Skip to content

chore(deps): update dependency google.protobuf to 3.18.0 [security] - abandoned - #767

Open
renovate[bot] wants to merge 1 commit into
developfrom
renovate/nuget-google.protobuf-vulnerability
Open

renovate[bot] wants to merge 1 commit into
developfrom
renovate/nuget-google.protobuf-vulnerability

Conversation

@renovate

@renovate renovate Bot commented Aug 29, 2024

Copy link
Copy Markdown

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
Google.Protobuf 3.17.3 -> 3.18.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2021-22570

Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater.


Release Notes

protocolbuffers/protobuf (Google.Protobuf)

v3.18.0: Protocol Buffers v3.18.0

C++

  • Fix warnings raised by clang 11 (#​8664)
  • Make StringPiece constructible from std::string_view (#​8707)
  • Add missing capability attributes for LLVM 12 (#​8714)
  • Stop using std::iterator (deprecated in C++17). (#​8741)
  • Move field_access_listener from libprotobuf-lite to libprotobuf (#​8775)
  • Fix #​7047 Safely handle setlocale (#​8735)
  • Remove deprecated version of SetTotalBytesLimit() (#​8794)
  • Support arena allocation of google::protobuf::AnyMetadata (#​8758)
  • Fix undefined symbol error around SharedCtor() (#​8827)
  • Fix default value of enum(int) in json_util with proto2 (#​8835)
  • Better Smaller ByteSizeLong
  • Introduce event filters for inject_field_listener_events
  • Reduce memory usage of DescriptorPool
  • For lazy fields copy serialized form when allowed.
  • Re-introduce the InlinedStringField class
  • v2 access listener
  • Reduce padding in the proto's ExtensionRegistry map.
  • GetExtension performance optimizations
  • Make tracker a static variable rather than call static functions
  • Support extensions in field access listener
  • Annotate MergeFrom for field access listener
  • Fix incomplete types for field access listener
  • Add map_entry/new_map_entry to SpecificField in MessageDifferencer. They
    record the map items which are different in MessageDifferencer's reporter.
  • Reduce binary size due to fieldless proto messages
  • TextFormat: ParseInfoTree supports getting field end location in addition to
    start.
  • Fix repeated enum extension size in field listener
  • Enable Any Text Expansion for Descriptors::DebugString()
  • Switch from int{8,16,32,64} to int{8,16,32,64}_t

Java

  • Fix errorprone conflict (#​8723)
  • Removing deprecated TimeUtil class. (#​8749)
  • Optimized FieldDescriptor.valueOf() to avoid array copying.
  • Removing deprecated TimeUtil class.
  • Add Durations.parseUnchecked(String) and Timestamps.parseUnchecked(String)
  • FieldMaskUtil: Add convenience method to mask the fields out of a given proto.

JavaScript

  • Optimize binary parsing of repeated float64
  • Fix for optimization when reading doubles from binary wire format
  • Replace toArray implementation with toJSON.

PHP

  • Migrate PHP & Ruby to ABSL wyhash (#​8854)
  • Added support for PHP 8.1 (currently in RC1) to the C extension (#​8964)
  • Fixed PHP SEGV when constructing messages from a destructor. (#​8969)

Ruby

  • Move DSL implementation from C to pure Ruby (#​8850)
  • Fixed a memory bug with RepeatedField#+. (#​8970)

Python

  • Drops support for 2.7 and 3.5.

Other

  • [csharp] ByteString.CreateCodedInput should use ArraySegment offset and count (#​8740)
  • [ObjC] Add support for using the proto package to prefix symbols. (#​8760)
  • field_presence.md: fix Go example (#​8788)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot changed the title chore(deps): update dependency google.protobuf to 3.18.0 [security] chore(deps): update dependency google.protobuf to 3.18.0 [security] - abandoned Sep 26, 2024
@renovate

renovate Bot commented Sep 26, 2024

Copy link
Copy Markdown
Author

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants