build(deps): bump com.google.http-client:google-http-client-apache-v2 from 1.43.0 to 1.45.2

[dependabot]

Bumps com.google.http-client:google-http-client-apache-v2 from 1.43.0 to 1.45.2.

Release notes

Sourced from com.google.http-client:google-http-client-apache-v2's releases.

v1.45.2

1.45.2 (2024-12-05)

Bug Fixes

• NPE if response entity is null (#2043) (12c742b)

Dependencies

• Update actions/checkout action to v4.2.2 (#2034) (024fd71)
• Update actions/upload-artifact action to v4.4.3 (#2035) (443157c)
• Update dependency com.fasterxml.jackson.core:jackson-core to v2.18.2 (#2036) (5d24785)
• Update dependency com.google.errorprone:error_prone_annotations to v2.36.0 (#2037) (cc6eb61)
• Update dependency io.grpc:grpc-context to v1.68.2 (#2038) (9fba799)
• Update dependency ubuntu to v24 (#2041) (ac83eb2)
• Update github/codeql-action action to v3.27.6 (#2003) (dc8e46a)
• Update project.appengine.version to v2.0.31 (#2027) (8bb79e5)

v1.45.1

1.45.1 (2024-11-12)

Bug Fixes

• Add google-http-client-apache-v5 to bom (#2021) (4830ad7)

v1.45.0

1.45.0 (2024-08-21)

Features

• Introduces google-http-client-apache-v5 (Apache Client/Core 5.x) (#1960) (5d527dc)
  • This new module provides a new transport implementation using the newer Apache Client and Core 5.x. Older modules google-http-client-apache-v2 and v1 (held inside google-http-client) are based on the older Apache Core 4.x library, which has reached EOL and may be flagged by some security scanners although no CVEs have been issued for this.
  • If the EOL state of Apache HTTP Core 4.x is a concern, you can use the following dependency declarations to exclude it from your dependency tree.

    <dependency>
      <groupId>com.google.http-client</groupId>
      <artifactId>google-http-client</artifactId>
      <exclusions>
        <exclusion>
          <groupId>org.apache.httpcomponents</groupId>
          <artifactId>httpcore</artifactId>
        </exclusion>
        <exclusion>
          <groupId>org.apache.httpcomponents</groupId>
          <artifactId>httpclient</artifactId>
        </exclusion>

... (truncated)

Changelog

Sourced from com.google.http-client:google-http-client-apache-v2's changelog.

1.45.2 (2024-12-05)

Bug Fixes

• NPE if response entity is null (#2043) (12c742b)

Dependencies

• Update actions/checkout action to v4.2.2 (#2034) (024fd71)
• Update actions/upload-artifact action to v4.4.3 (#2035) (443157c)
• Update dependency com.fasterxml.jackson.core:jackson-core to v2.18.2 (#2036) (5d24785)
• Update dependency com.google.errorprone:error_prone_annotations to v2.36.0 (#2037) (cc6eb61)
• Update dependency io.grpc:grpc-context to v1.68.2 (#2038) (9fba799)
• Update dependency ubuntu to v24 (#2041) (ac83eb2)
• Update github/codeql-action action to v3.27.6 (#2003) (dc8e46a)
• Update project.appengine.version to v2.0.31 (#2027) (8bb79e5)

1.45.1 (2024-11-12)

Bug Fixes

• Add google-http-client-apache-v5 to bom (#2021) (4830ad7)

1.45.0 (2024-08-21)

Features

• Introduce google-http-client-apache-v5 (Apache Client/Core 5.x) (#1960) (5d527dc)
• Next release from main is 1.45.0 (#1972) (094dcc8)

Dependencies

• Update actions/checkout action to v4 (#1993) (f8b0cc1)
• Update actions/github-script action to v7 (#1994) (e527f0d)
• Update actions/setup-java action to v4 (#1995) (07aa01c)
• Update actions/upload-artifact action to v4 (#1996) (5ba7021)
• Update dependency com.fasterxml.jackson.core:jackson-core to v2.17.2 (#1987) (4202d32)
• Update dependency com.google.cloud:native-image-shared-config to v1.7.7 (#1937) (b224a1d)
• Update dependency com.google.cloud:native-image-shared-config to v1.9.0 (#1961) (792e44f)
• Update dependency com.google.code.gson:gson to v2.11.0 (#1988) (63afd35)
• Update dependency com.google.errorprone:error_prone_annotations to v2.30.0 (#1989) (6e19c5c)
• Update dependency com.google.j2objc:j2objc-annotations to v3 (#1998) (3d70537)
• Update dependency io.grpc:grpc-context to v1.66.0 (#1990) (66a9f15)
• Update dependency org.apache.httpcomponents.core5:httpcore5 to v5.2.5 (#2002) (8c61065)
• Update github/codeql-action action to v3 (#2000) (7250f64)

... (truncated)

Commits

• b3f1242 chore(main): release 1.45.2 (#2045)
• f4d007d chore(main): release 1.45.2-SNAPSHOT (#2025)
• dc8e46a deps: update github/codeql-action action to v3.27.6 (#2003)
• 443157c deps: update actions/upload-artifact action to v4.4.3 (#2035)
• d726f32 build(deps): update dependency org.apache.maven.plugins:maven-dependency-plug...
• cd1cb65 build(deps): update dependency org.codehaus.mojo:build-helper-maven-plugin to...
• 40a935e build(deps): update dependency org.apache.maven.plugins:maven-checkstyle-plug...
• a43cfd6 build(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v...
• cc9c948 build(deps): update dependency com.google.cloud:native-image-shared-config to...
• a2f6adc build(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #74.