[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
com.google.guava:guava	33.7.1-jre → 33.7.2-jre

---

Release Notes

google/guava (com.google.guava:guava)

v33.7.2: 33.7.2

Compare Source

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.2-jre</version>
  <!-- or, for Android: -->
  <version>33.7.2-android</version>
</dependency>

Jar files

• 33.7.2-jre.jar
• 33.7.2-android.jar

Guava requires one runtime dependency, which you can download here:

• failureaccess-1.0.3.jar

Javadoc

• 33.7.2-jre
• 33.7.2-android

JDiff

• 33.7.2-jre vs. 33.7.1-jre
• 33.7.2-android vs. 33.7.1-android
• 33.7.2-android vs. 33.7.2-jre

Changelog

• collect: Changed MapMaker, CompactHashMap, and CompactHashSet deserialization to avoid eagerly allocating as much memory as a serialization payload requests (CVE-2026-102554). (a0d0c36)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[square-task-list-completed]

Task List Completed has been disabled for this PR, either by the disabled label or repo topic

Remaining tasks

• If you want to rebase/retry this PR, check this box

Why am I seeing this comment?

This comment is a summary of the pending tasks on this PR. It is intended to make it easier to find pending tasks so you can ship your PR faster.

Got feedback? Let us know in #dx-help!

Want to disable me? Add task-list-completed-disable as a repo topic or PR label to disable on a whole PR, or write task-list-completed-disable in a comment to disable it for that comment.