Skip to content

build(deps): bump protobuf from 3.25.8 to 4.34.1#770

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/protobuf-4.34.1
Open

build(deps): bump protobuf from 3.25.8 to 4.34.1#770
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/protobuf-4.34.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 23, 2026

Bumps protobuf from 3.25.8 to 4.34.1.
Updates com.google.protobuf:protobuf-java from 3.25.8 to 4.34.1

Commits

Updates com.google.protobuf:protobuf-java-util from 3.25.8 to 4.34.1

Updates com.google.protobuf:protoc from 3.25.8 to 4.34.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `protobuf` from 3.25.8 to 4.34.1.

Updates `com.google.protobuf:protobuf-java` from 3.25.8 to 4.34.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `com.google.protobuf:protobuf-java-util` from 3.25.8 to 4.34.1

Updates `com.google.protobuf:protoc` from 3.25.8 to 4.34.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

---
updated-dependencies:
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.34.1
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: com.google.protobuf:protobuf-java-util
  dependency-version: 4.34.1
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: com.google.protobuf:protoc
  dependency-version: 4.34.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 23, 2026
Copy link
Copy Markdown
Member

@bvolpato bvolpato left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Major breaking change — protobuf 3.x → 4.x migration required.

The Isthmus Native Image build fails with:

java.lang.IllegalStateException: Generated message class "io.substrait.proto.Plan" missing method "getVersion".
Caused by: java.lang.NoSuchMethodException: io.substrait.proto.Plan.getVersion()

Protobuf 4.x removed the getVersion() method from generated message classes (it was deprecated in 3.x). This is a well-known breaking change in the protobuf 3→4 migration. Additional changes likely needed:

  • Update any code calling getVersion() on protobuf messages
  • Review protobuf 4.x migration guide for other API removals
  • Test all downstream consumers for compatibility

Recommendation: This should be a deliberate migration effort, not a Dependabot bump. Consider closing this PR and creating a tracked issue for the protobuf 4.x migration with proper testing across the entire substrait-java module.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant