omec-project / upf

4G/5G Mobile Core User Plane
178 stars 106 forks source link

Bump protobuf from 3.20.2 to 5.27.0 #813

Closed dependabot[bot] closed 4 months ago

dependabot[bot] commented 4 months ago

Bumps protobuf from 3.20.2 to 5.27.0.

Release notes

Sourced from protobuf's releases.

Protocol Buffers v3.20.3

Java

  • Refactoring java full runtime to reuse sub-message builders and prepare to migrate parsing logic from parse constructor to builder.
  • Move proto wireformat parsing functionality from the private "parsing constructor" to the Builder class.
  • Change the Lite runtime to prefer merging from the wireformat into mutable messages rather than building up a new immutable object before merging. This way results in fewer allocations and copy operations.
  • Make message-type extensions merge from wire-format instead of building up instances and merging afterwards. This has much better performance.
  • Fix TextFormat parser to build up recurring (but supposedly not repeated) sub-messages directly from text rather than building a new sub-message and merging the fully formed message into the existing field.
  • This release addresses a Security Advisory for Java users
Commits
  • a978b75 Updating version.json and repo version numbers to: 27.0
  • f396506 MODULE.bazel fixes for protobuf BCR release. (#16927)
  • 4baa11f Merge pull request #16906 from protocolbuffers/editions-27
  • 4483c6b Lazily resolve features for proto2 and proto3 for compatibility with old open...
  • f8a4a68 Fix whitespace merge issue in gencode
  • c3417f5 Regenerate stale files
  • fea6847 Future-proof edition 2023 against feature value support windows.
  • d2da463 Mark deleted fields in descriptor.proto reserved
  • 0a05aa8 Merge pull request #16875 from protocolbuffers/ban-recursive-features
  • 8c5f3a7 Prohibit using features in the same file they're defined in.
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
omecproject commented 4 months ago

Can one of the admins verify this patch?

gab-arrobo commented 4 months ago

@dependabot ignore this major version

dependabot[bot] commented 4 months ago

OK, I won't notify you about version 5.x.x again, unless you re-open this PR.