gaoran10 opened a new pull request, #15222:
URL: https://github.com/apache/pulsar/pull/15222

   ### Motivation
   
   Currently, the grpc `1.42.1` import a shaded netty `4.1.51.Final` package, 
it has some issues https://github.com/advisories/GHSA-9vjp-v76f-g363 and 
https://github.com/advisories/GHSA-grg4-wf29-r9vv, since 
`io.grpc:grpc-all:1.44.0`, it upgraded the netty to `4.1.72.Final`, refer to 
https://github.com/grpc/grpc-java/blob/v1.44.0/build.gradle#L58. So we need to 
upgrade the grpc to `1.44.0+`.
   
   ### Modifications
   
   Bump the grpc to `1.45.1`.
   
   ### Does this pull request potentially affect one of the following parts:
   
   *If `yes` was chosen, please highlight the changes*
   
     - Dependencies (does it add or upgrade a dependency): (yes)
     - The public API: (no)
     - The schema: (no)
     - The default values of configurations: (no)
     - The wire protocol: (no)
     - The rest endpoints: (no)
     - The admin cli options: (no)
     - Anything that affects deployment: (no)
   
   ### Documentation
   
   Check the box below or label this PR directly.
   
   Need to update docs? 
   
   - [ ] `doc-required` 
   (Your PR needs to update docs and you will update later)
     
   - [x] `no-need-doc` 
   (Please explain why)
     
   - [ ] `doc` 
   (Your PR contains doc changes)
   
   - [ ] `doc-added`
   (Docs have been already added)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to