KEMBAR78
deps: update arrow.version to 17.0.0, auth deps to 1.37.1 and http-client deps to 1.47.1 by diegomarquezp · Pull Request #3863 · googleapis/sdk-platform-java · GitHub
Skip to content

Conversation

@diegomarquezp
Copy link
Contributor

@diegomarquezp diegomarquezp commented Jul 21, 2025

Fixes #3862

  • Arrow: We will not upgrade to v18 because it drops support for Java 8

Included updates for self-service clients (gax properties file):

  • Auth: I also included the auth dependencies as part of this release cycle and to confirm they don't clash with each other (update to 1.37.1).

  • Http Client: Updated to 1.47.1 to confirm compatibility.

These dependencies are already up-to-date in their respective pom entries:

<google.auth.version>1.37.1</google.auth.version>
<google.http-client.version>1.47.1</google.http-client.version>

Fixes #3862 ☕ 

We will not upgrade to v18 because it drops support for Java 8
@product-auto-label product-auto-label bot added the size: xs Pull request size is extra small. label Jul 21, 2025
@diegomarquezp diegomarquezp changed the title deps: update arrow.version to 17.0.0 deps: update arrow.version to 17.0.0 and auth deps to 1.37.1 Jul 21, 2025
@product-auto-label product-auto-label bot added size: s Pull request size is small. and removed size: xs Pull request size is extra small. labels Jul 21, 2025
@diegomarquezp diegomarquezp changed the title deps: update arrow.version to 17.0.0 and auth deps to 1.37.1 deps: update arrow.version to 17.0.0, auth deps to 1.37.1 and http-client deps to 1.47.1 Jul 21, 2025
@sonarqubecloud
Copy link

@sonarqubecloud
Copy link

Quality Gate Passed Quality Gate passed for 'java_showcase_integration_tests'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@diegomarquezp diegomarquezp requested a review from blakeli0 July 21, 2025 21:24
@diegomarquezp diegomarquezp merged commit b5bb3ca into main Jul 22, 2025
91 of 93 checks passed
@diegomarquezp diegomarquezp deleted the diegomarquezp-patch-2 branch July 22, 2025 15:07
diegomarquezp pushed a commit that referenced this pull request Jul 22, 2025
🤖 I have created a release *beep* *boop*
---


<details><summary>2.60.2</summary>

##
[2.60.2](v2.60.1...v2.60.2)
(2025-07-22)


### Dependencies

* update arrow.version to 17.0.0, auth deps to 1.37.1 and http-client
deps to 1.47.1
([#3863](#3863))
([b5bb3ca](b5bb3ca))
</details>

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>
lqiu96 pushed a commit that referenced this pull request Aug 21, 2025
…ient deps to 1.47.1 (#3863)

Fixes #3862 ☕ 

* **Arrow**: We will not upgrade to v18 because it drops support for
Java 8

Included updates for self-service clients (gax properties file):
* **Auth**: I also included the auth dependencies as part of this
release cycle and to confirm they don't clash with each other (update to
1.37.1).

 * **Http Client**: Updated to 1.47.1 to confirm compatibility.

These dependencies are already up-to-date in their respective pom
entries:


https://github.com/googleapis/sdk-platform-java/blob/d80678ce467ffb6949f9749b853ab089ef0c01a6/gapic-generator-java-pom-parent/pom.xml#L30-L31
lqiu96 pushed a commit that referenced this pull request Aug 21, 2025
🤖 I have created a release *beep* *boop*
---


<details><summary>2.60.2</summary>

##
[2.60.2](v2.60.1...v2.60.2)
(2025-07-22)


### Dependencies

* update arrow.version to 17.0.0, auth deps to 1.37.1 and http-client
deps to 1.47.1
([#3863](#3863))
([b5bb3ca](b5bb3ca))
</details>

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>
lqiu96 pushed a commit that referenced this pull request Aug 27, 2025
🤖 I have created a release *beep* *boop*
---


<details><summary>2.60.2</summary>

##
[2.60.2](v2.60.1...v2.60.2)
(2025-07-22)


### Dependencies

* update arrow.version to 17.0.0, auth deps to 1.37.1 and http-client
deps to 1.47.1
([#3863](#3863))
([b5bb3ca](b5bb3ca))
</details>

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>
svc-squareup-copybara pushed a commit to cashapp/misk that referenced this pull request Sep 18, 2025
| Package | Type | Package file | Manager | Update | Change |
|---|---|---|---|---|---|
|
[com.google.api.grpc:proto-google-common-protos](https://github.com/googleapis/sdk-platform-java)
| dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.61.1` -> `2.61.2` |
|
[com.google.cloud:google-cloud-core-http](https://github.com/googleapis/sdk-platform-java)
| dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.60.1` -> `2.60.2` |
|
[com.google.cloud:google-cloud-core](https://github.com/googleapis/sdk-platform-java)
| dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.60.1` -> `2.60.2` |
| [com.google.api:gax](https://github.com/googleapis/sdk-platform-java)
| dependencies | misk/gradle/libs.versions.toml | gradle | patch |
`2.70.1` -> `2.70.2` |
| [io.netty:netty-handler](https://netty.io/)
([source](https://github.com/netty/netty)) | dependencies |
misk/gradle/libs.versions.toml | gradle | patch | `4.2.1.Final` ->
`4.2.6.Final` |
| [io.netty:netty-bom](https://netty.io/)
([source](https://github.com/netty/netty)) | dependencies |
misk/gradle/libs.versions.toml | gradle | patch | `4.2.1.Final` ->
`4.2.6.Final` |

---

### Release Notes

<details>
<summary>googleapis/sdk-platform-java
(com.google.cloud:google-cloud-core-http)</summary>

###
[`v2.60.2`](https://github.com/googleapis/sdk-platform-java/blob/HEAD/CHANGELOG.md#2602-2025-07-22)

##### Dependencies

- update arrow\.version to 17.0.0, auth deps to 1.37.1 and http-client
deps to 1.47.1
([#&#8203;3863](googleapis/sdk-platform-java#3863))
([b5bb3ca](googleapis/sdk-platform-java@b5bb3ca))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "after 6pm every weekday,before 2am
every weekday" in timezone Australia/Melbourne, Automerge - At any time
(no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://github.com/renovatebot/renovate).

GitOrigin-RevId: 99c7b3d7c3272aa54437466ab4e8307a5e71ed07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size: s Pull request size is small.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

BigQuery is is using a vulnerable transitive dependency apache:arrow:15.0.2 (CVE-2024-52338)

2 participants