From 54e35424060d5c812120d6b89f05fbf5f3fb164e Mon Sep 17 00:00:00 2001
From: alan <252491900@qq.com>
Date: Tue, 18 Oct 2022 00:08:51 +0800
Subject: [PATCH] Bump up grpc to 1.50.0 to fix CVE-2022-3171 (#350)

---
 CHANGES.md            | 1 +
 dist-material/LICENSE | 2 +-
 pom.xml               | 6 +++---
 3 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/CHANGES.md b/CHANGES.md
index ed96930f7..20e358284 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -14,6 +14,7 @@ Release Notes.
 * Fix `Apache ShenYu` plugin traceId empty string value. 
 * Add plugin to support [brpc-java-3.x](https://github.com/baidu/starlight/tree/brpc-java-v3)
 * Update `compose-start-script.template` to make compatible with new version docker compose
+* Bump up grpc to 1.50.0 to fix CVE-2022-3171
 
 #### Documentation
 
diff --git a/dist-material/LICENSE b/dist-material/LICENSE
index f84d20b7d..c90e8e6c3 100755
--- a/dist-material/LICENSE
+++ b/dist-material/LICENSE
@@ -216,7 +216,7 @@ The following components are provided under the Apache License. See project link
 The text of each license is the standard Apache 2.0 license.
 
     raphw (byte-buddy) 1.12.13: http://bytebuddy.net/ , Apache 2.0
-    Google: grpc-java 1.44.0: https://github.com/grpc/grpc-java, Apache 2.0
+    Google: grpc-java 1.50.0: https://github.com/grpc/grpc-java, Apache 2.0
     Google: gson 2.8.9: https://github.com/google/gson , Apache 2.0
     Google: proto-google-common-protos 2.0.1: https://github.com/googleapis/googleapis , Apache 2.0
     Google: jsr305 3.0.2: http://central.maven.org/maven2/com/google/code/findbugs/jsr305/3.0.0/jsr305-3.0.0.pom , Apache 2.0
diff --git a/pom.xml b/pom.xml
index 942c1650e..6ff98534f 100755
--- a/pom.xml
+++ b/pom.xml
@@ -87,13 +87,13 @@
 
         <!-- core lib dependency -->
         <bytebuddy.version>1.12.13</bytebuddy.version>
-        <grpc.version>1.44.0</grpc.version>
+        <grpc.version>1.50.0</grpc.version>
         <netty.version>4.1.79.Final</netty.version>
         <gson.version>2.8.9</gson.version>
         <os-maven-plugin.version>1.6.2</os-maven-plugin.version>
         <protobuf-maven-plugin.version>0.6.1</protobuf-maven-plugin.version>
-        <com.google.protobuf.protoc.version>3.17.3</com.google.protobuf.protoc.version>
-        <protoc-gen-grpc-java.plugin.version>1.44.0</protoc-gen-grpc-java.plugin.version>
+        <com.google.protobuf.protoc.version>3.21.7</com.google.protobuf.protoc.version>
+        <protoc-gen-grpc-java.plugin.version>1.50.0</protoc-gen-grpc-java.plugin.version>
         <netty-tcnative-boringssl-static.version>2.0.48.Final</netty-tcnative-boringssl-static.version>
         <javax.annotation-api.version>1.3.2</javax.annotation-api.version>
         <objenesis.version>3.1</objenesis.version>