[skywalking] 01/01: Bump Guava to 32.0.0

[wu...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

wusheng pushed a commit to branch bump
in repository https://gitbox.apache.org/repos/asf/skywalking.git

commit 25e2b9742cd9ad10216027b6a4d8336e27c7d7f4
Author: Wu Sheng <wu...@foxmail.com>
AuthorDate: Thu Jun 15 08:31:17 2023 +0800

    Bump Guava to 32.0.0
---
 docs/en/changes/changes.md | 1 +
 oap-server-bom/pom.xml     | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/docs/en/changes/changes.md b/docs/en/changes/changes.md
index 8b5fc600ab..7ed05d3299 100644
--- a/docs/en/changes/changes.md
+++ b/docs/en/changes/changes.md
@@ -2,6 +2,7 @@
 
 #### Project
 
+* Bump up Guava to 32.0.0 to avoid the lib listed as vulnerable due to CVE-2020-8908. This API is never used.
 
 #### OAP Server
 
diff --git a/oap-server-bom/pom.xml b/oap-server-bom/pom.xml
index a02dca5486..3362a5a6ca 100644
--- a/oap-server-bom/pom.xml
+++ b/oap-server-bom/pom.xml
@@ -39,7 +39,7 @@
         <h2.version>2.1.212</h2.version>
         <joda-time.version>2.10.5</joda-time.version>
         <zookeeper.version>3.5.7</zookeeper.version>
-        <guava.version>31.1-jre</guava.version>
+        <guava.version>32.0.0-jre</guava.version>
         <snakeyaml.version>2.0</snakeyaml.version>
         <protobuf-java.version>3.21.8</protobuf-java.version>
         <protobuf-java-util.version>3.21.8</protobuf-java-util.version>