Dependency Analysis of com.google.http-client:google-http-client-findbugs:1.42.3

BOM: com.google.cloud:libraries-bom:26.2.0

Global Upper Bounds Check

For each transitive dependency the library pulls in, the highest version found anywhere in the union of the BOM's dependency trees is picked.

Global Upper Bounds Fixes

Suggested updates to bring this artifact into sync with the highest versions of its dependencies used by any artifact in the BOM:

Upgrade com.google.guava:guava:jar:30.1.1-android to version "31.1-jre":
Add this dependency element to the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3:
```
<dependency>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
<version>31.1-jre</version>
</dependency>
```
If the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3 already includes this dependency, update the version of the existing dependency element. Otherwise add a new dependency element to the dependencyManagement section.
Upgrade commons-codec:commons-codec:jar:1.11 to version "1.15":
Add this dependency element to the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3:
```
<dependency>
<groupId>commons-codec</groupId>
<artifactId>commons-codec</artifactId>
<version>1.15</version>
</dependency>
```
If the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3 already includes this dependency, update the version of the existing dependency element. Otherwise add a new dependency element to the dependencyManagement section.
Upgrade io.grpc:grpc-context:jar:1.27.2 to version "1.51.0":
Add this dependency element to the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3:
```
<dependency>
<groupId>io.grpc</groupId>
<artifactId>grpc-context</artifactId>
<version>1.51.0</version>
</dependency>
```
If the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3 already includes this dependency, update the version of the existing dependency element. Otherwise add a new dependency element to the dependencyManagement section.
Upgrade org.apache.httpcomponents:httpclient:jar:4.5.13 to version "4.5.14":
Add this dependency element to the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3:
```
<dependency>
<groupId>org.apache.httpcomponents</groupId>
<artifactId>httpclient</artifactId>
<version>4.5.14</version>
</dependency>
```
If the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3 already includes this dependency, update the version of the existing dependency element. Otherwise add a new dependency element to the dependencyManagement section.
Upgrade org.apache.httpcomponents:httpcore:jar:4.4.15 to version "4.4.16":
Add this dependency element to the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3:
```
<dependency>
<groupId>org.apache.httpcomponents</groupId>
<artifactId>httpcore</artifactId>
<version>4.4.16</version>
</dependency>
```
If the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3 already includes this dependency, update the version of the existing dependency element. Otherwise add a new dependency element to the dependencyManagement section.
Upgrade org.ow2.asm:asm:jar:5.0.2 to version "7.1":
Add this dependency element to the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3:
```
<dependency>
<groupId>org.ow2.asm</groupId>
<artifactId>asm</artifactId>
<version>7.1</version>
</dependency>
```
If the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3 already includes this dependency, update the version of the existing dependency element. Otherwise add a new dependency element to the dependencyManagement section.
Upgrade org.ow2.asm:asm-commons:jar:5.0.2 to version "7.1":
Add this dependency element to the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3:
```
<dependency>
<groupId>org.ow2.asm</groupId>
<artifactId>asm-commons</artifactId>
<version>7.1</version>
</dependency>
```
If the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3 already includes this dependency, update the version of the existing dependency element. Otherwise add a new dependency element to the dependencyManagement section.
Upgrade org.ow2.asm:asm-tree:jar:5.0.2 to version "7.1":
Add this dependency element to the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3:
```
<dependency>
<groupId>org.ow2.asm</groupId>
<artifactId>asm-tree</artifactId>
<version>7.1</version>
</dependency>
```
If the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3 already includes this dependency, update the version of the existing dependency element. Otherwise add a new dependency element to the dependencyManagement section.
Upgrade xml-apis:xml-apis:jar:1.0.b2 to version "1.4.01":
Add this dependency element to the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3:
```
<dependency>
<groupId>xml-apis</groupId>
<artifactId>xml-apis</artifactId>
<version>1.4.01</version>
</dependency>
```
If the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3 already includes this dependency, update the version of the existing dependency element. Otherwise add a new dependency element to the dependencyManagement section.

Local Upper Bounds Check

For each transitive dependency the library pulls in, the highest version found anywhere in the dependency tree is picked.

Upper Bounds Fixes

Suggested updates to bring this artifact into sync with the highest versions of each dependency found in its own dependency tree:

Upgrade xml-apis:xml-apis:jar:1.0.b2 to xml-apis:xml-apis:jar:1.3.02:
Add this dependency element to the pom.xml for com.google.http-client:google-http-client-findbugs:1.42.3:
```
<dependency>
  <groupId>xml-apis</groupId>
  <artifactId>xml-apis</artifactId>
  <version>1.3.02</version>
</dependency>
```

Dependency Convergence

There is exactly one version of each dependency in the library's transitive dependency tree. That is, two artifacts with the same group ID and artifact ID but different versions do not appear in the tree. No dependency mediation is necessary.

Suggested Dependency Updates

Caution: The algorithm for suggesting updates is imperfect. They are not ordered by importance, and one change may render another moot.

Suggested updates to bring this artifact and its dependencies into sync with the highest versions of each dependency found in its own dependency tree:

com.google.code.findbugs:findbugs:3.0.1 needs to upgrade com.google.code.findbugs:jsr305:2.0.1 to 3.0.2
com.google.guava:guava:30.1.1-android needs to upgrade com.google.errorprone:error_prone_annotations:2.5.1 to 2.16
io.opencensus:opencensus-contrib-http-util:0.31.1 needs to upgrade com.google.guava:guava:29.0-android to 30.1.1-android
org.apache.httpcomponents:httpclient:4.5.13 needs to upgrade org.apache.httpcomponents:httpcore:4.4.13 to 4.4.15
dom4j:dom4j:1.6.1 needs to upgrade xml-apis:xml-apis:1.0.b2 to 1.3.02

Linkage Check

36 linkage error(s)

dom4j:dom4j:1.6.1

16 target classes causing linkage errors referenced from 27 source classes.

Class org.relaxng.datatype.DatatypeException is not found, referenced from 3 classes

Class com.sun.msv.datatype.DatabindableDatatype is not found, referenced from 2 classes

Class com.sun.msv.datatype.SerializationContext is not found, referenced from 2 classes

Class org.relaxng.datatype.ValidationContext is not found, referenced from 2 classes

Class com.sun.msv.datatype.xsd.XSDatatype is not found, referenced from 5 classes

Class com.sun.msv.datatype.xsd.TypeIncubator is not found, referenced from org.dom4j.datatype.SchemaParser

Class com.sun.msv.datatype.xsd.DatatypeFactory is not found, referenced from org.dom4j.datatype.SchemaParser

Class org.gjt.xpp.XmlPullParserException is not found, referenced from 2 classes

Class org.gjt.xpp.XmlPullParser is not found, referenced from org.dom4j.io.XPPReader

Class org.gjt.xpp.XmlPullParserFactory is not found, referenced from org.dom4j.io.XPPReader

Class javax.xml.bind.Element is not found, referenced from org.dom4j.jaxb.JAXBSupport

Class javax.xml.bind.JAXBException is not found, referenced from 2 classes

Class javax.xml.bind.Marshaller is not found, referenced from org.dom4j.jaxb.JAXBSupport

Class javax.xml.bind.Unmarshaller is not found, referenced from org.dom4j.jaxb.JAXBSupport

Class javax.xml.bind.JAXBContext is not found, referenced from org.dom4j.jaxb.JAXBSupport

Class org.gjt.xpp.XmlStartTag is not found, referenced from org.dom4j.xpp.ProxyXmlStartTag

The following path contains dom4j:dom4j:1.6.1:

com.google.http-client:google-http-client-findbugs:1.42.3 (compile) / com.google.code.findbugs:findbugs:3.0.1 (compile) / dom4j:dom4j:1.6.1 (compile)

jaxen:jaxen:1.1.6

19 target classes causing linkage errors referenced from 21 source classes.

Class org.jdom.Element is not found, referenced from 2 classes

Class org.jdom.Comment is not found, referenced from org.jaxen.jdom.DocumentNavigator

Class org.jdom.Text is not found, referenced from org.jaxen.jdom.DocumentNavigator

Class org.jdom.CDATA is not found, referenced from org.jaxen.jdom.DocumentNavigator

Class org.jdom.Attribute is not found, referenced from org.jaxen.jdom.DocumentNavigator

Class org.jdom.ProcessingInstruction is not found, referenced from org.jaxen.jdom.DocumentNavigator

Class org.jdom.Document is not found, referenced from org.jaxen.jdom.DocumentNavigator

Class org.jdom.Namespace is not found, referenced from 2 classes

Class org.jdom.input.SAXBuilder is not found, referenced from org.jaxen.jdom.DocumentNavigator

Class nu.xom.Element is not found, referenced from org.jaxen.xom.DocumentNavigator

Class nu.xom.ParentNode is not found, referenced from org.jaxen.xom.DocumentNavigator

Class nu.xom.Attribute is not found, referenced from org.jaxen.xom.DocumentNavigator

Class nu.xom.Comment is not found, referenced from org.jaxen.xom.DocumentNavigator

Class nu.xom.Document is not found, referenced from org.jaxen.xom.DocumentNavigator

Class nu.xom.ProcessingInstruction is not found, referenced from org.jaxen.xom.DocumentNavigator

Class nu.xom.Text is not found, referenced from org.jaxen.xom.DocumentNavigator

Class nu.xom.Node is not found, referenced from org.jaxen.xom.DocumentNavigator

Class nu.xom.Builder is not found, referenced from org.jaxen.xom.DocumentNavigator

Class nu.xom.NodeFactory is not found, referenced from org.jaxen.xom.DocumentNavigator

The following path contains jaxen:jaxen:1.1.6:

com.google.http-client:google-http-client-findbugs:1.42.3 (compile) / com.google.code.findbugs:findbugs:3.0.1 (compile) / jaxen:jaxen:1.1.6 (compile)

com.google.code.findbugs:findbugs:3.0.1

1 target class causing linkage errors referenced from 1 source class.

(ant:ant:1.6.5) org.apache.tools.ant.types.FileSet's method "org.apache.tools.ant.DirectoryScanner getDirectoryScanner()" is not found, referenced from edu.umd.cs.findbugs.anttask.FindBugsTask

The following path contains ant:ant:1.6.5:

com.google.guava:guava-gwt:31.1-jre (compile) / com.google.gwt:gwt-dev:2.9.0 (provided) / ant:ant:1.6.5 (compile)

The following path contains com.google.code.findbugs:findbugs:3.0.1:

com.google.http-client:google-http-client-findbugs:1.42.3 (compile) / com.google.code.findbugs:findbugs:3.0.1 (compile)

Dependencies

com.google.http-client:google-http-client-findbugs:jar:1.42.3

com.google.code.findbugs:findbugs:jar:3.0.1
- net.jcip:jcip-annotations:jar:1.0
- com.google.code.findbugs:jsr305:jar:2.0.1
- com.google.code.findbugs:bcel-findbugs:jar:6.0
- com.google.code.findbugs:jFormatString:jar:2.0.1
- dom4j:dom4j:jar:1.6.1
  - xml-apis:xml-apis:jar:1.0.b2
- org.apache.ant:ant:jar:1.7.1
  - org.apache.ant:ant-launcher:jar:1.7.1
- org.ow2.asm:asm-debug-all:jar:5.0.2
- org.ow2.asm:asm-commons:jar:5.0.2
  - org.ow2.asm:asm-tree:jar:5.0.2
    - org.ow2.asm:asm:jar:5.0.2
- commons-lang:commons-lang:jar:2.6
- com.apple:AppleJavaExtensions:jar:1.4
- jaxen:jaxen:jar:1.1.6
  - xml-apis:xml-apis:jar:1.3.02
  - xerces:xercesImpl:jar:2.6.2
com.google.code.findbugs:bcel-findbugs:jar:6.0
com.google.http-client:google-http-client:jar:1.42.3
- org.apache.httpcomponents:httpclient:jar:4.5.13
  - org.apache.httpcomponents:httpcore:jar:4.4.13
  - commons-logging:commons-logging:jar:1.2
  - commons-codec:commons-codec:jar:1.11
- org.apache.httpcomponents:httpcore:jar:4.4.15
- com.google.code.findbugs:jsr305:jar:3.0.2
- com.google.errorprone:error_prone_annotations:jar:2.16
- com.google.guava:guava:jar:30.1.1-android
  - com.google.guava:failureaccess:jar:1.0.1
  - com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava
  - com.google.code.findbugs:jsr305:jar:3.0.2
  - org.checkerframework:checker-compat-qual:jar:2.5.5
  - com.google.errorprone:error_prone_annotations:jar:2.5.1
  - com.google.j2objc:j2objc-annotations:jar:1.3
- com.google.j2objc:j2objc-annotations:jar:1.3
- io.opencensus:opencensus-api:jar:0.31.1
  - io.grpc:grpc-context:jar:1.27.2
- io.opencensus:opencensus-contrib-http-util:jar:0.31.1
  - io.opencensus:opencensus-api:jar:0.31.1
    - io.grpc:grpc-context:jar:1.27.2
  - com.google.guava:guava:jar:29.0-android
    - com.google.guava:failureaccess:jar:1.0.1
    - com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava
    - com.google.code.findbugs:jsr305:jar:3.0.2
    - org.checkerframework:checker-compat-qual:jar:2.5.5
    - com.google.errorprone:error_prone_annotations:jar:2.3.4
    - com.google.j2objc:j2objc-annotations:jar:1.3

Last generated at 2023-04-04T17:47:18.087744