From 92a10515164c7cbeace15203805459f1f334f4f0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 8 Mar 2023 19:48:47 +0800
Subject: [PATCH] Bump protobuf-java.version from 3.19.6 to 3.22.0 (#11737)

* Bump protobuf-java.version from 3.19.6 to 3.22.0

Bumps `protobuf-java.version` from 3.19.6 to 3.22.0.

Updates `protobuf-java` from 3.19.6 to 3.22.0
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/generate_changelog.py)
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.19.6...v3.22.0)

Updates `protobuf-java-util` from 3.19.6 to 3.22.0

---
updated-dependencies:
- dependency-name: com.google.protobuf:protobuf-java
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: com.google.protobuf:protobuf-java-util
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update build-and-test-pr.yml

* Update .licenserc.yaml

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: kezhenxu94 <kezhenxu94@163.com>
Co-authored-by: Albumen Kevin <jhq0812@gmail.com>
---
 .github/workflows/build-and-test-pr.yml | 4 ++--
 .licenserc.yaml                         | 4 ++++
 dubbo-dependencies-bom/pom.xml          | 2 +-
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build-and-test-pr.yml b/.github/workflows/build-and-test-pr.yml
index 1d0174dfd5..72c5fef4ca 100644
--- a/.github/workflows/build-and-test-pr.yml
+++ b/.github/workflows/build-and-test-pr.yml
@@ -24,7 +24,7 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       - name: Check License
-        uses: apache/skywalking-eyes@main
+        uses: apache/skywalking-eyes@e1a02359b239bd28de3f6d35fdc870250fa513d5
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: "Set up JDK 17"
@@ -36,7 +36,7 @@ jobs:
         run: |
           ./mvnw --batch-mode --no-snapshot-updates -e --no-transfer-progress --fail-fast -T 2C clean install -DskipTests=true -DskipIntegrationTests=true -Dcheckstyle.skip=true -Dcheckstyle_unix.skip=true -Drat.skip=true -Dmaven.javadoc.skip=true
       - name: Check Dependencies' License
-        uses: apache/skywalking-eyes/dependency@main
+        uses: apache/skywalking-eyes/dependency@e1a02359b239bd28de3f6d35fdc870250fa513d5
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
diff --git a/.licenserc.yaml b/.licenserc.yaml
index 8d0f30f4c5..4978c9a34c 100644
--- a/.licenserc.yaml
+++ b/.licenserc.yaml
@@ -192,6 +192,10 @@ dependency:
       license: Apache-2.0
     - name: org.sonatype.plexus:plexus-cipher
       license: Apache-2.0
+    - name: com.google.protobuf:protobuf-java
+      license: BSD 3-clause
+    - name: com.google.protobuf:protobuf-java-util
+      license: BSD 3-clause
     # multi license
     - name: org.javassist:javassist
       license: Apache-2.0
diff --git a/dubbo-dependencies-bom/pom.xml b/dubbo-dependencies-bom/pom.xml
index a1c1a8d6e3..5f03e7f142 100644
--- a/dubbo-dependencies-bom/pom.xml
+++ b/dubbo-dependencies-bom/pom.xml
@@ -114,7 +114,7 @@
         <cxf_version>3.5.5</cxf_version>
         <thrift_version>0.18.1</thrift_version>
         <hessian_version>4.0.66</hessian_version>
-        <protobuf-java_version>3.19.6</protobuf-java_version>
+        <protobuf-java_version>3.22.0</protobuf-java_version>
         <javax_annotation-api_version>1.3.2</javax_annotation-api_version>
         <servlet_version>3.1.0</servlet_version>
         <jakarta.servlet_version>5.0.0</jakarta.servlet_version>