Skip to content

Commit 9fae229

Browse files
yimincclaudetconley1428
authored
Upgrade grpc to 1.75.0 to fix CVE-2025-55163 and CVE-2025-24970 (#2763)
* Upgrade grpc to 1.75.0 to fix CVE-2025-55163 and CVE-2025-24970 - Update grpcVersion from 1.58.1 to 1.75.0 - Add grpc-protobuf dependency to temporal-serviceclient (no longer transitively included by grpc-services in 1.75.0) - Suppress deprecation warning for Guava Throwables.propagateIfPossible (deprecated in Guava 33.x brought in by grpc 1.75.0) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * Update build.gradle * Revert "Update build.gradle" This reverts commit 100caaa. --------- Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com> Co-authored-by: tconley1428 <tconley1428@gmail.com> Co-authored-by: Tim Conley <timothy.conley@temporal.io>
1 parent 67d56dd commit 9fae229

File tree

3 files changed

+3
-1
lines changed

3 files changed

+3
-1
lines changed

build.gradle

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ allprojects {
2828

2929
ext {
3030
// Platforms
31-
grpcVersion = '1.58.1' // [1.38.0,) Needed for io.grpc.protobuf.services.HealthStatusManager
31+
grpcVersion = '1.75.0' // [1.38.0,) Needed for io.grpc.protobuf.services.HealthStatusManager
3232
jacksonVersion = '2.15.4' // [2.9.0,)
3333
nexusVersion = '0.4.0-alpha'
3434
// we don't upgrade to 1.10.x because it requires kotlin 1.6. Users may use 1.10.x in their environments though.

temporal-serviceclient/build.gradle

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@ dependencies {
1212
api ("io.grpc:grpc-api") //Classes like io.grpc.Metadata are used as a part of our API
1313
api "io.grpc:grpc-stub" //Part of WorkflowServiceStubs API
1414
api "io.grpc:grpc-netty-shaded" //Part of WorkflowServiceStubs API, specifically SslContext
15+
api "io.grpc:grpc-protobuf" //For io.grpc.protobuf.StatusProto and ProtoUtils used by generated stubs
1516
api "io.grpc:grpc-services" //Standard gRPC HealthCheck Response class
1617
api "io.grpc:grpc-inprocess" //For the in-process time skipping test server
1718
api "com.google.protobuf:protobuf-java-util:$protoVersion" //proto request and response objects are a part of this module's API

temporal-testing/src/main/java/io/temporal/testing/internal/SDKTestWorkflowRule.java

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -456,6 +456,7 @@ public <R> void addWorkflowImplementationFactory(
456456
.registerWorkflowImplementationFactory(factoryImpl, factoryFunc);
457457
}
458458

459+
@SuppressWarnings("deprecation")
459460
public void regenerateHistoryForReplay(String workflowId, String fileName) {
460461
if (REGENERATE_JSON_FILES) {
461462
String json = getExecutionHistory(workflowId).toJson(true);

0 commit comments

Comments
 (0)