[MNG-7535] Latest release of Maven contain EOL component - EOL-Google Guava 25.1

• Type: Dependency upgrade
• Status: Closed
• Priority: Minor
• Resolution: Won't Fix
• Affects Version/s: 3.8.6
• Component/s: Dependencies
• Assignee: Unassigned
• Reporter: Chris Campbell
• Created: 31/Aug/22 15:02
• Updated: 03/Nov/22 23:00
• Resolved: 18/Sep/22 11:10

Description

We are utilizing the latest maven releases and getting EOL findings ( EOL-Google Guava 25.1 ) from our internal Enterprise Security team that we must remediate.

Will maven releases update to a newer, non-EOL of these components?  If not, is there anything we can do ourselves to remediate and use non-EOL versions?