diff --git a/guava-build.tar.xz b/guava-build.tar.xz index 61e10e9..c1ab83a 100644 --- a/guava-build.tar.xz +++ b/guava-build.tar.xz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:b5e46f037b1dafe0e2fe72da1489ee3553b4a529f7e8d5c56932b672f72ec8e6 -size 2872 +oid sha256:29904f3ef7ad58da1446e4fbdcadf6744ecd6d2b150948f9701aece01ec8e150 +size 2880 diff --git a/guava.changes b/guava.changes index c76950f..7082ecd 100644 --- a/guava.changes +++ b/guava.changes @@ -1,3 +1,57 @@ +------------------------------------------------------------------- +Thu Jun 15 13:20:35 UTC 2023 - Fridrich Strba + +- Upgrade to guava 32.0.1 + * Security fixes: + + Reimplemented Files.createTempDir and FileBackedOutputStream + to further address CVE-2020-8908 (#4011, bsc#1179926) and + CVE-2023-2976 (#2575, bsc#1212401) + * Fixes: + + io: Fixed Files.createTempDir and FileBackedOutputStream under + Windows, which broke as part of the security fix in release + 32.0.0 + + Removed @Beta from almost all APIs. Most of the remaining + @Beta APIs are in graph and hash. + + Enhanced the Guava jar to include Proguard configurations that + are picked up automatically by the Android Gradle Plugin. This + should help with warnings that were promoted to errors in + Android Gradle Plugin 8.x. + + Enhanced the Guava jar to include information about method + parameters in its class files. If you use static analyzers + that look at method-parameter names, you may see new warnings + or errors if they are now able to detect mismatches. But + mostly, you may see better tooltips and autocompletion in + DEs. + + Improved nullness annotations on a few classes. + + Modified classes with "serial proxies" to declare + exception-throwing readObject methods, in accordance with best + practice. + + collect: Fixed Maps.newHashMapWithExpectedSize to stop + allocating maps that were larger than they needed to be. + + collect: Made various APIs work J2CL: + Maps.immutableEnumMap+toImmutableEnumMap, EnumMultiset, + CollectorTester. Previously, the APIs were present but failed + at runtime. + + collect: Optimized memory usage for Interner and MapMaker. + + graph: Changed directed graphs to reject attempts to add + undirected edges. + + io: Added BaseEncoding.ignoreCase() to support + case-insensitive decoding. + + net: Added HttpHeaders constants: + ~ No-Vary-Search + ~ Sec-CH-DPR + ~ Sec-CH-UA-Wow64 + ~ Sec-CH-Viewport-Width and Sec-CH-Viewport-Height + ~ Supports-Loading-Mode + + net: Added the MediaType constant for JWT. + + primitives: Added rotate() for arrays of all primitive types. + + util.concurrent: Changed AbstractFuture to run + interruptTask() just before afterDone(). Until this change, it + ran slightly earlier than that: We used to run it before + unblocking any pending get() calls, and now we run it after. + + util.concurrent: Fixed some cases in which we could catch + InterruptedException but fail to restore the interrupt bit. + ------------------------------------------------------------------- Wed May 18 17:26:01 UTC 2022 - Fridrich Strba diff --git a/guava.spec b/guava.spec index bdbaf1d..7f77915 100644 --- a/guava.spec +++ b/guava.spec @@ -1,7 +1,7 @@ # # spec file for package guava # -# Copyright (c) 2022 SUSE LLC +# Copyright (c) 2023 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: guava -Version: 31.1 +Version: 32.0.1 Release: 0 Summary: Google Core Libraries for Java License: Apache-2.0 AND CC0-1.0 @@ -118,11 +118,11 @@ cp -r %{name}-testlib/target/site/apidocs %{buildroot}%{_javadocdir}/%{name}/%{n %files -f .mfiles %doc CONTRIBUTORS README* -%license COPYING +%license LICENSE %files javadoc %{_javadocdir}/%{name} -%license COPYING +%license LICENSE %files testlib -f .mfiles-guava-testlib diff --git a/v31.1.tar.gz b/v31.1.tar.gz deleted file mode 100644 index 14bd70a..0000000 --- a/v31.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:6d15ac3b3403642ba239311c842aeda02347621cd4fed5d6821d6487adf32558 -size 5583483 diff --git a/v32.0.1.tar.gz b/v32.0.1.tar.gz new file mode 100644 index 0000000..ca977a6 --- /dev/null +++ b/v32.0.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:c850b565fdb5b577b9d02a647e21dd033cb967d97a66604d42e8d33689d136c9 +size 5678582