Bump protobuf-java version to resolve security vulnerabilities

Signed-off-by: Veronica-Boychuk <veronica.boychuk@ibm.com>
google · Nov 29, 2024 · aee9bc2 · aee9bc2
1 parent 12ca582
commit aee9bc2
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/license_check/maven_artifacts.bzl b/license_check/maven_artifacts.bzl
@@ -8,7 +8,7 @@ MAVEN_ARTIFACTS = [
     "com.google.guava:guava:32.1.2-jre",
     "com.google.guava:guava-testlib:32.1.2-jre",
     "com.google.jimfs:jimfs:1.2",
-    "com.google.protobuf:protobuf-java:3.21.12",
+    "com.google.protobuf:protobuf-java:3.25.5",
     "com.google.re2j:re2j:1.3",
     "com.google.truth.extensions:truth-liteproto-extension:1.1",
     "com.google.truth.extensions:truth-proto-extension:1.1",

diff --git a/maven_artifacts.bzl b/maven_artifacts.bzl
@@ -13,7 +13,7 @@ MAVEN_ARTIFACTS = [
     "com.google.guava:guava:33.0.0-jre",
     "com.google.guava:guava-testlib:33.0.0-jre",
     "com.google.jimfs:jimfs:1.2",
-    "com.google.protobuf:protobuf-java:3.25.2",
+    "com.google.protobuf:protobuf-java:3.25.5",
     "com.google.re2j:re2j:1.3",
     "com.google.truth.extensions:truth-liteproto-extension:1.4.0",
     "com.google.truth.extensions:truth-proto-extension:1.4.0",