dependabot[bot] opened a new pull request #75:
URL: https://github.com/apache/maven-shade-plugin/pull/75


   Bumps [guava](https://github.com/google/guava) from 28.2-android to 
30.0-android.
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a 
href="https://github.com/google/guava/releases";>guava's releases</a>.</em></p>
   <blockquote>
   <h2>30.0</h2>
   <h3>Maven</h3>
   <pre lang="xml"><code>&lt;dependency&gt;
     &lt;groupId&gt;com.google.guava&lt;/groupId&gt;
     &lt;artifactId&gt;guava&lt;/artifactId&gt;
     &lt;version&gt;30.0-jre&lt;/version&gt;
     &lt;!-- or, for Android: --&gt;
     &lt;version&gt;30.0-android&lt;/version&gt;
   &lt;/dependency&gt;
   </code></pre>
   <h3>Javadoc</h3>
   <ul>
   <li><a href="http://guava.dev/releases/30.0-jre/api/docs/";>30.0-jre</a></li>
   <li><a 
href="http://guava.dev/releases/30.0-android/api/docs/";>30.0-android</a></li>
   </ul>
   <h3>JDiff</h3>
   <ul>
   <li><a href="http://guava.dev/releases/30.0-jre/api/diffs/";>30.0-jre vs. 
29.0-jre</a></li>
   <li><a href="http://guava.dev/releases/30.0-android/api/diffs/";>30.0-android 
vs. 29.0-android</a></li>
   <li><a 
href="http://guava.dev/releases/30.0-android/api/androiddiffs/";>30.0-android 
vs. 30.0-jre</a></li>
   </ul>
   <h3>Changelog</h3>
   <ul>
   <li><a 
href="https://groups.google.com/d/msg/guava-announce/zHZTFg7YF3o/rQNnwdHeEwAJ";>Guava
 types can no longer be sent over GWT-RPC.</a> Even the earlier, temporary way 
to reenable support (<code>guava.gwt.emergency_reenable_rpc</code>) no longer 
has an effect. (0cb89dd110)</li>
   <li><code>cache</code>: Fixed memory leak in <code>LocalCache</code> under 
<a href="https://developers.google.com/j2objc";>j2objc</a>. (5e519d91d0)</li>
   <li><code>collect</code>: Added two-element <code>min</code> and 
<code>max</code> methods to <code>Comparators</code>. (958186c071)</li>
   <li><code>collect</code>: Removed <code>@Beta</code> from 
<code>Multimaps.toMultimap</code>. (b6b4dc49b1)</li>
   <li><code>collect</code>: Made the set returned by <code>ImmutableMap&lt;K, 
V&gt;.keySet()</code> serializable as long as <code>K</code> is serializable, 
even if <code>V</code> is not (and similarly for <code>values()</code>). 
(f5a69c33fc)</li>
   <li><code>collect</code>: Fixed bug in 
<code>powerSet.equals(otherPowerSet)</code> would erroneously return 
<code>false</code> if the two power sets' underlying sets were equal but had a 
different iteration order. (215b1f0dd7)</li>
   <li><code>collect</code>: Eliminated <a 
href="https://developers.google.com/j2objc";>j2objc</a> retain-cycle in 
<code>SingletonImmutableBiMap</code>. (0ad38b88bd)</li>
   <li><code>eventbus</code>: Prevented <code>@Subscribe</code> from being 
applied to a method that takes a primitive, as that will never be called. 
(554546c971)</li>
   <li><code>graph</code>: Made <code>Traverser.breadthFirst()</code> lazier, 
and optimized <code>Traverser</code> more generally. (32f2d770f7, 
b5210ca95c)</li>
   <li><code>graph</code>: Added <code>@DoNotMock</code> to 
<code>Traverser</code>. (6410f18c06)</li>
   <li><code>io</code>: Deprecated <code>Files.createTempDir()</code>. 
(fec0dbc463) (CVE forthcoming)</li>
   <li><code>io</code>: Upgraded <code>ByteStreams.copy(InputStream, 
OutputStream)</code> to use the faster <code>FileChannel</code> if possible. 
(a1e9a0bd12)</li>
   <li><code>math</code>: Added <code>roundToDouble</code> to 
<code>BigDecimalMath</code>, <code>BigIntegerMath</code>, and 
<code>LongMath</code>. (bee4f3c7ed, 2b5c096ddf, 633abf2c62)</li>
   <li><code>net</code>: Added <code>MediaType</code> constants for several 
font/ types. (571cf66bac)</li>
   <li><code>net</code>: Added <code>HttpHeaders</code> constants for 
<code>Cross-Origin-Embedder-Policy(-Report-Only)?</code>. (c3bf73187a)</li>
   <li><code>testing</code>: Made <code>EqualsTester</code> test that 
non-<code>String</code> objects are not equal to their <code>String</code> 
representations. (c9570eae69)</li>
   <li><code>util.concurrent</code>: Added <code>ClosingFuture</code>. 
(52e048ed6c)</li>
   <li><code>util.concurrent</code>: Removed the deprecated 1-arg 
<code>ServiceManager.addListener(Listener)</code>. Use the 2-arg 
<code>addListener(Listener, Executor)</code> overload, setting the executor to 
<code>directExecutor()</code> for equivalent behavior. (dfb0001714)</li>
   <li><code>util.concurrent</code>: Changed 
<code>AbstractFuture.toString()</code> to no longer include the 
<code>toString()</code> of the result. (2ebf27fd45)</li>
   <li><code>util.concurrent</code>: Added 
<code>awaitTerminationUninterruptibly</code>. (f07b9540dc)</li>
   </ul>
   <h2>29.0</h2>
   <h3>Maven</h3>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li>See full diff in <a 
href="https://github.com/google/guava/commits";>compare view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.guava:guava&package-manager=maven&previous-version=28.2-android&new-version=30.0-android)](https://docs.github.com/en/github/managing-security-vulnerabilities/configuring-github-dependabot-security-updates)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   
   
   </details>


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to