This is an automated email from the ASF dual-hosted git repository.
dongjoon pushed a commit to branch branch-1.9
in repository https://gitbox.apache.org/repos/asf/orc.git
The following commit(s) were added to refs/heads/branch-1.9 by this push:
new e53c19b6a ORC-2035: Upgrade protobuf-java to 3.25.5
e53c19b6a is described below
commit e53c19b6a6242a35c044e9d4a2c7f2dfd124277b
Author: manuzhang <[email protected]>
AuthorDate: Fri Oct 31 09:31:04 2025 -0700
ORC-2035: Upgrade protobuf-java to 3.25.5
### What changes were proposed in this pull request?
Upgrade protobuf-java to 3.25.5
### Why are the changes needed?
[CVE-2024-7254](https://github.com/advisories/GHSA-735f-pc8j-v9w8)
### How was this patch tested?
Existing tests.
### Was this patch authored or co-authored using generative AI tooling?
No.
Closes #2452 from manuzhang/orc-2035.
Authored-by: manuzhang <[email protected]>
Signed-off-by: Dongjoon Hyun <[email protected]>
---
java/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/java/pom.xml b/java/pom.xml
index 3bd29786d..94575afe4 100644
--- a/java/pom.xml
+++ b/java/pom.xml
@@ -132,7 +132,7 @@
<dependency>
<groupId>com.google.protobuf</groupId>
<artifactId>protobuf-java</artifactId>
- <version>3.22.3</version>
+ <version>3.25.5</version>
</dependency>
<dependency>
<groupId>commons-cli</groupId>
