com.google.guava vulnerability issue in closure-compiler-20220502 about closure-compiler HOT 4 CLOSED

Have you tried upgrading the google_bazel_common version? At the pinned commit https://github.com/google/bazel-common/blob/82a7dd0f4cd8593fdaa40d65a1fa820b14ff3493/workspace_defs.bzl it's on 31.0.1-jre.

Example: google/allocation-instrumenter@2caee14

from closure-compiler.

@lauraharker We tried but we are getting below error. Should we use different version of closure-compiler ?

Building libcompiler_lib_no_runtime_libs-class.jar (786 source files) and running annotation processors (AutoAnnotationProcessor, AutoOneOfProcessor, AutoValueProcessor) failed: (Exit 1): java.exe failed: error executing command external/remotejdk11_win/bin/java.exe -XX:+UseParallelOldGC -XX:-CompactStrings --patch-module=java.compiler=external/remote_java_tools_windows/java_tools/java_compiler.jar ... (remaining 15 argument(s) skipped) src\com\google\javascript\rhino\jstype\NamedType.java:336: error: [CheckReturnValue] Ignored return value of method that is annotated with @CheckReturnValue validator.apply(getReferencedType()); ^ (see https://errorprone.info/bugpattern/CheckReturnValue) Did you mean to remove this line? src\com\google\javascript\rhino\jstype\NamedType.java:365: error: [CheckReturnValue] Ignored return value of method that is annotated with @CheckReturnValue validator.apply(type); ^ (see https://errorprone.info/bugpattern/CheckReturnValue) Did you mean to remove this line? src\com\google\javascript\rhino\jstype\NamedType.java:409: error: [CheckReturnValue] Ignored return value of method that is annotated with @CheckReturnValue validator.apply(getReferencedType()); ^ (see https://errorprone.info/bugpattern/CheckReturnValue) Did you mean to remove this line? Target //:compiler_unshaded_deploy.jar failed to build

from closure-compiler.

Yes, I'd recommend upgrading your version of Closure Compiler. The latest versions shouldn't have this issue.

from closure-compiler.

@lauraharker thank you.

from closure-compiler.