From f49d44a3f2db0323d34d9f3aac068bc334fd62f4 Mon Sep 17 00:00:00 2001
From: blakeli <blakeli@google.com>
Date: Mon, 6 Apr 2026 16:28:27 -0400
Subject: [PATCH 1/4] chore: update cloud-lts-bom versions

---
 boms/cloud-lts-bom/pom.xml | 74 +++++++++++++++++++-------------------
 1 file changed, 37 insertions(+), 37 deletions(-)

diff --git a/boms/cloud-lts-bom/pom.xml b/boms/cloud-lts-bom/pom.xml
index a803970cc..93f1f7bb7 100644
--- a/boms/cloud-lts-bom/pom.xml
+++ b/boms/cloud-lts-bom/pom.xml
@@ -48,55 +48,55 @@
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 
     <!-- Layer 1: Core -->
-    <guava.version>33.4.0-jre</guava.version>
+    <guava.version>33.5.0-jre</guava.version>
     <autovalue.version>1.11.0</autovalue.version>
-    <protobuf.version>3.25.8</protobuf.version>
-    <io.grpc.version>1.71.0</io.grpc.version>
+    <protobuf.version>4.33.2</protobuf.version>
+    <io.grpc.version>1.76.2</io.grpc.version>
     <google-http-client.version>1.47.0</google-http-client.version>
     <google-oauth-client.version>1.39.0</google-oauth-client.version>
-    <google-auth-library.version>1.36.0</google-auth-library.version>
+    <google-auth-library.version>1.42.1</google-auth-library.version>
     <google-api-client.version>2.7.2</google-api-client.version>
     <!-- We don't use gax-bom because it includes the artifacts with 'testlib' classifier. -->
-    <gax.version>2.67.0</gax.version>
-    <api-common.version>2.50.0</api-common.version>
-    <google-cloud-core.version>2.57.0</google-cloud-core.version>
-    <proto-google-common-protos.version>2.58.0</proto-google-common-protos.version>
+    <gax.version>2.74.1</gax.version>
+    <api-common.version>2.57.1</api-common.version>
+    <google-cloud-core.version>2.64.1</google-cloud-core.version>
+    <proto-google-common-protos.version>2.65.1</proto-google-common-protos.version>
 
     <!-- Layer 2: Cloud -->
-    <google-cloud-container.version>2.67.0</google-cloud-container.version>
-    <google-cloud-kms.version>2.67.0</google-cloud-kms.version>
-    <google-cloud-monitoring.version>3.65.0</google-cloud-monitoring.version>
-    <google-cloud-orchestration-airflow.version>1.64.0</google-cloud-orchestration-airflow.version>
-    <google-cloud-redis.version>2.67.0</google-cloud-redis.version>
-    <google-cloud-resourcemanager.version>1.66.0</google-cloud-resourcemanager.version>
-    <google-cloud-service-usage.version>2.64.0</google-cloud-service-usage.version>
-    <google-cloud-tasks.version>2.64.0</google-cloud-tasks.version>
-    <google-cloud-trace.version>2.64.0</google-cloud-trace.version>
-    <google-cloud-translate.version>2.64.0</google-cloud-translate.version>
-    <google-cloud-vision.version>3.62.0</google-cloud-vision.version>
-    <google-iam-admin.version>3.59.0</google-iam-admin.version>
-    <google-cloud-iamcredentials.version>2.64.0</google-cloud-iamcredentials.version>
-    <google-cloud-secretmanager.version>2.64.0</google-cloud-secretmanager.version>
-    <google-api-services-androidpublisher.version>v3-rev20250602-2.0.0</google-api-services-androidpublisher.version>
-    <appengine-api-1.0-sdk.version>2.0.34</appengine-api-1.0-sdk.version>
-    <gcs-connector.version>3.0.9</gcs-connector.version>
-    <google-cloud-bigquery.version>2.51.0</google-cloud-bigquery.version>
+    <google-cloud-container.version>2.88.0</google-cloud-container.version>
+    <google-cloud-kms.version>2.88.0</google-cloud-kms.version>
+    <google-cloud-monitoring.version>3.86.0</google-cloud-monitoring.version>
+    <google-cloud-orchestration-airflow.version>1.85.0</google-cloud-orchestration-airflow.version>
+    <google-cloud-redis.version>2.88.0</google-cloud-redis.version>
+    <google-cloud-resourcemanager.version>1.87.0</google-cloud-resourcemanager.version>
+    <google-cloud-service-usage.version>2.85.0</google-cloud-service-usage.version>
+    <google-cloud-tasks.version>2.85.0</google-cloud-tasks.version>
+    <google-cloud-trace.version>2.85.0</google-cloud-trace.version>
+    <google-cloud-translate.version>2.85.0</google-cloud-translate.version>
+    <google-cloud-vision.version>3.83.0</google-cloud-vision.version>
+    <google-iam-admin.version>3.80.0</google-iam-admin.version>
+    <google-cloud-iamcredentials.version>2.85.0</google-cloud-iamcredentials.version>
+    <google-cloud-secretmanager.version>2.85.0</google-cloud-secretmanager.version>
+    <google-api-services-androidpublisher.version>v3-rev20260318-2.0.0</google-api-services-androidpublisher.version>
+    <appengine-api-1.0-sdk.version>4.0.0</appengine-api-1.0-sdk.version>
+    <gcs-connector.version>3.1.13</gcs-connector.version>
+    <google-cloud-bigquery.version>2.59.0</google-cloud-bigquery.version>
     <!-- the google-api-services-bigquery version used by the google-cloud-bigquery version above -->
-    <google-api-services-bigquery.version>v2-rev20250511-2.0.0</google-api-services-bigquery.version>
-    <google-cloud-bigquerystorage.version>3.15.0</google-cloud-bigquerystorage.version>
-    <google-cloud-bigtable.version>2.60.0</google-cloud-bigtable.version>
-    <google-cloud-datastore.version>2.29.1</google-cloud-datastore.version>
-    <google-cloud-logging.version>3.22.5</google-cloud-logging.version>
-    <google-cloud-pubsub.version>1.140.1</google-cloud-pubsub.version>
+    <google-api-services-bigquery.version>v2-rev20251012-2.0.0</google-api-services-bigquery.version>
+    <google-cloud-bigquerystorage.version>3.21.0</google-cloud-bigquerystorage.version>
+    <google-cloud-bigtable.version>2.75.1</google-cloud-bigtable.version>
+    <google-cloud-datastore.version>2.34.0</google-cloud-datastore.version>
+    <google-cloud-logging.version>3.24.0</google-cloud-logging.version>
+    <google-cloud-pubsub.version>1.148.0</google-cloud-pubsub.version>
     <!-- the proto-google-cloud-pubsub-v1 used by the google-cloud-pubsub version above -->
-    <proto-google-cloud-pubsub-v1.version>1.122.1</proto-google-cloud-pubsub-v1.version>
-    <google-cloud-spanner.version>6.95.1</google-cloud-spanner.version>
-    <google-cloud-storage.version>2.53.0</google-cloud-storage.version>
+    <proto-google-cloud-pubsub-v1.version>1.130.0</proto-google-cloud-pubsub-v1.version>
+    <google-cloud-spanner.version>6.111.0</google-cloud-spanner.version>
+    <google-cloud-storage.version>2.63.0</google-cloud-storage.version>
 
     <!-- Layer 3: Beam -->
-    <beam.version>2.67.0</beam.version>
+    <beam.version>2.72.0</beam.version>
     <!-- Layer 4: HBase Connector -->
-    <bigtable-hbase-beam.version>2.15.3</bigtable-hbase-beam.version>
+    <bigtable-hbase-beam.version>2.16.2</bigtable-hbase-beam.version>
   </properties>
 
   <distributionManagement>

From 2057a4b8406fb7469fd11424754d3d2a671197b0 Mon Sep 17 00:00:00 2001
From: Blake Li <blakeli@google.com>
Date: Mon, 6 Apr 2026 17:18:39 -0400
Subject: [PATCH 2/4] Update pom.xml

---
 boms/cloud-lts-bom/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/boms/cloud-lts-bom/pom.xml b/boms/cloud-lts-bom/pom.xml
index 93f1f7bb7..dd5ee0332 100644
--- a/boms/cloud-lts-bom/pom.xml
+++ b/boms/cloud-lts-bom/pom.xml
@@ -50,7 +50,7 @@
     <!-- Layer 1: Core -->
     <guava.version>33.5.0-jre</guava.version>
     <autovalue.version>1.11.0</autovalue.version>
-    <protobuf.version>4.33.2</protobuf.version>
+    <protobuf.version>3.25.8</protobuf.version>
     <io.grpc.version>1.76.2</io.grpc.version>
     <google-http-client.version>1.47.0</google-http-client.version>
     <google-oauth-client.version>1.39.0</google-oauth-client.version>

From af773ba8a80e2d96cde7d54205b54b821d9042ca Mon Sep 17 00:00:00 2001
From: blakeli <blakeli@google.com>
Date: Mon, 6 Apr 2026 19:12:42 -0400
Subject: [PATCH 3/4] chore: align versions to resolve downgrades and enable
 no-downgrade check

---
 boms/cloud-lts-bom/pom.xml                    | 46 ++++---------------
 .../java/com/google/cloud/BomContentTest.java |  2 +-
 boms/upper-bounds-check/pom.xml               |  2 +-
 3 files changed, 10 insertions(+), 40 deletions(-)

diff --git a/boms/cloud-lts-bom/pom.xml b/boms/cloud-lts-bom/pom.xml
index dd5ee0332..71b8ae00a 100644
--- a/boms/cloud-lts-bom/pom.xml
+++ b/boms/cloud-lts-bom/pom.xml
@@ -50,22 +50,22 @@
     <!-- Layer 1: Core -->
     <guava.version>33.5.0-jre</guava.version>
     <autovalue.version>1.11.0</autovalue.version>
-    <protobuf.version>3.25.8</protobuf.version>
-    <io.grpc.version>1.76.2</io.grpc.version>
+    <protobuf.version>4.33.2</protobuf.version>
+    <io.grpc.version>1.76.3</io.grpc.version>
     <google-http-client.version>1.47.0</google-http-client.version>
     <google-oauth-client.version>1.39.0</google-oauth-client.version>
-    <google-auth-library.version>1.42.1</google-auth-library.version>
+    <google-auth-library.version>1.43.0</google-auth-library.version>
     <google-api-client.version>2.7.2</google-api-client.version>
     <!-- We don't use gax-bom because it includes the artifacts with 'testlib' classifier. -->
-    <gax.version>2.74.1</gax.version>
-    <api-common.version>2.57.1</api-common.version>
-    <google-cloud-core.version>2.64.1</google-cloud-core.version>
-    <proto-google-common-protos.version>2.65.1</proto-google-common-protos.version>
+    <gax.version>2.76.0</gax.version>
+    <api-common.version>2.59.0</api-common.version>
+    <google-cloud-core.version>2.66.0</google-cloud-core.version>
+    <proto-google-common-protos.version>2.67.0</proto-google-common-protos.version>
 
     <!-- Layer 2: Cloud -->
     <google-cloud-container.version>2.88.0</google-cloud-container.version>
     <google-cloud-kms.version>2.88.0</google-cloud-kms.version>
-    <google-cloud-monitoring.version>3.86.0</google-cloud-monitoring.version>
+    <google-cloud-monitoring.version>3.89.0</google-cloud-monitoring.version>
     <google-cloud-orchestration-airflow.version>1.85.0</google-cloud-orchestration-airflow.version>
     <google-cloud-redis.version>2.88.0</google-cloud-redis.version>
     <google-cloud-resourcemanager.version>1.87.0</google-cloud-resourcemanager.version>
@@ -479,31 +479,11 @@
         <groupId>org.apache.beam</groupId>
         <artifactId>beam-sdks-java-core</artifactId>
         <version>${beam.version}</version>
-        <exclusions>
-          <exclusion>
-            <groupId>com.google.protobuf</groupId>
-            <artifactId>protobuf-java</artifactId>
-          </exclusion>
-          <exclusion>
-            <groupId>com.google.protobuf</groupId>
-            <artifactId>protobuf-java-util</artifactId>
-          </exclusion>
-        </exclusions>
       </dependency>
       <dependency>
         <groupId>org.apache.beam</groupId>
         <artifactId>beam-sdks-java-extensions-google-cloud-platform-core</artifactId>
         <version>${beam.version}</version>
-        <exclusions>
-          <exclusion>
-            <groupId>com.google.protobuf</groupId>
-            <artifactId>protobuf-java</artifactId>
-          </exclusion>
-          <exclusion>
-            <groupId>com.google.protobuf</groupId>
-            <artifactId>protobuf-java-util</artifactId>
-          </exclusion>
-        </exclusions>
       </dependency>
       <dependency>
         <groupId>org.apache.beam</groupId>
@@ -524,16 +504,6 @@
         <groupId>org.apache.beam</groupId>
         <artifactId>beam-sdks-java-io-google-cloud-platform</artifactId>
         <version>${beam.version}</version>
-        <exclusions>
-          <exclusion>
-            <groupId>com.google.protobuf</groupId>
-            <artifactId>protobuf-java</artifactId>
-          </exclusion>
-          <exclusion>
-            <groupId>com.google.protobuf</groupId>
-            <artifactId>protobuf-java-util</artifactId>
-          </exclusion>
-        </exclusions>
       </dependency>
 
       <!-- Layer 4: HBase Connector -->
diff --git a/boms/integration-tests/src/test/java/com/google/cloud/BomContentTest.java b/boms/integration-tests/src/test/java/com/google/cloud/BomContentTest.java
index 682cf3119..47597efa1 100644
--- a/boms/integration-tests/src/test/java/com/google/cloud/BomContentTest.java
+++ b/boms/integration-tests/src/test/java/com/google/cloud/BomContentTest.java
@@ -77,7 +77,7 @@ private void checkBom(Path bomPath) throws Exception {
       }
     }
     // Temporarily ignore due to inability to process exclusion statements
-    //assertNoDowngradeRule(bom);
+    assertNoDowngradeRule(bom);
     assertUniqueClasses(artifacts);
     assertBomIsImported(bom);
   }
diff --git a/boms/upper-bounds-check/pom.xml b/boms/upper-bounds-check/pom.xml
index 8d9e52a5c..bad8d6ae4 100644
--- a/boms/upper-bounds-check/pom.xml
+++ b/boms/upper-bounds-check/pom.xml
@@ -43,7 +43,7 @@
       <dependency>
         <groupId>com.google.cloud</groupId>
         <artifactId>libraries-bom</artifactId>
-        <version>25.3.1-SNAPSHOT</version>
+        <version>26.76.0</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>

From b69314ffa0fe1516de46ac3a5e4149e04c63d0b3 Mon Sep 17 00:00:00 2001
From: blakeli <blakeli@google.com>
Date: Mon, 6 Apr 2026 19:13:48 -0400
Subject: [PATCH 4/4] chore: revert google-http-client to 2.1.0 to avoid
 downgrades

---
 boms/cloud-lts-bom/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/boms/cloud-lts-bom/pom.xml b/boms/cloud-lts-bom/pom.xml
index 71b8ae00a..518a3875f 100644
--- a/boms/cloud-lts-bom/pom.xml
+++ b/boms/cloud-lts-bom/pom.xml
@@ -52,7 +52,7 @@
     <autovalue.version>1.11.0</autovalue.version>
     <protobuf.version>4.33.2</protobuf.version>
     <io.grpc.version>1.76.3</io.grpc.version>
-    <google-http-client.version>1.47.0</google-http-client.version>
+    <google-http-client.version>2.1.0</google-http-client.version>
     <google-oauth-client.version>1.39.0</google-oauth-client.version>
     <google-auth-library.version>1.43.0</google-auth-library.version>
     <google-api-client.version>2.7.2</google-api-client.version>