dependabot[bot] opened a new pull request #828:
URL: https://github.com/apache/orc/pull/828


   Bumps [protobuf-java](https://github.com/protocolbuffers/protobuf) from 
2.5.0 to 3.17.3.
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a 
href="https://github.com/protocolbuffers/protobuf/releases";>protobuf-java's 
releases</a>.</em></p>
   <blockquote>
   <h2>Protocol Buffers v3.17.3</h2>
   <p><strong>C++</strong></p>
   <ul>
   <li>Introduce FieldAccessListener.</li>
   <li>Stop emitting boilerplate {Copy/Merge}From in each ProtoBuf class</li>
   <li>Fixed some uninitialized variable warnings in 
generated_message_reflection.cc.</li>
   </ul>
   <p><strong>Kotlin</strong></p>
   <ul>
   <li>Fix duplicate proto files error (<a 
href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8699";>#8699</a>)</li>
   </ul>
   <p><strong>Java</strong></p>
   <ul>
   <li>Fixed parser to check that we are at a proper limit when a sub-message 
has
   finished parsing.</li>
   </ul>
   <p><strong>General</strong></p>
   <ul>
   <li>Support M1 (<a 
href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8557";>#8557</a>)</li>
   </ul>
   <h2>Protocol Buffers v3.17.2</h2>
   <p><strong><strong>Kotlin</strong></strong></p>
   <ul>
   <li>Fix duplicate class error (<a 
href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8653";>#8653</a>)</li>
   </ul>
   <p><strong><strong>PHP</strong></strong></p>
   <ul>
   <li>Fixed SEGV in sub-message getters for well-known types when message is 
unset
   (<a 
href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8670";>#8670</a>)</li>
   </ul>
   <h2>Protocol Buffers v3.17.1</h2>
   <h1>PHP</h1>
   <ul>
   <li>Fixed PHP memory leaks and arginfo errors. (<a 
href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8614";>#8614</a>)</li>
   <li>Fixed JSON parser to allow multiple values from the same oneof as long 
as all but one are null.</li>
   </ul>
   <h1>Ruby</h1>
   <ul>
   <li>Fixed memory bug: properly root repeated/map field when assigning. (<a 
href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8639";>#8639</a>)</li>
   <li>Fixed JSON parser to allow multiple values from the same oneof as long 
as all but one are null.</li>
   </ul>
   <h2>Protocol Buffers v3.17.0</h2>
   <h1>Protocol Compiler</h1>
   <ul>
   <li>Fix the generated source information for reserved values in Enums.</li>
   </ul>
   <h1>C++</h1>
   <ul>
   <li>Fix -Wunused-parameter in map<!-- raw HTML omitted --> fields (fixes <a 
href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8494";>#8494</a>)
 (<a 
href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8500";>#8500</a>)</li>
   <li>Use byteswap.h when building against musl libc (<a 
href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8503";>#8503</a>)</li>
   <li>Fix -Wundefined-inline error when using SharedCtor() or SharedDtor() (<a 
href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8532";>#8532</a>)</li>
   <li>Fix bug where <code>Descriptor::DebugString()</code> printed proto3 
synthetic oneofs.</li>
   <li>Provide stable versions of <code>SortAndUnique()</code>.</li>
   <li>Make sure to cache proto3 optional message fields when they are 
cleared.</li>
   <li>Expose UnsafeArena methods to Reflection.</li>
   <li>Use std::string::empty() rather than std::string::size() &gt; 0.</li>
   </ul>
   <h1>Kotlin</h1>
   <ul>
   <li>Introduce support for Kotlin protos (<a 
href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8272";>#8272</a>)</li>
   </ul>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/protocolbuffers/protobuf/commit/909a0f36a10075c4b4bc70fdee2c7e32dd612a72";><code>909a0f3</code></a>
 Merge pull request <a 
href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8701";>#8701</a>
 from protocolbuffers/updateChangelogs</li>
   <li><a 
href="https://github.com/protocolbuffers/protobuf/commit/ec645c03f49284fd8a5daf9d733428560386fabf";><code>ec645c0</code></a>
 Updating changelog</li>
   <li><a 
href="https://github.com/protocolbuffers/protobuf/commit/e15d56af27783358290ef96cabe3e9c18afda5b1";><code>e15d56a</code></a>
 Merge pull request <a 
href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8700";>#8700</a>
 from deannagarcia/3.17.x-202106042117</li>
   <li><a 
href="https://github.com/protocolbuffers/protobuf/commit/367851d1244d51ff4f4133d2499b4a16e74b052e";><code>367851d</code></a>
 Update protobuf version</li>
   <li><a 
href="https://github.com/protocolbuffers/protobuf/commit/704118b2a4b5787af6158c4ac95530543a15b4de";><code>704118b</code></a>
 Merge pull request <a 
href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8699";>#8699</a>
 from deannagarcia/morePomFixes</li>
   <li><a 
href="https://github.com/protocolbuffers/protobuf/commit/0717715ae91c9ad692dd0ee9b9fac510e1aabd09";><code>0717715</code></a>
 Removing more from the pom</li>
   <li><a 
href="https://github.com/protocolbuffers/protobuf/commit/5330d0d5da8a933749d0427d003edab65868954a";><code>5330d0d</code></a>
 Updating pom files</li>
   <li><a 
href="https://github.com/protocolbuffers/protobuf/commit/f5a0e3988b0c69b68a5c4d4c45152efccea04a91";><code>f5a0e39</code></a>
 Merge branch 'master' into 3.17.x</li>
   <li><a 
href="https://github.com/protocolbuffers/protobuf/commit/8d8ba6acc3df2c63dfd8b7becbed02eafa1906b9";><code>8d8ba6a</code></a>
 Merge pull request <a 
href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8637";>#8637</a>
 from dschopf/fix-qnx-7.0-support</li>
   <li><a 
href="https://github.com/protocolbuffers/protobuf/commit/c05e7ad0a8fd99b0e8fb452158442831be3bd3df";><code>c05e7ad</code></a>
 Merge pull request <a 
href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8690";>#8690</a>
 from maxgolov/maxgolov/vs2019_16.10_constinit_broken</li>
   <li>Additional commits viewable in <a 
href="https://github.com/protocolbuffers/protobuf/compare/v2.5.0...v3.17.3";>compare
 view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.protobuf:protobuf-java&package-manager=maven&previous-version=2.5.0&new-version=3.17.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to