From a6851b8ec4044eef4af759a21887fdae6226e1cd Mon Sep 17 00:00:00 2001
From: Jack Koenig
Date: Thu, 4 Aug 2022 15:54:43 -0700
Subject: Bump protobuf runtime to avoid CVE-2021-22569 (#2535)

---
 build.sbt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/build.sbt b/build.sbt
index b12150d2..b0d2a666 100644
--- a/build.sbt
+++ b/build.sbt
@@ -65,6 +65,7 @@ lazy val mimaSettings = Seq(
 )
 
 lazy val protobufSettings = Seq(
+  ProtobufConfig / version := "3.18.2", // CVE-2021-22569
   ProtobufConfig / sourceDirectory := baseDirectory.value / "src" / "main" / "proto",
   ProtobufConfig / protobufRunProtoc := (args => com.github.os72.protocjar.Protoc.runProtoc("-v351" +: args.toArray))
 )
-- 
cgit v1.2.3