tree cebdf3b696aa04d45104e3192f173d4764ced24d
parent 15371720ae0c40ffc97b74c871d1b38851ef6410
author Chi Wang <chiwang@google.com> 1665596974 +0200
committer GitHub <noreply@github.com> 1665596974 -0700
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsBcBAABCAAQBQJjRv4uCRBK7hj4Ov3rIwAAr3AIAJ50yUnIpQVm9T1UfEk/W2UA
 qt/lGsXQqqnSagh6WkiWwG/ywitrFZGQuEKcGX+ERzB13+LgshpZUoazDpCHKsum
 KFBHPOkSJatk7Be9gDBRDMuhyVxeYJ3Ymz8pSyV16Cyhix8AphRV2cKisBGVDUhM
 Cmi4wgB3TkE7YlaMdGJlwqIgrEXrqov1ao6ZJid7M21ceEa43Ykylv+2OFn0p8Pp
 XdP8+toljphrDarK1gYLWBnZ/rMj68FZ/nEzmqK5tHIzkj4ZYQbbIdWOk1yo9h/Z
 H8Zriuz2lN2+nRFneFQOg5UmwIjZdSx35IMLslcIxWK4PK2J5Hf4zThkmWJkzQM=
 =31fI
 -----END PGP SIGNATURE-----
 

[4.2.3] Update GrpcRemoteDownloader to only include relevant headers. (#16450) (#16459)

* Update GrpcRemoteDownloader to only include relevant headers. (#16450)

Fixes https://github.com/bazelbuild/bazel/security/advisories/GHSA-mxr8-q875-rhwq.

RELNOTES[INC]: GrpcRemoteDownloader only includes relevant headers instead of sending all credentials.

Closes #16439.

PiperOrigin-RevId: 480069164
Change-Id: I49950311c04d1997d26832431d531a9036efdb18

Co-authored-by: kshyanashree <109167932+kshyanashree@users.noreply.github.com>

* Use bazel 4.2.2 in Bazel CI

Co-authored-by: kshyanashree <109167932+kshyanashree@users.noreply.github.com>