simplegoogleidtoken v0.0.6 Released: Security Updates and Dependency Maintenance
We’re pleased to announce the release of simplegoogleidtoken v0.0.6, published on May 26, 2025. This maintenance release focuses on keeping your dependencies secure and up-to-date while maintaining full backward compatibility.
What’s New
Version 0.0.6 is a focused maintenance update that brings important dependency security patches without introducing any breaking changes or requiring code modifications on your end.
Key Dependency Updates
The most significant change is the update to GSON 2.13.1, our core runtime library. This update spans from version 2.11.0 and includes multiple security patches and bug fixes that strengthen the foundation of your ID token operations.
For users deploying on Google Cloud Platform environments, the optional google-auth-library-oauth2-http dependency has been updated to version 1.35.0 (from 1.30.0). This brings compatibility with the latest Google authentication improvements and security enhancements.
Enhanced Security Practices
Behind the scenes, we’ve strengthened our CI/CD pipeline with:
- zizmor security scanning - Automated GitHub Actions security analysis running on every push and pull request
- Credential hardening - All workflows now use
persist-credentials: falseto minimize credential exposure - Updated build provenance - Upgraded to actions/attest-build-provenance v2 for stronger supply chain security
Why It Matters
This release demonstrates our commitment to keeping simplegoogleidtoken secure and well-maintained. While there are no new features in this version, you benefit from:
- Security patches in critical dependencies like GSON
- Continued compatibility with Google’s authentication ecosystem
- Zero migration effort - the upgrade is transparent to your application
- Active project stewardship - regular maintenance updates ensure long-term reliability
The library’s core functionality remains unchanged. You can upgrade with confidence knowing your existing code will continue to work exactly as before.
Getting Started
Upgrading to v0.0.6 is straightforward. Simply update your Maven dependency:
<dependency>
<groupId>com.unitvectory</groupId>
<artifactId>simplegoogleidtoken</artifactId>
<version>0.0.6</version>
</dependency>
If you’re deploying on GCP and managing the google-auth-library-oauth2-http dependency separately, consider updating it to version 1.35.0 as well.
No code changes are required. The upgrade is fully backward compatible.
This post was AI-generated using the unsloth/Qwen3.5-122B-A10B-GGUF:Q4_K_M model. For more information, see the repository and the v0.0.6 release. Published on May 26, 2025 by release-storyteller.