From ddec86de8123c7a16e55937298aa9fd403f02404 Mon Sep 17 00:00:00 2001 From: Aurimas Date: Wed, 20 Jul 2022 17:26:53 -0700 Subject: [PATCH 1/2] Upgrade to com.google:google:5 for protoc artifact Protoc depeneds on com.google:google:1 which is unsigned. Which means users the validate signatures have to add it to an allow list. Upgrading makes it no longer necessary. Compare: https://repo1.maven.org/maven2/com/google/google/1 vs https://repo1.maven.org/maven2/com/google/google/5 --- protoc-artifacts/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/protoc-artifacts/pom.xml b/protoc-artifacts/pom.xml index bce8121b46..9a36a147af 100644 --- a/protoc-artifacts/pom.xml +++ b/protoc-artifacts/pom.xml @@ -4,7 +4,7 @@ com.google google - 1 + 5 com.google.protobuf protoc From cc13108863b500b8bd9dbf3260e413c625fc0039 Mon Sep 17 00:00:00 2001 From: Aurimas Date: Wed, 20 Jul 2022 17:28:35 -0700 Subject: [PATCH 2/2] Update java/protoc --- java/protoc/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/java/protoc/pom.xml b/java/protoc/pom.xml index aa6bc588a7..2908b11cec 100644 --- a/java/protoc/pom.xml +++ b/java/protoc/pom.xml @@ -4,7 +4,7 @@ com.google google - 1 + 5 com.google.protobuf protoc