Skip to content

Conversation

diegomarquezp
Copy link
Contributor

@diegomarquezp diegomarquezp commented Jul 24, 2025

b/353704898

We are upgrading the guava dependency to the latest due to a known CVE.
This implies a drop for support of Java 7 in google-http-client, which is in turn a dependency of the other modules in this repo.

…-http-client-apache-v5


This implies a drop for support of Java 7 in google-http-client, also documented in README.md
@diegomarquezp diegomarquezp requested a review from a team as a code owner July 24, 2025 20:34
@product-auto-label product-auto-label bot added the size: s Pull request size is small. label Jul 24, 2025
@diegomarquezp diegomarquezp marked this pull request as draft July 24, 2025 20:35
@product-auto-label product-auto-label bot added size: m Pull request size is medium. and removed size: s Pull request size is small. labels Jul 24, 2025
Other modules depend directly on google-http-client, which will drop support for java 7 from now on.
@diegomarquezp diegomarquezp changed the title deps!: update guava to 33.4.8-android in google-http-client and google-http-client-apache-v5 deps!: update guava to 33.4.8-android Jul 24, 2025
@diegomarquezp diegomarquezp marked this pull request as ready for review July 31, 2025 19:29
@diegomarquezp diegomarquezp requested a review from blakeli0 July 31, 2025 19:30
@diegomarquezp diegomarquezp merged commit 941038c into main Jul 31, 2025
22 checks passed
@diegomarquezp diegomarquezp deleted the update-guava-drop-java-7 branch July 31, 2025 21:25
svc-squareup-copybara pushed a commit to cashapp/misk that referenced this pull request Aug 14, 2025
| Package | Type | Package file | Manager | Update | Change |
|---|---|---|---|---|---|
|
[com.google.http-client:google-http-client-jackson2](https://github.com/googleapis/google-http-java-client)
| dependencies | misk/gradle/libs.versions.toml | gradle | major |
`1.47.1` -> `2.0.0` |
|
[com.google.http-client:google-http-client](https://github.com/googleapis/google-http-java-client)
| dependencies | misk/gradle/libs.versions.toml | gradle | major |
`1.47.1` -> `2.0.0` |

---

### Release Notes

<details>
<summary>googleapis/google-http-java-client
(com.google.http-client:google-http-client-jackson2)</summary>

###
[`v2.0.0`](https://github.com/googleapis/google-http-java-client/blob/HEAD/CHANGELOG.md#200-2025-08-08)

##### ⚠ BREAKING CHANGES

- update guava to 33.4.8-android
([#&#8203;2112](googleapis/google-http-java-client#2112))

##### Features

- Next release from main branch is 1.48.0
([#&#8203;2110](googleapis/google-http-java-client#2110))
([33c6793](googleapis/google-http-java-client@33c6793))

##### Dependencies

- Update guava to 33.4.8-android
([#&#8203;2112](googleapis/google-http-java-client#2112))
([941038c](googleapis/google-http-java-client@941038c))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am
every weekday" in timezone Australia/Melbourne, Automerge - At any time
(no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://github.com/renovatebot/renovate).

GitOrigin-RevId: 9150e7bef7b1c67839e57397c95f99d8eb22538d
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
size: m Pull request size is medium.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants