From da15758c9042d38589711ec023b3bfcf8cd5eccd Mon Sep 17 00:00:00 2001 From: PJ Fanning Date: Tue, 13 Jun 2023 12:33:22 +0100 Subject: [PATCH] upgrade to protobuf 3.16.3 (due to CVE) (#390) --- legal/pekko-protobuf-v3-jar-license.txt | 2 +- project/Dependencies.scala | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/legal/pekko-protobuf-v3-jar-license.txt b/legal/pekko-protobuf-v3-jar-license.txt index 94b08c03f7..7e8d9ae7b2 100644 --- a/legal/pekko-protobuf-v3-jar-license.txt +++ b/legal/pekko-protobuf-v3-jar-license.txt @@ -202,6 +202,6 @@ --------------- -pekko-protobuf-v3 contains the sources of Google protobuf 3.16.1 runtime support, +pekko-protobuf-v3 contains the sources of Google protobuf 3.16.3 runtime support, moved into the source package `org.apache.pekko.protobufv3.internal` so as to avoid version conflicts. For license information see COPYING.protobuf diff --git a/project/Dependencies.scala b/project/Dependencies.scala index 200791e78a..cfd1c90107 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -31,7 +31,7 @@ object Dependencies { // https://github.com/real-logic/aeron/blob/1.x.y/build.gradle val agronaVersion = "1.15.1" val nettyVersion = "3.10.6.Final" - val protobufJavaVersion = "3.16.1" + val protobufJavaVersion = "3.16.3" val logbackVersion = "1.2.11" val jacksonCoreVersion = "2.14.3"