dependabot[bot] opened a new pull request #1421: URL: https://github.com/apache/avro/pull/1421
Bumps [protobuf-java](https://github.com/protocolbuffers/protobuf) from 3.17.3 to 3.19.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/protocolbuffers/protobuf/releases";>protobuf-java's releases</a>.</em></p> <blockquote> <h2>Protocol Buffers v3.19.1</h2> <h1>Bazel</h1> <ul> <li>Ensure that release archives contain everything needed for Bazel (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/9131";>#9131</a>)</li> <li>Align dependency handling with Bazel best practices (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/9165";>#9165</a>)</li> </ul> <h1>JavaScript</h1> <ul> <li>Fix <code>ReferenceError: window is not defined</code> when getting the global object (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/9156";>#9156</a>)</li> </ul> <h1>Ruby</h1> <ul> <li>Fix memory leak in MessageClass.encode (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/9150";>#9150</a>)</li> </ul> <h2>Protocol Buffers v3.19.0</h2> <h1>C++</h1> <ul> <li>Make proto2::Message::DiscardUnknownFields() non-virtual</li> <li>Separate RepeatedPtrField into its own header file</li> <li>For default floating point values of 0, consider all bits significant</li> <li>cmake: support <code>MSVC_RUNTIME_LIBRARY</code> property (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8851";>#8851</a>)</li> <li>Fix shadowing warnings (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8926";>#8926</a>)</li> <li>Fix for issue <a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8484";>#8484</a>, constant initialization doesn't compile in msvc clang-cl environment (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8993";>#8993</a>)</li> <li>Fix build on AIX and SunOS (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8373";>#8373</a>) (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/9065";>#9065</a>)</li> <li>Add Android stlport and default toolchains to BUILD. (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8290";>#8290</a>)</li> </ul> <h1>Java</h1> <ul> <li>For default floating point values of 0, consider all bits significant</li> <li>Annotate <code>//java/com/google/protobuf/util/...</code> with nullness annotations</li> <li>Use ArrayList copy constructor (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/7853";>#7853</a>)</li> </ul> <h1>Kotlin</h1> <ul> <li>Switch Kotlin proto DSLs to be implemented with inline value classes</li> <li>Fixing inlining and deprecation for repeated string fields (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/9120";>#9120</a>)</li> </ul> <h1>Python</h1> <ul> <li>Proto2 DecodeError now includes message name in error message</li> <li>Make MessageToDict convert map keys to strings (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8122";>#8122</a>)</li> <li>Add python-requires in setup.py (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8989";>#8989</a>)</li> <li>Add python 3.10 (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/9034";>#9034</a>)</li> </ul> <h1>JavaScript</h1> <ul> <li>Skip exports if not available by CommonJS (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8856";>#8856</a>)</li> <li>JS: Comply with CSP no-unsafe-eval. (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8864";>#8864</a>)</li> </ul> <h1>PHP</h1> <ul> <li>Added "object" as a reserved name for PHP (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8962";>#8962</a>)</li> </ul> <h1>Ruby</h1> <ul> <li>Override Map.clone to use Map's dup method (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/7938";>#7938</a>)</li> <li>Ruby: build extensions for arm64-darwin (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8232";>#8232</a>)</li> <li>Add class method Timestamp.from_time to ruby well known types (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8562";>#8562</a>)</li> <li>Adopt pure ruby DSL implementation for JRuby (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/9047";>#9047</a>)</li> <li>Add size to Map class (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/8068";>#8068</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/protocolbuffers/protobuf/commit/7c40b2df1fdf6f414c1c18c789715a9c948a0725";><code>7c40b2d</code></a> Update protobuf version (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/9167";>#9167</a>)</li> <li><a href="https://github.com/protocolbuffers/protobuf/commit/42ff92a4d183fe952d48adffa23dc84e491c86fc";><code>42ff92a</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/9166";>#9166</a> from acozzette/cherry-pick-fixes</li> <li><a href="https://github.com/protocolbuffers/protobuf/commit/1c8ae2459567388085f5da4b5ef2af7863a003fb";><code>1c8ae24</code></a> Update changelog for 3.19.1</li> <li><a href="https://github.com/protocolbuffers/protobuf/commit/b2ac7ced50ed160985ba79bbbdea8bad8f28b039";><code>b2ac7ce</code></a> Fix memory leak in MessageClass.encode</li> <li><a href="https://github.com/protocolbuffers/protobuf/commit/e58469bdbedf514988efa86af9e8e7b5b1fa272f";><code>e58469b</code></a> JS: Fixed <code>ReferenceError: window is not defined</code> when getting the global obj...</li> <li><a href="https://github.com/protocolbuffers/protobuf/commit/c7dfd0d6b92f825a4b9e986b3e948a5ab61c7438";><code>c7dfd0d</code></a> Align dependency handling with Bazel best practices (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/9165";>#9165</a>)</li> <li><a href="https://github.com/protocolbuffers/protobuf/commit/67c2a92f82b16331199cb89062b832e15aeb0c1f";><code>67c2a92</code></a> Ensure that release archives contain everything needed for Bazel (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/9131";>#9131</a>)</li> <li><a href="https://github.com/protocolbuffers/protobuf/commit/17b30e96476be70b8773b2b807bab857fd3ceb39";><code>17b30e9</code></a> Update protobuf version (<a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/9119";>#9119</a>)</li> <li><a href="https://github.com/protocolbuffers/protobuf/commit/912eb8b89ef48f63877a6af9f022c74f13c8f8d4";><code>912eb8b</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/protocolbuffers/protobuf/issues/9121";>#9121</a> from haberman/rubyfix</li> <li><a href="https://github.com/protocolbuffers/protobuf/commit/bb5a2684de8b53cd23199965bdd193a80168eb44";><code>bb5a268</code></a> Minor whitespace fixes and test fixups.</li> <li>Additional commits viewable in <a href="https://github.com/protocolbuffers/protobuf/compare/v3.17.3...v3.19.1";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@avro.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
