From 068a27c9450b4401121b32495f496edfd149b22c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Jun 2026 09:12:34 -0500 Subject: [PATCH 1/6] Bump dev.cel:cel from 0.13.0 to 0.13.1 (#482) --- gradle/libs.versions.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index b94b7d7b..0ebd9f29 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -1,7 +1,7 @@ [versions] assertj = "3.27.7" buf = "1.70.0" -cel = "0.13.0" +cel = "0.13.1" error-prone = "2.49.0" junit = "5.14.4" maven-publish = "0.36.0" From ea1944ed874a1d18d9513d7f4ab5c7bf769a8441 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Jun 2026 09:13:16 -0500 Subject: [PATCH 2/6] Bump com.google.protobuf:protobuf-java from 4.35.0 to 4.35.1 (#486) --- gradle/libs.versions.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index 0ebd9f29..6ac141b9 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -5,7 +5,7 @@ cel = "0.13.1" error-prone = "2.49.0" junit = "5.14.4" maven-publish = "0.36.0" -protobuf = "4.35.0" +protobuf = "4.35.1" re2j = "1.8" [libraries] From d17c93544e8b4d1575e1b8ecb7fed336e628f027 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Jun 2026 10:56:22 -0500 Subject: [PATCH 3/6] Bump gradle/actions from 6.1.0 to 6.2.0 (#485) Bump gradle/actions from 6.1.0 to 6.2.0 (#485) --- .github/workflows/ci.yaml | 2 +- .github/workflows/conformance.yaml | 2 +- .github/workflows/release.yaml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 297164e1..71316927 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -36,7 +36,7 @@ jobs: setup_only: true token: ${{ secrets.BUF_TOKEN }} - name: Validate Gradle Wrapper - uses: gradle/actions/wrapper-validation@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0 + uses: gradle/actions/wrapper-validation@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 - name: Lint run: make lint - name: Generate diff --git a/.github/workflows/conformance.yaml b/.github/workflows/conformance.yaml index 1995fd67..cb19af9b 100644 --- a/.github/workflows/conformance.yaml +++ b/.github/workflows/conformance.yaml @@ -36,6 +36,6 @@ jobs: setup_only: true token: ${{ secrets.BUF_TOKEN }} - name: Validate Gradle Wrapper - uses: gradle/actions/wrapper-validation@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0 + uses: gradle/actions/wrapper-validation@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 - name: Test conformance run: make conformance diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 0890019f..4f1ca5ab 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -33,7 +33,7 @@ jobs: setup_only: true token: ${{ secrets.BUF_TOKEN }} - name: Validate Gradle Wrapper - uses: gradle/actions/wrapper-validation@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0 + uses: gradle/actions/wrapper-validation@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 - name: Configure GPG signing & publish env: GPG_KEY: ${{ secrets.GPG_KEY }} From 9539d6156481a5b8ca1e9c220027e55be99e4be5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Jun 2026 10:57:22 -0500 Subject: [PATCH 4/6] Bump error-prone from 2.49.0 to 2.50.0 (#484) Bump error-prone from 2.49.0 to 2.50.0 (#484) --- gradle/libs.versions.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index 6ac141b9..99101674 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -2,7 +2,7 @@ assertj = "3.27.7" buf = "1.70.0" cel = "0.13.1" -error-prone = "2.49.0" +error-prone = "2.50.0" junit = "5.14.4" maven-publish = "0.36.0" protobuf = "4.35.1" From 85b9163041b67ada170b73e028b1fd24b7903de2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Jun 2026 10:58:07 -0500 Subject: [PATCH 5/6] Bump io.grpc:grpc-protobuf from 1.81.0 to 1.82.0 (#483) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [io.grpc:grpc-protobuf](https://github.com/grpc/grpc-java) from 1.81.0 to 1.82.0.
Release notes

Sourced from io.grpc:grpc-protobuf's releases.

v1.82.0

This release drops support for Bazel 7. It may still run, but we are no longer testing it. We are testing Bazel 8 and 9.

We are anticipating requiring Netty 4.2 in the next release. Please file an issue if you still need Netty 4.1 support.

Behavior Changes

Improvements

Bug Fixes

New Features

Dependencies

Thanks to

@​becomeStar
@​bengtsson1-flir
@​jnowjack-lucidchart
@​Kainsin
@​kenkangxgwe

... (truncated)

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=io.grpc:grpc-protobuf&package-manager=gradle&previous-version=1.81.0&new-version=1.82.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- gradle/libs.versions.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index 99101674..07d7c5e8 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -14,7 +14,7 @@ buf = { module = "build.buf:buf", version.ref = "buf" } cel = { module = "dev.cel:cel", version.ref = "cel" } errorprone-annotations = { module = "com.google.errorprone:error_prone_annotations", version.ref = "error-prone" } errorprone-core = { module = "com.google.errorprone:error_prone_core", version.ref = "error-prone" } -grpc-protobuf = { module = "io.grpc:grpc-protobuf", version = "1.81.0" } +grpc-protobuf = { module = "io.grpc:grpc-protobuf", version = "1.82.0" } jspecify = { module ="org.jspecify:jspecify", version = "1.0.0" } junit-bom = { module = "org.junit:junit-bom", version.ref = "junit" } maven-plugin = { module = "com.vanniktech:gradle-maven-publish-plugin", version.ref = "maven-publish" } From a8be8064ff18320f27fbe2efe33b3f3c189d93cf Mon Sep 17 00:00:00 2001 From: Andrew Parmet Date: Sun, 14 Jun 2026 10:42:51 -0400 Subject: [PATCH 6/6] Use the CEL planner runtime Wire the compiler and runtime separately via CelCompilerImpl + CelRuntimeImpl combined through CelFactory.combine, instead of CelFactory.standardCelBuilder. plannerCelBuilder rejects setStandardEnvironmentEnabled(false) on the runtime side, which ValidateLibrary needs to drop stdlib matches in favor of CustomOverload's caching replacement (cel-java#1038), so the two sides are configured independently and combined. CelRuntimeImpl requires enableHeterogeneousNumericComparisons(true); the rest of the options stay at current() defaults. Pin cel to 0.13.1. --- .../buf/protovalidate/ValidateLibrary.java | 51 ++++++++++++------- 1 file changed, 34 insertions(+), 17 deletions(-) diff --git a/src/main/java/build/buf/protovalidate/ValidateLibrary.java b/src/main/java/build/buf/protovalidate/ValidateLibrary.java index 6b032450..9078e835 100644 --- a/src/main/java/build/buf/protovalidate/ValidateLibrary.java +++ b/src/main/java/build/buf/protovalidate/ValidateLibrary.java @@ -18,15 +18,21 @@ import dev.cel.bundle.Cel; import dev.cel.bundle.CelFactory; import dev.cel.checker.CelCheckerBuilder; +import dev.cel.checker.CelCheckerLegacyImpl; import dev.cel.checker.CelStandardDeclarations; import dev.cel.common.CelOptions; import dev.cel.common.CelVarDecl; import dev.cel.common.types.SimpleType; +import dev.cel.compiler.CelCompiler; +import dev.cel.compiler.CelCompilerImpl; import dev.cel.compiler.CelCompilerLibrary; import dev.cel.extensions.CelExtensions; import dev.cel.parser.CelParserBuilder; +import dev.cel.parser.CelParserImpl; import dev.cel.parser.CelStandardMacro; +import dev.cel.runtime.CelRuntime; import dev.cel.runtime.CelRuntimeBuilder; +import dev.cel.runtime.CelRuntimeImpl; import dev.cel.runtime.CelRuntimeLibrary; import dev.cel.runtime.CelStandardFunctions; import java.util.concurrent.ConcurrentHashMap; @@ -38,7 +44,8 @@ */ final class ValidateLibrary implements CelCompilerLibrary, CelRuntimeLibrary { - private static final CelOptions CEL_OPTIONS = CelOptions.DEFAULT; + private static final CelOptions CEL_OPTIONS = + CelOptions.current().enableHeterogeneousNumericComparisons(true).build(); private final ConcurrentMap patternCache = new ConcurrentHashMap<>(); @@ -47,22 +54,32 @@ final class ValidateLibrary implements CelCompilerLibrary, CelRuntimeLibrary { static Cel newCel() { ValidateLibrary validateLibrary = new ValidateLibrary(); - return CelFactory.standardCelBuilder() - .setOptions(CEL_OPTIONS) - // Drop stdlib matches; CustomOverload provides a caching replacement. - // Ref: https://github.com/google/cel-java/issues/1038 - .setStandardEnvironmentEnabled(false) - .setStandardDeclarations( - CelStandardDeclarations.newBuilder() - .excludeFunctions(CelStandardDeclarations.StandardFunction.MATCHES) - .build()) - .setStandardFunctions( - CelStandardFunctions.newBuilder() - .excludeFunctions(CelStandardFunctions.StandardFunction.MATCHES) - .build()) - .addCompilerLibraries(validateLibrary, CelExtensions.strings()) - .addRuntimeLibraries(validateLibrary, CelExtensions.strings()) - .build(); + // Wired by hand instead of via plannerCelBuilder(): CelRuntimeImpl directs callers to subset + // stdlib via setStandardFunctions rather than setStandardEnvironmentEnabled, so the runtime + // does that while the checker uses setStandardEnvironmentEnabled(false). + CelCompiler compiler = + CelCompilerImpl.newBuilder( + CelParserImpl.newBuilder(), + CelCheckerLegacyImpl.newBuilder().setStandardEnvironmentEnabled(false)) + .setOptions(CEL_OPTIONS) + // Drop stdlib matches; CustomOverload provides a caching replacement. + // Ref: https://github.com/google/cel-java/issues/1038 + .setStandardDeclarations( + CelStandardDeclarations.newBuilder() + .excludeFunctions(CelStandardDeclarations.StandardFunction.MATCHES) + .build()) + .addLibraries(validateLibrary, CelExtensions.strings()) + .build(); + CelRuntime runtime = + CelRuntimeImpl.newBuilder() + .setOptions(CEL_OPTIONS) + .setStandardFunctions( + CelStandardFunctions.newBuilder() + .excludeFunctions(CelStandardFunctions.StandardFunction.MATCHES) + .build()) + .addLibraries(validateLibrary, CelExtensions.strings()) + .build(); + return CelFactory.combine(compiler, runtime); } @Override