googleapis / google-auth-library-java

Open source Auth client library for Java
https://developers.google.com/identity
BSD 3-Clause "New" or "Revised" License
409 stars 222 forks source link

chore(deps): update dependency com.google.guava:guava to v33 #1398

Closed renovate-bot closed 4 months ago

renovate-bot commented 5 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
com.google.guava:guava 32.0.0-android -> 33.2.0-android age adoption passing confidence

Release Notes

google/guava (com.google.guava:guava) ### [`v33.1.0`](https://togithub.com/google/guava/releases/tag/v33.1.0): 33.1.0 [Compare Source](https://togithub.com/google/guava/compare/v33.0.0...v33.1.0) ##### Request for Android users If you know of Guava Android users who have not yet upgraded to at least the previous release [33.0.0](https://togithub.com/google/guava/releases/tag/v33.0.0), please encourage them to do so. Starting with that version, we are experimenting with including Java 8+ APIs in `guava-android`. Before we commit to adding such APIs, we want as much testing as we can get: If we later expose a set of Java 8+ APIs and then discover that they break users, we won't want to remove them, as the removal would break users, too. ##### Maven ```xml com.google.guava guava 33.1.0-jre 33.1.0-android ``` ##### Jar files - [33.1.0-jre.jar](https://repo1.maven.org/maven2/com/google/guava/guava/33.1.0-jre/guava-33.1.0-jre.jar) - [33.1.0-android.jar](https://repo1.maven.org/maven2/com/google/guava/guava/33.1.0-android/guava-33.1.0-android.jar) Guava requires [one runtime dependency](https://togithub.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies), which you can download here: - [failureaccess-1.0.1.jar](https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.1/failureaccess-1.0.1.jar) ##### Javadoc - [33.1.0-jre](http://guava.dev/releases/33.1.0-jre/api/docs/) - [33.1.0-android](http://guava.dev/releases/33.1.0-android/api/docs/) ##### JDiff - [33.1.0-jre vs. 33.0.0-jre](http://guava.dev/releases/33.1.0-jre/api/diffs/) - [33.1.0-android vs. 33.0.0-android](http://guava.dev/releases/33.1.0-android/api/diffs/) - [33.1.0-android vs. 33.1.0-jre](http://guava.dev/releases/33.1.0-android/api/androiddiffs/) ##### Changelog - Updated our Error Prone dependency to 2.26.1, which includes a JPMS-ready jar of annotations. If you use the Error Prone annotations in a modular build of your own code, you may need to [add a `requires` line for them](https://togithub.com/google/error-prone/releases/tag/v2.26.1). ([`d48c6df`](https://togithub.com/google/guava/commit/d48c6dfbb8), [`c6e91c4`](https://togithub.com/google/guava/commit/c6e91c498ced26631029d1bdfdb9154d4a217368)) - `base`: Added a `Duration` overload for `Suppliers.memoizeWithExpiration`. ([`76e46ec`](https://togithub.com/google/guava/commit/76e46ec35b)) - `base`: Deprecated the remaining two overloads of `Throwables.propagateIfPossible`. They won't be deleted, but we recommend migrating off them. ([`cf86414`](https://togithub.com/google/guava/commit/cf86414a87)) - `cache`: Fixed a bug that could cause [false "recursive load" reports during refresh](https://togithub.com/google/guava/pull/6851#issuecomment-1931276822). ([`0e1aebf`](https://togithub.com/google/guava/commit/0e1aebf73e)) - `graph`: Changed the return types of `transitiveClosure()` and `reachableNodes()` to `Immutable*` types. `reachableNodes()` already returned an immutable object (even though that was not reflected in the declared return type); `transitiveClosure()` used to return a mutable object. The old signatures remain available, so this change does not break binary compatibility. ([`09e655f`](https://togithub.com/google/guava/commit/09e655f6c1)) - `graph`: Changed the behavior of views returned by graph accessor methods that take a graph element as input: They now throw `IllegalStateException` when that element is removed from the graph. ([`8dca776`](https://togithub.com/google/guava/commit/8dca776341)) - `hash`: Optimized `Checksum`-based hash functions for Java 9+. ([`afb35a5`](https://togithub.com/google/guava/commit/afb35a5d1b)) - `testing`: Exposed `FakeTicker` `Duration` methods to Android users. ([`f346bbb`](https://togithub.com/google/guava/commit/f346bbb6a7)) - `util.concurrent`: Deprecated the constructors of `UncheckedExecutionException` and `ExecutionError` that don't accept a cause. We won't remove these constructors, but we recommend migrating off them, as users of those classes often assume that instances will contain a cause. ([`1bb3c43`](https://togithub.com/google/guava/commit/1bb3c4386b)) - `util.concurrent`: Improved the correctness of racy accesses for J2ObjC users. ([`d3232b7`](https://togithub.com/google/guava/commit/d3232b71ce)) ### [`v33.0.0`](https://togithub.com/google/guava/releases/tag/v33.0.0): 33.0.0 [Compare Source](https://togithub.com/google/guava/compare/v32.1.3...v33.0.0) ##### Maven ```xml com.google.guava guava 33.0.0-jre 33.0.0-android ``` ##### Jar files - [33.0.0-jre.jar](https://repo1.maven.org/maven2/com/google/guava/guava/33.0.0-jre/guava-33.0.0-jre.jar) - [33.0.0-android.jar](https://repo1.maven.org/maven2/com/google/guava/guava/33.0.0-android/guava-33.0.0-android.jar) Guava requires [one runtime dependency](https://togithub.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies), which you can download here: - [failureaccess-1.0.1.jar](https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.1/failureaccess-1.0.1.jar) ##### Javadoc - [33.0.0-jre](http://guava.dev/releases/33.0.0-jre/api/docs/) - [33.0.0-android](http://guava.dev/releases/33.0.0-android/api/docs/) ##### JDiff - [33.0.0-jre vs. 32.1.3-jre](http://guava.dev/releases/33.0.0-jre/api/diffs/) - [33.0.0-android vs. 32.1.3-android](http://guava.dev/releases/33.0.0-android/api/diffs/) - [33.0.0-android vs. 33.0.0-jre](http://guava.dev/releases/33.0.0-android/api/androiddiffs/) ##### Changelog - This version of `guava-android` contains some package-private methods whose signature includes the Java 8 `Collector` API. This is a test to identify any problems before we expose those methods publicly to users. Please report any problems that you encounter. ([`73dbf7e`](https://togithub.com/google/guava/commit/73dbf7ef26)) - Changed various classes to catch `Exception` instead of `RuntimeException` even when only `RuntimeException` is theoretically possible. This can help code that throws undeclared exceptions, as some bytecode rewriters (e.g., Robolectric) and languages (e.g., Kotlin) do. ([`c294c23`](https://togithub.com/google/guava/commit/c294c23760), [`747924e`](https://togithub.com/google/guava/commit/747924e), [`b2baf48`](https://togithub.com/google/guava/commit/b2baf48)) - Added an `Automatic-Module-Name` to `failureaccess`, [Guava's one strong runtime dependency](https://togithub.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies). ([`280b5d2`](https://togithub.com/google/guava/commit/280b5d2f60)) - `reflect`: In `guava-android` only, removed `Invokable.getAnnotatedReturnType()` and `Parameter.getAnnotatedType()`. These methods never worked in an Android VM, and to reflect that, they were born `@Deprecated`, `@Beta`, and `@DoNotCall`. They're now preventing us from rolling out some new Android compatibility testing. This is **the only binary-incompatible change in this release**, and it should have no effect in practice. Still, we bump the major version number to follow Semantic Versioning. ([`045cd84`](https://togithub.com/google/guava/commit/045cd8428f)) - `util.concurrent`: Changed our implementations to avoid eagerly initializing loggers during class loading. This can help performance, especially under Android. ([`4fe1df5`](https://togithub.com/google/guava/commit/4fe1df56bd)) ### [`v32.1.3`](https://togithub.com/google/guava/releases/tag/v32.1.3): 32.1.3 [Compare Source](https://togithub.com/google/guava/compare/v32.1.2...v32.1.3) ##### Maven ```xml com.google.guava guava 32.1.3-jre 32.1.3-android ``` ##### Jar files - [32.1.3-jre.jar](https://repo1.maven.org/maven2/com/google/guava/guava/32.1.3-jre/guava-32.1.3-jre.jar) - [32.1.3-android.jar](https://repo1.maven.org/maven2/com/google/guava/guava/32.1.3-android/guava-32.1.3-android.jar) Guava requires [one runtime dependency](https://togithub.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies), which you can download here: - [failureaccess-1.0.1.jar](https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.1/failureaccess-1.0.1.jar) ##### Javadoc - [32.1.3-jre](http://guava.dev/releases/32.1.3-jre/api/docs/) - [32.1.3-android](http://guava.dev/releases/32.1.3-android/api/docs/) ##### JDiff - [32.1.3-jre vs. 32.1.2-jre](http://guava.dev/releases/32.1.3-jre/api/diffs/) - [32.1.3-android vs. 32.1.2-android](http://guava.dev/releases/32.1.3-android/api/diffs/) - [32.1.3-android vs. 32.1.3-jre](http://guava.dev/releases/32.1.3-android/api/androiddiffs/) ##### Changelog - Changed Gradle Metadata to include dependency versions directly. This may address ["Could not find `some-dependency`" errors](https://togithub.com/google/guava/issues/6657) that some users have reported (which might be a result of users' excluding `guava-parent`). ([`c6d35cf`](https://togithub.com/google/guava/commit/c6d35cf1a5)) - `collect`: Changed `Multisets.unmodifiableMultiset(set).removeIf(predicate)` to throw an exception always, even if nothing matches `predicate`. ([`61dbccf`](https://togithub.com/google/guava/commit/61dbccfda3)) - `graph`: Fixed the behavior of `Graph`/`ValueGraph` views for a node when that node is removed from the graph. ([`9507996`](https://togithub.com/google/guava/commit/950799691c)) - `io`: Fixed `Files.createTempDir` and `FileBackedOutputStream` under [Windows *services*, a rare use case](https://togithub.com/google/guava/issues/6634). (The fix actually covers only Java 9+ because Java 8 would require an additional approach. Let us know if you need support under Java 8.) ([`f87f68c`](https://togithub.com/google/guava/commit/f87f68cd3e)) - `net`: Made `MediaType.parse` allow and skip over whitespace around the `/` and `=` separator tokens in addition to the `;` separator, for which it was already being allowed. ([`2786f83`](https://togithub.com/google/guava/commit/2786f83291)) - `util.concurrent`: Tweaked `Futures.getChecked` constructor-selection behavior: The method continues to prefer to call constructors with a `String` parameter, but now it breaks ties based on whether the constructor has a `Throwable` parameter. Beyond that, the choice of constructor remains undefined. (For this and other reasons, we discourage the use of `getChecked`.) ([`59cfb22`](https://togithub.com/google/guava/commit/59cfb2267a)) ### [`v32.1.2`](https://togithub.com/google/guava/releases/tag/v32.1.2): 32.1.2 [Compare Source](https://togithub.com/google/guava/compare/v32.1.1...v32.1.2) ##### Maven ```xml com.google.guava guava 32.1.2-jre 32.1.2-android ``` ##### Jar files - [32.1.2-jre.jar](https://repo1.maven.org/maven2/com/google/guava/guava/32.1.2-jre/guava-32.1.2-jre.jar) - [32.1.2-android.jar](https://repo1.maven.org/maven2/com/google/guava/guava/32.1.2-android/guava-32.1.2-android.jar) Guava requires [one runtime dependency](https://togithub.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies), which you can download here: - [failureaccess-1.0.1.jar](https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.1/failureaccess-1.0.1.jar) ##### Javadoc - [32.1.2-jre](http://guava.dev/releases/32.1.2-jre/api/docs/) - [32.1.2-android](http://guava.dev/releases/32.1.2-android/api/docs/) ##### JDiff - [32.1.2-jre vs. 32.1.1-jre](http://guava.dev/releases/32.1.2-jre/api/diffs/) - [32.1.2-android vs. 32.1.1-android](http://guava.dev/releases/32.1.2-android/api/diffs/) - [32.1.2-android vs. 32.1.2-jre](http://guava.dev/releases/32.1.2-android/api/androiddiffs/) ##### Changelog - [Removed](https://togithub.com/google/guava/issues/6642#issuecomment-1656201382) the section of our Gradle metadata that caused Gradle to report conflicts with `listenablefuture`. ([`9ed0fa6`](https://togithub.com/google/guava/commit/9ed0fa65ab)) - Changed our Maven project to avoid [affecting which version of Mockito our Gradle users see](https://togithub.com/google/guava/issues/6654). ([`71a16d5`](https://togithub.com/google/guava/commit/71a16d5a74)) - `collect`: Under J2CL, exposed `ImmutableList` and `ImmutableSet` methods `copyOf` and `of` for JavaScript usage. ([`b41968f`](https://togithub.com/google/guava/commit/b41968f5f2)) - `net`: Optimized `InternetDomainName` construction. ([`3a1d18f`](https://togithub.com/google/guava/commit/3a1d18fbefa10218988a0fbbb6e1fada012397bf), [`eaa62eb`](https://togithub.com/google/guava/commit/eaa62eb09548a6f1b7a757e21d8852724b631cab)) ### [`v32.1.1`](https://togithub.com/google/guava/releases/tag/v32.1.1): 32.1.1 [Compare Source](https://togithub.com/google/guava/compare/v32.1.0...v32.1.1) ##### Maven ```xml com.google.guava guava 32.1.1-jre 32.1.1-android ``` ##### Jar files - [32.1.1-jre.jar](https://repo1.maven.org/maven2/com/google/guava/guava/32.1.1-jre/guava-32.1.1-jre.jar) - [32.1.1-android.jar](https://repo1.maven.org/maven2/com/google/guava/guava/32.1.1-android/guava-32.1.1-android.jar) Guava requires [one runtime dependency](https://togithub.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies), which you can download here: - [failureaccess-1.0.1.jar](https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.1/failureaccess-1.0.1.jar) ##### Javadoc - [32.1.1-jre](http://guava.dev/releases/32.1.1-jre/api/docs/) - [32.1.1-android](http://guava.dev/releases/32.1.1-android/api/docs/) ##### JDiff - [32.1.1-jre vs. 32.1.0-jre](http://guava.dev/releases/32.1.1-jre/api/diffs/) - [32.1.1-android vs. 32.1.0-android](http://guava.dev/releases/32.1.1-android/api/diffs/) - [32.1.1-android vs. 32.1.1-jre](http://guava.dev/releases/32.1.1-android/api/androiddiffs/) ##### Changelog - Fixed our broken Gradle metadata from [32.1.0](https://togithub.com/google/guava/releases/tag/v32.1.0). Sorry again for the trouble. If you use Gradle, please still read [the release notes from that version](https://togithub.com/google/guava/releases/tag/v32.1.0): You may still see errors from the new checking that the metadata enables, and the release notes discuss how to fix those errors. ### [`v32.1.0`](https://togithub.com/google/guava/releases/tag/v32.1.0): 32.1.0 [Compare Source](https://togithub.com/google/guava/compare/v32.0.1...v32.1.0) ##### Warning: Our Gradle-metadata version numbers are broken. Read these notes, but upgrade straight to [32.1.2](https://togithub.com/google/guava/releases/tag/v32.1.2). We made a mistake in our release script, so the new Gradle metadata (discussed below) has [broken version numbers](https://togithub.com/google/guava/issues/6612) in 32.1.0. Sorry for the trouble and for the need for another quick patch release. We recommend upgrading straight to release [32.1.2](https://togithub.com/google/guava/releases/tag/v32.1.2), especially if you use Gradle or if you publish a library whose users might use Gradle. Still, read the release notes below if you use Gradle, since the fixed Gradle metadata in 32.1.2 may still require action on your part. ##### Maven ```xml com.google.guava guava 32.1.0-jre 32.1.0-android ``` ##### Jar files - [32.1.0-jre.jar](https://repo1.maven.org/maven2/com/google/guava/guava/32.1.0-jre/guava-32.1.0-jre.jar) - [32.1.0-android.jar](https://repo1.maven.org/maven2/com/google/guava/guava/32.1.0-android/guava-32.1.0-android.jar) Guava requires [one runtime dependency](https://togithub.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies), which you can download here: - [failureaccess-1.0.1.jar](https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.1/failureaccess-1.0.1.jar) ##### Javadoc - [32.1.0-jre](http://guava.dev/releases/32.1.0-jre/api/docs/) - [32.1.0-android](http://guava.dev/releases/32.1.0-android/api/docs/) ##### JDiff - [32.1.0-jre vs. 32.0.1-jre](http://guava.dev/releases/32.1.0-jre/api/diffs/) - [32.1.0-android vs. 32.0.1-android](http://guava.dev/releases/32.1.0-android/api/diffs/) - [32.1.0-android vs. 32.1.0-jre](http://guava.dev/releases/32.1.0-android/api/androiddiffs/) ##### Changelog ##### [Gradle Module Metadata](https://docs.gradle.org/current/userguide/publishing_gradle_module_metadata.html) **Warning:** We made a mistake in our release script, so this is [broken](https://togithub.com/google/guava/issues/6612) in 32.1.0. We recommend upgrading straight to release [32.1.2](https://togithub.com/google/guava/releases/tag/v32.1.2), especially if you use Gradle or if you publish a library whose users might use Gradle. Still, read the release notes below if you use Gradle, since the fixed Gradle metadata in 32.1.2 may still require action on your part. The Gradle team has contributed a metadata file for Guava. If you use Gradle 6 or higher, you will see better handling of two kinds of dependency conflicts, plus another small feature related to our dependencies. As a result of this change, you may see errors, which you can resolve as documented below. If you encounter a problem that isn't documented below, or if the documentation is unclear, please [let us know](https://togithub.com/google/guava/issues/new). ##### If you use Gradle 6 (not 5, not 7+) You may see [an error like this one](https://togithub.com/google/guava/issues/6612#issuecomment-1614897285): > Could not resolve all artifacts for configuration ':classpath'. > Could not resolve com.google.guava:guava:30.1-jre. Required by: project : > com.google.cloud.tools.jib:com.google.cloud.tools.jib.gradle.plugin:2.8.0 > gradle.plugin.com.google.cloud.tools:jib-gradle-plugin:2.8.0 > The consumer was configured to find a runtime of a library compatible with Java 15, packaged as a jar, and its dependencies declared externally. However we cannot choose between the following variants of com.google.guava:guava:32.1.1-jre: - androidRuntimeElements - jreRuntimeElements All of them match the consumer attributes: - Variant 'androidRuntimeElements' capabilities com.google.collections:google-collections:32.1.1-jre and com.google.guava:guava:32.1.1-jre and com.google.guava:listenablefuture:1.0 declares a runtime of a library compatible with Java 8, packaged as a jar, and its dependencies declared externally: If you do, you'll need to add [something like this](https://togithub.com/google/guava/issues/6612#issuecomment-1614992368) to a place where you configure the Java plugins: ```kotlin sourceSets.all { configurations.getByName(runtimeClasspathConfigurationName) { attributes.attribute(Attribute.of("org.gradle.jvm.environment", String), "standard-jvm") } configurations.getByName(compileClasspathConfigurationName) { attributes.attribute(Attribute.of("org.gradle.jvm.environment", String), "standard-jvm") } } ``` ##### If you see an error about a duplicate `ListenableFuture` class For example: Execution failed for task ':app:checkDebugDuplicateClasses'. > A failure occurred while executing com.android.build.gradle.internal.tasks.CheckDuplicatesRunnable > Duplicate class com.google.common.util.concurrent.ListenableFuture found in modules jetified-guava-32.1.1-android (com.google.guava:guava:32.1.1-android) and jetified-listenablefuture-1.0 (com.google.guava:listenablefuture:1.0) This [appears to be a Gradle bug](https://togithub.com/gradle/gradle/issues/22326#issuecomment-1617422240). [@​mathisdt](https://togithub.com/mathisdt) has provided [a workaround](https://togithub.com/google/guava/issues/6618): dependencies { ### dependency definitions here ... modules { module("com.google.guava:listenablefuture") { replacedBy("com.google.guava:guava", "listenablefuture is part of guava") } } } ##### Selecting the appropriate flavor When Gradle automatically selects the newest version of Guava in your dependency graph, it will now also select the appropriate flavor (`-android` or `-jre`) based on whether you project targets Android or not. For example, if you depend on 32.1.0-android and 30.0-jre, Gradle will select 32.1.0-jre. This is the version most likely to be compatible with all your dependencies. In the unusual event that you need to override Gradle's choice of flavor, you can do so as follows: ```kotlin dependencies.constraints { implementation("com.google.guava:guava") { attributes { attribute( TargetJvmEnvironment.TARGET_JVM_ENVIRONMENT_ATTRIBUTE, objects.named(TargetJvmEnvironment, TargetJvmEnvironment.ANDROID)) } } } // If the above leads to a conflict error because there are additional transitive dependencies to Guava, then use: configurations.all { resolutionStrategy.capabilitiesResolution.withCapability("com.google.guava:guava") { select(candidates.find { it.variantName.contains("android") }) } } ``` ##### Reporting dependencies that overlap with Guava If your dependency graph contains the very old `google-collections` or the [hacky](https://groups.google.com/g/guava-announce/c/Km82fZG68Sw) `listenablefuture`, Gradle will now report that those libraries contain duplicates of Guava classes. When this happens, you'll need to tell Gradle to [select](https://docs.gradle.org/current/userguide/dependency_capability_conflict.html#sub:selecting-between-candidates) Guava: ```kotlin configurations.all { resolutionStrategy.capabilitiesResolution.withCapability("com.google.collections:google-collections") { select("com.google.guava:guava:0") } // and/or resolutionStrategy.capabilitiesResolution.withCapability("com.google.guava:listenablefuture") { select("com.google.guava:guava:0") } } ``` If that doesn't work, please let us know. And let us know whether [our `replacedBy` workaround](#user-content-duplicate-ListenableFuture) or [these other workarounds](https://togithub.com/googleapis/sdk-platform-java/pull/1832#issuecomment-1624315236) work instead. ##### Omitting annotations at runtime One dependency of Guava that is not needed at runtime (`j2objc-annotations`) is now omitted from the runtime classpath. (We may omit others in the future. See [#​6606](https://togithub.com/google/guava/issues/6606).) ##### Other changes - `collect`: Tweaked more nullness annotations. ([`501a016`](https://togithub.com/google/guava/commit/501a01631f742bbcb73cf46ae409abf567903944), [`5c23590`](https://togithub.com/google/guava/commit/5c2359087acc36c86ed42f1875ce69b7be231868)) - `hash`: Enhanced `crc32c()` to use Java's hardware-accelerated implementation where available. ([`65c7f10`](https://togithub.com/google/guava/commit/65c7f10ff0)) - `util.concurrent`: Added `Duration`-based `default` methods to `ListeningExecutorService`. ([`e7714b0`](https://togithub.com/google/guava/commit/e7714b0b8b)) - Began updating [Javadoc](https://guava.dev/api) to focus less on APIs that have been superseded by additions to the JDK. We're also looking to add more documentation that directs users to JDK equivalents for our APIs. Further PRs welcome! ([`c9efc47`](https://togithub.com/google/guava/commit/c9efc479950e40be4a11daa707dcf9258745cc2e), [`01dcc2e`](https://togithub.com/google/guava/commit/01dcc2e6104e9bd0392cb19029edf2c581425b67)) - Fixed some problems with [using Guava from a Java Agent](https://togithub.com/google/guava/issues/6566). (But we don't test that configuration, and we don't know how well we'll be able to keep it working.) ([`e42d4e8`](https://togithub.com/google/guava/commit/e42d4e863b), [`de62703`](https://togithub.com/google/guava/commit/de62703987)) - Fixed `BootstrapMethodError` when [using `CacheBuilder` from a custom system class loader](https://togithub.com/google/guava/issues/6565). (As with the previous item, we're not sure how well we'll be able to keep this use case working.) ([`a667c38`](https://togithub.com/google/guava/commit/a667c38772)) - Suppressed [a harmless `unusable-by-js` warning](https://togithub.com/google/guava/issues/6602) seen by users of `guava-gwt`. ### [`v32.0.1`](https://togithub.com/google/guava/releases/tag/v32.0.1): 32.0.1 [Compare Source](https://togithub.com/google/guava/compare/v32.0.0...v32.0.1) ##### Maven ```xml com.google.guava guava 32.0.1-jre 32.0.1-android ``` ##### Jar files - [32.0.1-jre.jar](https://repo1.maven.org/maven2/com/google/guava/guava/32.0.1-jre/guava-32.0.1-jre.jar) - [32.0.1-android.jar](https://repo1.maven.org/maven2/com/google/guava/guava/32.0.1-android/guava-32.0.1-android.jar) Guava requires [one runtime dependency](https://togithub.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies), which you can download here: - [failureaccess-1.0.1.jar](https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.1/failureaccess-1.0.1.jar) ##### Javadoc - [32.0.1-jre](http://guava.dev/releases/32.0.1-jre/api/docs/) - [32.0.1-android](http://guava.dev/releases/32.0.1-android/api/docs/) ##### JDiff - [32.0.1-jre vs. 32.0.0-jre](http://guava.dev/releases/32.0.1-jre/api/diffs/) - [32.0.1-android vs. 32.0.0-android](http://guava.dev/releases/32.0.1-android/api/diffs/) - [32.0.1-android vs. 32.0.1-jre](http://guava.dev/releases/32.0.1-android/api/androiddiffs/) ##### Changelog - `io`: Fixed `Files.createTempDir` and `FileBackedOutputStream` under Windows, which broke as part of the security fix in release 32.0.0. Sorry for the trouble. ([`fdbf77d`](https://togithub.com/google/guava/commit/fdbf77d3f2))

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.

forking-renovate[bot] commented 4 months ago

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

diegomarquezp commented 4 months ago

I'm excluding j2objc from guava as it brings upper bound conflicts

sonarcloud[bot] commented 4 months ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud