Commit Graph

13 Commits (main)

Author SHA1 Message Date
Chad Wilson c95ebb7bd8 deps: Update Guava to 32.0.1 (#13099)
Follow-up from #12953 to update to `32.0.1` to fix an issue on windows:

https://github.com/google/guava/releases/tag/v32.0.1

The underlying issue likely does not affect protobuf as it does not appear to (directly) use the affected `Files.createTempDir` or `FileBackedOutputStream` code which was apparently broken on Windows in `32.0.0`.

Seems best to update anyway.

Closes #13099

COPYBARA_INTEGRATE_REVIEW=https://github.com/protocolbuffers/protobuf/pull/13099 from chadlwilson:bump-guava-3201 30bd3f7563
PiperOrigin-RevId: 541960623
2023-06-20 09:59:40 -07:00
Chad Wilson cd615a8c65 deps: Update Guava to 32.0.0 (#12953)
Updates Guava to [32.0.0](https://github.com/google/guava/releases/tag/v32.0.0) to include fixes for CVE-2020-8908 and CVE-2023-2976 (https://github.com/google/guava/issues/2575) which affects certain builds with shaded usage, e.g ruby via jruby/java platform such as https://rubygems.org/gems/google-protobuf/versions/3.23.2-java

- Protobuf does not appear to (directly) use the affected `Files.createTempDir` or `FileBackedOutputStream` code which might behave differently on Windows.
- Referred to #9707 and #9757 for reference
- Updated transitive dependency versions match https://mvnrepository.com/artifact/com.google.guava/guava/32.0.0-jre (note major version change for `j2objc-annotations` from `1.3` --> `2.8`)

May need backporting to `23.x` branch if sufficiently compatible.

Closes #12953

COPYBARA_INTEGRATE_REVIEW=https://github.com/protocolbuffers/protobuf/pull/12953 from chadlwilson:update-guava-32 9c396b6759
PiperOrigin-RevId: 538666552
2023-06-07 20:32:31 -07:00
Protobuf Team Bot 4b5652b030 Re-attach OSGI headers to lite,core, and util. This information was dropped in the move from maven to bazel.
PiperOrigin-RevId: 518267412
2023-03-21 07:35:58 -07:00
Mike Kruskal e71531aa0a Adding new kotlin dependency 2022-08-12 13:16:40 -07:00
Mike Kruskal ed5c57a574
Remove all autotools usage (#10132)
* Bazelfying conformance tests

Adding infrastructure to "Bazelify" languages other than Java and C++

* Delete benchmarks for languages supported by other repositories

* Bazelfying benchmark tests

* Bazelfying python

Use upb's system python rule instead of branching tensorflow

* Bazelfying Ruby

* Bazelfying C#

* Bazelfying Objective-c

* Bazelfying Kokoro mac builds

* Bazelfying Kokoro linux builds

* Deleting all deprecated files from autotools cleanup

This boils down to Makefile.am and tests.sh and all of their remaining references

* Cleanup after PR reorganizing

- Enable 32 bit tests
- Move conformance tests back
- Use select statements to select alternate runtimes
- Add internal prefixes to proto library macros

* Updating READMEs to use bazel instead of autotools.

* Bazelfying Kokoro release builds

* First round of review fixes

* Second round of review fixes

* Third round of review fixes

* Filtering out conformance tests from Bazel on Windows (b/241484899)

* Add version metadata that was previously scraped from configure.ac

* fixing typo from previous fix

* Adding ruby version tests

* Bumping pinned upb version, and adding tests to python CI
2022-08-10 22:51:29 -07:00
Elliotte Rusty Harold 61dcf50b85
Update Guava to 31.1 (#9707)
* start work on open source build instructions

* subprojects

* JDK17

* update Guava to 30.1-jre

* pin dependencies
2022-03-30 16:52:15 -04:00
Adam Cozzette f7232f2aa3 Replace EasyMock dependency with Mockito and re-pin Bazel deps 2022-03-02 19:27:59 +00:00
Deanna Garcia dfd99e7ec0 Adding kotlin bazel tests 2022-01-12 21:54:30 +00:00
Elliotte Rusty Harold b73f78d32c
update GSON to 2.8.9 (#9367) 2022-01-05 21:23:54 +00:00
Adam Cozzette 454f0cccaa Add jsr305 dependency for Bazel 2021-10-12 15:37:40 -07:00
Derek Perez 87d140f851
rely on only HTTPS mirrors for maven. (#8526) 2021-04-22 12:12:41 -07:00
Derek Perez 61689226c0
updating GSON and Guava to more recent versions (#8524) 2021-04-21 18:05:18 -07:00
Derek Perez db8f725190
ensure maven deps are pinned for reproducibility. (#8523)
* ensure maven deps are pinned for reproducibility.

* adding update docs.
2021-04-21 16:26:05 -07:00