fix(deps): update java - autoclosed by renovate-bot · Pull Request #41 · googleads/data-manager-java

renovate-bot · 2026-09-28T03:00:37Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
gradle (source)		minor	`8.12` → `8.14.5`
com.google.crypto.tink:tink-gcpkms	dependencies	minor	`1.10.0` → `1.12.0`
com.google.crypto.tink:tink	dependencies	minor	`1.17.0` → `1.23.0`
org.mockito:mockito-core	dependencies	minor	`5.17.0` → `5.24.0`
joda-time:joda-time (source)	dependencies	minor	`2.8.2` → `2.14.4`

Release Notes

gradle/gradle (gradle)

`v8.14.5`: 8.14.5

Compare Source

The Gradle team is excited to announce Gradle 8.14.5.

Here are the highlights of this release:

Java 24 support
GraalVM Native Image toolchain selection
Enhancements to test reporting
Build Authoring improvements

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.5 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.5 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

`v8.14.4`: 8.14.4

Compare Source

This is a patch release for 8.14. We recommend using 8.14.4 instead of 8.14.

This release addresses two security vulnerabilities:

It also fixes the following issues:

#34365 [Backport] Gradle doesn't stop forked processes
#35125 [Backport] Precompiled script plugin with @file annotation loses package and breaks
#35184 [Backport] Different fingerprints in the compile classpath for the same dependency
#35228 [Backport] Fix dependency resolution issues
#35288 [Backport] Include GradleDslBaseScriptModel in 8.x
#36326 [Backport] Improve repository disabling logic
#36396 [Backport] Add partial cgroups v2 support
#36420 [Backport] Improve Java 25 support in Gradle 8.14

Read the Release Notes

Upgrade instructions

Switch your build to use Gradle 8.14.4 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.4 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

`v8.14.3`: 8.14.3

Compare Source

The Gradle team is excited to announce Gradle 8.14.3.

This is a patch release for 8.14. We recommend using 8.14.3 instead of 8.14.

Here are the highlights of this release:

Java 24 support
GraalVM Native Image toolchain selection
Enhancements to test reporting
Build Authoring improvements

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.3 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.3 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

`v8.14.2`: 8.14.2

Compare Source

The Gradle team is excited to announce Gradle 8.14.2.

Here are the highlights of this release:

Java 24 support
GraalVM Native Image toolchain selection
Enhancements to test reporting
Build Authoring improvements

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.2 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.2 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

`v8.14.1`: 8.14.1

Compare Source

The Gradle team is excited to announce Gradle 8.14.1.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.1 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.1 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

`v8.14`: 8.14

Compare Source

The Gradle team is excited to announce Gradle 8.14.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

`v8.13`: 8.13

Compare Source

The Gradle team is excited to announce Gradle 8.13.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
Adam,
Ahmad Al-Masry,
Ahmed Ehab,
Aurimas,
Baptiste Decroix,
Björn Kautler,
Borewit,
Jorge Matamoros,
Lei Zhu,
Madalin Valceleanu,
Mohammed Thavaf,
Patrick Brückner,
Philip Wedemann,
Roberto Perez Alcolea,
Róbert Papp,
Semyon Gaschenko,
Shi Chen,
Stefan M.,
Steven Schoen,
tg-freigmbh,
TheGoesen,
Tony Robalik,
Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 8.13 by updating your wrapper:

./gradlew wrapper --gradle-version=8.13 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

`v8.12.1`: 8.12.1

Compare Source

The Gradle team is excited to announce Gradle 8.12.1.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Abhiraj Adhikary,
Ayush Saxena,
Björn Kautler,
davidburstrom,
Dominic Fellbaum,
Emmanuel Ferdman,
Finn Petersen,
Johnny Lim,
Mahdi Hosseinzadeh,
Martin Bonnin,
Paint_Ninja,
Petter Måhlén,
Philip Wedemann,
stegeto22,
Tanish,
TheGoesen,
Tim Nielens,
Trout Zhang,
Victor Merkulov

Upgrade instructions

Switch your build to use Gradle 8.12.1 by updating your wrapper:

./gradlew wrapper --gradle-version=8.12.1

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

tink-crypto/tink-java-gcpkms (com.google.crypto.tink:tink-gcpkms)

`v1.12.0`

Tink is a multi-language, cross-platform library that provides simple and misuse-proof APIs for common cryptographic tasks.

This is Tink Java GCP KMS extension 1.12.0

What's new

The complete list of changes since 1.11.0 can be found
here.

Added support for PQC algorithms in Asymmetric Key signing:
- ML-DSA-{44,65,87}
- Three ML-DSA external-mu variants
- SLH-DSA
- Hash-SLH-DSA
Added support for additional algorithms in Asymmetric Key verification:
- RSA
- ECDSA
- ML-DSA-{44,65,87}
- Three ML-DSA external-mu variants
- SLH-DSA
Removed WORKSPACE support; users now must either get tink-gcpkms as a Maven
dependency or a bzlmod one.
Added dependencies:
- org.bouncycastle:bcprov-jdk18on:1.84
Updated dependencies:
- com.google.crypto.tink:tink -> 1.22.0
- com.google.protobuf:protobuf-java -> 4.33.6,
- com.google.cloud:google-cloud-kms: 2.63.0 => 2.96.0
- com.google.api.grpc:grpc-google-cloud-kms-v1: 0.154.0 => 2.96.0
- com.google.api.grpc:proto-google-cloud-kms-v1: 0.154.0 => 2.96.0

Maven:

<dependency>
    <groupId>com.google.crypto.tink</groupId>
    <artifactId>tink-gcpkms</artifactId>
    <version>1.12.0</version>
</dependency>

Bazel:

Add the following to your MODULE.bazel file.

bazel_dep(name = "tink_java_gcpkms")

git_override(
    module_name = "tink_java_gcpkms",
    remote = "https://github.com/tink-crypto/tink-java-gcpkms",
    tag = "v1.12.0",
)

`v1.11.0`

Tink is a multi-language, cross-platform library that provides simple and misuse-proof APIs for common cryptographic tasks.

This is Tink Java Google Cloud KMS extension 1.11.0.

To get started using the Tink Java Google Cloud KMS extension, see the setup guide.

What's new

The complete list of changes since 1.10.0 can be found here.

Support the Cloud KMS Asymmetric Sign feature.
Add integrity checks to the AEAD implementation.
Add support for MAC computation and verification.
Updated dependencies:
- com.google.cloud:google-cloud-kms: 2.48.0 => 2.63.0
- com.google.api.grpc:grpc-google-cloud-kms-v1: 0.139.0 => 0.154.0
- com.google.api.grpc:proto-google-cloud-kms-v1: 0.139.0 => 0.154.0
- com.google.auth:google-auth-library-oauth2-http: 1.23.0 => 1.33.1
- com.google.protobuf:protobuf-java: 3.25.3 => 3.25.5
- com.google.protobuf:protobuf-javalite: 3.25.3 => 3.25.5
- com.google.errorprone:error_prone_annotations: 2.28.0 => 2.36.0
- com.google.http-client:google-http-client: 1.44.2 => 1.46.3
- com.google.http-client:google-http-client-gson: 1.44.2 => 1.46.3
- com.google.api-client:google-api-client: 2.2.0 => 2.7.2
- com.google.guava:guava: 33.2.1-jre => 33.4.0-jre
- com.google.crypto.tink:tink: 1.14.1 => 1.15.0

Future work

To see what we're working towards, check our project roadmap.

Getting started

To get started see the setup guide.

Maven:

<dependency>
    <groupId>com.google.crypto.tink</groupId>
    <artifactId>tink-gcpkms</artifactId>
    <version>1.11.0</version>
</dependency>

Bazel:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

RULES_JVM_EXTERNAL_TAG = "5.3"
RULES_JVM_EXTERNAL_SHA ="6cc8444b20307113a62b676846c29ff018402fd4c7097fcd6d0a0fd5f2e86429"

http_archive(
    name = "rules_jvm_external",
    strip_prefix = "rules_jvm_external-%s" % RULES_JVM_EXTERNAL_TAG,
    sha256 = RULES_JVM_EXTERNAL_SHA,
    url = "https://github.com/bazelbuild/rules_jvm_external/archive/refs/tags/%s.zip" % RULES_JVM_EXTERNAL_TAG,
)

load("@rules_jvm_external//:repositories.bzl", "rules_jvm_external_deps")

rules_jvm_external_deps()

load("@rules_jvm_external//:setup.bzl", "rules_jvm_external_setup")

rules_jvm_external_setup()

load("@rules_jvm_external//:defs.bzl", "maven_install")

maven_install(
    artifacts = [
        "com.google.crypto.tink:tink-gcpkms:1.11.0", # Installs tink-java@1.15.0
        # ... other dependencies ...
    ],
    repositories = [
        "https://repo1.maven.org/maven2",
    ],
)

tink-crypto/tink-java (com.google.crypto.tink:tink)

`v1.23.0`: Tink Java v1.23.0

Tink is a multi-language, cross-platform library that provides simple and misuse-proof APIs for common cryptographic tasks.

This is Tink Java 1.23.0.

The complete list of changes since 1.22.0 can be found here.

Upgraded dependencies:
- com.google.protobuf:protobuf-java -> 4.33.6
Upgraded Bazel version to 9.

Maven:

<dependency>
    <groupId>com.google.crypto.tink</groupId>
    <artifactId>tink</artifactId>
    <version>1.23.0</version>
</dependency>

Gradle:

dependencies {
  implementation 'com.google.crypto.tink:tink-android:1.23.0'
}

Bazel:

Using bzlmod

bazel_dep(name = "tink_java")

git_override(
    module_name = "tink_java",
    remote = "https://github.com/tink-crypto/tink-java",
    tag = "v1.23.0",
)

`v1.22.0`: Tink Java v1.22.0

Tink is a multi-language, cross-platform library that provides simple and misuse-proof APIs for common cryptographic tasks.

This is Tink Java 1.22.0

The complete list of changes since 1.21.0 can be found here.

In MutableKeyDerivationRegistry, key derivation no longer occurs within a synchronized block.
Maven signatures are now more usual ASCII-armored GPG signatures instead of binary signatures.
Added predefined signature parameters for SLH-DSA.
Added support for ML-DSA-44 signature primitive and PEM import.
Added SignatureJwkSetConverter, which is a utility library that converts signature public keys from and to a JWK set.
Tink now correctly contains class files which target Java Version 11 (major version 55). Tink requires Java 11 since Tink 1.19: https://github.com/tink-crypto/tink-java/releases/tag/v1.19.0. See also #68.
Stop running tests on API 23, in preparation for increasing Tink's minSdkVersion to 24 in line with androidx. See https://issuetracker.google.com/issues/474169350
Added more no-prefix variants to predefined MAC and Signature parameters.

Maven:

<dependency>
    <groupId>com.google.crypto.tink</groupId>
    <artifactId>tink</artifactId>
    <version>1.22.0</version>
</dependency>

Gradle:

dependencies {
  implementation 'com.google.crypto.tink:tink-android:1.22.0'
}

Bazel:

Using bzlmod

bazel_dep(name = "tink_java")

git_override(
    module_name = "tink_java",
    remote = "https://github.com/tink-crypto/tink-java",
    tag = "v1.22.0",
)

`v1.21.0`: Tink Java v1.21.0

Tink is a multi-language, cross-platform library that provides simple and misuse-proof APIs for common cryptographic tasks.

This is Tink Java 1.21.0

The complete list of changes since 1.20.0 can be found here.

Added methods addAnnotations to KeysetHandle.Builder and getAnnotationsOrNull to KeysetHandle. This allows attaching arbitrary information to a KeysetHandle, which can be useful when one has deep stacks.
A set of accessor methods in RawJwt has been made public.
Added general support for ML-DSA-87.
SignaturePemKeysetReader now supports ML-DSA-65, ML-DSA-87 and Ed25519.
Added buildPublicKeysetHandle method to SignaturePemKeysetReader.Builder, which replaces the deprecated build method.

Maven:

<dependency>
    <groupId>com.google.crypto.tink</groupId>
    <artifactId>tink</artifactId>
    <version>1.21.0</version>
</dependency>

Gradle:

dependencies {
  implementation 'com.google.crypto.tink:tink-android:1.21.0'
}

Bazel:

Using bzlmod

bazel_dep(name = "tink_java")

git_override(
    module_name = "tink_java",
    remote = "https://github.com/tink-crypto/tink-java",
    tag = "v1.21.0",
)

`v1.20.0`: Tink Java v1.20.0

Tink is a multi-language, cross-platform library that provides simple and misuse-proof APIs for common cryptographic tasks.

This is Tink Java 1.20.0

The complete list of changes since 1.19.0 can be found here.

Updated the Protobuf dependency to 4.33.0.
Improved performance for creating JWT signature primitives.
Dropped support for WORKSPACE Bazel files.
Allow using 32-byte keys in subtle AES-SIV primitive.
Fixed #63

Maven:

<dependency>
    <groupId>com.google.crypto.tink</groupId>
    <artifactId>tink</artifactId>
    <version>1.20.0</version>
</dependency>

Gradle:

dependencies {
  implementation 'com.google.crypto.tink:tink-android:1.20.0'
}

Bazel:

Using bzlmod

bazel_dep(name = "tink_java")

git_override(
    module_name = "tink_java",
    remote = "https://github.com/tink-crypto/tink-java",
    tag = "v1.20.0",
)

`v1.19.0`: Tink Java v1.19.0

Tink is a multi-language, cross-platform library that provides simple and misuse-proof APIs for common cryptographic tasks.

This is Tink Java 1.19

The complete list of changes since 1.18.0 can be found here.

Build changes

For Bazel builds, we now use Bazel 7.6.1. in our tests.
For Bazel builds, Tink now supports bzlmod.
Tink no longer supports Java 8. The minimum version starting from 1.19.0 is Java 11.

Dependencies

Protobuf 4.28.2 was upgraded to Protobuf 4.32.1. (Note: we plan to shade protobuf in the next minor version of Tink which should resolve compatibility issues)

Obscure behaviour changes

Tink will reject custom key types where the Type-Url has non-ASCII characters.
Tink may serialize keysets slightly differently in certain cases. For
example, in the serialization of a ECDSA keyset, the points might be padded
differently than before. Users should not depend on the exact format of
Tink's serialization.
Use Conscrypt's AES-CMAC implementation when available and when the input is larger than 64 byte. This may improves the performance of AES-CMAC, AES-SIV and AES-EAX for large inputs.
Removed usage of thread-local Ciphers for ChaCha20Poly1305.

Added APIs

Added public JwtEcdsaParameters.Algorithm.getEcParameterSpec method.
The AES-SIV implementation in subtle now accepts multiple associated datas.

Future work

To see what we're working towards, check our project roadmap.

Getting started

To get started using Tink, see the setup guide.

Maven:

<dependency>
    <groupId>com.google.crypto.tink</groupId>
    <artifactId>tink</artifactId>
    <version>1.19.0</version>
</dependency>

Gradle:

dependencies {
  implementation 'com.google.crypto.tink:tink-android:1.19.0'
}

Bazel:

Using bzlmod

bazel_dep(name = "tink_java", version = "1.19.0")

git_override(
    module_name = "tink_java",
    remote = "https://github.com/tink-crypto/tink-java",
    tag = "v1.19.0",
)

Using WORKSPACE

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

RULES_JVM_EXTERNAL_TAG = "4.5"
RULES_JVM_EXTERNAL_SHA ="b17d7388feb9bfa7f2fa09031b32707df529f26c91ab9e5d909eb1676badd9a6"

http_archive(
    name = "rules_jvm_external",
    strip_prefix = "rules_jvm_external-%s" % RULES_JVM_EXTERNAL_TAG,
    sha256 = RULES_JVM_EXTERNAL_SHA,
    url = "https://github.com/bazelbuild/rules_jvm_external/archive/refs/tags/%s.zip" % RULES_JVM_EXTERNAL_TAG,
)

load("@rules_jvm_external//:repositories.bzl", "rules_jvm_external_deps")

rules_jvm_external_deps()

load("@rules_jvm_external//:setup.bzl", "rules_jvm_external_setup")

rules_jvm_external_setup()

load("@rules_jvm_external//:defs.bzl", "maven_install")

maven_install(
    artifacts = [
        "com.google.crypto.tink:tink:NEXT_VERSION",
        # ... other dependencies ...
    ],
    repositories = [
        "https://repo1.maven.org/maven2",
    ],
)

Alternatively, one can build Tink from source, and include it with
http_archive:

http_archive(
    name = "com_github_tink_crypto_tink_java",
    urls = ["https://github.com/tink-crypto/tink-java/archive/refs/tags/NEXT_VERSION.zip"],
    strip_prefix = "tink-java-NEXT_VERSION",
    sha256 = ...
)

load("@tink_java//:tink_java_deps.bzl", "TINK_MAVEN_ARTIFACTS", "tink_java_deps")

tink_java_deps()

load("@tink_java//:tink_java_deps_init.bzl", "tink_java_deps_init")

tink_java_deps_init()

# ...

maven_install(
    artifacts = TINK_MAVEN_ARTIFACTS + # ... other dependencies ...
    repositories = [
        "https://repo1.maven.org/maven2",
    ],
)

`v1.18.0`: Tink Java v1.18.0

Tink is a multi-language, cross-platform library that provides simple and
misuse-proof APIs for common cryptographic tasks.

This is Tink Java 1.18.0

The complete list of changes since 1.17.0 can be found here.

Dropped support

Tink Android no longer supports API level 21 and 22. From Tink 1.18.0, the
minimum API level is 23.
Removed Registry.wrap. This API cannot have been used by users: the
PrimitiveSet needed for it was already moved to internal in Tink 1.13.0.

New Features

Use Conscrypt's implementation of Ed25519 when available.
Improved performance of AES-GCM-SIV.
Tink now provides a flag GlobalTinkFlags.validateKeysetsOnParsing(). If
set to true, Tink will run certain validations on a keyset before it creates
a KeysetHandle. We plan to flip the default of this flag to true in Tink
2.0.

Bug fixes

AeadConfig.register() now always registers AES-GCM-SIV. If it's not
supported by the registered JCE Providers, it will fail when the primitive
is created.
The Aead implementation returned by
com.google.crypto.tink.integration.android.AndroidKeystore.getAead()
created invalid ciphertexts on Android API version 28 and older when
the input was larger than 128kB. Now, it throws an exception instead.
JwtHmacKey, LegacyKmsAeadKey, and LegacyKmsEnvelopeAeadKey are now
final. These cannot be properly subclassed as this would break equalsKey.

Obscure behaviour changes

Primitive creation of AES-GCM-SIV now will fail if the algorithm is not
available. Previously, this used to work with some Configurations succeeding
and the primitive then failed when encrypt or decrypt was called.

Future work

To see what we're working towards, check our
project roadmap.

Getting started

To get started using Tink, see
the setup guide.

Maven:

<dependency>
    <groupId>com.google.crypto.tink</groupId>
    <artifactId>tink</artifactId>
    <version>1.18.0</version>
</dependency>

Gradle:

dependencies {
  implementation 'com.google.crypto.tink:tink-android:1.18.0'
}

Bazel:

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

RULES_JVM_EXTERNAL_TAG = "4.5"
RULES_JVM_EXTERNAL_SHA ="b17d7388feb9bfa7f2fa09031b32707df529f26c91ab9e5d909eb1676badd9a6"

http_archive(
    name = "rules_jvm_external",
    strip_prefix = "rules_jvm_external-%s" % RULES_JVM_EXTERNAL_TAG,
    sha256 = RULES_JVM_EXTERNAL_SHA,
    url = "https://github.com/bazelbuild/rules_jvm_external/archive/refs/tags/%s.zip" % RULES_JVM_EXTERNAL_TAG,
)

load("@rules_jvm_external//:repositories.bzl", "rules_jvm_external_deps")

rules_jvm_external_deps()

load("@rules_jvm_external//:setup.bzl", "rules_jvm_external_setup")

rules_jvm_external_setup()

load("@rules_jvm_external//:defs.bzl", "maven_install")

maven_install(
    artifacts = [
        "com.google.crypto.tink:tink:1.18.0",
        # ... other dependencies ...
    ],
    repositories = [
        "https://repo1.maven.org/maven2",
    ],
)

Alternatively, one can build Tink from source, and include it with
http_archive:

http_archive(
    name = "com_github_tink_crypto_tink_java",
    urls = ["https://github.com/tink-crypto/tink-java/archive/refs/tags/1.18.0.zip"],
    strip_prefix = "tink-java-1.18.0",
    sha256 = ...
)

load("@tink_java//:tink_java_deps.bzl", "TINK_MAVEN_ARTIFACTS", "tink_java_deps")

tink_java_deps()

load("@tink_java//:tink_java_deps_init.bzl", "tink_java_deps_init")

tink_java_deps_init()

# ...

maven_install(
    artifacts = TINK_MAVEN_ARTIFACTS + # ... other dependencies ...
    repositories = [
        "https://repo1.maven.org/maven2",
    ],
)

mockito/mockito (org.mockito:mockito-core)

`v5.24.0`

Compare Source

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.24.0

2026-09-23 - 27 commit(s) by Andrei Solntsev, DragonFSKY, Hünkar Can Tunç, Joshua Selbo, M. Minot, Markus Gaisbauer, Mirko Alicastro, Vinod Kumar M ( codingkiddo ), dependabot[bot]
Fix Mockito docs for -javaagent flag with Gradle (#3866)
Kotlin example for adding Mockito as an agent is incorrect (#3864)
Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 (#3862)
Bump gradle/actions from 6.2.0 to 6.3.0 (#3852)
Bump gradle/actions from 5 to 6.2.0 (#3851)
Preserve method parameters when clearing inline mocks (#3847)
Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 (#3845)
Print object fields via reflection when toString() is not implemented (#3844)
Migrate extensions-tests to JUnit Jupiter (#3840)
Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 (#3839)
docs(when-verify): fixes to explanations about redundancy (#3838)
Confusing inconsistency in example method calls in “stubbing and verifying is redundant” note of “when” and “verify” Javadoc (#3837)
Bump actions/checkout from 6 to 7 (#3836)
Fixes #2740 : Add mockMaker option to @Spy annotation (#3835)
Bump graalvm/setup-graalvm from 1.5.5 to 1.5.6 (#3834)
Bump graalvm/setup-graalvm from 1.5.4 to 1.5.5 (#3833)
Bump codecov/codecov-action from 6 to 7 (#3831)
Bump graalvm/setup-graalvm from 1.4.5 to 1.5.4 (#3830)
Fix clearInlineMocks not de-registering singleton mocks (#3829)
Fix NotAMockException when using mockSingleton with MockitoJUnit (#3827)
NotAMockException when using mockSingleton with MockitoSession or MockitoJUnit (#3826)
Improve Gradle agent docs for configuration cache (#3823)
Gradle documentation for setting up instrumentation with Gradle configuration cache (#3822)
Fixes #3818 : Fix data race in InvocationContainerImpl.invocationForStubbing (#3819)
Data race on invocationForPotentialStubbing (#3818)
Fixes #3814 : implement package-level clinit suppression (#3815)
Package-level clinit suppression (#3814)
Upgrade Android Gradle Plugin to 8.13.2 (#3812)
Replaces raw generic types with type parameters (#3806)
Fixes #2398 : Implement global suppress static initialization leveraging java agent (#3801)
Bump codecov/codecov-action from 5 to 6 (#3800)
Fix non-deterministic AssertionError when using MockMakers.SUBCLASS (#3406, #2823) (#3795)
Fixes #3536 : Implement SpyStatic API (#3794)
The class's MethodParameters are removed after clearAllCaches is invoked (#3763)
[FeatureRequest / Idea] Create Mockito.spyStatic (#3536)
Add option to specify mockmaker for @Spy (#2740)
How can I suppress static initializer? (#2398)

`v5.23.0`

Compare Source

NOTE: Breaking change for Android

The mockito-android artifact has a breaking change: tests now require a device or emulator based on API 28+ (Android P). This is to enable new support for mocking Kotlin classes. See #3788 for more details.

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.23.0

2026-03-11 - 6 commit(s) by Brice Dutheil, Joshua Selbo, Philippe Kernevez
Replace mockito-android mock maker implementation with dexmaker-mockito-inline (#3792)
Fix StackOverflowError with AbstractList after using mockSingleton (#3790)
Mark parameters of Mockito.when @Nullable (#3503)

`v5.22.0`

Compare Source

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.22.0

2026-02-27 - 6 commit(s) by Joshua Selbo, NiMv1, Rafael Winterhalter, dependabot[bot], eunbin son
Avoid mocking of internal static utilities (#3785)
Bump graalvm/setup-graalvm from 1.4.4 to 1.4.5 (#3780)
Static mocking of UUID.class corrupted under JDK 25 (#3778)
Bump actions/upload-artifact from 5 to 6 (#3774)
docs: clarify RETURNS_MOCKS behavior with sealed abstract enums (Java 15+) (#3773)
Add tests for Sets utility class (#3771)
Add core API to enable Kotlin singleton mocking (#3762)
Stubbing Kotlin object singletons (#3652)
Incorrect documentation for RETURNS_MOCKS (#3285)

`v5.21.0`

Compare Source

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.21.0

2025-12-09 - 17 commit(s) by Giulio Longfils, Joshua Selbo, Woongi9, Zylox, dependabot[bot]
Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 (#3768)
Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 (#3767)
Bump actions/checkout from 5 to 6 (#3765)
Adds output of matchers to potential mismatch; Fixes #2468 (#3760)
Forbid mocking WeakReference with inline mock maker (#3759)
StackOverflowError when mocking WeakReference (#3758)
Bump actions/upload-artifact from 4 to 5 (#3756)
Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 (#3755)
Support primitives in GenericArrayReturnType. (#3753)
ClassNotFoundException when stubbing array of primitive type on Android (#3752)
Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 (#3744)
Bump gradle/actions from 4 to 5 (#3743)
Bump org.graalvm.buildtools.native from 0.11.0 to 0.11.1 (#3738)
Bump com.diffplug.spotless:spotless-plugin-gradle from 7.2.1 to 8.0.0 (#3735)
Bump graalvm/setup-graalvm from 1.3.7 to 1.4.0 (#3734)
Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 (#3733)
Bump errorprone from 2.41.0 to 2.42.0 (#3732)
Feat: automatically detect class to mock in mockStatic and mockConstruction (#3731)
Return completed futures for unstubbed Future/CompletionStage in ReturnsEmptyValues (#3727)
automatically detect class to mock (#2779)
Incorrect "has following stubbing(s) with different arguments" message when using Argument Matchers (#2468)

`v5.20.0`

Compare Source

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.20.0

2025-09-20 - 11 commit(s) by Adrian-Kim, Giulio Longfils, Rafael Winterhalter, dependabot[bot]
Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (#3730)
Introducing the Ability to Mock Construction of Generic Types (#2401) (#3729)
Bump com.gradle.develocity from 4.1.1 to 4.2 (#3726)
Bump graalvm/setup-graalvm from 1.3.6 to 1.3.7 (#3725)
Bump org.eclipse.platform:org.eclipse.osgi from 3.23.100 to 3.23.200 (#3720)
Bump graalvm/setup-graalvm from 1.3.5 to 1.3.6 (#3719)
Bump actions/setup-java from 4 to 5 (#3715)
Bump com.gradle.develocity from 4.1 to 4.1.1 (#3713)
Bump bytebuddy from 1.17.6 to 1.17.7 (#3712)
test: Use Assume.assumeThat for SequencedCollection tests (#3711)
Fix #3709 (#3710)
feat: Add support for JDK21 Sequenced Collections. (#3708)
Introducing the Ability to Mock Construction of Generic Types (#2401)

`v5.19.0`

Compare Source

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.19.0

2025-08-15 - 37 commit(s) by Adrian-Kim, Tim van der Lippe, Tran Ngoc Nhan, dependabot[bot], juyeop
feat: Add support for JDK21 Sequenced Collections. (#3708)
Bump actions/checkout from 4 to 5 (#3707)
build: Allow overriding 'Created-By' for reproducible builds (#3704)
Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3703)
Bump androidx.test:runner from 1.6.2 to 1.7.0 (#3697)
Bump org.junit.platform:junit-platform-launcher from 1.13.3 to 1.13.4 (#3694)
Bump com.diffplug.spotless:spotless-plugin-gradle from 7.1.0 to 7.2.1 (#3693)
Bump junit-jupiter from 5.13.3 to 5.13.4 (#3691)
Bump com.gradle.develocity from 4.0.2 to 4.1 (#3689)
Bump com.google.googlejavaformat:google-java-format from 1.27.0 to 1.28.0 (#3688)
Bump com.google.googlejavaformat:google-java-format from 1.25.2 to 1.27.0 (#3686)
Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.4 to 7.1.0 (#3685)
Bump junit-jupiter from 5.13.2 to 5.13.3 (#3684)
Bump org.shipkit:shipkit-auto-version from 2.1.0 to 2.1.2 (#3683)
Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.2 to 7.0.4 (#3682)
Only run release after both Java and Android tests have finished
(#3681)
Bump org.junit.platform:junit-platform-launcher from 1.12.2 to 1.13.3 (#3680)
Bump org.codehaus.groovy:groovy from 3.0.24 to 3.0.25 (#3679)
Bump org.eclipse.platform:org.eclipse.osgi from 3.23.0 to 3.23.100 (#3678)
Can no longer publish snapshot releases (#3677)
Update Gradle to 8.14.2 (#3676)
Bump errorprone from 2.23.0 to 2.39.0 (#3674)
Correct Junit docs link (#3672)
Bump net.ltgt.gradle:gradle-errorprone-plugin from 4.1.0 to 4.3.0 [(#3670)](https://redirect.github.com

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

jradcliff

On hold. Too many unrelated updates in one commit.

forking-renovate Bot added the dependencies label Sep 28, 2026

renovate-bot force-pushed the renovate/java branch from 956486b to 1fe68c1 Compare September 29, 2026 13:54

jradcliff approved these changes Sep 29, 2026

View reviewed changes

jradcliff requested changes Sep 29, 2026

View reviewed changes

fix(deps): update java

df55d2c

renovate-bot force-pushed the renovate/java branch from 1fe68c1 to df55d2c Compare September 29, 2026 18:41

renovate-bot changed the title ~~fix(deps): update java~~ fix(deps): update java - autoclosed Sep 29, 2026

renovate-bot closed this Sep 29, 2026

renovate-bot deleted the renovate/java branch September 29, 2026 19:28

Navigation Menu

fix(deps): update java - autoclosed - #41

fix(deps): update java - autoclosed#41
renovate-bot wants to merge 1 commit into
googleads:mainfrom
renovate-bot:renovate/java

renovate-bot commented Sep 28, 2026 •

edited

Loading

Uh oh!

jradcliff left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

renovate-bot commented Sep 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v8.14.5: 8.14.5

Upgrade instructions

Reporting problems

v8.14.4: 8.14.4

Upgrade instructions

Reporting problems

v8.14.3: 8.14.3

Upgrade instructions

Reporting problems

v8.14.2: 8.14.2

Upgrade instructions

Reporting problems

v8.14.1: 8.14.1

Upgrade instructions

Reporting problems

v8.14: 8.14

Upgrade instructions

Reporting problems

v8.13: 8.13

Upgrade instructions

Reporting problems

v8.12.1: 8.12.1

Upgrade instructions

Reporting problems

What's new

Maven:

Bazel:

What's new

Future work

Getting started

Maven:

Bazel:

v1.23.0: Tink Java v1.23.0

Maven:

Gradle:

Bazel:

Using bzlmod

v1.22.0: Tink Java v1.22.0

Maven:

Gradle:

Bazel:

Using bzlmod

v1.21.0: Tink Java v1.21.0

Maven:

Gradle:

Bazel:

Using bzlmod

v1.20.0: Tink Java v1.20.0

Maven:

Gradle:

Bazel:

Using bzlmod

v1.19.0: Tink Java v1.19.0

Build changes

Dependencies

Obscure behaviour changes

Added APIs

Future work

Getting started

Maven:

Gradle:

Bazel:

Using bzlmod

Using WORKSPACE

v1.18.0: Tink Java v1.18.0

Dropped support

New Features

Bug fixes

Obscure behaviour changes

Future work

Getting started

Maven:

Gradle:

Bazel:

5.24.0

NOTE: Breaking change for Android

renovate-bot commented Sep 28, 2026 •

edited

Loading

`v8.14.5`: 8.14.5

`v8.14.4`: 8.14.4

`v8.14.3`: 8.14.3

`v8.14.2`: 8.14.2

`v8.14.1`: 8.14.1

`v8.14`: 8.14

`v8.13`: 8.13

`v8.12.1`: 8.12.1

`v1.23.0`: Tink Java v1.23.0

`v1.22.0`: Tink Java v1.22.0

`v1.21.0`: Tink Java v1.21.0

`v1.20.0`: Tink Java v1.20.0

`v1.19.0`: Tink Java v1.19.0

`v1.18.0`: Tink Java v1.18.0