fix(deps): update ProGuard to 7.9.1

[jbeckwith-oai]

Summary

• Update the build-only ProGuard Gradle dependency from 7.4.2 to 7.9.1, the current stable release.
• Move ProGuard’s transitive org.json:json from 20220924 to 20231013.
• Keep the R8 version, shrinker configuration, and SDK keep rules unchanged.

Security coverage

This addresses both open org.json alerts rooted through ProGuard:

• Dependabot release: 0.3.0 #11 / CVE-2022-45688: fixed in 20230227.
• Dependabot docs: swap example from .completions() to .chat().completions() #20 / CVE-2023-5072: fixed in 20231013.

The resolved org.json version is 20231013, satisfying both fixed-version floors. This PR does not claim the separately tracked Log4j remediation.

Compatibility analysis

• proguard-gradle is used only on the openai-java-proguard-test buildscript classpath. It is not a dependency of a published source set, Maven POM, SDK API, or consumer runtime.
• ProGuard 7.9.1 runs successfully with this repository’s Gradle 8.12 and JDK 21 setup. The ProGuard plugin and engine artifacts remain Java 8 bytecode (class-file major version 52).
• A clean ProGuard pass succeeds with the existing keep rules, preserves the embedded META-INF/proguard/openai-java-core.pro resource, and produces a Java 8-compatible test artifact. The full client-construction and Jackson serialization round-trip test passes from that processed artifact.
• The unchanged R8 control pass also succeeds and produces a Java 8-compatible artifact.
• The diff changes one buildscript version only. All four published Maven POMs generate successfully and no SDK source, public API, output target, or publication metadata changes.

Upstream release notes: https://github.com/Guardsquare/proguard/releases/tag/v7.9.1

Validation

• ./scripts/lint
• ./scripts/build --no-daemon
• ./scripts/test --no-daemon
• ./gradlew :openai-java-proguard-test:clean :openai-java-proguard-test:test --no-daemon --stacktrace
• ./gradlew :openai-java-proguard-test:buildEnvironment --no-daemon
• ./gradlew generatePomFileForMavenPublication --no-daemon
• git diff --check origin/main...HEAD

[openai-sdks]

OkTest Summary

✅ 237/237 SDK tests passed in 16.836s for Java SDK PR #782.

Test results — 42 files

Test	Result	Time
tests/chat-completions-complex-body.test.ts	✅ Passed	691ms
tests/chat-completions-create.test.ts	✅ Passed	562ms
tests/chat-completions-stream.test.ts	✅ Passed	368ms
tests/files-content-binary.test.ts	✅ Passed	270ms
tests/files-create-multipart.test.ts	✅ Passed	379ms
tests/files-list-pagination.test.ts	✅ Passed	312ms
tests/initialize-config.test.ts	✅ Passed	165ms
tests/instance-isolation.test.ts	✅ Passed	210ms
tests/models-list.test.ts	✅ Passed	174ms
tests/responses-background-lifecycle.test.ts	✅ Passed	298ms
tests/responses-body-method-errors.test.ts	✅ Passed	560ms
tests/responses-cancel-timeout.test.ts	✅ Passed	254ms
tests/responses-cancel.test.ts	✅ Passed	316ms
tests/responses-compact-retries.test.ts	✅ Passed	390ms
tests/responses-compact.test.ts	✅ Passed	330ms
tests/responses-create-advanced-stream.test.ts	✅ Passed	655ms
tests/responses-create-advanced.test.ts	✅ Passed	1.319s
tests/responses-create-disconnect.test.ts	✅ Passed	1.062s
tests/responses-create-errors.test.ts	✅ Passed	426ms
tests/responses-create-malformed-api-responses.test.ts	✅ Passed	361ms
tests/responses-create-retries.test.ts	✅ Passed	215ms
tests/responses-create-stream-failures.test.ts	✅ Passed	247ms
tests/responses-create-stream-timeout.test.ts	✅ Passed	233ms
tests/responses-create-stream-wire.test.ts	✅ Passed	6.339s
tests/responses-create-stream.test.ts	✅ Passed	422ms
tests/responses-create-terminal-states.test.ts	✅ Passed	534ms
tests/responses-create-timeout.test.ts	✅ Passed	256ms
tests/responses-create.test.ts	✅ Passed	297ms
tests/responses-delete.test.ts	✅ Passed	297ms
tests/responses-input-items-errors.test.ts	✅ Passed	299ms
tests/responses-input-items-list.test.ts	✅ Passed	319ms
tests/responses-input-items-options.test.ts	✅ Passed	227ms
tests/responses-input-tokens-count-timeout.test.ts	✅ Passed	251ms
tests/responses-input-tokens-count.test.ts	✅ Passed	451ms
tests/responses-malformed-inputs.test.ts	✅ Passed	5.081s
tests/responses-not-found-errors.test.ts	✅ Passed	381ms
tests/responses-parse.test.ts	✅ Passed	504ms
tests/responses-retrieve-retries.test.ts	✅ Passed	868ms
tests/responses-retrieve.test.ts	✅ Passed	299ms
tests/responses-stored-method-errors.test.ts	✅ Passed	989ms
tests/retry-behavior.test.ts	✅ Passed	3.474s
tests/sdk-error-shape.test.ts	✅ Passed	440ms

View OkTest run #29457016587

_{SDK merge (b34192fc8478) · head (0c20422a21d2) · base (8735bf71d180) · OkTest (fd7a761c81c1)}

[HAYDEN-OAI]

looks good, thanks for cleaning up this build-only dependency!