aiarena-docker-base icon indicating copy to clipboard operation
aiarena-docker-base copied to clipboard

Bump protobuf from 3.20.1 to 4.22.0

Open dependabot[bot] opened this issue 2 years ago • 0 comments

Bumps protobuf from 3.20.1 to 4.22.0.

Release notes

Sourced from protobuf's releases.

Protocol Buffers v3.20.3

Java

  • Refactoring java full runtime to reuse sub-message builders and prepare to migrate parsing logic from parse constructor to builder.
  • Move proto wireformat parsing functionality from the private "parsing constructor" to the Builder class.
  • Change the Lite runtime to prefer merging from the wireformat into mutable messages rather than building up a new immutable object before merging. This way results in fewer allocations and copy operations.
  • Make message-type extensions merge from wire-format instead of building up instances and merging afterwards. This has much better performance.
  • Fix TextFormat parser to build up recurring (but supposedly not repeated) sub-messages directly from text rather than building a new sub-message and merging the fully formed message into the existing field.
  • This release addresses a Security Advisory for Java users

Protocol Buffers v3.20.2

C++

Commits
  • a847a8d Updating version.json and repo version numbers to: 22.0
  • 52e435d Merge pull request #11970 from deannagarcia/updateDeps
  • d327259 Update UPB dep
  • 8d7b4e6 Merge pull request #11946 from protocolbuffers/cp-enum-closed-comment
  • a594141 Document known quirks of EnumDescriptor::is_closed() when importing across fi...
  • b7f7171 Merge pull request #11944 from protocolbuffers/gha-port-22.x
  • d39aeac Fixing broken rust package
  • 9a5e86d Run continuous tests hourly to boost statistics for analysis
  • de8bb71 [ObjC] CI dbg & opt macOS bazel builds.
  • a3970ef Stop using 'push' event to determine privileged post-submit runs.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependabot[bot] avatar Feb 17 '23 04:02 dependabot[bot]