chore(antd): bump ant-core to 0.3.0 (ant-cli-v0.2.10), release v0.11.0 - #200
Merged
Conversation
Repin antd from ant-cli-v0.2.8 (ant-core 0.2.8) to ant-cli-v0.2.10 (ant-core 0.3.0, commit 7255f5b9). Pulls along ant-protocol 2.2.2, saorsa-core 0.26.2, saorsa-transport 0.35.1. ant-core 0.3.0 is node/daemon-internal: disk-based node eviction, node health monitoring, merkle store de-wave, and extended chunk-PUT fallback past the close group. It also removes the unused UploadEvent::WaveComplete event (breaking upstream, but antd never referenced it). No antd source changes required. Daemon wire surface (proto/openapi) is unchanged, so the REST/gRPC client SDKs need no regeneration. cargo check clean; 37/37 unit tests pass. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Nic-dorman
pushed a commit
that referenced
this pull request
Jul 6, 2026
Bump ant-ffi's ant-core pin from the untagged rev 95a23bee (0.2.9) to the released tag ant-cli-v0.2.10 (0.3.0), matching antd v0.11.0 (#200) so the whole SDK ships on one ant-core. ant-protocol stays 2.2.2 (already aligned). 0.3.0 removed `UploadEvent::WaveComplete` — dropped its arm in map_upload_event; per-chunk `ChunkStored` already carries the running total. Verified against 0.3.0: build, clippy -D warnings, fmt --check, tests (4 pass), and UniFFI Swift+Kotlin generation (incl. the merkle surface). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
quinn-proto <0.11.15 is vulnerable to remote memory exhaustion via unbounded out-of-order stream reassembly (RUSTSEC-2026-0185). Reaches antd/antd-rust transitively through saorsa-transport -> quinn -> quinn-proto over a caret range, so the patched 0.11.15 resolves in our lockfiles without any upstream saorsa-transport change. Pre-existing on main (both carried 0.11.14); the advisory was newly published, so the Security audit job started failing on every branch. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Repin antd from
ant-cli-v0.2.8(ant-core 0.2.8) toant-cli-v0.2.10(ant-core 0.3.0, commit7255f5b9) and cut antd v0.11.0.Transitively pulls:
ant-protocol 2.2.0 → 2.2.2,saorsa-core 0.26.0 → 0.26.2,saorsa-transport 0.35.0 → 0.35.1.What's in ant-core 0.3.0
Node/daemon-internal:
--evm-networkonnode add; removal of unsupported--network-id/--metrics-portClient / data-path (behavioral — passes
cargo checkbut changes upload outcomes):put_target_peers,PUT_TARGET_WIDTH = 20) — changes which peers are written/paid and PUT success ratesPaymentRequiredPUT response now treated as a price-floor decline → client retries at a higher price instead of failingError::CloseGroupShortfallclassified as an application error so dial-churn shortfalls no longer drag the adaptive store limiter down (V2-554). SDK-observable: an upload hitting this now returns a different error string over REST/gRPCUploadEvent::WaveComplete— antd never referenced itNew client API (additive, not yet surfaced):
file_download_with_peer_report_from_closest_peers+FileDownloadWithPeerReport/FileChunkPeerReport/FileChunkPeerStatus— per-chunk download peer diagnostics. Candidate for a future daemon/SDK feature; unused by this release.Impact on this repo
Cargo.tomltag + version,Cargo.lock).proto/,openapi.yamluntouched) → the REST/gRPC client SDKs need no regeneration.ffi/ant-ffiis tracked separately (pre-existing migration debt) and is not part of this daemon release.Verification
cargo check— cleancargo test --bins— 37 passed / 0 failedKnown CI note
The
Security auditjob fails onRUSTSEC-2026-0185(quinn-protoremote memory exhaustion), pulled transitively viasaorsa-transport. This is not introduced by this PR —quinn-proto 0.11.14is identical onmain; the advisory was newly published and the audit job re-fetches the DB each run, somainis red on it too. Fix tracked separately / folded in below.Not included
No git tag is pushed by this PR — tagging happens after CI + dev2 verification per the release process.