Skip to content

Remove guava dependency - #121

Merged
sbesson merged 1 commit into
ome:masterfrom
melissalinkert:remove-guava
Nov 10, 2026
Merged

sbesson merged 1 commit into
ome:masterfrom
melissalinkert:remove-guava

Conversation

@melissalinkert

Copy link
Copy Markdown
Member

Our usage of guava now appears to be very limited, so replacing likely makes more sense than continuing to address updates to this dependency.

@sbesson sbesson left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The repository tests have been passing with this and ome/bioformats#4499 included in the nightly builds - see https://bf-testing-results.s3.amazonaws.com/2026/2026-11-06/build-status.log.

As demonstrated by the diff, the usage of guava in this component was limited to a few classes and can be easily replaced by built-in APIs available since Java 8.

Defining guava at this level has been the source of downstream issues - see ome/openmicroscopy#6463 and also require a coordinated set of releases to bump the version e.g. in order to include a CVE fix.

Generally, getting rid of guava is consistent with approach taken in #108 to minimize the security surface area of this library and reduce the number of dependencies.

@sbesson
sbesson merged commit 1ba1103 into ome:master Nov 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants