Skip to content

Bump com.google.protobuf:protobuf-kotlin-lite from 4.36.1 to 4.36.2 - #41

Merged
deku2026 merged 5 commits into
mainfrom
dependabot/gradle/com.google.protobuf-protobuf-kotlin-lite-4.36.2
Sep 26, 2026
Merged

deku2026 merged 5 commits into
mainfrom
dependabot/gradle/com.google.protobuf-protobuf-kotlin-lite-4.36.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 26, 2026

Copy link
Copy Markdown
Contributor

Bumps com.google.protobuf:protobuf-kotlin-lite from 4.36.1 to 4.36.2.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps com.google.protobuf:protobuf-kotlin-lite from 4.36.1 to 4.36.2.

---
updated-dependencies:
- dependency-name: com.google.protobuf:protobuf-kotlin-lite
  dependency-version: 4.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 26, 2026
@dependabot
dependabot Bot requested a review from deku2026 as a code owner September 26, 2026 02:53
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 26, 2026
deku2026 and others added 4 commits September 26, 2026 13:06
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Run the repository's Kotlin lock update (resolveLockedDependencies
resolveCodegenTools --write-locks --write-verification-metadata sha256) with
the existing JDK 17: protobuf-javalite and protobuf-kotlin-lite move to 4.36.2
and the protobuf bom/parent/javalite/kotlin-lite 4.36.2 checksums are added,
keeping the 4.36.1 entries. Apply the same two lock lines and verified
components to the Kotlin consumer test build.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Add the append-only receipt dependabot-2026-09-26-protobuf-4-36-2 (successor
of dependabot-2026-09-26-grpc-2-84-0): admit protobuf-kotlin-lite and
protobuf-javalite 4.36.2 (BSD-3-Clause via protobuf-parent) with their
Gradle-verified artifact and POM chain checksums, retire 4.36.1, record the
protobuf framework selection 4.36.2 and bind the updated input hashes.

The pinned Dokka profile seals gradle/libs.versions.toml, so add profile
dokka-2-2-0-r7 and record dokka-documentation-resources-r7 (supersedes r6):
only that input hash changes; all 14017 generated API members and every fixed
resource were regenerated locally and match the r6 oracle. Point
documentation_tools at r7 and regenerate the provenance NOTICE.

Refresh the contract-access package-graph hashes, classify the new files in
the provenance inventory, allowlist the receipt's four public SHA-256 rows and
the r7 profile's 60 unchanged public API page rows, and register both blocks
in the admission test.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@deku2026
deku2026 force-pushed the dependabot/gradle/com.google.protobuf-protobuf-kotlin-lite-4.36.2 branch from 2e90eaf to d829922 Compare September 26, 2026 05:48
@deku2026

Copy link
Copy Markdown
Contributor

Reviewed d829922: protobuf-kotlin-lite and protobuf-javalite 4.36.1 -> 4.36.2, with main merged in.

  • Locks and verification: the repository's Kotlin lock update (--write-locks --write-verification-metadata sha256, existing JDK 17) moved only these two coordinates and added the protobuf bom/parent/javalite/kotlin-lite 4.36.2 checksums; the Kotlin consumer test build carries the same lines and verified components.
  • Receipt: dependabot-2026-09-26-protobuf-4-36-2 admits both coordinates (BSD-3-Clause via protobuf-parent, POM chain evidence) and records the protobuf framework selection 4.36.2 (patch).
  • Documentation: the pinned Dokka profile seals gradle/libs.versions.toml, so dokka-2-2-0-r7 / dokka-documentation-resources-r7 supersede r6 with only that input hash changed; all 14017 generated API members and every fixed resource were regenerated locally and match. documentation_tools points at r7 and the provenance NOTICE was regenerated.
  • The contract-access hashes, provenance inventory, gitleaks allowlists (receipt rows and the r7 profile's 60 unchanged public API page rows) and the admission test were updated together.
    The admission, naming, provenance and documentation-profile checks, the admission tests and Prettier passed locally; the remaining local tooling-test errors reproduce identically on unmodified main (pinned SDK/Java/packed artifacts are CI-only). Every required check passed on this head. Approved.

@deku2026
deku2026 merged commit 4d9f1c1 into main Sep 26, 2026
12 checks passed
@dependabot
dependabot Bot deleted the dependabot/gradle/com.google.protobuf-protobuf-kotlin-lite-4.36.2 branch September 26, 2026 05:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant