Update protobuf-java to 3.25.9

scala-steward · michaelmior · commit f9d7ea71c992 · 2026-06-19T20:21:52.000-04:00
Signed-off-by: Scala Steward &lt;scala_steward@virtuslab.com&gt;
diff --git a/project/Dependencies.scala b/project/Dependencies.scala
@@ -33,7 +33,7 @@ object Dependencies {
   lazy val jacksonDatabind =
     "com.fasterxml.jackson.core" % "jackson-databind" % "2.15.2"
   // XXX Version bundled with Spark is vulnerable to CVE-2022-3171
-  lazy val protobuf = "com.google.protobuf" % "protobuf-java" % "3.25.5"
+  lazy val protobuf = "com.google.protobuf" % "protobuf-java" % "3.25.9"
   // XXX Bundled version is vulnerable to CVE-2023-34455
   lazy val snappyJava = "org.xerial.snappy" % "snappy-java" % "1.1.10.8"
 }

Original file line number	Diff line number	Diff line change
`@@ -33,7 +33,7 @@ object Dependencies {`
`33`	`33`	`lazy val jacksonDatabind =`
`34`	`34`	`"com.fasterxml.jackson.core" % "jackson-databind" % "2.15.2"`
`35`	`35`	`// XXX Version bundled with Spark is vulnerable to CVE-2022-3171`
`36`		`- lazy val protobuf = "com.google.protobuf" % "protobuf-java" % "3.25.5"`
	`36`	`+ lazy val protobuf = "com.google.protobuf" % "protobuf-java" % "3.25.9"`
`37`	`37`	`// XXX Bundled version is vulnerable to CVE-2023-34455`
`38`	`38`	`lazy val snappyJava = "org.xerial.snappy" % "snappy-java" % "1.1.10.8"`
`39`	`39`	`}`