[jonathannorris]

Summary

• Force patched com.google.guava:guava (33.7.2-jre) and org.json:json (20260719) in the existing resolution strategy blocks, and bump the org.json:json test dependency to 20260719.
• Unit tests and release assemble pass locally.
• Open Dependabot PRs (chore(deps): bump com.google.protobuf:protobuf-java from 3.25.5 to 4.35.1 #311, chore(deps): bump junit_version from 5.13.3 to 6.1.2 #316, chore(deps): bump okhttp_version from 4.12.0 to 5.5.0 #324, chore(deps): bump de.mannodermaus.gradle.plugins:android-junit5 from 1.11.2.0 to 2.0.2 #334 to chore(deps): bump amannn/action-semantic-pull-request from 6.1.1 to 6.1.2 #337) are left alone.

[Copilot]

🟢 Approval recommended

No active review issues remain for the dependency override updates.

No open issues 🎉

What changed in this PR

This PR addresses Dependabot security alerts by updating dependency overrides in the Android SDK build, while leaving the existing dependency-update PRs unchanged.

Changes:

• Force Guava 33.7.2-jre and JSON 20260719 in the buildscript and subproject resolution strategies.
• Align the SDK’s JSON test dependency with the forced version.

File	Description
build.gradle	Adds Guava and JSON version overrides to both existing resolution strategies.
android-client-sdk/​build.gradle	Updates the JSON test dependency to 20260719.

_{Review effort: Balanced}