From bb4c07a5d8d9a0b6c8e865f7be29b8241cffea2a Mon Sep 17 00:00:00 2001 From: Gagan Juneja Date: Mon, 9 Dec 2024 21:20:12 +0530 Subject: [PATCH] fixes CVE Signed-off-by: Gagan Juneja --- build.gradle | 2 +- .../opensearch-performance-analyzer.release-notes-1.3.20.0.md | 4 ++++ 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index 08bb985f..b82cc3cf 100644 --- a/build.gradle +++ b/build.gradle @@ -246,7 +246,7 @@ dependencies { compile(group: 'com.google.errorprone', name: 'error_prone_annotations', version: '2.9.0') { force = 'true' } - compile(group: 'com.google.protobuf', name:'protobuf-java', version: '3.21.8') { + compile(group: 'com.google.protobuf', name:'protobuf-java', version: '3.25.5') { force = 'true' } compile("io.netty:netty-buffer:${nettyVersion}") { diff --git a/release-notes/opensearch-performance-analyzer.release-notes-1.3.20.0.md b/release-notes/opensearch-performance-analyzer.release-notes-1.3.20.0.md index 54257818..c1322f5b 100644 --- a/release-notes/opensearch-performance-analyzer.release-notes-1.3.20.0.md +++ b/release-notes/opensearch-performance-analyzer.release-notes-1.3.20.0.md @@ -1,3 +1,7 @@ ## Version 1.3.20 Release Notes Compatible with OpenSearch 1.3.20 + +### Infrastructure + +* Upgrade protobuf version to 3.25.5 ([#773](https://github.com/opensearch-project/performance-analyzer/pull/773))