MINOR: Bump com.google.guava:guava-bom from 33.7.2-jre to 33.8.0-jre (#1446)

Bumps [com.google.guava:guava-bom](https://github.com/google/guava) from
33.7.2-jre to 33.8.0-jre.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/guava/releases">com.google.guava:guava-bom's
releases</a>.</em></p>
<blockquote>
<h2>33.8.0</h2>
<h3>Maven</h3>
<pre lang="xml"><code>&lt;dependency&gt;
  &lt;groupId&gt;com.google.guava&lt;/groupId&gt;
  &lt;artifactId&gt;guava&lt;/artifactId&gt;
  &lt;version&gt;33.8.0-jre&lt;/version&gt;
  &lt;!-- or, for Android: --&gt;
  &lt;version&gt;33.8.0-android&lt;/version&gt;
&lt;/dependency&gt;
</code></pre>
<h3>Jar files</h3>
<ul>
<li><a
href="https://repo1.maven.org/maven2/com/google/guava/guava/33.8.0-jre/guava-33.8.0-jre.jar">33.8.0-jre.jar</a></li>
<li><a
href="https://repo1.maven.org/maven2/com/google/guava/guava/33.8.0-android/guava-33.8.0-android.jar">33.8.0-android.jar</a></li>
</ul>
<p>Guava requires <a
href="https://github.com/google/guava/wiki/UseGuavaInYourBuild#what-about-guavas-own-dependencies">one
runtime dependency</a>, which you can download here:</p>
<ul>
<li><a
href="https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar">failureaccess-1.0.3.jar</a></li>
</ul>
<h3>Javadoc</h3>
<ul>
<li><a
href="https://guava.dev/releases/33.8.0-jre/api/docs/">33.8.0-jre</a></li>
<li><a
href="https://guava.dev/releases/33.8.0-android/api/docs/">33.8.0-android</a></li>
</ul>
<h3>JDiff</h3>
<ul>
<li><a
href="https://guava.dev/releases/33.8.0-jre/api/diffs/">33.8.0-jre vs.
33.7.2-jre</a></li>
<li><a
href="https://guava.dev/releases/33.8.0-android/api/diffs/">33.8.0-android
vs. 33.7.2-android</a></li>
<li><a
href="https://guava.dev/releases/33.8.0-android/api/androiddiffs/">33.8.0-android
vs. 33.8.0-jre</a></li>
</ul>
<h3>Changelog</h3>
<ul>
<li><code>collect</code>: Enhanced <code>HashBiMap</code> and
<code>LinkedHashMultimap.ValueSet</code> to <a
href="https://github.com/google/guava/security/advisories/GHSA-v5x9-67m3-7m56">defend
against hash flooding</a> (forthcoming <a
href="https://nvd.nist.gov/vuln/detail/cve-2026-118042">CVE-2026-118042</a>).
(7cd44b3506)</li>
<li><code>collect</code>: Accidentally changed a few methods in
<code>ForwardingMap.StandardValues</code> to be <code>final</code>. No
Google-internal or <a
href="https://github.com/search?q=%22com.google.common.collect%22+%2F%28%3F-i%29%5CbStandardValues%5Cb%2F+path%3A.java+NOT+path%3AForwardingMap+NOT+path%3Ahtml+NOT+path%3Acom%2Fgoogle%2Fcommon&amp;type=code">GitHub-public</a>
code appears to be affected, but we will <a
href="https://github.com/google/guava/commit/592a1e6bf8b3370dde28e778931ccdf5242b1d0c">fix
this</a> in the next release. If it causes you problems, <a
href="https://github.com/google/guava/issues/new?template=BLANK_ISSUE">let
us know</a>.</li>
<li><code>net</code>: Added <code>MediaType.APPLICATION_GZIP</code>
(<code>application/gzip</code>) to be used in preference to
<code>GZIP</code> (<code>application/x-gzip</code>). (6393ebbdb6)</li>
<li><code>primitives</code>: Added
<code>Doubles.MIN_POSITIVE_VALUE</code> and
<code>Floats.MIN_POSITIVE_VALUE</code> as more clearly named aliases for
<code>Double.MIN_VALUE</code> and <code>Float.MIN_VALUE</code>.
(adf5554e7e)</li>
<li><code>testlib</code>: Added
<code>AbstractClassInitializationTest</code>. (80fd5c114d)</li>
<li>and, among the usual changes, a larger than usual number of small
fixes (4afb1e04a4246c261be4742e1f2e2c39ebaf6266,
79152348ece2de85559eb2eb18133862d492c892,
a279b884fe9890a3869142919352156f2a67a705,
786bb1a9b44685875ebe7b83f1404a1f07ac653c,
6b3a8d7498a7fde122967ba37a023ba3dcb47792,
de57a419b56bcd887f51bb99103d91c65b7c5e86,
fa64cc7c2b320aca9219981952bbb544f8f6ccff,
7b64964048948de3b5633a75d6e64f98cf8fcece,
5ae56d77e64305752b919ff2c96713f47ac0c94c,
37535d73f0416f30e0301efe61a8eb8ede44c1b7,
ca8aedb2fdaf40fd6937a0643180aea51ca4154e,
c0a8a1edc69393e8141424037571d9825f5fc0f4,
51246d06bb85ccc182a0aeb6a7adcbd55f759ae5,
81c7d030f8f144a4885ccf8efdc72c92605b4eec,
2b86a8216627a807ce8520abc6ae55437dbb85fb,
669a232b4e20ae6e8bc6efc62caaf2f830d56327,
b157643c41f9ee6a38732b4fa1a590ba187912d9,
ad73fbb9beff220aa26390630724855ef92fc50b,
1e6eb68f2ee8dc6cb164c285f7fe6ad5e8bc0905,
3d5be86651ec58b3f9d15c76cf888ade15aba39b)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/google/guava/commits">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.guava:guava-bom&package-manager=maven&previous-version=33.7.2-jre&new-version=33.8.0-jre)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

pom.xml

@@ -97,7 +97,7 @@ under the License.
     <dep.junit.platform.version>1.9.0</dep.junit.platform.version>
     <dep.junit.jupiter.version>6.1.3</dep.junit.jupiter.version>
     <dep.slf4j.version>2.0.20</dep.slf4j.version>
-    <dep.guava-bom.version>33.7.2-jre</dep.guava-bom.version>
+    <dep.guava-bom.version>33.8.0-jre</dep.guava-bom.version>
     <dep.netty-bom.version>4.2.19.Final</dep.netty-bom.version>
     <dep.grpc-bom.version>1.85.1</dep.grpc-bom.version>
     <dep.protobuf-bom.version>4.36.2</dep.protobuf-bom.version>