From 9e9ea53e545ec60c38ff67db8796bad0584e5fca Mon Sep 17 00:00:00 2001
From: Joe Wang <joewa@google.com>
Date: Thu, 22 Jan 2026 15:30:19 -0500
Subject: [PATCH 1/2] chore: update protobuf-java

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 0ec071678..dd141d4db 100644
--- a/pom.xml
+++ b/pom.xml
@@ -553,7 +553,7 @@
     <project.jsr305.version>3.0.2</project.jsr305.version>
     <project.gson.version>2.11.0</project.gson.version>
     <project.jackson-core2.version>2.18.2</project.jackson-core2.version>
-    <project.protobuf-java.version>3.21.12</project.protobuf-java.version>
+    <project.protobuf-java.version>4.33.4</project.protobuf-java.version>
 	<!-- We use the Java 8 compatible version due to https://www.cvedetails.com/cve/CVE-2023-2976/ -->
     <project.guava.version>33.4.8-android</project.guava.version>
     <project.xpp3.version>1.1.4c</project.xpp3.version>

From ba708a239ab3eaf173e6bc6d7599f053efa78529 Mon Sep 17 00:00:00 2001
From: Joe Wang <joewa@google.com>
Date: Thu, 22 Jan 2026 15:43:11 -0500
Subject: [PATCH 2/2] update

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index dd141d4db..c3a1dce0c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -553,7 +553,7 @@
     <project.jsr305.version>3.0.2</project.jsr305.version>
     <project.gson.version>2.11.0</project.gson.version>
     <project.jackson-core2.version>2.18.2</project.jackson-core2.version>
-    <project.protobuf-java.version>4.33.4</project.protobuf-java.version>
+    <project.protobuf-java.version>4.33.2</project.protobuf-java.version>
 	<!-- We use the Java 8 compatible version due to https://www.cvedetails.com/cve/CVE-2023-2976/ -->
     <project.guava.version>33.4.8-android</project.guava.version>
     <project.xpp3.version>1.1.4c</project.xpp3.version>