fix(deps): Update protobuf monorepo to v33 (major) #88
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v3.21.5->v33.4v33.527.0->33.5Release Notes
protocolbuffers/protobuf (com_google_protobuf)
v33.4: Protocol Buffers v33.4Compare Source
Announcements
Other
//:protocfrom language runtimes (#19679) (protocolbuffers/protobuf@453cfb2)v33.3: Protocol Buffers v33.3Compare Source
Announcements
Bazel
Compiler
command_line_interface_unittestandcode_generator_unittest. (protocolbuffers/protobuf@cb0a8c5)C++
Java
Csharp
Python
38ca2d3. (protocolbuffers/protobuf@184b5e8)UPB (Python/PHP/Ruby C-Extension)
Other
v33.2: Protocol Buffers v33.2Compare Source
Announcements
Compiler
pbpackage. (protocolbuffers/protobuf@483173d)C++
pbpackage. (protocolbuffers/protobuf@483173d)Java
pbpackage. (protocolbuffers/protobuf@483173d)Csharp
PHP
PHP C-Extension
Ruby
Ruby C-Extension
UPB (Python/PHP/Ruby C-Extension)
v33.1: Protocol Buffers v33.1Compare Source
Announcements
C++
Anyhasbit consistency issue in OSS. (#24400) (protocolbuffers/protobuf@59db671)Java
v33.0: Protocol Buffers v33.0Compare Source
Announcements
Bazel
Compiler
C++
RepeatedField(Arena*)constructor private in a future release. (protocolbuffers/protobuf@768db14)Map(Arena*)constructor private in a future release. (protocolbuffers/protobuf@543a17f)RepeatedPtrField(Arena*)constructor private in a future release (protocolbuffers/protobuf@6422b9d)RuntimeAssertInBoundsto remove repeated logic and makeGet/Mutableeasier to read. (protocolbuffers/protobuf@2f270c4)Java
Restored compatibility of runtime with gencode created with protoc <3.21
With this release, compatibility of the runtime with older gencode down to 3.0.0 is restored, compared to the previous support minimum of gencode created with 3.22+. Note that it is still strongly recommended to regenerate your gencode with a newer protoc and to avoid using gencode which was created with an old protoc.
Generated code from this range is covered by CVE-2022-3171 and is potentially vulnerable to a Denial of Service risk.
JavaProto 4.x previously dropped compatibility with the potentially vulnerable generated code, having the behavior of:
Starting with this release:
-Dcom.google.protobuf.error_on_unsafe_pre22_gencode) or to entirely silence the logged messages (-Dcom.google.protobuf.use_unsafe_pre22_gencode)This change was made based on community feedback regarding the difficulty in identifying and quickly remediating stale gencode in their transitive dependencies weighed against a careful evaluation of the realistic risk exposure of DoS (with no risk of other concerns including information leak or RCE).
We strongly recommend that any users who observe the log messages to regenerate the corresponding code with a newer protoc. We recommend that any security-conscious services opt into the
error_on_unsafe_pre22_gencodebehavior to preclude any risk of a Denial of Service surface area being exposed.A future 4.x release may flip the default behavior to error by default as a measure to further help the ecosystem avoid the Denial of Service risks, while still maintaining the ability to opt into continuing to use insecure gencode for users who are parsing trusted inputs and where the difficulty of regenerating is high.
Changes
varint,fixed32, andfixed64fields inUnknownFieldSet.Field(protocolbuffers/protobuf@810272f)isPlaceholder()accessors to file, message, and enum descriptors (protocolbuffers/protobuf@f978ec2)GeneratedMessage.ExtendableMessage.extensions(protocolbuffers/protobuf@b25d39e)Rust
_(protocolbuffers/protobuf@c3f7e8d)Send(protocolbuffers/protobuf@8bff944)Python
__slots__to empty in.pyifiles. (protocolbuffers/protobuf@38ca2d3)PHP
UPB (Python/PHP/Ruby C-Extension)
Other
v32.1: Protocol Buffers v32.1Compare Source
Announcements
Compiler
C++
Java
Csharp
PHP
v32.0: Protocol Buffers v32.0Compare Source
Announcements
Bazel
import optionandoption_depstest proto in edition 2024. (protocolbuffers/protobuf@c51df73)Compiler
google.protobuf.Method.syntaxandgoogle.protobuf.Method.edition(protocolbuffers/protobuf@9ec241e)import weakandweakfield option in edition 2024 in protoc (parser and c++ runtime). (protocolbuffers/protobuf@a2a0511)C++
import optionandoption_depstest proto in edition 2024. (protocolbuffers/protobuf@c51df73)import weakandweakfield option in edition 2024 in protoc (parser and c++ runtime). (protocolbuffers/protobuf@a2a0511)Java
import optionandoption_depswhich exclude the options from the "builder" pool (aka "import" pool). (protocolbuffers/protobuf@694eedd)Csharp
Objective-C
Rust
DEP_UPB_VERSIONcheck in codegen crate (#22764) (protocolbuffers/protobuf@6f6012a)Python
--incompatible_config_setting_private_default_visibility(#22745) (protocolbuffers/protobuf@5e2838e)PHP
PHP C-Extension
Ruby
--incompatible_config_setting_private_default_visibility(#22745) (protocolbuffers/protobuf@5e2838e)rb_testrules to run test (#21733) (protocolbuffers/protobuf@4f74764)Ruby C-Extension
wrap_memcpy.ccompatibility shim for pre-2.14 glibc (protocolbuffers/protobuf@4ba9733)UPB (Python/PHP/Ruby C-Extension)
--incompatible_config_setting_private_default_visibility(#22745) (protocolbuffers/protobuf@5e2838e)Other
2025051.1 (protocolbuffers/protobuf@ee68ed1)rules_rubyto applyneverlink = Trueto thejarsrule (#21416) (protocolbuffers/protobuf@88e11bd)v31.1: Protocol Buffers v31.1Compare Source
Announcements
Compiler
C++
Java
coptsattribute (#21982) (protocolbuffers/protobuf@bec5b5a)Python
Other
v31.0: Protocol Buffers v31.0Compare Source
Announcements
Bazel
Compiler
2025012and use @com_google_absl -> @abseil-cpp and com_google_googletest -> @googletest canonical BCR names. (protocolbuffers/protobuf@ba6b54d)C++
2025012and use @com_google_absl -> @abseil-cpp and com_google_googletest -> @googletest canonical BCR names. (protocolbuffers/protobuf@ba6b54d)GetandMutablefor repeated_field. (protocolbuffers/protobuf@ffade4a)Java
nest_in_file_classfeature for Edition 2024. (protocolbuffers/protobuf@0416c3e)Generatedannotation to eventually replacejavax.annotation.Generated(protocolbuffers/protobuf@31e57fc)Kotlin
Csharp
Objective-C
GPBFieldDescriptor.isOptional. (protocolbuffers/protobuf@86ab252)Rust
Python
float_precisionapply to both float and double fields. (protocolbuffers/protobuf@5b54ee3)FieldMask.MergeFrom()with unset fields. (protocolbuffers/protobuf@1c87ac3)PHP
PHP C-Extension
f9863df. (#21355) (protocolbuffers/protobuf@a59988c)Ruby
rb_testrules to run test (#21733) (protocolbuffers/protobuf@0cf5489)#to_hashfor message classes (#20866) (protocolbuffers/protobuf@5596f6d)#if the hashmark appears immediately before any of$,{, or@. (protocolbuffers/protobuf@fffa3da)Ruby C-Extension
UPB (Python/PHP/Ruby C-Extension)
Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Renovate Bot.