This is an automated email from the ASF dual-hosted git repository. wusheng pushed a commit to branch bump-grpc in repository https://gitbox.apache.org/repos/asf/skywalking-java.git
commit 8fa903d61107ad1630ec93d8e8e8c53779566d63 Author: Wu Sheng <[email protected]> AuthorDate: Fri Jan 28 14:52:57 2022 +0800 Bump up gRPC to 1.44.0, fix relative CVEs. --- CHANGES.md | 1 + dist-material/LICENSE | 4 ++-- pom.xml | 6 +++--- 3 files changed, 6 insertions(+), 5 deletions(-) diff --git a/CHANGES.md b/CHANGES.md index 71b97f1..ba46245 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -26,6 +26,7 @@ Release Notes. * (Plugin Test) Fix compiling issues in many plugin tests due to they didn't lock the Spring version, and Spring 3 is incompatible with 2.x APIs and JDK8 compiling. * Support ShardingSphere 5.0.0 +* Bump up gRPC to 1.44.0, fix relative CVEs. #### Documentation diff --git a/dist-material/LICENSE b/dist-material/LICENSE index c277831..d4c3372 100755 --- a/dist-material/LICENSE +++ b/dist-material/LICENSE @@ -216,11 +216,11 @@ The following components are provided under the Apache License. See project link The text of each license is the standard Apache 2.0 license. raphw (byte-buddy) 1.11.18: http://bytebuddy.net/ , Apache 2.0 - Google: grpc-java 1.42.1: https://github.com/grpc/grpc-java, Apache 2.0 + Google: grpc-java 1.44.0: https://github.com/grpc/grpc-java, Apache 2.0 Google: gson 2.8.6: https://github.com/google/gson , Apache 2.0 Google: proto-google-common-protos 2.0.1: https://github.com/googleapis/googleapis , Apache 2.0 Google: jsr305 3.0.2: http://central.maven.org/maven2/com/google/code/findbugs/jsr305/3.0.0/jsr305-3.0.0.pom , Apache 2.0 - netty 4.1.65: https://github.com/netty/netty/blob/4.1/LICENSE.txt, Apache 2.0 + netty 4.1.72: https://github.com/netty/netty/blob/4.1/LICENSE.txt, Apache 2.0 ======================================================================== BSD licenses diff --git a/pom.xml b/pom.xml index 0c7be8f..cc30adb 100755 --- a/pom.xml +++ b/pom.xml @@ -87,13 +87,13 @@ <!-- core lib dependency --> <bytebuddy.version>1.11.18</bytebuddy.version> - <grpc.version>1.42.1</grpc.version> + <grpc.version>1.44.0</grpc.version> <gson.version>2.8.6</gson.version> <os-maven-plugin.version>1.6.2</os-maven-plugin.version> <protobuf-maven-plugin.version>0.6.1</protobuf-maven-plugin.version> <com.google.protobuf.protoc.version>3.17.3</com.google.protobuf.protoc.version> - <protoc-gen-grpc-java.plugin.version>1.42.1</protoc-gen-grpc-java.plugin.version> - <netty-tcnative-boringssl-static.version>2.0.39.Final</netty-tcnative-boringssl-static.version> + <protoc-gen-grpc-java.plugin.version>1.44.0</protoc-gen-grpc-java.plugin.version> + <netty-tcnative-boringssl-static.version>2.0.48.Final</netty-tcnative-boringssl-static.version> <javax.annotation-api.version>1.3.2</javax.annotation-api.version> <objenesis.version>3.1</objenesis.version> <!-- necessary for Java 9+ -->
