deps!: update guava to 33.4.8-android

.github/sync-repo-settings.yaml

@@ -8,7 +8,6 @@ branchProtectionRules:
     requiresCodeOwnerReviews: true
     requiresStrictStatusChecks: false
     requiredStatusCheckContexts:
-      - units (7)
       - units (8)
       - units (11)
       - windows

README.md

@@ -17,9 +17,7 @@ content. The JSON and XML libraries are also fully pluggable, and they include s
 
 The library supports the following Java environments:
 
-- Java 7 or higher
-  - The google-http-client-jackson2 and google-http-client-appengine modules require Java 8 or
-    higher due to their dependencies.
+- Java 8 or higher
 - Android 4.4 (Kit Kat)
 - GoogleAppEngine Google App Engine
 

pom.xml

@@ -554,7 +554,8 @@
     <project.gson.version>2.11.0</project.gson.version>
     <project.jackson-core2.version>2.18.2</project.jackson-core2.version>
     <project.protobuf-java.version>3.21.12</project.protobuf-java.version>
-    <project.guava.version>30.1.1-android</project.guava.version>
+	<!-- We use the Java 8 compatible version due to https://www.cvedetails.com/cve/CVE-2023-2976/ -->
+    <project.guava.version>33.4.8-android</project.guava.version>
     <project.xpp3.version>1.1.4c</project.xpp3.version>
     <project.apache-httpclient-4.version>4.5.14</project.apache-httpclient-4.version>
     <project.apache-httpcore-4.version>4.4.16</project.apache-httpcore-4.version>