From 38be8089c7cc7d5b84bc850758e5bbe05e6f0210 Mon Sep 17 00:00:00 2001
From: Keran Yang <yangkr920208@gmail.com>
Date: Wed, 22 Jan 2025 13:30:43 -0500
Subject: [PATCH] chore: upgrade protobuf-java version to fix CVE-2024-7254
 (#162)

Signed-off-by: Keran Yang <yangkr920208@gmail.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 959639a..f4f4086 100644
--- a/pom.xml
+++ b/pom.xml
@@ -22,7 +22,7 @@
 
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-        <protobuf.version>3.21.8</protobuf.version>
+        <protobuf.version>4.28.2</protobuf.version>
         <grpc.version>1.65.0</grpc.version>
         <netty.version>4.1.111.Final</netty.version> <!-- match version grpc-netty depends on -->
         <akka.version>2.8.5</akka.version>