Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix vulnerabilities in master #1188

Merged
merged 1 commit into from
Jan 8, 2025
Merged

Conversation

cicoyle
Copy link
Contributor

@cicoyle cicoyle commented Jan 6, 2025

Cherry-pick #1187

…pr#1187)

* up versions to be secure and fix issues due to deprecation

Signed-off-by: Cassandra Coyle <[email protected]>

* see if this fixes it

Signed-off-by: Cassandra Coyle <[email protected]>

* check if protoc is in ci

Signed-off-by: Cassandra Coyle <[email protected]>

* see if changes from this PR (dapr#1182) fix it

Signed-off-by: Cassandra Coyle <[email protected]>

* 3.25.5 version protobuf-java

Signed-off-by: Cassandra Coyle <[email protected]>

* rm explicit versions and fix deprecation dependency to new one

Signed-off-by: Cassandra Coyle <[email protected]>

* merge in release branch and lower protoc versions to match

Signed-off-by: Cassandra Coyle <[email protected]>

* force upped version

Signed-off-by: Cassandra Coyle <[email protected]>

* use protobuf.version 3.25.5 (secure)

Signed-off-by: Cassandra Coyle <[email protected]>

* use correct protobuf for sdk tests

Signed-off-by: Cassandra Coyle <[email protected]>

---------

Signed-off-by: Cassandra Coyle <[email protected]>
@cicoyle cicoyle requested review from a team as code owners January 6, 2025 20:37
@artursouza artursouza merged commit 9cd6db2 into dapr:master Jan 8, 2025
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants