Introduction

On September 28, 2024, we released version 0.0.4 of simplegoogleidtoken. This maintenance release focuses on keeping dependencies up to date and improving build process security, ensuring the library continues to work reliably with its upstream Google authentication components.

simplegoogleidtoken is a lightweight Java library that simplifies exchanging Google Cloud Service Account credentials for Google ID tokens—tokens designed for authenticating with external services that accept Google-issued JWTs.

What’s New

Version 0.0.4 is a straightforward dependency maintenance release. There are no new features, API changes, or breaking changes in this version. The updates included are:

Dependency Updates:

  • google-auth-library-oauth2-http upgraded from 1.25.0 to 1.27.0 (for GCP users)
  • Build tooling updates to Maven plugins for publishing and GPG signing
  • Test framework updated to JUnit 5.11.1

Build Improvements:

  • Added GitHub Actions build provenance attestations for enhanced supply chain security
  • Improved Lombok annotation processor configuration for better javadoc generation

For users running on Google Cloud Platform, the update to google-auth-library-oauth2-http brings the latest improvements and security patches from Google’s upstream authentication library. Users authenticating with service account JSON files outside of GCP are unaffected by this change, as they only require the GSON dependency.

Why It Matters

While this release doesn’t introduce new functionality, maintaining up-to-date dependencies is crucial for:

  • Security: Ensuring compatibility with security patches in upstream Google authentication libraries
  • Reliability: Keeping build tooling current to avoid future compatibility issues
  • Supply Chain Security: Build provenance attestations provide verification that binaries originate from trusted source code builds

This release maintains full backward compatibility with v0.0.3. No changes are required to your existing code—simply update the dependency version in your project configuration.

Upgrade Instructions

To upgrade to v0.0.4, update your Maven dependency:

<dependency>
    <groupId>com.unitvectory</groupId>
    <artifactId>simplegoogleidtoken</artifactId>
    <version>0.0.4</version>
</dependency>

If you’re running on GCP and use the optional google-auth-library-oauth2-http dependency, ensure it’s at version 1.27.0 or later:

<dependency>
    <groupId>com.google.auth</groupId>
    <artifactId>google-auth-library-oauth2-http</artifactId>
    <version>1.27.0</version>
</dependency>

As always, simplegoogleidtoken requires Java 17 or higher and is available on Maven Central for easy integration into your projects.

Transparency Note: This release announcement was AI-generated using the unsloth/Qwen3.5-122B-A10B-GGUF:Q4_K_M model. For details about this release, see the UnitVectorY-Labs/simplegoogleidtoken repository and the v0.0.4 GitHub Release. Generated by release-storyteller.