vectordotdev / vectordotdev/vector
Upgrade rkyv to 0.8
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 22.6k
- Forks
- 2.3k
- Avg merge
- 1d 7h
- Merged PRs (30d)
- 146
Description
Motivation
Track updating Vector to rkyv 0.8.
Vector currently depends on rkyv 0.7.46 in vector-buffers.
RUSTSEC-2026-0235 affects the 0.7 series, which is no longer supported upstream. The advisory is fixed in rkyv 0.8.17 and later.
rkyv 0.8 archives are incompatible with archives created by rkyv 0.7. Vector persists rkyv archives in disk buffers, including buffered records and ledger state. We will need a migration strategy here.
References
- Related: #26014
- Advisory: https://rustsec.org/advisories/RUSTSEC-2026-0235.html
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start in vector-buffers, where Vector currently depends on rkyv 0.7.46, and trace persisted archives used by disk buffers, buffered records, and ledger state. Review related issue #26014 and the advisory, then define a migration strategy that handles incompatibility between rkyv 0.7 and 0.8 archives; done means the dependency is upgraded without losing persisted state.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- databases
- Issue type
- Refactor
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100