Skip to content

Commit e188ed8

Browse files
lhotarilhotari
authored
Upgrade grpc and protobuf to address CVE-2023-32732 (#3992)
### Motivation OWASP dependency check fails because of CVE-2023-32732 in grpc. ### Changes * Upgrade grpc to 1.56.0 * Upgrade protobuf to 3.22.3 to match the version used in grpc 1.56.0 * Upgrade other grpc/protobuf related libs
1 parent 5ca8d83 commit e188ed8

File tree

10 files changed

+150
-126
lines changed

10 files changed

+150
-126
lines changed

‎bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt‎

Lines changed: 32 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -275,26 +275,26 @@ Apache Software License, Version 2.
275275
- lib/com.yahoo.datasketches-memory-0.8.3.jar [25]
276276
- lib/com.yahoo.datasketches-sketches-core-0.8.3.jar [25]
277277
- lib/net.jpountz.lz4-lz4-1.3.0.jar [26]
278-
- lib/com.google.api.grpc-proto-google-common-protos-2.0.1.jar [28]
279-
- lib/com.google.code.gson-gson-2.9.0.jar [29]
278+
- lib/com.google.api.grpc-proto-google-common-protos-2.17.0.jar [28]
279+
- lib/com.google.code.gson-gson-2.10.1.jar [29]
280280
- lib/io.opencensus-opencensus-api-0.28.0.jar [30]
281281
- lib/io.opencensus-opencensus-contrib-http-util-0.28.0.jar [30]
282282
- lib/io.opencensus-opencensus-proto-0.2.0.jar [30]
283-
- lib/io.grpc-grpc-all-1.47.0.jar [33]
284-
- lib/io.grpc-grpc-alts-1.47.0.jar [33]
285-
- lib/io.grpc-grpc-api-1.47.0.jar [33]
286-
- lib/io.grpc-grpc-auth-1.47.0.jar [33]
287-
- lib/io.grpc-grpc-context-1.47.0.jar [33]
288-
- lib/io.grpc-grpc-core-1.47.0.jar [33]
289-
- lib/io.grpc-grpc-grpclb-1.47.0.jar [33]
290-
- lib/io.grpc-grpc-netty-1.47.0.jar [33]
291-
- lib/io.grpc-grpc-protobuf-1.47.0.jar [33]
292-
- lib/io.grpc-grpc-protobuf-lite-1.47.0.jar [33]
293-
- lib/io.grpc-grpc-services-1.47.0.jar [33]
294-
- lib/io.grpc-grpc-stub-1.47.0.jar [33]
295-
- lib/io.grpc-grpc-testing-1.47.0.jar [33]
296-
- lib/io.grpc-grpc-xds-1.47.0.jar [33]
297-
- lib/io.grpc-grpc-rls-1.47.0.jar[33]
283+
- lib/io.grpc-grpc-all-1.56.0.jar [33]
284+
- lib/io.grpc-grpc-alts-1.56.0.jar [33]
285+
- lib/io.grpc-grpc-api-1.56.0.jar [33]
286+
- lib/io.grpc-grpc-auth-1.56.0.jar [33]
287+
- lib/io.grpc-grpc-context-1.56.0.jar [33]
288+
- lib/io.grpc-grpc-core-1.56.0.jar [33]
289+
- lib/io.grpc-grpc-grpclb-1.56.0.jar [33]
290+
- lib/io.grpc-grpc-netty-1.56.0.jar [33]
291+
- lib/io.grpc-grpc-protobuf-1.56.0.jar [33]
292+
- lib/io.grpc-grpc-protobuf-lite-1.56.0.jar [33]
293+
- lib/io.grpc-grpc-services-1.56.0.jar [33]
294+
- lib/io.grpc-grpc-stub-1.56.0.jar [33]
295+
- lib/io.grpc-grpc-testing-1.56.0.jar [33]
296+
- lib/io.grpc-grpc-xds-1.56.0.jar [33]
297+
- lib/io.grpc-grpc-rls-1.56.0.jar[33]
298298
- lib/org.apache.curator-curator-client-5.1.0.jar [34]
299299
- lib/org.apache.curator-curator-framework-5.1.0.jar [34]
300300
- lib/org.apache.curator-curator-recipes-5.1.0.jar [34]
@@ -308,15 +308,15 @@ Apache Software License, Version 2.
308308
- lib/com.google.android-annotations-4.1.1.4.jar [42]
309309
- lib/com.google.http-client-google-http-client-1.41.0.jar [43]
310310
- lib/com.google.http-client-google-http-client-gson-1.41.0.jar [43]
311-
- lib/com.google.auto.value-auto-value-annotations-1.9.jar [44]
311+
- lib/com.google.auto.value-auto-value-annotations-1.10.1.jar [44]
312312
- lib/com.google.j2objc-j2objc-annotations-1.3.jar [45]
313-
- lib/com.google.re2j-re2j-1.5.jar [46]
313+
- lib/com.google.re2j-re2j-1.7.jar [46]
314314
- lib/io.dropwizard.metrics-metrics-core-4.1.12.1.jar [47]
315315
- lib/io.dropwizard.metrics-metrics-graphite-4.1.12.1.jar [47]
316316
- lib/io.dropwizard.metrics-metrics-jmx-4.1.12.1.jar [47]
317317
- lib/io.dropwizard.metrics-metrics-jvm-4.1.12.1.jar [47]
318-
- lib/io.perfmark-perfmark-api-0.25.0.jar [48]
319-
- lib/org.conscrypt-conscrypt-openjdk-uber-2.5.1.jar [49]
318+
- lib/io.perfmark-perfmark-api-0.26.0.jar [48]
319+
- lib/org.conscrypt-conscrypt-openjdk-uber-2.5.2.jar [49]
320320
- lib/org.xerial.snappy-snappy-java-1.1.10.1.jar [50]
321321
- lib/io.reactivex.rxjava3-rxjava-3.0.1.jar [51]
322322
- lib/org.hdrhistogram-HdrHistogram-2.1.10.jar [52]
@@ -375,10 +375,10 @@ Apache Software License, Version 2.
375375
[24] Source available at https://github.com/cbeust/jcommander/tree/1.82
376376
[25] Source available at https://github.com/DataSketches/sketches-core/tree/sketches-0.8.3
377377
[26] Source available at https://github.com/lz4/lz4-java/tree/1.3.0
378-
[28] Source available at https://github.com/googleapis/java-common-protos/tree/v2.0.1
379-
[29] Source available at https://github.com/google/gson/tree/gson-parent-2.9.0
378+
[28] Source available at https://github.com/googleapis/java-common-protos/tree/v2.17.0
379+
[29] Source available at https://github.com/google/gson/tree/gson-parent-2.10.1
380380
[30] Source available at https://github.com/census-instrumentation/opencensus-java/tree/v0.28.0
381-
[33] Source available at https://github.com/grpc/grpc-java/tree/v1.47.0
381+
[33] Source available at https://github.com/grpc/grpc-java/tree/v1.56.0
382382
[34] Source available at https://github.com/apache/curator/releases/tag/apache.curator-5.1.0
383383
[35] Source available at https://github.com/inferred/FreeBuilder/tree/v2.7.0
384384
[36] Source available at https://github.com/google/error-prone/tree/v2.9.0
@@ -389,12 +389,12 @@ Apache Software License, Version 2.
389389
[41] Source available at https://github.com/apache/thrift/tree/0.14.2
390390
[42] Source available at https://source.android.com/
391391
[43] Source available at https://github.com/googleapis/google-http-java-client/releases/tag/v1.41.0
392-
[44] Source available at https://github.com/google/auto/releases/tag/auto-value-1.9
392+
[44] Source available at https://github.com/google/auto/releases/tag/auto-value-1.10.1
393393
[45] Source available at https://github.com/google/j2objc/releases/tag/1.3
394-
[46] Source available at https://github.com/google/re2j/releases/tag/re2j-1.5
394+
[46] Source available at https://github.com/google/re2j/releases/tag/re2j-1.7
395395
[47] Source available at https://github.com/dropwizard/metrics/releases/tag/v4.1.12.1
396-
[48] Source available at https://github.com/perfmark/perfmark/releases/tag/v0.25.0
397-
[49] Source available at https://github.com/google/conscrypt/releases/tag/2.5.1
396+
[48] Source available at https://github.com/perfmark/perfmark/releases/tag/v0.26.0
397+
[49] Source available at https://github.com/google/conscrypt/releases/tag/2.5.2
398398
[50] Source available at https://github.com/xerial/snappy-java/releases/tag/v1.1.10.1
399399
[51] Source available at https://github.com/ReactiveX/RxJava/tree/v3.0.1
400400
[52] Source available at https://github.com/HdrHistogram/HdrHistogram/tree/HdrHistogram-2.1.10
@@ -672,13 +672,13 @@ This product bundles Google Protocol Buffers, which is available under a "3-clau
672672
license.
673673

674674
Bundled as
675-
- lib/com.google.protobuf-protobuf-java-3.19.6.jar
676-
Source available at https://github.com/google/protobuf/tree/v3.19.6
675+
- lib/com.google.protobuf-protobuf-java-3.22.3.jar
676+
Source available at https://github.com/google/protobuf/tree/v3.22.3
677677
For details, see deps/protobuf-3.14.0/LICENSE.
678678

679679
Bundled as
680-
- lib/com.google.protobuf-protobuf-java-util-3.19.6.jar
681-
Source available at https://github.com/protocolbuffers/protobuf/tree/v3.19.6
680+
- lib/com.google.protobuf-protobuf-java-util-3.22.3.jar
681+
Source available at https://github.com/protocolbuffers/protobuf/tree/v3.22.3
682682
For details, see deps/protobuf-3.12.0/LICENSE.
683683
------------------------------------------------------------------------------------
684684
This product bundles the JCP Standard Java Servlet API, which is available under a

‎bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt‎

Lines changed: 32 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -250,26 +250,26 @@ Apache Software License, Version 2.
250250
- lib/org.apache.zookeeper-zookeeper-3.8.1-tests.jar [20]
251251
- lib/com.beust-jcommander-1.82.jar [23]
252252
- lib/net.jpountz.lz4-lz4-1.3.0.jar [25]
253-
- lib/com.google.api.grpc-proto-google-common-protos-2.0.1.jar [27]
254-
- lib/com.google.code.gson-gson-2.9.0.jar [28]
253+
- lib/com.google.api.grpc-proto-google-common-protos-2.17.0.jar [27]
254+
- lib/com.google.code.gson-gson-2.10.1.jar [28]
255255
- lib/io.opencensus-opencensus-api-0.28.0.jar [29]
256256
- lib/io.opencensus-opencensus-contrib-http-util-0.28.0.jar [29]
257257
- lib/io.opencensus-opencensus-proto-0.2.0.jar [29]
258-
- lib/io.grpc-grpc-all-1.47.0.jar [32]
259-
- lib/io.grpc-grpc-alts-1.47.0.jar [32]
260-
- lib/io.grpc-grpc-api-1.47.0.jar [32]
261-
- lib/io.grpc-grpc-auth-1.47.0.jar [32]
262-
- lib/io.grpc-grpc-context-1.47.0.jar [32]
263-
- lib/io.grpc-grpc-core-1.47.0.jar [32]
264-
- lib/io.grpc-grpc-grpclb-1.47.0.jar [32]
265-
- lib/io.grpc-grpc-netty-1.47.0.jar [32]
266-
- lib/io.grpc-grpc-protobuf-1.47.0.jar [32]
267-
- lib/io.grpc-grpc-protobuf-lite-1.47.0.jar [32]
268-
- lib/io.grpc-grpc-services-1.47.0.jar [32]
269-
- lib/io.grpc-grpc-stub-1.47.0.jar [32]
270-
- lib/io.grpc-grpc-testing-1.47.0.jar [32]
271-
- lib/io.grpc-grpc-xds-1.47.0.jar [32]
272-
- lib/io.grpc-grpc-rls-1.47.0.jar[32]
258+
- lib/io.grpc-grpc-all-1.56.0.jar [32]
259+
- lib/io.grpc-grpc-alts-1.56.0.jar [32]
260+
- lib/io.grpc-grpc-api-1.56.0.jar [32]
261+
- lib/io.grpc-grpc-auth-1.56.0.jar [32]
262+
- lib/io.grpc-grpc-context-1.56.0.jar [32]
263+
- lib/io.grpc-grpc-core-1.56.0.jar [32]
264+
- lib/io.grpc-grpc-grpclb-1.56.0.jar [32]
265+
- lib/io.grpc-grpc-netty-1.56.0.jar [32]
266+
- lib/io.grpc-grpc-protobuf-1.56.0.jar [32]
267+
- lib/io.grpc-grpc-protobuf-lite-1.56.0.jar [32]
268+
- lib/io.grpc-grpc-services-1.56.0.jar [32]
269+
- lib/io.grpc-grpc-stub-1.56.0.jar [32]
270+
- lib/io.grpc-grpc-testing-1.56.0.jar [32]
271+
- lib/io.grpc-grpc-xds-1.56.0.jar [32]
272+
- lib/io.grpc-grpc-rls-1.56.0.jar[32]
273273
- lib/org.apache.curator-curator-client-5.1.0.jar [33]
274274
- lib/org.apache.curator-curator-framework-5.1.0.jar [33]
275275
- lib/org.apache.curator-curator-recipes-5.1.0.jar [33]
@@ -281,14 +281,14 @@ Apache Software License, Version 2.
281281
- lib/org.apache.httpcomponents-httpcore-4.4.15.jar [39]
282282
- lib/org.apache.thrift-libthrift-0.14.2.jar [40]
283283
- lib/com.google.android-annotations-4.1.1.4.jar [41]
284-
- lib/com.google.auto.value-auto-value-annotations-1.9.jar [42]
284+
- lib/com.google.auto.value-auto-value-annotations-1.10.1.jar [42]
285285
- lib/com.google.http-client-google-http-client-1.41.0.jar [43]
286286
- lib/com.google.http-client-google-http-client-gson-1.41.0.jar [43]
287287
- lib/com.google.j2objc-j2objc-annotations-1.3.jar [44]
288-
- lib/com.google.re2j-re2j-1.5.jar [45]
288+
- lib/com.google.re2j-re2j-1.7.jar [45]
289289
- lib/io.dropwizard.metrics-metrics-core-4.1.12.1.jar [46]
290-
- lib/io.perfmark-perfmark-api-0.25.0.jar [47]
291-
- lib/org.conscrypt-conscrypt-openjdk-uber-2.5.1.jar [49]
290+
- lib/io.perfmark-perfmark-api-0.26.0.jar [47]
291+
- lib/org.conscrypt-conscrypt-openjdk-uber-2.5.2.jar [49]
292292
- lib/org.xerial.snappy-snappy-java-1.1.10.1.jar [50]
293293
- lib/io.reactivex.rxjava3-rxjava-3.0.1.jar [51]
294294
- lib/com.carrotsearch-hppc-0.9.1.jar [52]
@@ -310,10 +310,10 @@ Apache Software License, Version 2.
310310
[20] Source available at https://github.com/apache/zookeeper/tree/release-3.8.0
311311
[23] Source available at https://github.com/cbeust/jcommander/tree/1.82
312312
[25] Source available at https://github.com/lz4/lz4-java/tree/1.3.0
313-
[27] Source available at https://github.com/googleapis/java-common-protos/tree/v2.0.1
314-
[28] Source available at https://github.com/google/gson/tree/gson-parent-2.9.0
313+
[27] Source available at https://github.com/googleapis/java-common-protos/tree/v2.17.0
314+
[28] Source available at https://github.com/google/gson/tree/gson-parent-2.10.1
315315
[29] Source available at https://github.com/census-instrumentation/opencensus-java/tree/v0.28.0
316-
[32] Source available at https://github.com/grpc/grpc-java/tree/v1.47.0
316+
[32] Source available at https://github.com/grpc/grpc-java/tree/v1.56.0
317317
[33] Source available at https://github.com/apache/curator/tree/apache-curator-5.1.0
318318
[34] Source available at https://github.com/inferred/FreeBuilder/tree/v2.7.0
319319
[35] Source available at https://github.com/google/error-prone/tree/v2.9.0
@@ -323,13 +323,13 @@ Apache Software License, Version 2.
323323
[39] Source available at https://github.com/apache/httpcomponents-core/tree/rel/v4.4.15
324324
[40] Source available at https://github.com/apache/thrift/tree/0.14.2
325325
[41] Source available at https://source.android.com/
326-
[42] Source available at https://github.com/google/auto/releases/tag/auto-value-1.9
326+
[42] Source available at https://github.com/google/auto/releases/tag/auto-value-1.10.1
327327
[43] Source available at https://github.com/googleapis/google-http-java-client/releases/tag/v1.41.0
328328
[44] Source available at https://github.com/google/j2objc/releases/tag/1.3
329-
[45] Source available at https://github.com/google/re2j/releases/tag/re2j-1.5
329+
[45] Source available at https://github.com/google/re2j/releases/tag/re2j-1.7
330330
[46] Source available at https://github.com/dropwizard/metrics/releases/tag/v4.1.12.1
331-
[47] Source available at https://github.com/perfmark/perfmark/releases/tag/v0.25.0
332-
[49] Source available at https://github.com/google/conscrypt/releases/tag/2.5.1
331+
[47] Source available at https://github.com/perfmark/perfmark/releases/tag/v0.26.0
332+
[49] Source available at https://github.com/google/conscrypt/releases/tag/2.5.2
333333
[50] Source available at https://github.com/xerial/snappy-java/releases/tag/v1.1.10.1
334334
[51] Source available at https://github.com/ReactiveX/RxJava/tree/v3.0.1
335335
[52] Source available at https://github.com/carrotsearch/hppc/tree/0.9.1
@@ -566,13 +566,13 @@ This product bundles Google Protocol Buffers, which is available under a "3-clau
566566
license.
567567

568568
Bundled as
569-
- lib/com.google.protobuf-protobuf-java-3.19.6.jar
570-
Source available at https://github.com/google/protobuf/tree/v3.19.6
569+
- lib/com.google.protobuf-protobuf-java-3.22.3.jar
570+
Source available at https://github.com/google/protobuf/tree/v3.22.3
571571
For details, see deps/protobuf-3.14.0/LICENSE.
572572

573573
Bundled as
574-
- lib/com.google.protobuf-protobuf-java-util-3.19.6.jar
575-
Source available at https://github.com/protocolbuffers/protobuf/tree/v3.19.6
574+
- lib/com.google.protobuf-protobuf-java-util-3.22.3.jar
575+
Source available at https://github.com/protocolbuffers/protobuf/tree/v3.22.3
576576
For details, see deps/protobuf-3.12.0/LICENSE.
577577
------------------------------------------------------------------------------------
578578
This product bundles Simple Logging Facade for Java, which is available under a

‎bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt‎

Lines changed: 32 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -275,26 +275,26 @@ Apache Software License, Version 2.
275275
- lib/com.yahoo.datasketches-memory-0.8.3.jar [25]
276276
- lib/com.yahoo.datasketches-sketches-core-0.8.3.jar [25]
277277
- lib/net.jpountz.lz4-lz4-1.3.0.jar [26]
278-
- lib/com.google.api.grpc-proto-google-common-protos-2.0.1.jar [28]
279-
- lib/com.google.code.gson-gson-2.9.0.jar [29]
278+
- lib/com.google.api.grpc-proto-google-common-protos-2.17.0.jar [28]
279+
- lib/com.google.code.gson-gson-2.10.1.jar [29]
280280
- lib/io.opencensus-opencensus-api-0.28.0.jar [30]
281281
- lib/io.opencensus-opencensus-contrib-http-util-0.28.0.jar [30]
282282
- lib/io.opencensus-opencensus-proto-0.2.0.jar [30]
283-
- lib/io.grpc-grpc-all-1.47.0.jar [33]
284-
- lib/io.grpc-grpc-alts-1.47.0.jar [33]
285-
- lib/io.grpc-grpc-api-1.47.0.jar [33]
286-
- lib/io.grpc-grpc-auth-1.47.0.jar [33]
287-
- lib/io.grpc-grpc-context-1.47.0.jar [33]
288-
- lib/io.grpc-grpc-core-1.47.0.jar [33]
289-
- lib/io.grpc-grpc-grpclb-1.47.0.jar [33]
290-
- lib/io.grpc-grpc-netty-1.47.0.jar [33]
291-
- lib/io.grpc-grpc-protobuf-1.47.0.jar [33]
292-
- lib/io.grpc-grpc-protobuf-lite-1.47.0.jar [33]
293-
- lib/io.grpc-grpc-services-1.47.0.jar [33]
294-
- lib/io.grpc-grpc-stub-1.47.0.jar [33]
295-
- lib/io.grpc-grpc-testing-1.47.0.jar [33]
296-
- lib/io.grpc-grpc-xds-1.47.0.jar [33]
297-
- lib/io.grpc-grpc-rls-1.47.0.jar[33]
283+
- lib/io.grpc-grpc-all-1.56.0.jar [33]
284+
- lib/io.grpc-grpc-alts-1.56.0.jar [33]
285+
- lib/io.grpc-grpc-api-1.56.0.jar [33]
286+
- lib/io.grpc-grpc-auth-1.56.0.jar [33]
287+
- lib/io.grpc-grpc-context-1.56.0.jar [33]
288+
- lib/io.grpc-grpc-core-1.56.0.jar [33]
289+
- lib/io.grpc-grpc-grpclb-1.56.0.jar [33]
290+
- lib/io.grpc-grpc-netty-1.56.0.jar [33]
291+
- lib/io.grpc-grpc-protobuf-1.56.0.jar [33]
292+
- lib/io.grpc-grpc-protobuf-lite-1.56.0.jar [33]
293+
- lib/io.grpc-grpc-services-1.56.0.jar [33]
294+
- lib/io.grpc-grpc-stub-1.56.0.jar [33]
295+
- lib/io.grpc-grpc-testing-1.56.0.jar [33]
296+
- lib/io.grpc-grpc-xds-1.56.0.jar [33]
297+
- lib/io.grpc-grpc-rls-1.56.0.jar[33]
298298
- lib/org.apache.curator-curator-client-5.1.0.jar [34]
299299
- lib/org.apache.curator-curator-framework-5.1.0.jar [34]
300300
- lib/org.apache.curator-curator-recipes-5.1.0.jar [34]
@@ -308,12 +308,12 @@ Apache Software License, Version 2.
308308
- lib/com.google.android-annotations-4.1.1.4.jar [42]
309309
- lib/com.google.http-client-google-http-client-1.41.0.jar [43]
310310
- lib/com.google.http-client-google-http-client-gson-1.41.0.jar [43]
311-
- lib/com.google.auto.value-auto-value-annotations-1.9.jar [44]
311+
- lib/com.google.auto.value-auto-value-annotations-1.10.1.jar [44]
312312
- lib/com.google.j2objc-j2objc-annotations-1.3.jar [45]
313-
- lib/com.google.re2j-re2j-1.5.jar [46]
313+
- lib/com.google.re2j-re2j-1.7.jar [46]
314314
- lib/io.dropwizard.metrics-metrics-core-4.1.12.1.jar [47]
315-
- lib/io.perfmark-perfmark-api-0.25.0.jar [48]
316-
- lib/org.conscrypt-conscrypt-openjdk-uber-2.5.1.jar [49]
315+
- lib/io.perfmark-perfmark-api-0.26.0.jar [48]
316+
- lib/org.conscrypt-conscrypt-openjdk-uber-2.5.2.jar [49]
317317
- lib/org.xerial.snappy-snappy-java-1.1.10.1.jar [50]
318318
- lib/io.reactivex.rxjava3-rxjava-3.0.1.jar [51]
319319
- lib/com.carrotsearch-hppc-0.9.1.jar [52]
@@ -371,10 +371,10 @@ Apache Software License, Version 2.
371371
[24] Source available at https://github.com/cbeust/jcommander/tree/1.82
372372
[25] Source available at https://github.com/DataSketches/sketches-core/tree/sketches-0.8.3
373373
[26] Source available at https://github.com/lz4/lz4-java/tree/1.3.0
374-
[28] Source available at https://github.com/googleapis/java-common-protos/tree/v2.0.1
375-
[29] Source available at https://github.com/google/gson/tree/gson-parent-2.9.0
374+
[28] Source available at https://github.com/googleapis/java-common-protos/tree/v2.17.0
375+
[29] Source available at https://github.com/google/gson/tree/gson-parent-2.10.1
376376
[30] Source available at https://github.com/census-instrumentation/opencensus-java/tree/v0.28.0
377-
[33] Source available at https://github.com/grpc/grpc-java/tree/v1.47.0
377+
[33] Source available at https://github.com/grpc/grpc-java/tree/v1.56.0
378378
[34] Source available at https://github.com/apache/curator/releases/tag/apache.curator-5.1.0
379379
[35] Source available at https://github.com/inferred/FreeBuilder/tree/v2.7.0
380380
[36] Source available at https://github.com/google/error-prone/tree/v2.9.0
@@ -385,12 +385,12 @@ Apache Software License, Version 2.
385385
[41] Source available at https://github.com/apache/thrift/tree/0.14.2
386386
[42] Source available at https://source.android.com/
387387
[43] Source available at https://github.com/googleapis/google-http-java-client/releases/tag/v1.41.0
388-
[44] Source available at https://github.com/google/auto/releases/tag/auto-value-1.9
388+
[44] Source available at https://github.com/google/auto/releases/tag/auto-value-1.10.1
389389
[45] Source available at https://github.com/google/j2objc/releases/tag/1.3
390-
[46] Source available at https://github.com/google/re2j/releases/tag/re2j-1.5
390+
[46] Source available at https://github.com/google/re2j/releases/tag/re2j-1.7
391391
[47] Source available at https://github.com/dropwizard/metrics/releases/tag/v4.1.12.1
392-
[48] Source available at https://github.com/perfmark/perfmark/releases/tag/v0.25.0
393-
[49] Source available at https://github.com/google/conscrypt/releases/tag/2.5.1
392+
[48] Source available at https://github.com/perfmark/perfmark/releases/tag/v0.26.0
393+
[49] Source available at https://github.com/google/conscrypt/releases/tag/2.5.2
394394
[50] Source available at https://github.com/xerial/snappy-java/releases/tag/v1.1.10.1
395395
[51] Source available at https://github.com/ReactiveX/RxJava/tree/v3.0.1
396396
[52] Source available at https://github.com/carrotsearch/hppc/tree/0.9.1
@@ -661,13 +661,13 @@ This product bundles Google Protocol Buffers, which is available under a "3-clau
661661
license.
662662

663663
Bundled as
664-
- lib/com.google.protobuf-protobuf-java-3.19.6.jar
665-
Source available at https://github.com/google/protobuf/tree/v3.19.6
664+
- lib/com.google.protobuf-protobuf-java-3.22.3.jar
665+
Source available at https://github.com/google/protobuf/tree/v3.22.3
666666
For details, see deps/protobuf-3.14.0/LICENSE.
667667

668668
Bundled as
669-
- lib/com.google.protobuf-protobuf-java-util-3.19.6.jar
670-
Source available at https://github.com/protocolbuffers/protobuf/tree/v3.19.6
669+
- lib/com.google.protobuf-protobuf-java-util-3.22.3.jar
670+
Source available at https://github.com/protocolbuffers/protobuf/tree/v3.22.3
671671
For details, see deps/protobuf-3.12.0/LICENSE.
672672
------------------------------------------------------------------------------------
673673
This product bundles the JCP Standard Java Servlet API, which is available under a

0 commit comments

Comments
 (0)