chore: bump io.github.ascopes:protobuf-maven-plugin from 4.1.2 to 5.1.4#884
chore: bump io.github.ascopes:protobuf-maven-plugin from 4.1.2 to 5.1.4#884dependabot[bot] wants to merge 3 commits into
Conversation
Bumps [io.github.ascopes:protobuf-maven-plugin](https://github.com/ascopes/protobuf-maven-plugin) from 4.1.2 to 5.1.4. - [Release notes](https://github.com/ascopes/protobuf-maven-plugin/releases) - [Commits](ascopes/protobuf-maven-plugin@v4.1.2...v5.1.4) --- updated-dependencies: - dependency-name: io.github.ascopes:protobuf-maven-plugin dependency-version: 5.1.4 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
|
@ehsavoie is this safe? I guess our CI doesn't generate the protobuf, since we do this on demand so I'm a bit hesitant |
|
No this is not going to work: should be replaces by |
|
@copilot As seen in the previous comment #884 (comment) this naive upgrade is not going to work. Note we do not run the protobuf generation in spec-grpc and compat-0.3/spec-grpc on every build. Rather it is an offline activity.. |
Added a new workflow The |
|
Updated
Note: |
Bumps io.github.ascopes:protobuf-maven-plugin from 4.1.2 to 5.1.4, along with the required configuration updates for the v5.x API and a new CI workflow to verify gRPC generation.
Plugin configuration changes (
spec-grpc/pom.xml)The v5.x release removed deprecated legacy configuration elements. The following changes were made:
<binaryMavenPlugins>/<binaryMavenPlugin>replaced with<plugins>/<plugin kind="binary-maven"><protoc>${protobuf-java.version}</protoc>updated to<protoc kind="binary-maven"><version>${protobuf-java.version}</version></protoc>compat-0.3/spec-grpcuses a different plugin (org.xolstice.maven.plugins:protobuf-maven-plugin) and requires no changes.New CI workflow (
.github/workflows/verify-grpc-generation.yml)Since protobuf generation is an offline activity and not part of the regular build, a new workflow is added to verify the generation step continues to work. It runs:
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.