[Snyk] Upgrade google-protobuf from 3.14.0 to 3.19.2

[snyk-bot]

Snyk has created this PR to upgrade google-protobuf from 3.14.0 to 3.19.2.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 30 versions ahead of your current version.
• The recommended version was released a month ago, on 2022-01-05.

Release notes

Package name: google-protobuf

• 3.19.2 - 2022-01-05

  Java

  • Improve performance characteristics of UnknownFieldSet parsing (#9371)
  • This release addresses a Security Advisory for Java users
• 3.19.1 - 2021-10-29

  Bazel

  • Ensure that release archives contain everything needed for Bazel (#9131)
  • Align dependency handling with Bazel best practices (#9165)

  JavaScript

  • Fix ReferenceError: window is not defined when getting the global object (#9156)

  Ruby

  • Fix memory leak in MessageClass.encode (#9150)
• 3.19.0 - 2021-10-20

  C++

  • Make proto2::Message::DiscardUnknownFields() non-virtual
  • Separate RepeatedPtrField into its own header file
  • For default floating point values of 0, consider all bits significant
  • cmake: support MSVC_RUNTIME_LIBRARY property (#8851)
  • Fix shadowing warnings (#8926)
  • Fix for issue #8484, constant initialization doesn't compile in msvc clang-cl environment (#8993)
  • Fix build on AIX and SunOS (#8373) (#9065)
  • Add Android stlport and default toolchains to BUILD. (#8290)

  Java

  • For default floating point values of 0, consider all bits significant
  • Annotate //java/com/google/protobuf/util/... with nullness annotations
  • Use ArrayList copy constructor (#7853)

  Kotlin

  • Switch Kotlin proto DSLs to be implemented with inline value classes
  • Fixing inlining and deprecation for repeated string fields (#9120)

  Python

  • Proto2 DecodeError now includes message name in error message
  • Make MessageToDict convert map keys to strings (#8122)
  • Add python-requires in setup.py (#8989)
  • Add python 3.10 (#9034)

  JavaScript

  • Skip exports if not available by CommonJS (#8856)
  • JS: Comply with CSP no-unsafe-eval. (#8864)

  PHP

  • Added "object" as a reserved name for PHP (#8962)

  Ruby

  • Override Map.clone to use Map's dup method (#7938)
  • Ruby: build extensions for arm64-darwin (#8232)
  • Add class method Timestamp.from_time to ruby well known types (#8562)
  • Adopt pure ruby DSL implementation for JRuby (#9047)
  • Add size to Map class (#8068)
  • Fix for descriptor_pb.rb: google/protobuf should be required first (#9121)

  C#

  • Correctly set ExtensionRegistry when parsing with MessageParser, but using an already existing CodedInputStream (#7246)
  • [C#] Make FieldDescriptor propertyName public (#7642)
• 3.19.0-rc.2 - 2021-10-19
• 3.19.0-rc.1 - 2021-10-16
• 3.18.2 - 2022-01-05

  Java

  • Improve performance characteristics of UnknownFieldSet parsing (#9371)
• 3.18.1 - 2021-10-05

  Python

  • Update setup.py to reflect that we now require at least Python 3.5 (#8989)
  • Performance fix for DynamicMessage: force GetRaw() to be inlined (#9023)

  Ruby

  • Update ruby_generator.cc to allow proto2 imports in proto3 (#9003)
• 3.18.0 - 2021-09-15 Read more
• 3.18.0-rc.2 - 2021-08-30
• 3.18.0-rc.1 - 2021-08-19
• 3.17.3 - 2021-06-08
• 3.17.2 - 2021-06-02
• 3.17.1 - 2021-05-24
• 3.17.0 - 2021-05-13
• 3.17.0-rc.2 - 2021-05-11
• 3.17.0-rc.1 - 2021-05-07
• 3.16.0 - 2021-05-07
• 3.16.0-rc.2 - 2021-05-05
• 3.16.0-rc.1 - 2021-04-06
• 3.15.8 - 2021-04-08
• 3.15.7 - 2021-04-02
• 3.15.6 - 2021-03-11
• 3.15.5 - 2021-03-05
• 3.15.4 - 2021-03-03
• 3.15.3 - 2021-02-25
• 3.15.2 - 2021-02-23
• 3.15.1 - 2021-02-20
• 3.15.0 - 2021-02-18
• 3.15.0-rc.2 - 2021-02-17
• 3.15.0-rc.1 - 2021-02-08
• 3.14.0 - 2020-11-13

from google-protobuf GitHub release notes

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs