Update the Google Protobuf library

[david-livefront]

🎟️ Tracking

N/A

📔 Objective

This PR updates the Google Protobuf library.

Release Notes!

⏰ Reminders before review

• Contributor guidelines followed
• All formatters and local linters executed and passed
• Written new unit and / or integration tests where applicable
• Protected functional changes with optionality (feature flags)
• Used internationalization (i18n) for all UI strings
• CI builds passed
• Communicated to DevOps any deployment requirements
• Updated any necessary documentation (Confluence, contributing docs) or informed the documentation team

🦮 Reviewer guidelines

• 👍 (:+1:) or similar for great changes
• 📝 (:memo:) or ℹ️ (:information_source:) for notes or general info
• ❓ (:question:) for questions
• 🤔 (:thinking:) or 💭 (:thought_balloon:) for more open inquiry that's not quite a confirmed issue and could potentially benefit from discussion
• 🎨 (:art:) for suggestions / improvements
• ❌ (:x:) or ⚠️ (:warning:) for more significant problems or concerns needing attention
• 🌱 (:seedling:) or ♻️ (:recycle:) for future improvements or indications of technical debt
• ⛏ (:pick:) for minor or nitpick changes

[claude]

Claude finished @david-livefront's task —— View job

---

Review of PR #6095: Update Google Protobuf Library

Summary of Changes

This PR updates the Google Protobuf library from 4.32.1 to 4.33.0 (a minor version bump). The change affects:

• gradle/libs.versions.toml:39 - version reference
• Used by both protobuf-javalite runtime library and protoc compiler in the :authenticator module

---

Critical Issues

None found. ✓

---

Suggested Improvements

📝 Documentation

Title Typo: The PR title contains a typo: "linrary" should be "library"

• Location: PR title
• Impact: Minor presentation issue

ℹ️ Release Notes Clarification

The PR description states "Release Notes!" but doesn't include actual release notes or a summary of what changed in Protobuf 4.33.0. Consider adding:

• Key changes in the new version
• Link to official release notes: https://github.com/protocolbuffers/protobuf/releases/tag/v4.33.0
• Any relevant security fixes or performance improvements

This helps reviewers understand the motivation beyond routine maintenance.

---

Analysis

Protobuf Usage in Codebase

The Protobuf library is used exclusively in the :authenticator module:

Files affected:

• authenticator/build.gradle.kts:221 - google.protobuf.javalite runtime dependency
• authenticator/build.gradle.kts:249 - protoc compiler artifact reference
• authenticator/src/main/proto/google_authenticator.proto - Proto definition for Google Authenticator import functionality

Usage scope:

• Single proto file using proto3 syntax
• Generates Java classes for parsing Google Authenticator migration payloads
• Uses JavaLite variant (optimized for mobile)
• No custom options that would be version-sensitive

Compatibility assessment:

• Proto3 syntax is stable across minor versions
• JavaLite API is backward compatible
• No use of experimental features
• Minor version bump (4.32.x → 4.33.0) typically maintains full compatibility

CI Status

Current CI checks:

• ✅ Lint workflow: Passed
• ⏳ Test: In progress
• ⏳ Scan Pull Requests: In progress

The change is low-risk since it only updates a dependency version. Passing lint and tests should be sufficient validation.

---

Good Practices Observed

✓ Proper version catalog management in libs.versions.toml
✓ Comment included to ensure Renovate tracks the protoc dependency
✓ Clean, isolated dependency update

---

Recommendation

Approve after:

1. Fixing the typo in the PR title
2. (Optional) Adding brief release notes or motivation for the update
3. Verifying CI tests pass

The technical change itself is sound and low-risk. This is a straightforward dependency maintenance update with no architectural or functional implications.

---

[github-actions]

Checkmarx One – Scan Summary & Details – 7129d0b2-c8af-42b0-b860-64f73b0f9db3

Great job! No new security vulnerabilities introduced in this pull request

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 84.81%. Comparing base (290f594) to head (69540a3).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #6095   +/-   ##
=======================================
  Coverage   84.81%   84.81%           
=======================================
  Files         721      721           
  Lines       52812    52812           
  Branches     7669     7669           
=======================================
  Hits        44791    44791           
  Misses       5329     5329           
  Partials     2692     2692           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[david-livefront]

Thanks @SaintPatrck