From c8531e3dfabac49b8b492939bffb4f7da27e4f4c Mon Sep 17 00:00:00 2001
From: Simon Schrottner <simon.schrottner@dynatrace.com>
Date: Mon, 18 Nov 2024 15:13:53 +0100
Subject: [PATCH] fix: remove pinned protobuf version (#1067)

Signed-off-by: Simon Schrottner <simon.schrottner@dynatrace.com>
---
 providers/flagd/pom.xml | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/providers/flagd/pom.xml b/providers/flagd/pom.xml
index 279a1718b..867c78583 100644
--- a/providers/flagd/pom.xml
+++ b/providers/flagd/pom.xml
@@ -32,13 +32,6 @@
     </developers>
 
     <dependencies>
-        <!-- temporary to fix CVE-2024-7254 (see: https://github.com/advisories/GHSA-735f-pc8j-v9w8) - remove once this is in gRPC-java -->
-        <dependency>
-            <groupId>com.google.protobuf</groupId>
-            <artifactId>protobuf-java</artifactId>
-            <version>3.25.5</version>
-        </dependency>
-
         <!-- we inherent dev.openfeature.javasdk and the test dependencies from the parent pom -->
         <dependency>
             <groupId>io.grpc</groupId>