Bump com.squareup.wire:wire-runtime-jvm from 6.4.1 to 6.4.5

[dependabot]

Bumps com.squareup.wire:wire-runtime-jvm from 6.4.1 to 6.4.5.

Changelog

Sourced from com.squareup.wire:wire-runtime-jvm's changelog.

Version 6.4.5

2026-06-29

Common

• Security: Reject oversized lengths and fixed-width values that exceed the current reader limit in Java/Kotlin and Swift runtimes (#3635, [GHSA-9rm7-3qhh-h2mc][GHSA-9rm7-3qhh-h2mc] reported by Ta Duc Thien and Duc Anh Nguyen)

Version 6.4.4

2026-06-23

Common

• Security: Reject negative lengths when skipping groups in Swift, so crafted protobuf payloads throw ProtocolException instead of unchecked runtime exceptions (#3616, [GHSA-86wm-r4c5-2rc9][GHSA-86wm-r4c5-2rc9], reported by [tonghuaroot][tonghuaroot])

Version 6.4.0

2026-05-15

Common

• Security: Escape comment delimiters in generated documentation for Java, Kotlin, and Swift, preventing malicious proto documentation from injecting source code into generated files (#3600)

Version 7.0.0-alpha03

2026-05-14

Common

• Security: Reject negative lengths when skipping groups in Java/Kotlin, so crafted protobuf payloads throw ProtocolException instead of unchecked runtime exceptions (#3597, [GHSA-7xpr-hc2w-34m9][GHSA-7xpr-hc2w-34m9], reported by [TrekLaps][TrekLaps])

Version 6.3.0

2026-05-13

Common

... (truncated)

Commits

• efbbc29 Prepare for release 6.4.5.
• 082d5d8 Prevent overflow for 32-bit length integers
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Code Scan - Alert(s) found with threshold matching severity high

Results

• critical: 0
• high: 4
• medium: 0
• low: 0

Code Scan Report can be found here

Allowlist

Use the allowlist if you want to ignore vulnerabilities that do not affect the repository.
See the Code Scan documentation on how to use allowlist.