Describe the bug
The current dependency on com.linecorp.armeria:armeria-grpc:1.29.0 introduces transitive dependency on com.google.protobuf:protobuf-java:3.25.1. This version is subject to CVE-2024-7254.

To Reproduce
Run ./gradlew allDeps and grep for protobuf-java.

Expected behavior

• Upgrade to latest library versions, which fix the CVE.
• Backport to 2.12.0.

Environment (please complete the following information):

• Version: current main + 2.12.0 and before

Additional context
I would have expected the automated dependency check to find this issue and provide an appropriate PR. It would be a good idea to investigate, why this did not happen.