You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It turns out `protobuf` v26.6 isn't compatibile with ScalaPB 0.9.8 used
by Scala 2.11:
```txt
Caused by: java.lang.UnsupportedOperationException:
As of 2022/09/29 (release 21.7) makeExtensionsImmutable should not be
called from protobuf gencode. If you are seeing this message, your
gencode is vulnerable to a denial of service attack. You should
regenerate your code using protobuf 25.6 or later. Use the latest
version that meets your needs. However, if you understand the risks
and wish to continue with vulnerable gencode, you can set the system
property `-Dcom.google.protobuf.use_unsafe_pre22_gencode` on the
command line.
See security vulnerability:
GHSA-h4h5-3hr4-j3g2
```
As mentioned in bazelbuild#1710, we should consider dropping Scala 2.11 support at this
point, since there's no ScalaPB release for it that supports later versions of
`protobuf`. That, and we could remove some of the special case code added in
the following changes, amongst other 2.11 support details:
- bazelbuild#1631
- bazelbuild#1648
- bazelbuild#1687
- bazelbuild#1688
0 commit comments