Update prost in TiKV projects to 0.9

[sticnarf]

Development Task

Prost 0.7 is vulnerable to RUSTSEC-2021-0073. This security issue does not affect TiKV itself. But many TiKV projects are widely used by the community. The users of these projects may hope to get the issue fixed without having multiple prost versions.

Prost 0.7 does not include this patch so it also blocks us from updating to future Rust toolchains.

Projects that use prost

• https://github.com/tikv/protobuf-build
• https://github.com/tikv/grpc-rs
• https://github.com/tikv/raft-rs
• https://github.com/tikv/pprof-rs
• https://github.com/tikv/client-rust
• https://github.com/tikv/agatedb
• https://github.com/pingcap/kvproto
• https://github.com/pingcap/tipb

[Xuanwo]

raft-rs looks like don't have direct depends on prost.

[sticnarf]

raft-rs looks like don't have direct depends on prost.

The proto of raft-rs depends on protobuf-build and prost is one of the options.

https://github.com/tikv/raft-rs/blob/master/proto/Cargo.toml

[Xuanwo]

The proto of raft-rs depends on protobuf-build and prost is one of the options.

https://github.com/tikv/raft-rs/blob/master/proto/Cargo.toml

OK，I will start a PR tomorrow.

[Xuanwo]

raft-rs fixed in tikv/raft-rs#456

[sticnarf]

Prost 0.9 is released, I think the target should be changed to 0.9.
Also cc pprof-rs maintainer @YangKeao and agatedb maintainer @skyzh.

[skyzh]

Agree on this. In fact, AgateDB has already upgraded to prost 0.8 on master branch. We will upgrade that to 0.9 soon.

[BusyJay]

Actually, TiKV doesn't use prost in production. And importer is not maintained anymore, /cc @kennytm, maybe we can just drop the support of prost-codec in TiKV, which should simplify a lot of code. Though prost support in libraries is still necessary for community.

[sticnarf]

If we want to totally remove prost from TiKV itself, pprof-rs also needs to provide an option to not use prost.

[kennytm]

+1 leaving a single protobuf codec for 5.2 and above.

[YangKeao]

If we want to totally remove prost from TiKV itself, pprof-rs also needs to provide an option to not use prost.

There is a PR tikv/pprof-rs#23 several months ago 😢 . I will take a look to this PR again.

[BusyJay]

I sent #11099, which deleted 1300 lines, most of them were crate configurations.