Skip to content

fix(deps): update ProGuard to 7.9.1#782

Merged
jbeckwith-oai merged 1 commit into
mainfrom
codex/update-proguard
Jul 16, 2026
Merged

fix(deps): update ProGuard to 7.9.1#782
jbeckwith-oai merged 1 commit into
mainfrom
codex/update-proguard

Conversation

@jbeckwith-oai

@jbeckwith-oai jbeckwith-oai commented Jul 15, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Update the build-only ProGuard Gradle dependency from 7.4.2 to 7.9.1, the current stable release.
  • Move ProGuard’s transitive org.json:json from 20220924 to 20231013.
  • Keep the R8 version, shrinker configuration, and SDK keep rules unchanged.

Security coverage

This addresses both open org.json alerts rooted through ProGuard:

The resolved org.json version is 20231013, satisfying both fixed-version floors. This PR does not claim the separately tracked Log4j remediation.

Compatibility analysis

  • proguard-gradle is used only on the openai-java-proguard-test buildscript classpath. It is not a dependency of a published source set, Maven POM, SDK API, or consumer runtime.
  • ProGuard 7.9.1 runs successfully with this repository’s Gradle 8.12 and JDK 21 setup. The ProGuard plugin and engine artifacts remain Java 8 bytecode (class-file major version 52).
  • A clean ProGuard pass succeeds with the existing keep rules, preserves the embedded META-INF/proguard/openai-java-core.pro resource, and produces a Java 8-compatible test artifact. The full client-construction and Jackson serialization round-trip test passes from that processed artifact.
  • The unchanged R8 control pass also succeeds and produces a Java 8-compatible artifact.
  • The diff changes one buildscript version only. All four published Maven POMs generate successfully and no SDK source, public API, output target, or publication metadata changes.

Upstream release notes: https://github.com/Guardsquare/proguard/releases/tag/v7.9.1

Validation

  • ./scripts/lint
  • ./scripts/build --no-daemon
  • ./scripts/test --no-daemon
  • ./gradlew :openai-java-proguard-test:clean :openai-java-proguard-test:test --no-daemon --stacktrace
  • ./gradlew :openai-java-proguard-test:buildEnvironment --no-daemon
  • ./gradlew generatePomFileForMavenPublication --no-daemon
  • git diff --check origin/main...HEAD

@jbeckwith-oai jbeckwith-oai requested a review from a team as a code owner July 15, 2026 21:36
@openai-sdks

openai-sdks Bot commented Jul 15, 2026 •
edited
Loading

Copy link
Copy Markdown

OkTest Summary

✅ 237/237 SDK tests passed in 16.836s for Java SDK PR #782.

Test results — 42 files
Test Result Time
tests/chat-completions-complex-body.test.ts ✅ Passed 691ms
tests/chat-completions-create.test.ts ✅ Passed 562ms
tests/chat-completions-stream.test.ts ✅ Passed 368ms
tests/files-content-binary.test.ts ✅ Passed 270ms
tests/files-create-multipart.test.ts ✅ Passed 379ms
tests/files-list-pagination.test.ts ✅ Passed 312ms
tests/initialize-config.test.ts ✅ Passed 165ms
tests/instance-isolation.test.ts ✅ Passed 210ms
tests/models-list.test.ts ✅ Passed 174ms
tests/responses-background-lifecycle.test.ts ✅ Passed 298ms
tests/responses-body-method-errors.test.ts ✅ Passed 560ms
tests/responses-cancel-timeout.test.ts ✅ Passed 254ms
tests/responses-cancel.test.ts ✅ Passed 316ms
tests/responses-compact-retries.test.ts ✅ Passed 390ms
tests/responses-compact.test.ts ✅ Passed 330ms
tests/responses-create-advanced-stream.test.ts ✅ Passed 655ms
tests/responses-create-advanced.test.ts ✅ Passed 1.319s
tests/responses-create-disconnect.test.ts ✅ Passed 1.062s
tests/responses-create-errors.test.ts ✅ Passed 426ms
tests/responses-create-malformed-api-responses.test.ts ✅ Passed 361ms
tests/responses-create-retries.test.ts ✅ Passed 215ms
tests/responses-create-stream-failures.test.ts ✅ Passed 247ms
tests/responses-create-stream-timeout.test.ts ✅ Passed 233ms
tests/responses-create-stream-wire.test.ts ✅ Passed 6.339s
tests/responses-create-stream.test.ts ✅ Passed 422ms
tests/responses-create-terminal-states.test.ts ✅ Passed 534ms
tests/responses-create-timeout.test.ts ✅ Passed 256ms
tests/responses-create.test.ts ✅ Passed 297ms
tests/responses-delete.test.ts ✅ Passed 297ms
tests/responses-input-items-errors.test.ts ✅ Passed 299ms
tests/responses-input-items-list.test.ts ✅ Passed 319ms
tests/responses-input-items-options.test.ts ✅ Passed 227ms
tests/responses-input-tokens-count-timeout.test.ts ✅ Passed 251ms
tests/responses-input-tokens-count.test.ts ✅ Passed 451ms
tests/responses-malformed-inputs.test.ts ✅ Passed 5.081s
tests/responses-not-found-errors.test.ts ✅ Passed 381ms
tests/responses-parse.test.ts ✅ Passed 504ms
tests/responses-retrieve-retries.test.ts ✅ Passed 868ms
tests/responses-retrieve.test.ts ✅ Passed 299ms
tests/responses-stored-method-errors.test.ts ✅ Passed 989ms
tests/retry-behavior.test.ts ✅ Passed 3.474s
tests/sdk-error-shape.test.ts ✅ Passed 440ms

View OkTest run #29457016587

SDK merge (b34192fc8478) · head (0c20422a21d2) · base (8735bf71d180) · OkTest (fd7a761c81c1)

HAYDEN-OAI
HAYDEN-OAI approved these changes Jul 15, 2026
View reviewed changes

@HAYDEN-OAI HAYDEN-OAI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks good, thanks for cleaning up this build-only dependency!

@jbeckwith-oai jbeckwith-oai force-pushed the codex/update-proguard branch from 0b67edd to 0c20422 Compare July 15, 2026 22:56
@jbeckwith-oai jbeckwith-oai merged commit 845b2bc into main Jul 16, 2026
15 checks passed
@stainless-app stainless-app Bot mentioned this pull request Jul 16, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@HAYDEN-OAI HAYDEN-OAI HAYDEN-OAI approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@jbeckwith-oai @HAYDEN-OAI