Skip to content

Update Dependencies #251

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Sep 5, 2022
Merged

Update Dependencies #251

merged 1 commit into from
Sep 5, 2022

Conversation

agrawroh
Copy link
Member

@agrawroh agrawroh commented Aug 19, 2022

Description

There are a couple CVEs in both the Java Protobuf java-protobuf [Ref] and the Guava Cache guava-android [Ref] versions that we are currently using.

Changes

This PR bumps up the dependencies to a newer version which doesn't have any CVEs. These are the dependencies that we are bumping the versions for:

  • GRPC: 1.22.1 -> 1.48.1
  • Java Protobuf: 3.9.1 -> 3.21.5
  • Guava Cache: 26.0 -> 31.1

Signed-off-by: Rohit Agrawal <rohit.agrawal@databricks.com>
@codecov-commenter
Copy link

Codecov Report

Merging #251 (e204113) into main (c7e27d4) will not change coverage.
The diff coverage is n/a.

@@            Coverage Diff            @@
##               main     #251   +/-   ##
=========================================
  Coverage     90.01%   90.01%           
  Complexity      225      225           
=========================================
  Files            28       28           
  Lines           721      721           
  Branches         57       57           
=========================================
  Hits            649      649           
  Misses           49       49           
  Partials         23       23           

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

@agrawroh
Copy link
Member Author

@ramaraochavali We just started using Java CP to build our Envoy Control Plane. I'm used to Envoy codebase where it auto-assign the reviewers. How does it happen for this repo? We would be contributing pretty frequently once we do the initial POC. Any suggestions on who we can ping for the PR reviews?

@rulex123 rulex123 merged commit 0ee5dd4 into envoyproxy:main Sep 5, 2022
rulex123 pushed a commit that referenced this pull request Sep 5, 2022
Signed-off-by: Rohit Agrawal <rohit.agrawal@databricks.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants