dependabot[bot] opened a new pull request, #17711: URL: https://github.com/apache/pinot/pull/17711
Bumps [com.google.cloud:libraries-bom](https://github.com/googleapis/java-cloud-bom) from 26.74.0 to 26.76.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/googleapis/java-cloud-bom/releases";>com.google.cloud:libraries-bom's releases</a>.</em></p> <blockquote> <h2>v26.76.0</h2> <h2><a href="https://github.com/googleapis/java-cloud-bom/compare/v26.75.0...v26.76.0";>26.76.0</a> (2026-02-14)</h2> <h3>Dependencies</h3> <ul> <li>update dependency com.google.cloud:first-party-dependencies to v3.56.1 (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7376";>#7376</a>) (<a href="https://github.com/googleapis/java-cloud-bom/commit/fb898461eaf38e452d32dc6ced7da9bf014a17fa";>fb89846</a>)</li> <li>update dependency com.google.cloud:gapic-libraries-bom to v1.78.0 (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7380";>#7380</a>) (<a href="https://github.com/googleapis/java-cloud-bom/commit/563aa97d0f6929491e84fea56b87032027c207fc";>563aa97</a>)</li> <li>update dependency com.google.cloud:gapic-libraries-bom to v1.79.0 (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7396";>#7396</a>) (<a href="https://github.com/googleapis/java-cloud-bom/commit/86e71da7f1a1f42d15c8ffcb8c131c945343fbe5";>86e71da</a>)</li> <li>update dependency com.google.cloud:google-cloud-bigquery to v2.59.0 (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7388";>#7388</a>) (<a href="https://github.com/googleapis/java-cloud-bom/commit/4622164983fe278631f0bbb24865b5f6a3b49c0e";>4622164</a>)</li> <li>update dependency com.google.cloud:google-cloud-bigquerystorage-bom to v3.21.0 (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7383";>#7383</a>) (<a href="https://github.com/googleapis/java-cloud-bom/commit/3f90e6c1de8596f63bb28aa3b4994a5955770c23";>3f90e6c</a>)</li> <li>update dependency com.google.cloud:google-cloud-bigtable-bom to v2.73.0 (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7379";>#7379</a>) (<a href="https://github.com/googleapis/java-cloud-bom/commit/728fa9f5f53507ca1e0d2b442d4f19835f12b1a9";>728fa9f</a>)</li> <li>update dependency com.google.cloud:google-cloud-datastore-bom to v2.34.0 (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7384";>#7384</a>) (<a href="https://github.com/googleapis/java-cloud-bom/commit/5e742e075ced633cc51f0a9cb74e4c0bef735343";>5e742e0</a>)</li> <li>update dependency com.google.cloud:google-cloud-firestore-bom to v3.37.0 (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7390";>#7390</a>) (<a href="https://github.com/googleapis/java-cloud-bom/commit/bb45f9c37aeb46dc0c10ead560698f91fabfa948";>bb45f9c</a>)</li> <li>update dependency com.google.cloud:google-cloud-logging-logback to v0.134.0-alpha (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7387";>#7387</a>) (<a href="https://github.com/googleapis/java-cloud-bom/commit/c603b7a0952e71ab54536210bc491e5ad5039140";>c603b7a</a>)</li> <li>update dependency com.google.cloud:google-cloud-nio to v0.128.12 (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7395";>#7395</a>) (<a href="https://github.com/googleapis/java-cloud-bom/commit/31bb82893842553f9e8afac0ba4e1ea5cb4047c6";>31bb828</a>)</li> <li>update dependency com.google.cloud:google-cloud-pubsub-bom to v1.148.0 (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7385";>#7385</a>) (<a href="https://github.com/googleapis/java-cloud-bom/commit/be03f5d0028e699a29fcc3323798146381493d07";>be03f5d</a>)</li> <li>update dependency com.google.cloud:google-cloud-pubsublite-bom to v1.16.1 (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7386";>#7386</a>) (<a href="https://github.com/googleapis/java-cloud-bom/commit/9e1154d11a119f385a7d644aed20d77a1f1e7a3f";>9e1154d</a>)</li> <li>update dependency com.google.cloud:google-cloud-spanner-bom to v6.111.0 (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7382";>#7382</a>) (<a href="https://github.com/googleapis/java-cloud-bom/commit/45958fff9dbf72ce35c51f32b78aeef2d37e9fac";>45958ff</a>)</li> <li>update dependency com.google.cloud:google-cloud-spanner-jdbc to v2.35.3 (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7392";>#7392</a>) (<a href="https://github.com/googleapis/java-cloud-bom/commit/0943ea6e3154a332f6e9b6658ee74b5036d52b6d";>0943ea6</a>)</li> <li>update dependency com.google.cloud:google-cloud-storage-bom to v2.63.0 (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7391";>#7391</a>) (<a href="https://github.com/googleapis/java-cloud-bom/commit/1544a28f116b62c7c2268f03347165dbfe1ad3f8";>1544a28</a>)</li> </ul> <h2>v26.75.0</h2> <p>GCP Libraries BOM 26.75.0</p> <h1>Upgrade Overview</h1> <p>The <code>libraries-bom</code> and its managed libraries have been upgraded to use <strong>Protobuf v4.33.2</strong>. All Protobuf gen code included in the managed libraries has been regenerated using <code>protoc v33.2</code>.</p> <hr /> <h3>✅ Backward Compatibility</h3> <p>The new protobuf-java v4.33.2 runtime is fully backward-compatible with protoc gen code 3.x. You should not experience any incompatibilities from using older gen code with the new runtime. Should you experience compatibility issues, please consult the <a href="https://github.com/googleapis/java-cloud-bom/blob/HEAD/#known-incompatibilities-mitigations";>Known Incompatibilities & Mitigations</a>. If the issue persists, please file a report via the <a href="https://cloud.google.com/support-hub";>support console</a> or our <a href="https://github.com/googleapis/sdk-platform-java/tree/main";>GitHub repository</a></p> <hr /> <h3>⚠️ Advisory: Vulnerability Warnings</h3> <p>After upgrading, you may see a new warning in your logs: <code>Vulnerable protobuf generated type in use</code>. This warning does not mean the Java SDK is vulnerable. It indicates that your application, or one of its other dependencies, is still using gen code < <code>3.21.7</code>. For a detailed explanation and mitigation steps, please refer to the Java section in the official Protobuf <a href="https://github.com/protocolbuffers/protobuf/releases/tag/v33.0";>v4.33.0 release notes</a>.</p> <hr /> <h3>Known Incompatibilities & Mitigations</h3> <p>While rare, the following incompatibilities may occur due to the version update:</p> <h4>1. Runtime Version Mismatch</h4> <ul> <li><strong>Issue:</strong> The minimum required <code>protobuf-java</code> runtime version is now <strong>v4.33.2</strong>. Starting with the 4.x runtime, <a href="https://github.com/protocolbuffers/protobuf/blob/1082da2da37a0887d0cfd70abf4a00e8973cd8bf/java/core/src/main/java/com/google/protobuf/RuntimeVersion.java#L55-L73";>validations</a> ensure the runtime version is higher than or equal to the gen code version. Using a lower version of protobuf-java will produce errors below.</li> <li><strong>Symptoms:</strong> <ul> <li><code>java.lang.NoClassDefFoundError: com/google/protobuf/RuntimeVersion$RuntimeDomain</code> (when using 3.x versions).</li> <li><code>com.google.protobuf.RuntimeVersion$ProtobufRuntimeVersionException</code> (when using older 4.x versions).</li> </ul> </li> <li><strong>Mitigation:</strong> Upgrade the version of <code>protobuf-java</code> to be greater than or equal to <strong>v4.33.2</strong>.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/googleapis/java-cloud-bom/commit/a15d73b0c2021cd05223d2a17adc48fc5a09acea";><code>a15d73b</code></a> chore: release main (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7394";>#7394</a>)</li> <li><a href="https://github.com/googleapis/java-cloud-bom/commit/86e71da7f1a1f42d15c8ffcb8c131c945343fbe5";><code>86e71da</code></a> deps: update dependency com.google.cloud:gapic-libraries-bom to v1.79.0 (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7396";>#7396</a>)</li> <li><a href="https://github.com/googleapis/java-cloud-bom/commit/31bb82893842553f9e8afac0ba4e1ea5cb4047c6";><code>31bb828</code></a> deps: update dependency com.google.cloud:google-cloud-nio to v0.128.12 (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7395";>#7395</a>)</li> <li><a href="https://github.com/googleapis/java-cloud-bom/commit/fb898461eaf38e452d32dc6ced7da9bf014a17fa";><code>fb89846</code></a> deps: update dependency com.google.cloud:first-party-dependencies to v3.56.1 ...</li> <li><a href="https://github.com/googleapis/java-cloud-bom/commit/728fa9f5f53507ca1e0d2b442d4f19835f12b1a9";><code>728fa9f</code></a> deps: update dependency com.google.cloud:google-cloud-bigtable-bom to v2.73.0...</li> <li><a href="https://github.com/googleapis/java-cloud-bom/commit/563aa97d0f6929491e84fea56b87032027c207fc";><code>563aa97</code></a> deps: update dependency com.google.cloud:gapic-libraries-bom to v1.78.0 (<a href="https://redirect.github.com/googleapis/java-cloud-bom/issues/7380";>#7380</a>)</li> <li><a href="https://github.com/googleapis/java-cloud-bom/commit/45958fff9dbf72ce35c51f32b78aeef2d37e9fac";><code>45958ff</code></a> deps: update dependency com.google.cloud:google-cloud-spanner-bom to v6.111.0...</li> <li><a href="https://github.com/googleapis/java-cloud-bom/commit/3f90e6c1de8596f63bb28aa3b4994a5955770c23";><code>3f90e6c</code></a> deps: update dependency com.google.cloud:google-cloud-bigquerystorage-bom to ...</li> <li><a href="https://github.com/googleapis/java-cloud-bom/commit/5e742e075ced633cc51f0a9cb74e4c0bef735343";><code>5e742e0</code></a> deps: update dependency com.google.cloud:google-cloud-datastore-bom to v2.34....</li> <li><a href="https://github.com/googleapis/java-cloud-bom/commit/be03f5d0028e699a29fcc3323798146381493d07";><code>be03f5d</code></a> deps: update dependency com.google.cloud:google-cloud-pubsub-bom to v1.148.0 ...</li> <li>Additional commits viewable in <a href="https://github.com/googleapis/java-cloud-bom/compare/v26.74.0...v26.76.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
