Skip to content

Conversation

@dawid-nowak
Copy link
Member

Updating dependencies to latest and greatest...
Also see issue #129, which needs to be solved separately.

@gemini-code-assist
Copy link
Contributor

Summary of Changes

Hello @dawid-nowak, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request performs a comprehensive update of all project dependencies to their most recent versions. The primary goal is to leverage the latest features, performance improvements, and security fixes offered by updated libraries. This involved modifying Cargo.toml for direct dependencies and Cargo.lock for the entire dependency tree. Additionally, some code adjustments were necessary to align with API changes in key libraries, particularly within the gRPC communication layer and build scripts.

Highlights

  • Dependency Updates: All project dependencies have been updated to their latest available versions, affecting numerous crates across the codebase.
  • Core Library Upgrades: Significant upgrades include axum (0.7.9 to 0.8.6), tonic (0.12.3 to 0.14.2), prost (0.13 to 0.14), opentelemetry (0.29.1 to 0.31.0), and hyper-util (0.1.15 to 0.1.17).
  • gRPC Build Process Refinement: The gRPC build process in envoy-data-plane-api/build.rs has been updated to use tonic-prost-build and adjusted path handling, along with changes in tonic body types from BoxBody to Body in gRPC channel implementations.
  • Cargo.toml and Cargo.lock Synchronization: Both Cargo.toml and Cargo.lock files have been thoroughly updated to reflect the new dependency versions and their transitive dependencies, ensuring consistent builds.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Copy link
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates a large number of dependencies to their latest versions. This is a valuable maintenance task that keeps the project up-to-date with security patches and new features. The changes also include necessary code adaptations for breaking changes in the updated dependencies, particularly around tonic and exponential-backoff. My review focuses on ensuring these adaptations are correct and don't introduce new issues. I've identified a few areas for improvement, including removing leftover debug code, clarifying a change in default features, and addressing a potential logic issue in the retry mechanism. Overall, this is a good step forward for the project's health.


let mut total_requests = 0;
for (index, back_off) in retry_policy.exponential_back_off().iter().enumerate() {
let back_off = back_off.unwrap_or_default();
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

Using unwrap_or_default() here will result in a Duration of zero if back_off is None. This means the retry would happen immediately without any delay. This could lead to hammering a service. Is this the intended behavior? If None indicates a specific condition (like disabled jitter), it might be better to fall back to a base delay instead of zero.

Comment on lines 7 to 8
let path = env::current_dir()?;
println!("The current directory is {}", path.display());
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

This println! statement and the current directory retrieval appear to be for debugging purposes. They should be removed from the final code to avoid printing to stdout during every build and performing unnecessary operations.

# making sure we are not using pure ring
aws_lc_rs = ["rustls/aws_lc_rs"]
default = ["aws_lc_rs"]
default = ["aws_lc_rs","metrics"]
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The metrics feature has been added to the default features. This is a significant change as it will enable metrics by default for this crate. Please ensure this is the intended behavior and consider documenting this change in the crate's release notes or README.

Signed-off-by: Dawid Nowak <[email protected]>
@dawid-nowak dawid-nowak force-pushed the dawid.nowak/dependency_bump branch from 9a2602b to ac9f55e Compare November 3, 2025 12:33
@hzxuzhonghu
Copy link
Member

/lgtm
/approve

@kmesh-bot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: hzxuzhonghu

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kmesh-bot kmesh-bot merged commit 34517a6 into main Nov 6, 2025
6 of 7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants