From d833a518b00f0e7e05d9c82b6ed4ee7a70590c27 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 6 Jul 2026 15:46:45 +0000
Subject: [PATCH] Update dependency com.google.guava:guava to v33.6.0-jre

---
 fuzzing/build.gradle.kts          | 2 +-
 sigstore-cli/build.gradle.kts     | 2 +-
 sigstore-testkit/build.gradle.kts | 2 +-
 tuf-cli/build.gradle.kts          | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/fuzzing/build.gradle.kts b/fuzzing/build.gradle.kts
index 885f124fc..ef6f07566 100644
--- a/fuzzing/build.gradle.kts
+++ b/fuzzing/build.gradle.kts
@@ -9,7 +9,7 @@ repositories {
 dependencies {
     implementation(project(":sigstore-java"))
     implementation("com.code-intelligence:jazzer-api:0.30.0")
-    implementation("com.google.guava:guava:33.5.0-jre")
+    implementation("com.google.guava:guava:33.6.0-jre")
 }
 
 // copy to the fuzzing builder's output directory. This is an existing directory with
diff --git a/sigstore-cli/build.gradle.kts b/sigstore-cli/build.gradle.kts
index 4760c33f0..06d9228b2 100644
--- a/sigstore-cli/build.gradle.kts
+++ b/sigstore-cli/build.gradle.kts
@@ -13,7 +13,7 @@ repositories {
 dependencies {
     implementation(project(":sigstore-java"))
     implementation("info.picocli:picocli:4.7.6")
-    implementation("com.google.guava:guava:33.5.0-jre")
+    implementation("com.google.guava:guava:33.6.0-jre")
 
     implementation(platform("com.google.oauth-client:google-oauth-client-bom:1.39.0"))
     implementation("com.google.oauth-client:google-oauth-client")
diff --git a/sigstore-testkit/build.gradle.kts b/sigstore-testkit/build.gradle.kts
index 6cb7a6d03..1b95370f5 100644
--- a/sigstore-testkit/build.gradle.kts
+++ b/sigstore-testkit/build.gradle.kts
@@ -7,7 +7,7 @@ plugins {
 dependencies {
     implementation(project(":sigstore-java"))
     implementation("com.google.code.gson:gson:2.14.0")
-    implementation("com.google.guava:guava:33.5.0-jre")
+    implementation("com.google.guava:guava:33.6.0-jre")
 
     // This is different from typical "testImplementation" dependencies, because
     // testkit exposes junit5 dependencies in its API (e.g. annotations)
diff --git a/tuf-cli/build.gradle.kts b/tuf-cli/build.gradle.kts
index 4d6a457a2..f23c705d0 100644
--- a/tuf-cli/build.gradle.kts
+++ b/tuf-cli/build.gradle.kts
@@ -13,7 +13,7 @@ repositories {
 dependencies {
     implementation(project(":sigstore-java"))
     implementation("info.picocli:picocli:4.7.6")
-    implementation("com.google.guava:guava:33.5.0-jre")
+    implementation("com.google.guava:guava:33.6.0-jre")
 
     implementation(platform("com.google.oauth-client:google-oauth-client-bom:1.39.0"))
     implementation("com.google.oauth-client:google-oauth-client")