Dependency Analysis of com.google.auth:google-auth-library-cab-token-generator:1.36.0

BOM: com.google.cloud:libraries-bom:26.62.0

Global Upper Bounds Check

For each transitive dependency the library pulls in, the highest version found anywhere in the union of the BOM's dependency trees is picked.

Global Upper Bounds Fixes

Suggested updates to bring this artifact into sync with the highest versions of its dependencies used by any artifact in the BOM:

Upgrade com.google.errorprone:error_prone_annotations:jar:2.37.0 to version "2.38.0":
Add this dependency element to the pom.xml for com.google.auth:google-auth-library-cab-token-generator:1.36.0:
```
<dependency>
<groupId>com.google.errorprone</groupId>
<artifactId>error_prone_annotations</artifactId>
<version>2.38.0</version>
</dependency>
```
If the pom.xml for com.google.auth:google-auth-library-cab-token-generator:1.36.0 already includes this dependency, update the version of the existing dependency element. Otherwise add a new dependency element to the dependencyManagement section.
Upgrade com.google.guava:guava:jar:33.4.0-android to version "33.4.0-jre":
Add this dependency element to the pom.xml for com.google.auth:google-auth-library-cab-token-generator:1.36.0:
```
<dependency>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
<version>33.4.0-jre</version>
</dependency>
```
If the pom.xml for com.google.auth:google-auth-library-cab-token-generator:1.36.0 already includes this dependency, update the version of the existing dependency element. Otherwise add a new dependency element to the dependencyManagement section.
Upgrade com.google.protobuf:protobuf-java:jar:3.25.5 to version "4.29.4":
Add this dependency element to the pom.xml for com.google.auth:google-auth-library-cab-token-generator:1.36.0:
```
<dependency>
<groupId>com.google.protobuf</groupId>
<artifactId>protobuf-java</artifactId>
<version>4.29.4</version>
</dependency>
```
If the pom.xml for com.google.auth:google-auth-library-cab-token-generator:1.36.0 already includes this dependency, update the version of the existing dependency element. Otherwise add a new dependency element to the dependencyManagement section.
Upgrade com.google.protobuf:protobuf-java-util:jar:3.25.5 to version "4.29.4":
Add this dependency element to the pom.xml for com.google.auth:google-auth-library-cab-token-generator:1.36.0:
```
<dependency>
<groupId>com.google.protobuf</groupId>
<artifactId>protobuf-java-util</artifactId>
<version>4.29.4</version>
</dependency>
```
If the pom.xml for com.google.auth:google-auth-library-cab-token-generator:1.36.0 already includes this dependency, update the version of the existing dependency element. Otherwise add a new dependency element to the dependencyManagement section.
Upgrade com.google.re2j:re2j:jar:1.7 to version "1.8":
Add this dependency element to the pom.xml for com.google.auth:google-auth-library-cab-token-generator:1.36.0:
```
<dependency>
<groupId>com.google.re2j</groupId>
<artifactId>re2j</artifactId>
<version>1.8</version>
</dependency>
```
If the pom.xml for com.google.auth:google-auth-library-cab-token-generator:1.36.0 already includes this dependency, update the version of the existing dependency element. Otherwise add a new dependency element to the dependencyManagement section.
Upgrade commons-codec:commons-codec:jar:1.11 to version "1.18.0":
Add this dependency element to the pom.xml for com.google.auth:google-auth-library-cab-token-generator:1.36.0:
```
<dependency>
<groupId>commons-codec</groupId>
<artifactId>commons-codec</artifactId>
<version>1.18.0</version>
</dependency>
```
If the pom.xml for com.google.auth:google-auth-library-cab-token-generator:1.36.0 already includes this dependency, update the version of the existing dependency element. Otherwise add a new dependency element to the dependencyManagement section.
Upgrade io.grpc:grpc-api:jar:1.70.0 to version "1.71.0":
Add this dependency element to the pom.xml for com.google.auth:google-auth-library-cab-token-generator:1.36.0:
```
<dependency>
<groupId>io.grpc</groupId>
<artifactId>grpc-api</artifactId>
<version>1.71.0</version>
</dependency>
```
If the pom.xml for com.google.auth:google-auth-library-cab-token-generator:1.36.0 already includes this dependency, update the version of the existing dependency element. Otherwise add a new dependency element to the dependencyManagement section.
Upgrade io.grpc:grpc-context:jar:1.70.0 to version "1.71.0":
Add this dependency element to the pom.xml for com.google.auth:google-auth-library-cab-token-generator:1.36.0:
```
<dependency>
<groupId>io.grpc</groupId>
<artifactId>grpc-context</artifactId>
<version>1.71.0</version>
</dependency>
```
If the pom.xml for com.google.auth:google-auth-library-cab-token-generator:1.36.0 already includes this dependency, update the version of the existing dependency element. Otherwise add a new dependency element to the dependencyManagement section.
Upgrade org.checkerframework:checker-qual:jar:3.43.0 to version "3.49.0":
Add this dependency element to the pom.xml for com.google.auth:google-auth-library-cab-token-generator:1.36.0:
```
<dependency>
<groupId>org.checkerframework</groupId>
<artifactId>checker-qual</artifactId>
<version>3.49.0</version>
</dependency>
```
If the pom.xml for com.google.auth:google-auth-library-cab-token-generator:1.36.0 already includes this dependency, update the version of the existing dependency element. Otherwise add a new dependency element to the dependencyManagement section.

Local Upper Bounds Check

For each transitive dependency the library pulls in, the highest version found anywhere in the dependency tree is picked.

com.google.auth:google-auth-library-cab-token-generator:1.36.0 selects the highest version of all dependencies.

Dependency Convergence

There is exactly one version of each dependency in the library's transitive dependency tree. That is, two artifacts with the same group ID and artifact ID but different versions do not appear in the tree. No dependency mediation is necessary.

Suggested Dependency Updates

Caution: The algorithm for suggesting updates is imperfect. They are not ordered by importance, and one change may render another moot.

Suggested updates to bring this artifact and its dependencies into sync with the highest versions of each dependency found in its own dependency tree:

com.google.protobuf:protobuf-java-util:3.25.5 needs to upgrade com.google.code.gson:gson:2.8.9 to 2.12.1
com.google.http-client:google-http-client-gson:1.47.0 needs to upgrade com.google.code.gson:gson:2.11.0 to 2.12.1
com.google.crypto.tink:tink:1.15.0 needs to upgrade com.google.errorprone:error_prone_annotations:2.22.0 to 2.37.0
com.google.http-client:google-http-client:1.47.0 needs to upgrade com.google.errorprone:error_prone_annotations:2.36.0 to 2.37.0
com.google.guava:guava:33.4.0-android needs to upgrade com.google.errorprone:error_prone_annotations:2.36.0 to 2.37.0
com.google.code.gson:gson:2.12.1 needs to upgrade com.google.errorprone:error_prone_annotations:2.36.0 to 2.37.0
io.opencensus:opencensus-contrib-http-util:0.31.1 needs to upgrade com.google.guava:guava:29.0-android to 33.4.0-android
com.google.http-client:google-http-client:1.47.0 needs to upgrade com.google.guava:guava:30.1.1-android to 33.4.0-android
com.google.protobuf:protobuf-java-util:3.25.5 needs to upgrade com.google.j2objc:j2objc-annotations:2.8 to 3.0.0
com.google.crypto.tink:tink:1.15.0 needs to upgrade com.google.protobuf:protobuf-java:3.25.3 to 3.25.5
io.opencensus:opencensus-api:0.31.1 needs to upgrade io.grpc:grpc-context:1.27.2 to 1.70.0

Linkage Check

41 linkage error(s)

dev.cel:cel:0.9.0-proto3

41 target classes causing linkage errors referenced from 43 source classes.

Class com.google.api.expr.v1alpha1.CheckedExpr is not found, referenced from dev.cel.common.CelProtoV1Alpha1AbstractSyntaxTree

Class com.google.api.expr.v1alpha1.SourceInfo is not found, referenced from dev.cel.common.CelProtoV1Alpha1AbstractSyntaxTree

Class com.google.api.expr.v1alpha1.SourceInfo$Builder is not found, referenced from dev.cel.common.CelProtoV1Alpha1AbstractSyntaxTree

Class com.google.api.expr.v1alpha1.CheckedExpr$Builder is not found, referenced from dev.cel.common.CelProtoV1Alpha1AbstractSyntaxTree

Class com.google.api.expr.v1alpha1.ParsedExpr is not found, referenced from dev.cel.common.CelProtoV1Alpha1AbstractSyntaxTree

Class com.google.api.expr.v1alpha1.ParsedExpr$Builder is not found, referenced from dev.cel.common.CelProtoV1Alpha1AbstractSyntaxTree

Class com.google.api.expr.v1alpha1.Type is not found, referenced from 2 classes

Class com.google.api.expr.v1alpha1.Reference is not found, referenced from 2 classes

Class com.google.api.expr.v1alpha1.Constant$ConstantKindCase is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Expr$ExprKindCase is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Expr$Builder is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Expr$Ident is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Expr$Ident$Builder is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Expr$Select is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Expr$Select$Builder is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Expr$Call is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Expr$Call$Builder is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Expr$CreateList is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Expr$CreateList$Builder is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Expr$Comprehension is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Expr$Comprehension$Builder is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Expr is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Constant is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Expr$CreateStruct is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Expr$CreateStruct$Entry is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Expr$CreateStruct$Entry$KeyKindCase is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Constant$Builder is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Expr$CreateStruct$Entry$Builder is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Expr$CreateStruct$Builder is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Reference$Builder is not found, referenced from dev.cel.common.ast.CelExprV1Alpha1Converter

Class com.google.api.expr.v1alpha1.Type$TypeKindCase is not found, referenced from dev.cel.common.types.CelV1AlphaTypes

Class com.google.api.expr.v1alpha1.Type$WellKnownType is not found, referenced from dev.cel.common.types.CelV1AlphaTypes

Class com.google.api.expr.v1alpha1.Type$PrimitiveType is not found, referenced from dev.cel.common.types.CelV1AlphaTypes

Class com.google.api.expr.v1alpha1.Type$Builder is not found, referenced from dev.cel.common.types.CelV1AlphaTypes

Class com.google.api.expr.v1alpha1.Type$ListType is not found, referenced from dev.cel.common.types.CelV1AlphaTypes

Class com.google.api.expr.v1alpha1.Type$ListType$Builder is not found, referenced from dev.cel.common.types.CelV1AlphaTypes

Class com.google.api.expr.v1alpha1.Type$MapType is not found, referenced from dev.cel.common.types.CelV1AlphaTypes

Class com.google.api.expr.v1alpha1.Type$MapType$Builder is not found, referenced from dev.cel.common.types.CelV1AlphaTypes

Class com.google.api.expr.v1alpha1.Type$FunctionType is not found, referenced from dev.cel.common.types.CelV1AlphaTypes

Class com.google.api.expr.v1alpha1.Type$AbstractType is not found, referenced from dev.cel.common.types.CelV1AlphaTypes

Class com.google.api.expr.v1alpha1.Type$AbstractType$Builder is not found, referenced from dev.cel.common.types.CelV1AlphaTypes

The following path contains dev.cel:cel:0.9.0-proto3:

com.google.auth:google-auth-library-cab-token-generator:1.36.0 (compile) / dev.cel:cel:0.9.0-proto3 (compile)

Dependencies

com.google.auth:google-auth-library-cab-token-generator:jar:1.36.0

com.google.auth:google-auth-library-oauth2-http:jar:1.36.0
- com.google.auto.value:auto-value-annotations:jar:1.11.0
- com.google.code.findbugs:jsr305:jar:3.0.2
- com.google.auth:google-auth-library-credentials:jar:1.36.0
- com.google.http-client:google-http-client:jar:1.47.0
  - org.apache.httpcomponents:httpclient:jar:4.5.14
    - org.apache.httpcomponents:httpcore:jar:4.4.16
    - commons-codec:commons-codec:jar:1.11
  - org.apache.httpcomponents:httpcore:jar:4.4.16
  - com.google.code.findbugs:jsr305:jar:3.0.2
  - com.google.errorprone:error_prone_annotations:jar:2.36.0
  - com.google.guava:guava:jar:30.1.1-android
    - com.google.guava:failureaccess:jar:1.0.1
    - com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava
    - com.google.code.findbugs:jsr305:jar:3.0.2
    - org.checkerframework:checker-compat-qual:jar:2.5.5
    - com.google.errorprone:error_prone_annotations:jar:2.5.1
    - com.google.j2objc:j2objc-annotations:jar:1.3
  - com.google.j2objc:j2objc-annotations:jar:3.0.0
  - io.grpc:grpc-context:jar:1.70.0
    - io.grpc:grpc-api:jar:1.70.0
  - io.opencensus:opencensus-api:jar:0.31.1
    - io.grpc:grpc-context:jar:1.27.2
  - io.opencensus:opencensus-contrib-http-util:jar:0.31.1
    - io.opencensus:opencensus-api:jar:0.31.1
      - io.grpc:grpc-context:jar:1.27.2
    - com.google.guava:guava:jar:29.0-android
      - com.google.guava:failureaccess:jar:1.0.1
      - com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava
      - com.google.code.findbugs:jsr305:jar:3.0.2
      - org.checkerframework:checker-compat-qual:jar:2.5.5
      - com.google.errorprone:error_prone_annotations:jar:2.3.4
      - com.google.j2objc:j2objc-annotations:jar:1.3
- com.google.http-client:google-http-client-gson:jar:1.47.0
  - com.google.http-client:google-http-client:jar:1.47.0
    - org.apache.httpcomponents:httpclient:jar:4.5.14
      - org.apache.httpcomponents:httpcore:jar:4.4.16
      - commons-codec:commons-codec:jar:1.11
    - org.apache.httpcomponents:httpcore:jar:4.4.16
    - com.google.code.findbugs:jsr305:jar:3.0.2
    - com.google.errorprone:error_prone_annotations:jar:2.36.0
    - com.google.guava:guava:jar:30.1.1-android
      - com.google.guava:failureaccess:jar:1.0.1
      - com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava
      - com.google.code.findbugs:jsr305:jar:3.0.2
      - org.checkerframework:checker-compat-qual:jar:2.5.5
      - com.google.errorprone:error_prone_annotations:jar:2.5.1
      - com.google.j2objc:j2objc-annotations:jar:1.3
    - com.google.j2objc:j2objc-annotations:jar:3.0.0
    - io.grpc:grpc-context:jar:1.70.0
      - io.grpc:grpc-api:jar:1.70.0
    - io.opencensus:opencensus-api:jar:0.31.1
      - io.grpc:grpc-context:jar:1.27.2
    - io.opencensus:opencensus-contrib-http-util:jar:0.31.1
      - io.opencensus:opencensus-api:jar:0.31.1
        
        io.grpc:grpc-context:jar:1.27.2
      - com.google.guava:guava:jar:29.0-android
        
        com.google.guava:failureaccess:jar:1.0.1
        
        com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava
        
        com.google.code.findbugs:jsr305:jar:3.0.2
        
        org.checkerframework:checker-compat-qual:jar:2.5.5
        
        com.google.errorprone:error_prone_annotations:jar:2.3.4
        
        com.google.j2objc:j2objc-annotations:jar:1.3
  - com.google.code.gson:gson:jar:2.11.0
- com.google.guava:guava:jar:33.4.0-android
  - com.google.guava:failureaccess:jar:1.0.2
  - com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava
  - com.google.code.findbugs:jsr305:jar:3.0.2
  - org.checkerframework:checker-qual:jar:3.43.0
  - com.google.errorprone:error_prone_annotations:jar:2.36.0
- com.google.errorprone:error_prone_annotations:jar:2.37.0
- com.google.code.gson:gson:jar:2.12.1
  - com.google.errorprone:error_prone_annotations:jar:2.36.0
com.google.auth:google-auth-library-credentials:jar:1.36.0
com.google.http-client:google-http-client:jar:1.47.0
- org.apache.httpcomponents:httpclient:jar:4.5.14
  - org.apache.httpcomponents:httpcore:jar:4.4.16
  - commons-codec:commons-codec:jar:1.11
- org.apache.httpcomponents:httpcore:jar:4.4.16
- com.google.code.findbugs:jsr305:jar:3.0.2
- com.google.errorprone:error_prone_annotations:jar:2.36.0
- com.google.guava:guava:jar:30.1.1-android
  - com.google.guava:failureaccess:jar:1.0.1
  - com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava
  - com.google.code.findbugs:jsr305:jar:3.0.2
  - org.checkerframework:checker-compat-qual:jar:2.5.5
  - com.google.errorprone:error_prone_annotations:jar:2.5.1
  - com.google.j2objc:j2objc-annotations:jar:1.3
- com.google.j2objc:j2objc-annotations:jar:3.0.0
- io.grpc:grpc-context:jar:1.70.0
  - io.grpc:grpc-api:jar:1.70.0
- io.opencensus:opencensus-api:jar:0.31.1
  - io.grpc:grpc-context:jar:1.27.2
- io.opencensus:opencensus-contrib-http-util:jar:0.31.1
  - io.opencensus:opencensus-api:jar:0.31.1
    - io.grpc:grpc-context:jar:1.27.2
  - com.google.guava:guava:jar:29.0-android
    - com.google.guava:failureaccess:jar:1.0.1
    - com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava
    - com.google.code.findbugs:jsr305:jar:3.0.2
    - org.checkerframework:checker-compat-qual:jar:2.5.5
    - com.google.errorprone:error_prone_annotations:jar:2.3.4
    - com.google.j2objc:j2objc-annotations:jar:1.3
com.google.errorprone:error_prone_annotations:jar:2.37.0
com.google.guava:guava:jar:33.4.0-android
- com.google.guava:failureaccess:jar:1.0.2
- com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava
- com.google.code.findbugs:jsr305:jar:3.0.2
- org.checkerframework:checker-qual:jar:3.43.0
- com.google.errorprone:error_prone_annotations:jar:2.36.0
com.google.protobuf:protobuf-java:jar:3.25.5
dev.cel:cel:jar:0.9.0-proto3
- com.google.auto.value:auto-value-annotations:jar:1.11.0
- com.google.protobuf:protobuf-java:jar:3.25.5
- com.google.protobuf:protobuf-java-util:jar:3.25.5
  - com.google.protobuf:protobuf-java:jar:3.25.5
  - com.google.code.findbugs:jsr305:jar:3.0.2
  - com.google.code.gson:gson:jar:2.8.9
  - com.google.j2objc:j2objc-annotations:jar:2.8
- com.google.re2j:re2j:jar:1.7
- org.antlr:antlr4-runtime:jar:4.13.2
- org.jspecify:jspecify:jar:1.0.0
- org.threeten:threeten-extra:jar:1.8.0
com.google.code.findbugs:jsr305:jar:3.0.2
com.google.crypto.tink:tink:jar:1.15.0
- com.google.code.findbugs:jsr305:jar:3.0.2
- com.google.errorprone:error_prone_annotations:jar:2.22.0
- com.google.protobuf:protobuf-java:jar:3.25.3

Last generated at 2025-06-13T14:55:33.944877