Merge pull request #22761 from cescoffier/2.2-protobuf-update

[2.2] Protobuf Java and gRPC version updates (CVE-2021-22569)
quarkusio · Feb 23, 2022 · 44d5298 · 44d5298
2 parents 92d566f + b2f2bb2
commit 44d5298
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/bom/application/pom.xml b/bom/application/pom.xml
@@ -188,9 +188,9 @@
         <google-http-client.version>1.38.0</google-http-client.version>
         <scram-client.version>2.1</scram-client.version>
         <!-- Make sure to check compatibility between these 2 gRPC components before upgrade -->
-        <grpc.version>1.38.1</grpc.version> <!-- when updating, verify if com.google.auth should not be updated too -->
+        <grpc.version>1.41.2</grpc.version> <!-- when updating, verify if com.google.auth should not be updated too -->
         <grpc-jprotoc.version>1.2.0</grpc-jprotoc.version>
-        <protobuf-java.version>3.17.3</protobuf-java.version>
+        <protobuf-java.version>3.18.2</protobuf-java.version>
         <protoc.version>${protobuf-java.version}</protoc.version>
         <picocli.version>4.6.1</picocli.version>
         <google-cloud-functions.version>1.0.1</google-cloud-functions.version>