fix(deps): update dependency com.google.crypto.tink:tink to v1.9.0

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
com.google.crypto.tink:tink	1.7.0 -> 1.9.0

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

---

Release Notes

tink-crypto/tink-java

v1.9.0: Tink Java 1.9.0

Compare Source

Tink is a multi-language, cross-platform library that provides simple and misuse-proof APIs for common cryptographic tasks.

This is Tink Java 1.9.0

To get started using Tink, see the setup guide.

Maven:

<dependency>
<groupId>com.google.crypto.tink</groupId>
<artifactId>tink</artifactId>
<version>1.9.0</version>
</dependency>

Gradle:

dependencies {
implementation 'com.google.crypto.tink:tink-android:1.9.0'
}

Bazel:

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
RULES_JVM_EXTERNAL_TAG="4.5"RULES_JVM_EXTERNAL_SHA="b17d7388feb9bfa7f2fa09031b32707df529f26c91ab9e5d909eb1676badd9a6"http_archive(
name="rules_jvm_external",
strip_prefix="rules_jvm_external-%s"%RULES_JVM_EXTERNAL_TAG,
sha256=RULES_JVM_EXTERNAL_SHA,
url="https://github.com/bazelbuild/rules_jvm_external/archive/refs/tags/%s.zip"%RULES_JVM_EXTERNAL_TAG,
)
load("@​rules_jvm_external//:repositories.bzl", "rules_jvm_external_deps")
rules_jvm_external_deps()
load("@​rules_jvm_external//:setup.bzl", "rules_jvm_external_setup")
rules_jvm_external_setup()
load("@​rules_jvm_external//:defs.bzl", "maven_install")
maven_install(
artifacts= [
"com.google.crypto.tink:tink:1.9.0",
##### ... other dependencies ...
],
repositories= [
"https://repo1.maven.org/maven2",
],
)

Alternatively, one can build Tink from source, and include it with http_archive:

http_archive(
name="com_github_tink_crypto_tink_java",
urls= ["https://github.com/tink-crypto/tink-java/archive/refs/tags/v1.9.0.zip"],
strip_prefix="tink-java-1.9.0",
sha256="9735df7992df73d1518661ac6cf8918fa4693673adaaf0bdee253c24c521c832",
)
load("@​tink_java//:tink_java_deps.bzl", "TINK_MAVEN_ARTIFACTS", "tink_java_deps")
tink_java_deps()
load("@​tink_java//:tink_java_deps_init.bzl", "tink_java_deps_init")
tink_java_deps_init()
##### ...maven_install(
artifacts=TINK_MAVEN_ARTIFACTS+# ... other dependencies ...repositories= [
"https://maven.google.com",
"https://repo1.maven.org/maven2",
],
)

WARNING: When building from source users that require KMS extensions as well must now explicitly include them, since they are published in separate repositories:

• https://github.com/tink-crypto/tink-java-awskms
• https://github.com/tink-crypto/tink-java-gcpkms

For example, to use tink-java-gcpkms your WORKSPACE file becomes as follows (analogously for tink-java-awskms):

http_archive(
name="com_github_tink_crypto_tink_java",
urls= ["https://github.com/tink-crypto/tink-java/archive/refs/tags/v1.9.0.zip"],
strip_prefix="tink-java-1.9.0",
sha256="9735df7992df73d1518661ac6cf8918fa4693673adaaf0bdee253c24c521c832",
)
http_archive(
name="tink_java_gcpkms",
urls= ["https://github.com/tink-crypto/tink-java-gcpkms/archive/refs/tags/v<SOME_RELEASE>.zip"],
strip_prefix="tink-java-gcpkms-<SOME_RELEASE>",
sha256= ...
)
load("@&#8203;tink_java//:tink_java_deps.bzl", "TINK_MAVEN_ARTIFACTS", "tink_java_deps")
tink_java_deps()
load("@&#8203;tink_java//:tink_java_deps_init.bzl", "tink_java_deps_init")
tink_java_deps_init()
load("@&#8203;tink_java_gcpkms//:tink_java_gcpkms_deps.bzl", "TINK_JAVA_GCPKMS_MAVEN_ARTIFACTS")
##### ...maven_install(
artifacts=TINK_MAVEN_ARTIFACTS+TINK_JAVA_GCPKMS_MAVEN_ARTIFACTS+# ... other dependencies ...repositories= [
"https://maven.google.com",
"https://repo1.maven.org/maven2",
],
)

Dependencies to targets in //src/main/java/com/google/crypto/tink/integration/gcpkms now are located in @tink_java_gcpkms.

What's new

The complete list of changes since 1.8.0 can be found here.

• Removed deprecation of some APIs
• Minor refactorings/code improvements
• Added new key/parameter interfaces for StreamingAead, DeterministicAead, HmacPrf and JwtMac
• Added new key/parameter/serialization classes:
  • AesGcmHkdfStreaming
  • AesCtrHmacAead
  • AesCtrHmacStreaming
  • AesCmacPrf
  • Ed25519
  • RsaSsaPkcs1
  • AesSiv
  • JwtHmac
• Add Refaster (https://errorprone.info/docs/refaster) templates to easily migrate away from deprecated APIs
• Improved performance of AesGcmSiv (commit)
• Fixed Maven dependency issues:
  • https://github.com/tink-crypto/tink-java/issues/4: Removed androidx.annotations from com.google.crypto.tink:tink (commit); as a result, com.google.crypto.tink:tink has only dependencies from Maven Central.
  • https://github.com/tink-crypto/tink-java/issues/7: Add missing dependencies to com.google.crypto.tink:tink-android’s POM file (commit).
• Upgraded dependencies:
  • com.google.code.gson:gson:2.10.1
  • com.google.errorprone:error_prone_annotations:2.18
  • com.google.http-client:google-http-client:1.43.1
  • com.google.http-client:google-http-client-gson:1.43.1
  • joda-time:joda-time:2.12.5
  • junit:junit:4.13.2
  • androidx.annotation:annotation:1.5.0

To see what we're working towards, check our project roadmap.

v1.8.0: Tink Java 1.8.0

Tink is a multi-language, cross-platform library that provides simple and misuse-proof APIs for common cryptographic tasks.

This is Tink Java 1.8.0

To get started using Tink, see the setup guide.

Maven:

<dependency>
<groupId>com.google.crypto.tink</groupId>
<artifactId>tink</artifactId>
<version>1.8.0</version>
</dependency>

Gradle:

dependencies {
implementation 'com.google.crypto.tink:tink-android:1.8.0'
}

Bazel:

load("@​bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
RULES_JVM_EXTERNAL_TAG="4.5"RULES_JVM_EXTERNAL_SHA="b17d7388feb9bfa7f2fa09031b32707df529f26c91ab9e5d909eb1676badd9a6"http_archive(
name="rules_jvm_external",
strip_prefix="rules_jvm_external-%s"%RULES_JVM_EXTERNAL_TAG,
sha256=RULES_JVM_EXTERNAL_SHA,
url="https://github.com/bazelbuild/rules_jvm_external/archive/refs/tags/%s.zip"%RULES_JVM_EXTERNAL_TAG,
)
load("@​rules_jvm_external//:repositories.bzl", "rules_jvm_external_deps")
rules_jvm_external_deps()
load("@​rules_jvm_external//:setup.bzl", "rules_jvm_external_setup")
rules_jvm_external_setup()
load("@​rules_jvm_external//:defs.bzl", "maven_install")
maven_install(
artifacts= [
"com.google.crypto.tink:tink:1.8.0",
##### ... other dependencies ...
],
repositories= [
"https://maven.google.com",
"https://repo1.maven.org/maven2",
],
)

Alternatively, one can build Tink from source, and include it with http_archive:

http_archive(
name="com_github_tink_crypto_tink_java",
urls= ["https://github.com/tink-crypto/tink-java/archive/refs/tags/v1.8.0.zip"],
strip_prefix="tink-java-1.8.0",
sha256="cff458ea60897f7a5edc91d1eb9c58c650c2fd3206d94672f29c950b94398a49"
)
load("@​tink_java//:tink_java_deps.bzl", "TINK_MAVEN_ARTIFACTS", "tink_java_deps")
tink_java_deps()
load("@​tink_java//:tink_java_deps_init.bzl", "tink_java_deps_init")
tink_java_deps_init()
##### ...maven_install(
artifacts=TINK_MAVEN_ARTIFACTS+# ... other dependencies ...repositories= [
"https://maven.google.com",
"https://repo1.maven.org/maven2",
],
)

WARNING: When building from source users that require KMS extensions as well must now explicitly include them, since they are published in separate repositories:

• https://github.com/tink-crypto/tink-java-awskms
• https://github.com/tink-crypto/tink-java-gcpkms

For example, to use tink-java-gcpkms your WORKSPACE file becomes as follows (analogously for tink-java-awskms):

http_archive(
name="com_github_tink_crypto_tink_java",
urls= ["https://github.com/tink-crypto/tink-java/archive/refs/tags/v1.8.0.zip"],
strip_prefix="tink-java-1.8.0",
sha256="cff458ea60897f7a5edc91d1eb9c58c650c2fd3206d94672f29c950b94398a49"
)
http_archive(
name="tink_java_gcpkms",
urls= ["https://github.com/tink-crypto/tink-java-gcpkms/archive/refs/tags/v<SOME_RELEASE>.zip"],
strip_prefix="tink-java-gcpkms-<SOME_RELEASE>",
sha256= ...
)
load("@&#8203;tink_java//:tink_java_deps.bzl", "TINK_MAVEN_ARTIFACTS", "tink_java_deps")
tink_java_deps()
load("@&#8203;tink_java//:tink_java_deps_init.bzl", "tink_java_deps_init")
tink_java_deps_init()
load("@&#8203;tink_java_gcpkms//:tink_java_gcpkms_deps.bzl", "TINK_JAVA_GCPKMS_MAVEN_ARTIFACTS")
##### ...maven_install(
artifacts=TINK_MAVEN_ARTIFACTS+TINK_JAVA_GCPKMS_MAVEN_ARTIFACTS+# ... other dependencies ...repositories= [
"https://maven.google.com",
"https://repo1.maven.org/maven2",
],
)

Dependencies to targets in //src/main/java/com/google/crypto/tink/integration/gcpkms now are located in @tink_java_gcpkms.

What's new

This is the first release from https://github.com/tink-crypto/tink-java.

The complete list of changes since 1.7.0 can be found here.

• Changed the tink-java POM file as follows:
  • Added missing dependency on androidx.annotation.annotation.
  • Only direct dependencies are listed.
  • Updated SCM details to point to github.com/tink-crypto/tink-java.
• Upgraded to Bazel 6.0.
• The ChunkedMac primitive can now be used, available implementations are AesCmac and Hmac.
• Added new API to read and write keysets: TinkProtoKeysetFormat and TinkJsonProtoKeysetFormat.
• JSON parsing now rejects duplicated map entries.
  • See this and this commits.
• Fixed two race conditions in com.google.crypto.tink.integration.android. Also improved the exceptions raised.
• ECDSA keys are now serialized using fixed size byte arrays.
• Tink will prefer Conscrypt as a JCE provider for ECDSA if available.
• Changes to PrimitiveSet API. Please note that the use of this class is discouraged and should be omitted when possible.
  • For the relevant changes see commit.
• (Only relevant if you use or maintain a custom Wrapper class) Registering a wrapper in Registry now requires that the object being registered is always the same. See examples here and here.
• Upgraded dependencies:
  • Protobuf to X.21.9 443baab.
  • com.google.errorprone:error_prone_annotations to 2.16.
  • google.http-client:google-http-client to 1.42.3.
  • com.google.api-client:google-api-client to 2.2.0.
  • com.google.code.gson:gson to 2.10.

To see what we're working towards, check our project roadmap.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.