Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

Conversation

diegomarquezp
Copy link
Contributor

@diegomarquezp diegomarquezp commented Jul 24, 2025

b/353704898

We are upgrading the guava dependency to the latest due to a known CVE.
This implies a drop for support of Java 7 in google-http-client, which is in turn a dependency of the other modules in this repo.

…-http-client-apache-v5


This implies a drop for support of Java 7 in google-http-client, also documented in README.md
@diegomarquezp diegomarquezp requested a review from a team as a code owner July 24, 2025 20:34
@product-auto-label product-auto-label bot added the size: s Pull request size is small. label Jul 24, 2025
@diegomarquezp diegomarquezp marked this pull request as draft July 24, 2025 20:35
@product-auto-label product-auto-label bot added size: m Pull request size is medium. and removed size: s Pull request size is small. labels Jul 24, 2025
Other modules depend directly on google-http-client, which will drop support for java 7 from now on.
@diegomarquezp diegomarquezp changed the title deps!: update guava to 33.4.8-android in google-http-client and google-http-client-apache-v5 deps!: update guava to 33.4.8-android Jul 24, 2025
@diegomarquezp diegomarquezp marked this pull request as ready for review July 31, 2025 19:29
@diegomarquezp diegomarquezp requested a review from blakeli0 July 31, 2025 19:30
@diegomarquezp diegomarquezp merged commit 941038c into main Jul 31, 2025
22 checks passed
@diegomarquezp diegomarquezp deleted the update-guava-drop-java-7 branch July 31, 2025 21:25
svc-squareup-copybara pushed a commit to cashapp/misk that referenced this pull request Aug 14, 2025
| Package | Type | Package file | Manager | Update | Change |
|---|---|---|---|---|---|
|
[com.google.http-client:google-http-client-jackson2](https://github.com/googleapis/google-http-java-client)
| dependencies | misk/gradle/libs.versions.toml | gradle | major |
`1.47.1` -> `2.0.0` |
|
[com.google.http-client:google-http-client](https://github.com/googleapis/google-http-java-client)
| dependencies | misk/gradle/libs.versions.toml | gradle | major |
`1.47.1` -> `2.0.0` |

---

### Release Notes

<details>
<summary>googleapis/google-http-java-client
(com.google.http-client:google-http-client-jackson2)</summary>

###
[`v2.0.0`](https://github.com/googleapis/google-http-java-client/blob/HEAD/CHANGELOG.md#200-2025-08-08)

##### ⚠ BREAKING CHANGES

- update guava to 33.4.8-android
([#&#8203;2112](googleapis/google-http-java-client#2112))

##### Features

- Next release from main branch is 1.48.0
([#&#8203;2110](googleapis/google-http-java-client#2110))
([33c6793](googleapis/google-http-java-client@33c6793))

##### Dependencies

- Update guava to 33.4.8-android
([#&#8203;2112](googleapis/google-http-java-client#2112))
([941038c](googleapis/google-http-java-client@941038c))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am
every weekday" in timezone Australia/Melbourne, Automerge - At any time
(no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://github.com/renovatebot/renovate).

GitOrigin-RevId: 9150e7bef7b1c67839e57397c95f99d8eb22538d
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size: m Pull request size is medium.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

Morty Proxy This is a proxified and sanitized view of the page, visit original site.