[NIFI-11645] Upgrade Guava to 32.0.0

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 2.0.0-M1, 1.22.0
• Component/s: Core Framework, Extensions
• Labels: dependency-upgrade
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 05/Jun/23 20:01
• Updated: 05/Jun/23 22:35
• Resolved: 05/Jun/23 22:35

Description

Multiple framework and extension components have dependencies on Google Guava. Most of these dependencies depend on version 31.1.

Google Guava 32.0.0 maintains binary compatibility with earlier versions and also resolves CVE-2020-8908 and CVE-2023-2976 related to permissions on created temporary directories.

Issue Links

• links to: GitHub Pull Request #7342