0.7.0

This is the first supported release that supports draft-ietf-ppm-dap-09. Future 0.7.x releases will include database migrations as needed and will maintain SemVer compatibility for Rust API.

What's Changed

• Fix PrepareRespResult wire encoding by @tgeoghegan in #2469
• build(deps): Bump divviup-client from 0.1.4 to 0.1.5 by @dependabot in #2473
• Log version information on startup by @divergentdave in #2474
• Abandon collection jobs early when a fatal error is encountered by @inahga in #2476
• Fixed-size: return each batch to at most one current-batch query. by @branlwyd in #2391
• Upgrade tokio-postgres-rustls and rustls by @divergentdave in #2500
• build(deps): Bump clap from 4.4.14 to 4.4.17 by @dependabot in #2499
• db: remove untrue comment by @inahga in #2503
• build(deps): Bump trycmd from 0.14.19 to 0.14.20 by @dependabot in #2496
• build(deps): Bump base64 from 0.21.6 to 0.21.7 by @dependabot in #2498
• Adopt prio 0.16.0 by @tgeoghegan in #2477
• Update HPKE domain separation strings for DAP-09 by @tgeoghegan in #2479
• Update h2 to address DoS advisory by @divergentdave in #2507
• Update to Kind 0.20.0 and Kubernetes 1.26 by @divergentdave in #2506
• Tracing span tweaks by @divergentdave in #2509
• Add gauge metrics for DB connection pool status by @divergentdave in #2512
• tests: Add retry to first database connection by @inahga in #2514
• Abandon aggregation jobs early when a fatal error is encountered by @inahga in #2502
• build(deps): Bump shlex from 1.1.0 to 1.3.0 by @dependabot in #2529
• build(deps): Bump tokio-postgres-rustls from 0.11.0 to 0.11.1 by @dependabot in #2525
• build(deps): Bump clap from 4.4.17 to 4.4.18 by @dependabot in #2526
• build(deps): Bump regex from 1.10.2 to 1.10.3 by @dependabot in #2527
• Don't block CI upon announcement of new advisories by @divergentdave in #2535
• Release Janus 0.7.0-prerelease-1 by @tgeoghegan in #2532
• build(deps): Bump uuid from 1.6.1 to 1.7.0 by @dependabot in #2528
• Include batch details in batch mismatch error by @inahga in #2483
• Add report_too_early to PrepareError by @divergentdave in #2538
• Pin to last working version of cargo-deny-action by @divergentdave in #2542
• build(deps): Bump trillium-http from 0.3.11 to 0.3.12 by @dependabot in #2545
• Add per-task report upload metrics by @inahga in #2508
• build(deps): Bump trillium-client from 0.5.1 to 0.5.4 by @dependabot in #2546
• Aggregation: repeat same request on retries. by @branlwyd in #2516
• leader deletes abandoned aggregation job in helper by @tgeoghegan in #2530
• Scrub reports during aggregation job creation, rather than the initial aggregation step. by @branlwyd in #2547
• docs: Use SSD and set random_page_cost by @inahga in #2549
• Expose upload metrics through aggregator API by @inahga in #2537
• Fixed size: make max_batch_size optional by @tgeoghegan in #2551
• Downgrade various logs to DEBUG level by @tgeoghegan in #2557
• Split delete_expired_client_reports() query by @divergentdave in #2560
• build(deps): Bump alpine from 3.19.0 to 3.19.1 by @dependabot in #2577
• build(deps): Bump stopper from 0.2.3 to 0.2.4 by @dependabot in #2573
• build(deps): Bump divviup-client from 0.1.5 to 0.1.7 by @dependabot in #2572
• build(deps): Bump EmbarkStudios/cargo-deny-action from 1.5.10 to 1.5.12 by @dependabot in #2579
• build(deps): Bump chrono from 0.4.31 to 0.4.33 by @dependabot in #2571
• build(deps): Bump the serde group with 3 updates by @dependabot in #2567
• Enforce that HttpErrorResponse always has a status by @divergentdave in #2589
• Scrub report in setup_cancel_aggregation_job_test by @divergentdave in #2590
• Add workflow for automatically generating release by @inahga in #2585
• Make hpke_keypair() infallible, remove hpke_keypair_infallible() by @inahga in #2594
• Remove support for field max_job_discovery_delay_secs by @inahga in #2596
• Remove DivviUpHpkeConfig by @inahga in #2595
• Make token in PrivateCollectorCredential non-optional by @inahga in #2592
• Avoid script injection in make-release workflow by @inahga in #2597
• Remove batch_aggregations.{batch,client_timestamp}_interval. by @branlwyd in #2599
• Helper: disallow reports from too far in the future. by @branlwyd in #2586
• Rephrase batch-GC'ed check in a non-hacky way. by @branlwyd in #2584
• build(deps): Bump divviup-client from 0.1.7 to 0.1.8 by @dependabot in #2613
• build(deps): Bump fixed from 1.24.0 to 1.25.0 by @dependabot in #2611
• build(deps): Bump reqwest from 0.11.23 to 0.11.24 by @dependabot in #2616
• build(deps): Bump tempfile from 3.9.0 to 3.10.0 by @dependabot in #2615
• build(deps): Bump tokio from 1.35.1 to 1.36.0 by @dependabot in #2614
• build(deps): Bump routefinder from 0.5.3 to 0.5.4 by @dependabot in #2612
• Replace &str and Box error types with messages::Error by @inahga in #2625
• build(deps): Bump the trillium group with 2 updates by @dependabot in #2636
• Time-interval: create aggregation jobs touching fewer batches. by @branlwyd in #2607
• Add customized Prio3SumVec VDAF by @divergentdave in #2633
• Remove Prio3CountVec by @divergentdave in #2637
• build(deps): Bump EmbarkStudios/cargo-deny-action from 1.5.12 to 1.5.13 by @dependabot in #2609
• Bump version to 0.7.0-prerelease-2 by @divergentdave in #2643
• Set HTTP client timeouts by @tgeoghegan in #2632
• Simplify unaggregated report check by @divergentdave in #2647
• Update taskprov for taskprov-06. by @branlwyd in #2598
• Fix clippy lints by @divergentdave in #2650
• Add Taskprov support for Prio3SumVecField64MultiproofHmacSha256Aes128 by @divergentdave in #2649
• Fix fanning out transaction error from ReportWriteBatcher by @divergentdave in #2657
• Fix nightly build by @divergentdave in #2659
• Fix test flakiness by @divergentdave in #2660
• build(deps): Bump the error-handling group with 1 update by @dependabot in #2661
• build(deps): Bump chrono from 0.4.33 to 0.4.34 by @dependabot in #2662
• build(deps): Bump divviup-client from 0.1.8 to 0.1.9 by @dependabot in #2663
• build(deps): Bump clap from 4.4.18 to 4.5.0 by @dependabot in #2664
• build(deps): Bump trycmd from 0.14.20 to 0.14.21 by @dependabot in #2666
• build(deps): Bump rust from 1.75.0-alpine to 1.76.0-alpine by @dependabot in #2667
• build(deps): Bump fixed from 1.25.0 to 1.25.1 by @dependabot in #2665
• Add retries to Leader -> Helper requests. by @branlwyd in #2683
• Parameterize number of proofs in multiproof Prio3 by @divergentdave in #2685
• Bump version to 0.7.0-prerelease-3 by @divergentdave in #2688
• Remove get_task_metrics() by @inahga in #2686
• Configurable LIMIT in unaggregated reports query by @divergentdave in #2690
• build(deps): Bump the trillium group with 1 update by @dependabot in #2705
• build(deps): Bump clap from 4.5.0 to 4.5.1 by @dependabot in #2711
• build(deps): Bump trycmd from 0.14.21 to 0.15.0 by @dependabot in #2715
• build(deps): Bump ring from 0.17.7 to 0.17.8 by @dependabot in #2714
• build(deps): Bump the error-handling group with 1 update by @dependabot in #2709
• build(deps): Bump the serde group with 1 update by @dependabot in #2701
• build(deps): Bump rustls-pemfile from 2.0.0 to 2.1.0 by @dependabot in #2712
• Ignore Docker cache export errors by @divergentdave in #2723
• remove direct dependency on routefinder by @jbr in #2641
• Fix and reenable task upload counters (#2684, main forward-port) by @inahga in #2693
• build(deps): Bump divviup-client from 0.1.9 to 0.1.10 by @dependabot in #2717
• build(deps): Bump EmbarkStudios/cargo-deny-action from 1.5.13 to 1.5.15 by @dependabot in #2698
• Scrub batch aggregations once we are done with them. by @branlwyd in #2694
• Release Janus 0.7.0-prerelease-4 by @tgeoghegan in #2726
• Add option to ignore unrecognized DpMechanism by @divergentdave in #2728
• Adopt prio::vdaf::dummy::Vdaf everywhere by @tgeoghegan in #2692
• build(deps): Bump the serde group with 2 updates by @dependabot in #2740
• build(deps): Bump mockito from 1.2.0 to 1.3.1 by @dependabot in #2742
• build(deps): Bump divviup-client from 0.1.10 to 0.1.12 by @dependabot in #2743
• Copy report shares within database when creating aggregation jobs by @divergentdave in #2727
• Re-instrument aggregation job writers with spans by @divergentdave in #2749
• Aggregator API: return 200 with zero counters for fresh task by @inahga in #2752
• build(deps): Bump mockito from 1.3.1 to 1.4.0 by @dependabot in #2755
• build(deps): Bump divviup-client from 0.1.12 to 0.1.14 by @dependabot in #2756
• build(deps): Bump rustls-pemfile from 2.1.0 to 2.1.1 by @dependabot in #2757
• build(deps): Bump tempfile from 3.10.0 to 3.10.1 by @dependabot in #2761
• build(deps): Bump mio from 0.8.9 to 0.8.11 by @dependabot in #2768
• Upgrade OpenTelemetry SDK to 0.22 by @divergentdave in #2771
• expose TaskBuilder to integration tests by @tgeoghegan in #2770
• Upgrade whoami to 1.5.0 by @divergentdave in #2774
• Write upload counters in separate transaction from uploads by @inahga in #2754
• Fix Taskprov struct field order for Prio3SumVec by @divergentdave in #2777
• Implement From<{BearerToken,DapAuthToken}> for AuthenticationToken by @inahga in #2783
• Use base64 encoding for HpkePrivateKey's FromStr; implement FromStr for HpkePublicKey by @inahga in #2784
• Taskprov: fix verify key length for HMAC XOF by @divergentdave in #2780
• build(deps): Bump EmbarkStudios/cargo-deny-action from 1.5.15 to 1.6.1 by @dependabot in #2786
• build(deps): Bump clap from 4.5.1 to 4.5.2 by @dependabot in #2787
• build(deps): Bump divviup-client from 0.1.14 to 0.1.15 by @dependabot in #2788
• build(deps): Bump reqwest from 0.11.24 to 0.11.25 by @dependabot in #2789
• build(deps): Bump stopper from 0.2.4 to 0.2.6 by @dependabot in #2790
• build(deps): Bump http from 0.2.11 to 0.2.12 by @dependabot in #2792
• build(deps): Bump fixed from 1.25.1 to 1.26.0 by @dependabot in #2791
• build(deps): Bump chrono from 0.4.34 to 0.4.35 by @dependabot in #2793
• Split database query for unaggregated reports by @divergentdave in #2807
• Remove batches table. by @branlwyd in #2782
• Add limit to transaction retries by @inahga in #2809
• Remove extra extension member from problem details by @divergentdave in #2816
• Save Taskprov task_info field in database by @divergentdave in #2815
• Bump version to 0.7.0-prerelease-5 by @divergentdave in #2817
• aggregator api: Properly report we're DAP-09 by @inahga in #2813
• build(deps): Bump the docker group with 1 update by @dependabot in #2820
• build(deps): Bump base64 from 0.21.7 to 0.22.0 by @dependabot in #2840
• Datastore: treat writes to logically GC'ed rows as new writes. by @branlwyd in #2818
• Improve Daphne interop testing by @cjpatton in #2814
• build(deps): Bump tokio-stream from 0.1.14 to 0.1.15 by @dependabot in #2841
• build(deps): Bump the serde group with 1 update by @dependabot in #2832
• build(deps): Bump divviup-client from 0.1.15 to 0.1.16 by @dependabot in #2835
• build(deps): Bump clap from 4.5.2 to 4.5.3 by @dependabot in #2842
• build(deps): Bump async-trait from 0.1.77 to 0.1.78 by @dependabot in #2836
• build(deps): Bump the error-handling group with 2 updates by @dependabot in #2834
• build(deps): Bump reqwest from 0.11.25 to 0.11.26 by @dependabot in #2838
• build(deps): Bump sqlx from 0.7.3 to 0.7.4 by @dependabot in #2837
• build(deps): Bump the tracing group with 2 updates by @dependabot in #2833
• Integration test using dummy VDAF with agg param by @tgeoghegan in #2769
• Split up http_handlers.rs by @divergentdave in #2855
• Add negative test for helper handling of replayed reports by @divergentdave in #2856
• Split messages/src/lib.rs by @divergentdave in #2858
• Fix comments in new aggregation job creator test by @divergentdave in #2859
• aggregator api: Allow patching a task's expiration time by @inahga in #2824
• Split task join out of every query & cache it. by @branlwyd in #2857
• datastore: Add updated_at to tasks table by @inahga in #2861
• Downgrade log level for update_task_expiration by @inahga in #2862
• Further subdivide janus_messages unit tests by @divergentdave in #2866
• Add conditions on aggregation_jobs.task_id back to queries by @divergentdave in #2865
• Reverse proxy inside janus_interop_aggregator by @divergentdave in #2867

New Contributors

• @cjpatton made their first contribution in #2814

Full Changelog: 0.6.21...0.7.0