You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@orc.apache.org by do...@apache.org on 2021/08/08 04:04:59 UTC
[orc] branch main updated: ORC-918: Pin protobuf-java to 2.5.0
(#829)
This is an automated email from the ASF dual-hosted git repository.
dongjoon pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/orc.git
The following commit(s) were added to refs/heads/main by this push:
new 585ded0 ORC-918: Pin protobuf-java to 2.5.0 (#829)
585ded0 is described below
commit 585ded0eda41db96150d07b6ab97a1fc60fb8249
Author: William Hyun <wi...@apache.org>
AuthorDate: Sat Aug 7 21:04:54 2021 -0700
ORC-918: Pin protobuf-java to 2.5.0 (#829)
### What changes were proposed in this pull request?
This PR aims to pin protobuf-java version to 2.5.0
### Why are the changes needed?
To avoid incompatibility risk.
### How was this patch tested?
N/A
Closes #828 .
---
.github/dependabot.yml | 3 +++
1 file changed, 3 insertions(+)
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 468eac7..fa8f82c 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -39,3 +39,6 @@ updates:
# Pin maven-dependency-plugin to 3.1.2 due to MDEP-753, MDEP-757, MDEP-759
- dependency-name: "org.apache.maven.plugins:maven-dependency-plugin"
versions: "[3.2.0,)"
+ # Pin protobuf-java to 2.5.0
+ - dependency-name: "com.google.protobuf:protobuf-java"
+ versions: "[2.5.1,)"