Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
deps: Update Guava to 32.0.0 (#12953)
Updates Guava to [32.0.0](https://github.com/google/guava/releases/tag/v32.0.0) to include fixes for CVE-2020-8908 and CVE-2023-2976 (google/guava#2575) which affects certain builds with shaded usage, e.g ruby via jruby/java platform such as https://rubygems.org/gems/google-protobuf/versions/3.23.2-java - Protobuf does not appear to (directly) use the affected `Files.createTempDir` or `FileBackedOutputStream` code which might behave differently on Windows. - Referred to #9707 and #9757 for reference - Updated transitive dependency versions match https://mvnrepository.com/artifact/com.google.guava/guava/32.0.0-jre (note major version change for `j2objc-annotations` from `1.3` --> `2.8`) May need backporting to `23.x` branch if sufficiently compatible. Closes #12953 COPYBARA_INTEGRATE_REVIEW=#12953 from chadlwilson:update-guava-32 9c396b6 PiperOrigin-RevId: 538666552
- Loading branch information