Merge pull request #930 from sigstore/renovate/guava-monorepo

fix(deps): update dependency com.google.guava:guava to v33.4.6-jre

Author: loosebazooka

fuzzing/build.gradle.kts

@@ -9,7 +9,7 @@ repositories {
 dependencies {
     implementation(project(":sigstore-java"))
     implementation("com.code-intelligence:jazzer-api:0.24.0")
-    implementation("com.google.guava:guava:33.4.0-jre")
+    implementation("com.google.guava:guava:33.4.6-jre")
 }
 
 // copy to the fuzzing builder's output directory. This is an existing directory with

sigstore-cli/build.gradle.kts

@@ -10,7 +10,7 @@ repositories {
 dependencies {
     implementation(project(":sigstore-java"))
     implementation("info.picocli:picocli:4.7.6")
-    implementation("com.google.guava:guava:33.4.0-jre")
+    implementation("com.google.guava:guava:33.4.6-jre")
 
     implementation(platform("com.google.oauth-client:google-oauth-client-bom:1.38.0"))
     implementation("com.google.oauth-client:google-oauth-client")

sigstore-testkit/build.gradle.kts

@@ -7,7 +7,7 @@ plugins {
 dependencies {
     implementation(project(":sigstore-java"))
     implementation("com.google.code.gson:gson:2.12.1")
-    implementation("com.google.guava:guava:33.4.0-jre")
+    implementation("com.google.guava:guava:33.4.6-jre")
 
     // This is different from typical "testImplementation" dependencies, because
     // testkit exposes junit5 dependencies in its API (e.g. annotations)

tuf-cli/build.gradle.kts

@@ -10,7 +10,7 @@ repositories {
 dependencies {
     implementation(project(":sigstore-java"))
     implementation("info.picocli:picocli:4.7.6")
-    implementation("com.google.guava:guava:33.4.0-jre")
+    implementation("com.google.guava:guava:33.4.6-jre")
 
     implementation(platform("com.google.oauth-client:google-oauth-client-bom:1.38.0"))
     implementation("com.google.oauth-client:google-oauth-client")