Skip to content

[dependabot]: Bump com.google.guava:guava from 33.4.8-android to 33.5.0-android in /packages/espresso/android - #10047

Merged
auto-submit[bot] merged 3 commits into
mainfrom
dependabot/gradle/packages/espresso/android/com.google.guava-guava-33.5.0-android
Oct 7, 2025
Merged

[dependabot]: Bump com.google.guava:guava from 33.4.8-android to 33.5.0-android in /packages/espresso/android#10047
auto-submit[bot] merged 3 commits into
mainfrom
dependabot/gradle/packages/espresso/android/com.google.guava-guava-33.5.0-android

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubSep 22, 2025

Copy link
Copy Markdown
Contributor

⚠️Dependabot is rebasing this PR⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps com.google.guava:guava from 33.4.8-android to 33.5.0-android.

Release notes

Sourced from com.google.guava:guava's releases.

33.5.0

Maven

<dependency>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
<version>33.5.0-jre</version>
<!-- or, for Android: -->
<version>33.5.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • Restored the Automatic-Module-Name to guava-android. (It, unlike, guava-jre, is not a proper module.) (7a04a8a955)
  • For users of guava-gwt: Google has moved off GWT internally. We plan to continue to release guava-gwt for users of GWT and J2CL, but the artifact is no longer tested for GWT-specific issues, and we have limited resources to fix any unexpected issues that might arise. While we do not anticipate any specific problems, we can't guarantee how long support will continue.
  • Increased our Android minSdkVersion to 23 (Marshmallow). This follows the minimum of Google's foundational Android libraries, and we expect it to have no practical impact on users. (5c23347cc1)
  • Listed the JSpecify annotations as an optional dependency in our OSGi metadata. (2dfd572981)
  • cache: Improved the handling of exceptions from compute functions in Cache.asMap(). (We do still recommend using Caffeine rather than com.google.common.cache.) (087f2c4a80)
  • collect: Improved Iterators.mergeSorted() to preserve stability for equal elements. (4dc93be9a8)
  • math: Added saturatedAbs methods to IntMath and LongMath. (ed0e518f20)
  • net: Added image/avif to MediaType. (53344caba6)
  • testing: Made CollectorTester available to Android users. (294c251079)
  • util.concurrent: Added Striped.custom. (1586eb271d)
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.4.8-android to 33.5.0-android.
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)
---
updated-dependencies:
- dependency-name: com.google.guava:guava
dependency-version: 33.5.0-android
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added the autosubmit Merge PR when tree becomes green via auto submit App label Sep 22, 2025
@dependabot
dependabotBot requested a review from jesswrd as a code ownerSeptember 22, 2025 08:31
@dependabotdependabotBot added the autosubmit Merge PR when tree becomes green via auto submit App label Sep 22, 2025
@auto-submit

Copy link
Copy Markdown
Contributor

autosubmit label was removed for flutter/packages/10047, because - The status or check suite Linux repo_checks has failed. Please fix the issues identified (or deflake) before re-applying this label.

@auto-submitauto-submitBot removed the autosubmit Merge PR when tree becomes green via auto submit App label Sep 22, 2025
@ash2moonash2moon added the autosubmit Merge PR when tree becomes green via auto submit App label Oct 7, 2025
@auto-submit
auto-submitBot merged commit 0826e11 into mainOct 7, 2025
80 checks passed
@auto-submit
auto-submitBot deleted the dependabot/gradle/packages/espresso/android/com.google.guava-guava-33.5.0-android branch October 7, 2025 18:08
engine-flutter-autoroll added a commit to engine-flutter-autoroll/flutter that referenced this pull request Oct 8, 2025
engine-flutter-autoroll added a commit to engine-flutter-autoroll/flutter that referenced this pull request Oct 8, 2025
github-merge-queueBot pushed a commit to flutter/flutter that referenced this pull request Oct 8, 2025
flutter/packages@8ca6416...260f381
2025-10-08 jessiewong401@gmail.com Add Versioning to Gradle 9
Deprecation Change (flutter/packages#10187)
2025-10-07 julien@delarbre.biz [camera_avfoundation] iOS: Fix crash when
`enableAudio == false` by correcting guard condition
(flutter/packages#9949)
2025-10-07 49699333+dependabot[bot]@users.noreply.github.com
[dependabot]: Bump androidx.fragment:fragment from 1.8.8 to 1.8.9 in
/packages/local_auth/local_auth_android/android (flutter/packages#10111)
2025-10-07 10687576+bparrishMines@users.noreply.github.com
[interactive_media_ads] Adds support for accessing data for an Ad
(flutter/packages#9972)
2025-10-07 stuartmorgan@google.com [webview_flutter] Add Android
geolocation README (flutter/packages#10166)
2025-10-07 49699333+dependabot[bot]@users.noreply.github.com
[dependabot]: Bump com.google.guava:guava from 33.4.8-android to
33.5.0-android in /packages/espresso/android (flutter/packages#10047)
If this roll has caused a breakage, revert this CL and stop the roller
using the controls here:
https://autoroll.skia.org/r/flutter-packages-flutter-autoroll
Please CC flutter-ecosystem@google.com on the revert to ensure that a
human
is aware of the problem.
To file a bug in Flutter:
https://github.com/flutter/flutter/issues/new/choose
To report a problem with the AutoRoller itself, please file a bug:
https://issues.skia.org/issues/new?component=1389291&template=1850622
Documentation for the AutoRoller is here:
https://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md
reidbaker pushed a commit to AbdeMohlbi/flutter that referenced this pull request Dec 10, 2025
flutter/packages@8ca6416...260f381
2025-10-08 jessiewong401@gmail.com Add Versioning to Gradle 9
Deprecation Change (flutter/packages#10187)
2025-10-07 julien@delarbre.biz [camera_avfoundation] iOS: Fix crash when
`enableAudio == false` by correcting guard condition
(flutter/packages#9949)
2025-10-07 49699333+dependabot[bot]@users.noreply.github.com
[dependabot]: Bump androidx.fragment:fragment from 1.8.8 to 1.8.9 in
/packages/local_auth/local_auth_android/android (flutter/packages#10111)
2025-10-07 10687576+bparrishMines@users.noreply.github.com
[interactive_media_ads] Adds support for accessing data for an Ad
(flutter/packages#9972)
2025-10-07 stuartmorgan@google.com [webview_flutter] Add Android
geolocation README (flutter/packages#10166)
2025-10-07 49699333+dependabot[bot]@users.noreply.github.com
[dependabot]: Bump com.google.guava:guava from 33.4.8-android to
33.5.0-android in /packages/espresso/android (flutter/packages#10047)
If this roll has caused a breakage, revert this CL and stop the roller
using the controls here:
https://autoroll.skia.org/r/flutter-packages-flutter-autoroll
Please CC flutter-ecosystem@google.com on the revert to ensure that a
human
is aware of the problem.
To file a bug in Flutter:
https://github.com/flutter/flutter/issues/new/choose
To report a problem with the AutoRoller itself, please file a bug:
https://issues.skia.org/issues/new?component=1389291&template=1850622
Documentation for the AutoRoller is here:
https://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md
creatorpiyush pushed a commit to creatorpiyush/packages that referenced this pull request Jun 10, 2026
….0-android in /packages/espresso/android (flutter#10047)
⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
---
Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.4.8-android to 33.5.0-android.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/google/guava/releases">com.google.guava:guava's releases</a>.</em></p>
<blockquote>
<h2>33.5.0</h2>
<h3>Maven</h3>
<pre lang="xml"><code>&lt;dependency&gt;
&lt;groupId&gt;com.google.guava&lt;/groupId&gt;
&lt;artifactId&gt;guava&lt;/artifactId&gt;
&lt;version&gt;33.5.0-jre&lt;/version&gt;
&lt;!-- or, for Android: --&gt;
&lt;version&gt;33.5.0-android&lt;/version&gt;
&lt;/dependency&gt;
</code></pre>
<h3>Jar files</h3>
<ul>
<li><a href="https://repo1.maven.org/maven2/com/google/guava/guava/33.5.0-jre/guava-33.5.0-jre.jar">33.5.0-jre.jar</a></li>
<li><a href="https://repo1.maven.org/maven2/com/google/guava/guava/33.5.0-android/guava-33.5.0-android.jar">33.5.0-android.jar</a></li>
</ul>
<p>Guava requires <a href="https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies">one runtime dependency</a>, which you can download here:</p>
<ul>
<li><a href="https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar">failureaccess-1.0.3.jar</a></li>
</ul>
<h3>Javadoc</h3>
<ul>
<li><a href="https://guava.dev/releases/33.5.0-jre/api/docs/">33.5.0-jre</a></li>
<li><a href="https://guava.dev/releases/33.5.0-android/api/docs/">33.5.0-android</a></li>
</ul>
<h3>JDiff</h3>
<ul>
<li><a href="https://guava.dev/releases/33.5.0-jre/api/diffs/">33.5.0-jre vs. 33.4.8-jre</a></li>
<li><a href="https://guava.dev/releases/33.5.0-android/api/diffs/">33.5.0-android vs. 33.4.8-android</a></li>
<li><a href="https://guava.dev/releases/33.5.0-android/api/androiddiffs/">33.5.0-android vs. 33.5.0-jre</a></li>
</ul>
<h3>Changelog</h3>
<ul>
<li>Restored the <code>Automatic-Module-Name</code> to <code>guava-android</code>. (It, unlike, <code>guava-jre</code>, is not a proper module.) (7a04a8a955)</li>
<li>For users of <code>guava-gwt</code>: Google <a href="https://redirect.github.com/gwtproject/gwt-site/pull/394">has moved off GWT internally</a>. We plan to continue to release <code>guava-gwt</code> for users of GWT and <a href="https://github.com/google/j2cl">J2CL</a>, but the artifact is no longer tested for GWT-specific issues, and we have limited resources to fix any unexpected issues that might arise. While we do not anticipate any specific problems, we can't guarantee how long support will continue.</li>
<li>Increased our Android <code>minSdkVersion</code> to 23 (Marshmallow). This follows the minimum of Google's foundational Android libraries, and we expect it to have no practical impact on users. (5c23347cc1)</li>
<li>Listed the JSpecify annotations as an optional dependency in our OSGi metadata. (2dfd572981)</li>
<li><code>cache</code>: Improved the handling of exceptions from compute functions in <code>Cache.asMap()</code>. (We do still <a href="https://guava.dev/releases/snapshot-jre/api/docs/com/google/common/cache/CacheBuilder.html#prefer-caffeine-over-guava-s-caching-api-heading">recommend</a> using <a href="https://github.com/ben-manes/caffeine">Caffeine</a> rather than <code>com.google.common.cache</code>.) (087f2c4a80)</li>
<li><code>collect</code>: Improved <code>Iterators.mergeSorted()</code> to preserve stability for equal elements. (4dc93be9a8)</li>
<li><code>math</code>: Added <code>saturatedAbs</code> methods to <code>IntMath</code> and <code>LongMath</code>. (ed0e518f20)</li>
<li><code>net</code>: Added <code>image/avif</code> to <code>MediaType</code>. (53344caba6)</li>
<li><code>testing</code>: Made <code>CollectorTester</code> available to Android users. (294c251079)</li>
<li><code>util.concurrent</code>: Added <code>Striped.custom</code>. (1586eb271d)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/google/guava/commits">compare view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.guava:guava&package-manager=gradle&previous-version=33.4.8-android&new-version=33.5.0-android)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

autosubmitMerge PR when tree becomes green via auto submit Appp: espressoplatform-android

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@fluttergithubbot@ash2moon