(datafusion-comet) branch main updated: chore: Update protobuf to 3.25.5 (#1434)

[ka...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

kazuyukitanimura pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/datafusion-comet.git


The following commit(s) were added to refs/heads/main by this push:
     new 1595c1656 chore: Update protobuf to 3.25.5 (#1434)
1595c1656 is described below

commit 1595c16567d9483beefa9d6c2f6c3cd93d6873db
Author: KAZUYUKI TANIMURA <kt...@apple.com>
AuthorDate: Fri Feb 21 09:56:53 2025 -0800

    chore: Update protobuf to 3.25.5 (#1434)
    
    ## Which issue does this PR close?
    
    ## Rationale for this change
    
    To fix [CVE-2024-7254](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7254)
    
    ## What changes are included in this PR?
    
    Update protobuf to 3.25.5
    
    ## How are these changes tested?
    
    CI
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 6c956519c..1f20d8175 100644
--- a/pom.xml
+++ b/pom.xml
@@ -55,7 +55,7 @@ under the License.
     <spark.version>3.4.3</spark.version>
     <spark.version.short>3.4</spark.version.short>
     <spark.maven.scope>provided</spark.maven.scope>
-    <protobuf.version>3.21.12</protobuf.version>
+    <protobuf.version>3.25.5</protobuf.version>
     <parquet.version>1.13.1</parquet.version>
     <parquet.maven.scope>provided</parquet.maven.scope>
     <arrow.version>16.0.0</arrow.version>


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@datafusion.apache.org
For additional commands, e-mail: commits-help@datafusion.apache.org