From 96c30a46de3a373d7f4aa819de29406a8c2be473 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 15 Jun 2026 17:22:48 +0000
Subject: [PATCH] Update dependency com.google.code.gson:gson to v2.14.0

---
 sigstore-java/build.gradle.kts    | 2 +-
 sigstore-testkit/build.gradle.kts | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/sigstore-java/build.gradle.kts b/sigstore-java/build.gradle.kts
index 369194d15..18ad7558f 100644
--- a/sigstore-java/build.gradle.kts
+++ b/sigstore-java/build.gradle.kts
@@ -35,7 +35,7 @@ dependencies {
     compileOnly("org.apache.tomcat:annotations-api:6.0.53") // java 9+ only
 
     implementation("commons-codec:commons-codec:1.18.0")
-    implementation("com.google.code.gson:gson:2.13.2")
+    implementation("com.google.code.gson:gson:2.14.0")
     implementation("org.bouncycastle:bcutil-jdk18on:1.84")
     implementation("org.bouncycastle:bcpkix-jdk18on:1.84")
 
diff --git a/sigstore-testkit/build.gradle.kts b/sigstore-testkit/build.gradle.kts
index 0abc29903..6cb7a6d03 100644
--- a/sigstore-testkit/build.gradle.kts
+++ b/sigstore-testkit/build.gradle.kts
@@ -6,7 +6,7 @@ plugins {
 
 dependencies {
     implementation(project(":sigstore-java"))
-    implementation("com.google.code.gson:gson:2.13.2")
+    implementation("com.google.code.gson:gson:2.14.0")
     implementation("com.google.guava:guava:33.5.0-jre")
 
     // This is different from typical "testImplementation" dependencies, because