Bump com.squareup.wire:wire-runtime from 6.3.0 to 6.4.5

[dependabot]

Bumps com.squareup.wire:wire-runtime from 6.3.0 to 6.4.5.

Changelog

Sourced from com.squareup.wire:wire-runtime's changelog.

Version 6.4.5

2026-06-29

Common

• Security: Reject oversized lengths and fixed-width values that exceed the current reader limit in Java/Kotlin and Swift runtimes (#3635, [GHSA-9rm7-3qhh-h2mc][GHSA-9rm7-3qhh-h2mc] reported by Ta Duc Thien and Duc Anh Nguyen)

Version 6.4.4

2026-06-23

Common

• Security: Reject negative lengths when skipping groups in Swift, so crafted protobuf payloads throw ProtocolException instead of unchecked runtime exceptions (#3616, [GHSA-86wm-r4c5-2rc9][GHSA-86wm-r4c5-2rc9], reported by [tonghuaroot][tonghuaroot])

Version 6.4.0

2026-05-15

Common

• Security: Escape comment delimiters in generated documentation for Java, Kotlin, and Swift, preventing malicious proto documentation from injecting source code into generated files (#3600)

Version 7.0.0-alpha03

2026-05-14

Common

• Security: Reject negative lengths when skipping groups in Java/Kotlin, so crafted protobuf payloads throw ProtocolException instead of unchecked runtime exceptions (#3597, [GHSA-7xpr-hc2w-34m9][GHSA-7xpr-hc2w-34m9], reported by [TrekLaps][TrekLaps])

Commits

• efbbc29 Prepare for release 6.4.5.
• 082d5d8 Prevent overflow for 32-bit length integers
• ab7d1fb Prepare for release 6.4.1.
• 24043b6 Add negative-length check in skipGroup for the Swift runtime
• d980880 Prepare for release 6.4.0.
• c18d10b Safer sanitising in Java/Kotlin generators
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.