Skip to content

[Backport 2.12] Bump armeria + grpc + protobuf to fix CVE-2024-7254 - #5924

Merged
dlvenable merged 1 commit into
2.12from
backport/backport-5891-to-2.12
Jul 30, 2025
Merged

dlvenable merged 1 commit into
2.12from
backport/backport-5891-to-2.12

Conversation

@opensearch-trigger-bot

Copy link
Copy Markdown
Contributor

Backport 292a547 from #5891

Bump armeria + grpc + protobuf to fix CVE-2024-7254

Upgrades protobuf dependencies with versions that fix
Fixes CVE-2024-7254.

Use inline mocks in DnsPeerListProviderCreationTest to support mocking final classes. Updates to the GrpcRequestExceptionHandlerTest required by the update to the Armeria test library. Enforce a consistent JUnit version across the project to avoid JUnit consistency issues.

Signed-off-by: Karsten Schnitter <k.schnitter@sap.com>
Signed-off-by: David Venable <dlv@amazon.com>
Co-authored-by: David Venable <dlv@amazon.com>
(cherry picked from commit 292a547)
@github-actions

github-actions Bot commented Jul 30, 2025 •

Copy link
Copy Markdown

Unit Test Results

โŸโ€„3โ€ˆ385 filesโ€„ +โŸโ€„โ€ˆ580โ€‚โ€ƒโŸโ€„3โ€ˆ385 suitesโ€„ +580โ€‚โ€ƒโ€‚1h 28m 45s โฑ๏ธ + 15m 51s
11โ€ˆ694 tests +โŸโ€„โ€ˆ354โ€‚โ€ƒ11โ€ˆ687 โœ”๏ธ +โŸโ€„โ€ˆ354โ€‚โ€ƒโŸโ€„6 ๐Ÿ’ค ยฑ0โ€‚โ€ƒ1 โŒ ยฑ0โ€‚
29โ€ˆ348 runsโ€† +4โ€ˆ344โ€‚โ€ƒ29โ€ˆ334 โœ”๏ธ +4โ€ˆ344โ€‚โ€ƒ13 ๐Ÿ’ค ยฑ0โ€‚โ€ƒ1 โŒ ยฑ0โ€‚

For more details on these failures, see this check.

Results for commit 5d02890.โ€ƒยฑ Comparison against base commit ff4d849.

โ™ป๏ธ This comment has been updated with latest results.

@dlvenable
dlvenable merged commit 140ae03 into 2.12 Jul 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants