- Developers using TensorFlow in hybrid Python/Java environments.
- Developers who need to update to the latest protobuf versions for security (CVE-2025-4565) or compatibility with other libraries.
- Users facing compatibility issues due to mismatched versions of protobuf between Python and Java.
Any Other info.
The issue is critical as it directly impacts security and cross-platform compatibility. It would be beneficial if this update could be rolled into a future release of TensorFlow Java, or at least made available in a stable branch for users who rely on protobuf Java 4.x.x.
贡献指南
从这里开始
- 先读完整个 Issue,再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库,在一个分支上完成修改。
- 提交 Pull Request,并在描述里引用这个 Issue 编号。
调研方向
首先检查 TensorFlow Java 的依赖配置,以及它与 issue 中所述 Python 端的兼容性。比较当前对 protobuf Java 3.21.9 的支持与所请求的 4.32.1 支持,包括与 descriptor 相关的行为;完成的标准是为混合 Java/Python 配置提供有文档记录且可正常工作的兼容性。
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- java, python
- 领域
- build-system, machine-learning
- Issue 类型
- 功能
- 难度
- 5/5
- 预计耗时
- 一周以上
- 活跃度
- 停滞
- 描述清晰度
- 基本清楚
- 新手友好度
- 25/100