[DT-400-gradle]: Bump the gradle-dependencies group across 1 directory with 6 updates

[dependabot]

Bumps the gradle-dependencies group with 6 updates in the / directory:

Package	From	To
org.sonarqube	7.3.0.8198	7.4.0.8496
com.google.guava:guava	33.4.8-jre	33.6.0-jre
com.fasterxml.jackson:jackson-bom	2.21.3	2.22.0
com.google.cloud:libraries-bom	26.82.0	26.86.0
org.apache.commons:commons-collections4	4.5.0	4.6.0
com.diffplug.spotless:spotless-plugin-gradle	8.5.1	8.9.0

Updates org.sonarqube from 7.3.0.8198 to 7.4.0.8496

Updates com.google.guava:guava from 33.4.8-jre to 33.6.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.6.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.6.0-jre</version>
  <!-- or, for Android: -->
  <version>33.6.0-android</version>
</dependency>

Jar files

• 33.6.0-jre.jar
• 33.6.0-android.jar

Guava requires one runtime dependency, which you can download here:

• failureaccess-1.0.3.jar

Javadoc

• 33.6.0-jre
• 33.6.0-android

JDiff

• 33.6.0-jre vs. 33.5.0-jre
• 33.6.0-android vs. 33.5.0-android
• 33.6.0-android vs. 33.6.0-jre

Changelog

• Migrated some classes from finalize() to PhantomReference in preparation for the removal of finalization. (786b619dd6, 7c6b17c, aeef90988d)
• cache: Deprecated CacheBuilder APIs that use TimeUnit in favor of those that use Duration. (73f8b0bb84)
• collect: Added toImmutableSortedMap collectors that use the natural comparator. (64d70b9f94)
• collect: Changed ConcurrentHashMultiset, ImmutableMultimap, and TreeMultiset deserialization to avoid mutating final fields. In extremely unlikely scenarios in which an instance of that type contains an object that refers back to that instance, this could lead to a broken instance that throws NullPointerException when used. (8240c7e596, 046468055f)
• graph: Removed @Beta from all APIs in the package. (dae9566b73)
• graph: Added support to Graphs.transitiveClosure() for different strategies for adding self-loops. (2e13df25b2)
• graph: Added an asNetwork() view to Graph and ValueGraph. (909c593c61)
• hash: Added BloomFilter.serializedSize(). (df9bcc251a)
• net: Added HttpHeaders.CDN_CACHE_CONTROL. (75331b5030)

33.5.0

Maven

<dependency>
</tr></table> 

... (truncated)

Commits

• See full diff in compare view

Updates com.fasterxml.jackson:jackson-bom from 2.21.3 to 2.22.0

Commits

• 112e859 [maven-release-plugin] prepare release jackson-bom-2.22.0
• 2cae2ce Prep for 2.22.0 release
• 7955d21 Merge branch '2.21' into 2.x
• 8922a05 Post-release dep version bump
• 1fa9943 [maven-release-plugin] prepare for next development iteration
• d1abd31 [maven-release-plugin] prepare release jackson-bom-2.21.4
• 2aaea43 Prep for 2.21.4 release
• 902ec69 Update Woodstox/stax2-api (to 7.2.0/4.3.0)
• 2570647 Merge branch '2.21' into 2.x
• 9d3a9d5 Post-release dep version bump
• Additional commits viewable in compare view

Updates com.google.cloud:libraries-bom from 26.82.0 to 26.86.0

Release notes

Sourced from com.google.cloud:libraries-bom's releases.

GCP Libraries BOM 26.86.0

Here are the differences from the previous version (26.85.1)

New Addition

• com.google.cloud:google-cloud-commerceproducer:0.1.0
• com.google.cloud:google-cloud-agentidentity:0.1.0
• com.google.cloud:google-cloud-sql:0.1.0
• com.google.cloud:google-cloud-productregistry:0.1.0

The group ID of the following artifacts is com.google.cloud.

Notable Changes

Other libraries

• agentidentity: onboard v1 and v1beta API versions (#13796) (1b1300d)

• auth: add JSpecify Null annotations to Auth (#13842) (f6f24d4)

• bigquery-jdbc: add SSLTrustStoreType and SSLTrustStoreProvider connection properties (#13858) (9449be1)

• bigquery-jdbc: add otel trace and span IDs to local logs (#13935) (2801fbd)

• bigquery-jdbc: implement BigQueryParameterMetaData and dynamic type mappings (#13812) (3d67dba)

• bigquery-jdbc: implement parameter setters in PreparedStatement (#13792) (94f7404)

• bigquery-jdbc: Migrate getImportedKeys and getCrossReference to BQ API (#13692) (082b046)

• bigquery-jdbc: migrate getPrimaryKeys to use BQ API (#13691) (1951f49)

• bigquery-jdbc: OpenTelemetry integration in BQ JDBC (#12902) (af18f65)

• bigquery-jdbc: optimize memory footprint for JSON result set streaming (#13660) (11f26d3)

• bigquery-jdbc: standardize parameter handling and calendar defensive copying across statement interfaces (#13805) (ccd13eb)

• bigtable: add view_parameters support to BoundStatement (#13673) (d5cc437)

• bigtable: BigtableDataClientFactory session support (#13829) (284ce13)

• commerceproducer: onboard v1beta API (#13814) (61b89b3)

• Default to least-in-flight balancing for Bigtable unary clients (#13802) (ac9ccd1)

• firestore: Add support for 16MB documents (#13478) (1b7c2e0)

• gapic-generator: add JSpecify Null annotations to the generator classes (#13769) (843bd7c)

• gapic-generator: Add Nullable annotation to generated classes (#13558) (e3e9d0b)

• gapic-generator: Add NullMarked annotation to generated classes (#13584) (b7a8504)

• gax-httpjson: Add Post Quantum Cryptography (PQC) Support by default via Conscrypt (#13853) (550df81)

• gax-java: add JSpecify Null annotations to gax (#13799) (65aee08)

• google/cloud/sql: onboard a new library (#13864) (38e272e)

• google/maps/navconnect/v1: onboard a new library (#13927) (2256394)

• maps-isochrones: onboard v1 API (#13817) (3037ab3)

• port secure_context testing support to executor proxy (#13522) (0f81bf0)

• productregistry: onboard v1 API (#13816) (9517313)

• storage: allow checksum on appendable upload finalization (#13833) (ddf9add)

• storage: enable App-Centric Observability (ACO) support in Otel (#13248) (4329896)

• bigquery-jdbc: Add PerConnectionHandler to list of excempted logging classes (#13888) (50b3c24)

• bigquery-jdbc: add preferIPv4Stack to argLine for Kokoro reliability (#13923) (d5e33d6)

• bigquery-jdbc: add service resource transformer for standalone IT (#13893) (dc80fe8)

• bigquery-jdbc: align metadata methods error handling with spec (#13793) (d85fb10)

... (truncated)

Commits

• See full diff in compare view

Updates org.apache.commons:commons-collections4 from 4.5.0 to 4.6.0

Updates com.diffplug.spotless:spotless-plugin-gradle from 8.5.1 to 8.9.0

Release notes

Sourced from com.diffplug.spotless:spotless-plugin-gradle's releases.

Gradle Plugin v8.9.0

Added

• Add support for Java formatting via prince-of-space with the new princeOfSpace() step. (#2991)

Fixed

• Prevent parallel Gradle input fingerprinting from failing when toggleOffOn() wraps a slow lazy formatter step with no matching target files. (#2994)

Changes

• Bump default greclipse version to latest 4.39 -> 4.40. (#2989)
• Bump default tabletest-formatter version 1.1.1 -> 1.1.2.

Gradle Plugin v8.8.0

Added

• Add support for custom string format for license header copyright year via yearStringFormat(). (#2965)

Gradle Plugin v8.7.0

Added

• Add support for AsciiDoc formatting via adocfmt. (#2960)
• flexmark() step now supports arbitrary formatter options via the formatterOptions map. (#2968)

Fixed

• toggleOffOn no longer disables lint-only steps such as forbidWildcardImports. (#2962)
• Prevent build caches from interfering when executing under the -PspotlessIdeHook mode. (#2365)
• Parse standard git year output in LicenseHeaderStep. (#2940)
• Fix StringIndexOutOfBoundsException in scenarios where copyright year is surrounded by whitespace. (#2973)

Changes

• Bump default greclipse version to latest 4.35 -> 4.39. (#2924)

Gradle Plugin v8.6.0

Added

• Add cacheDirectory(...) to eclipse(), eclipseCdt(), and greclipse(); the default P2 cache is $GRADLE_USER_HOME/caches/p2-data. (#2944)

Fixed

• forbidWildcardImports and forbidModuleImports now detect imports that have leading whitespace (indentation/tabs). (#2939)
• versionCatalog() no longer splits long inline tables across multiple lines — Gradle's TOML 1.0 parser cannot read multi-line inline tables. The maxLineLength option has been removed. (#2948)
• EclipseJdtFormtterStep now can conditionally set compiler source/compliance options. Allows for better parsing of AST Node for newer language features and more correct sorting; e.g. records or seal classes. (#2942)

Changes

• Improved formatting performance by eliminating redundant per-step line-ending normalization in the core formatter loop. (#2934)

Commits

• cbd01c4 Published gradle/8.9.0
• c724e70 Published lib/4.9.0
• 793638d Replace de.atextor:turtle-formatter with cool.rdf:cool-rdf-formatter (#2995)
• 3cb7227 Note Java 25+ requirement for RDF formatter; tidy changelogs
• fd9eb96 Merge remote-tracking branch 'origin/main' into use-cool-rdf-formatter
• d407109 Add support for prince-of-space Java formatter (#2991)
• cb64859 Merge remote-tracking branch 'origin/main' into use-cool-rdf-formatter
• f88db43 Bump tabletest-formatter to 1.1.2 (#3001)
• ec7db39 Bump tabletest-formatter to 1.1.2
• a0e59b6 Remove the round of tests for JRE 25 (breaks elsewhere)
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
com.google.guava:guava	[>= 33.5.a, < 33.6]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions