search

looker-open-source / bqjdbc

Fork of Starschema's JDBC driver for BigQuery. https://code.google.com/p/starschema-bigquery-jdbc/
BSD 2-Clause "Simplified" License
20 stars 33 forks source link

Update com.google.guava:guava dependency to v32.0.1-jre #168

Closed shalaniw closed 1 year ago

shalaniw commented 1 year ago

bqjdbc uses com.google.guava:guava as a transitive dependency. It needs to be bumped from 31.1-jre to 32.0.1-jre per https://osv.dev/vulnerability/GHSA-7g45-4rm6-3mm3.

Also added the google-cloud-bigquery dependency, so that we don't have to pick out specific libraries from the Google Java client.

Since JacksonFactory is deprecated https://cloud.google.com/java/docs/reference/google-http-client/latest/com.google.api.client.json.jackson2, now using com.google.api.client.json.gson.GsonFactory instead.

Remove com.google.api.services.iamcredentials.v1 and now use Explicit Credential Loading https://github.com/googleapis/google-auth-library-java/blob/main/README.md#explicit-credential-loading to generate an access token.