From aee9bc2f250ec87e7cdcc1396f97aa9f346b0c78 Mon Sep 17 00:00:00 2001 From: Veronica-Boychuk Date: Fri, 29 Nov 2024 18:45:20 -0500 Subject: [PATCH] Bump protobuf-java version to resolve security vulnerabilities Signed-off-by: Veronica-Boychuk --- license_check/maven_artifacts.bzl | 2 +- maven_artifacts.bzl | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/license_check/maven_artifacts.bzl b/license_check/maven_artifacts.bzl index cb03186d6e2..ab6a8b83f13 100644 --- a/license_check/maven_artifacts.bzl +++ b/license_check/maven_artifacts.bzl @@ -8,7 +8,7 @@ MAVEN_ARTIFACTS = [ "com.google.guava:guava:32.1.2-jre", "com.google.guava:guava-testlib:32.1.2-jre", "com.google.jimfs:jimfs:1.2", - "com.google.protobuf:protobuf-java:3.21.12", + "com.google.protobuf:protobuf-java:3.25.5", "com.google.re2j:re2j:1.3", "com.google.truth.extensions:truth-liteproto-extension:1.1", "com.google.truth.extensions:truth-proto-extension:1.1", diff --git a/maven_artifacts.bzl b/maven_artifacts.bzl index 65cb9dc9d8f..5b4bf7c2a5d 100644 --- a/maven_artifacts.bzl +++ b/maven_artifacts.bzl @@ -13,7 +13,7 @@ MAVEN_ARTIFACTS = [ "com.google.guava:guava:33.0.0-jre", "com.google.guava:guava-testlib:33.0.0-jre", "com.google.jimfs:jimfs:1.2", - "com.google.protobuf:protobuf-java:3.25.2", + "com.google.protobuf:protobuf-java:3.25.5", "com.google.re2j:re2j:1.3", "com.google.truth.extensions:truth-liteproto-extension:1.4.0", "com.google.truth.extensions:truth-proto-extension:1.4.0",