From dad98e7c9ec0b75bd3b5682d1c8391ce3fc6ea17 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 14 Apr 2025 02:09:40 +0000
Subject: [PATCH] Bump com.google.guava:guava from 33.4.0-jre to 33.4.6-jre

Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.4.0-jre to 33.4.6-jre.
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

---
updated-dependencies:
- dependency-name: com.google.guava:guava
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 modules/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/pom.xml b/modules/pom.xml
index 6d95c9719d..bd1983f0f3 100644
--- a/modules/pom.xml
+++ b/modules/pom.xml
@@ -765,7 +765,7 @@
     <asm.version>9.5</asm.version>
     <assertj.version>3.27.2</assertj.version>
     <bridger.version>1.6.Final</bridger.version>
-    <guava.version>33.4.0-jre</guava.version><!-- didn't want to go beyond v27 but forced to by security https://github.com/google/guava/issues/3320 -->
+    <guava.version>33.4.7-jre</guava.version><!-- didn't want to go beyond v27 but forced to by security https://github.com/google/guava/issues/3320 -->
     <guava-docs.version>26.0-jre</guava-docs.version>
     <jcommander.version>1.78</jcommander.version>
     <joda-convert.version>2.2.3</joda-convert.version>