Upgrade our dependency on protobuf-java to com.google.protobuf:protobuf-java:3.19.6.
The protobuf-java version declared in WORKSPACE.bazel ("com.google.protobuf:protobuf-java:3.19.3") is affected by CVE-2022-3171. Version 3.19.6 should be used instead as it contains the fix.
@@ -175,7 +175,7 @@ jar_jar_repositories()
load("@rules_jvm_external//:defs.bzl", "maven_install")
maven_install(
artifacts = [
- "com.google.protobuf:protobuf-java:3.19.3",
+ "com.google.protobuf:protobuf-java:3.19.6",
],
repositories = [
"https://repo1.maven.org/maven2",
