upgrade google-protobuf due to potential denial of service issue

datacite · Sep 20, 2024 · 3b0bce4 · 3b0bce4
1 parent 0696731
commit 3b0bce4
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 4 deletions.
diff --git a/Gemfile b/Gemfile
@@ -39,7 +39,7 @@ gem "flipper", "~> 1.2", ">= 1.2.2"
 gem "flipper-active_support_cache_store"
 gem "gender_detector", "~> 0.1.2"
 gem "git", "~> 1.11"
-gem "google-protobuf", "3.19.6"
+gem "google-protobuf", ">= 3.25.5"
 gem "graphql", "1.11.4"
 gem "graphql-batch", "~> 0.4.1"
 gem "graphql-cache", "~> 0.6.0"

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -341,7 +341,10 @@ GEM
       rchardet (~> 1.8)
     globalid (1.2.1)
       activesupport (>= 6.1)
-    google-protobuf (3.19.6)
+    google-protobuf (3.25.5-aarch64-linux)
+    google-protobuf (3.25.5-arm64-darwin)
+    google-protobuf (3.25.5-x86_64-darwin)
+    google-protobuf (3.25.5-x86_64-linux)
     graphql (1.11.4)
     graphql-batch (0.4.3)
       graphql (>= 1.3, < 2)
@@ -819,7 +822,7 @@ DEPENDENCIES
   flipper-active_support_cache_store
   gender_detector (~> 0.1.2)
   git (~> 1.11)
-  google-protobuf (= 3.19.6)
+  google-protobuf (>= 3.25.5)
   graphql (= 1.11.4)
   graphql-batch (~> 0.4.1)
   graphql-cache (~> 0.6.0)
@@ -882,4 +885,4 @@ DEPENDENCIES
   webmock (~> 3.18, >= 3.18.1)
 
 BUNDLED WITH
-   2.5.6
+   2.5.6