bump: protobuf-java 3.24.0 in Kinesis (#3026)

akka · Oct 20, 2023 · 98dda52 · 98dda52
1 parent a499d43
commit 98dda52
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/project/Dependencies.scala b/project/Dependencies.scala
@@ -17,7 +17,6 @@ object Dependencies {
 
  val AwsSdk2Version = "2.17.295"
  val AwsSpiAkkaHttpVersion = "1.0.1"
- val ProtobufJavaVersion = "3.21.12"
  // Sync with plugins.sbt
  val AkkaGrpcBinaryVersion = "2.4"
  // sync ignore prefix in scripts/link-validator.conf#L30
@@ -340,6 +339,7 @@ object Dependencies {
  ) ++ JacksonDatabindDependencies
  )
 
+ val KinesisProtobufJavaVersion = "3.24.0" // sync with Akka gRPC
  val Kinesis = Seq(
  libraryDependencies ++= Seq(
  "com.typesafe.akka" %% "akka-http" % AkkaHttpVersion,
@@ -350,7 +350,7 @@ object Dependencies {
  "software.amazon.awssdk" % "kinesis" % AwsSdk2Version, // ApacheV2
  "software.amazon.awssdk" % "firehose" % AwsSdk2Version, // ApacheV2
  "software.amazon.kinesis" % "amazon-kinesis-client" % "2.4.0", // ApacheV2
- "com.google.protobuf" % "protobuf-java" % ProtobufJavaVersion // CVE in older transitive dependency
+ "com.google.protobuf" % "protobuf-java" % KinesisProtobufJavaVersion // CVE in older transitive dependency
  ).map(
  _.excludeAll(
  ExclusionRule("software.amazon.awssdk", "apache-client"),