This is an automated email from the ASF dual-hosted git repository.

lizhanhui pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/rocketmq-clients.git


The following commit(s) were added to refs/heads/master by this push:
     new c8a685d9 chore(deps): bump com.google.guava:guava from 31.1-jre to 
32.0.0-jre in /java (#756)
c8a685d9 is described below

commit c8a685d91bcabe881e2acb195ed26389f4c0794a
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Thu Jun 13 20:24:07 2024 +0800

    chore(deps): bump com.google.guava:guava from 31.1-jre to 32.0.0-jre in 
/java (#756)
    
    * chore(deps): bump com.google.guava:guava in /java
    
    Bumps [com.google.guava:guava](https://github.com/google/guava) from 
31.1-jre to 32.0.0-jre.
    - [Release notes](https://github.com/google/guava/releases)
    - [Commits](https://github.com/google/guava/commits)
    
    ---
    updated-dependencies:
    - dependency-name: com.google.guava:guava
      dependency-type: direct:production
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    * fix: remove approval review count requirement as it's hard to collect 
enough valid reviews for many languages: Golang, C++, Rust, etc
    
    Signed-off-by: Li Zhanhui <[email protected]>
    
    * fix: upgrade protobuf version to align with guava that is 
vulnerability-free
    
    Signed-off-by: Li Zhanhui <[email protected]>
    
    ---------
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Signed-off-by: Li Zhanhui <[email protected]>
    Co-authored-by: dependabot[bot] 
<49699333+dependabot[bot]@users.noreply.github.com>
    Co-authored-by: Li Zhanhui <[email protected]>
---
 .asf.yaml    | 1 -
 java/pom.xml | 6 +++---
 2 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/.asf.yaml b/.asf.yaml
index 4f5661eb..f3779233 100644
--- a/.asf.yaml
+++ b/.asf.yaml
@@ -41,7 +41,6 @@ github:
       required_pull_request_reviews:
         dismiss_stale_reviews: true
         require_code_owner_reviews: false
-        required_approving_review_count: 1
       required_status_checks:
         contexts:
           - codespell-check
diff --git a/java/pom.xml b/java/pom.xml
index 87cf1b57..ee05f650 100644
--- a/java/pom.xml
+++ b/java/pom.xml
@@ -50,9 +50,9 @@
          -->
         <rocketmq-proto.version>2.0.3</rocketmq-proto.version>
         <annotations-api.version>6.0.53</annotations-api.version>
-        <protobuf.version>3.21.7</protobuf.version>
+        <protobuf.version>3.24.4</protobuf.version>
         <grpc.version>1.50.0</grpc.version>
-        <guava.version>31.1-jre</guava.version>
+        <guava.version>32.0.0-jre</guava.version>
         <slf4j.version>1.7.30</slf4j.version>
         <logback.version>1.2.9</logback.version>
         <commons-lang3.version>3.4</commons-lang3.version>
@@ -411,4 +411,4 @@
         
<developerConnection>scm:git:[email protected]:apache/rocketmq-clients.git</developerConnection>
         <tag>HEAD</tag>
     </scm>
-</project>
\ No newline at end of file
+</project>

Reply via email to