TrustAllX509TrustManager lint warning with firebase-messaging 23.0.1

[REQUIRED] Step 2: Describe your environment

• Android Studio version: Android Studio Bumblebee | 2021.1.1 Patch 2
• Firebase Component: Messaging (Database, Firestore, Storage, Functions, etc)
• Component version: 23.0.1

[REQUIRED] Step 3: Describe the problem

After upgrading firebase-messaging from 23.0.0 to 23.0.1, upon executing the Gradle lintRelease task, we encountered the following error on all of our modules (path modified to remove sensitive info):

/Users/me/dev/work/app/module/com/google/api/client/util/SslUtils$1.class: Error: checkClientTrusted is empty, which could cause insecure network traffic due to trusting arbitrary TLS/SSL certificates presented by peers [TrustAllX509TrustManager]

   Explanation for issues of type "TrustAllX509TrustManager":
   This check looks for X509TrustManager implementations whose
   checkServerTrusted or checkClientTrusted methods do nothing (thus trusting
   any certificate chain) which could result in insecure network traffic
   caused by trusting arbitrary TLS/SSL certificates presented by peers.

Steps to reproduce:

Run lintRelease Gradle task

[alvindizon]

I can confirm that this has been fixed with 23.0.2 as well, thanks!

[G00fY2]

We are also facing this issue after the firebase BOM update from 29.1.0 to 29.2.0:

13:12:27  > Task :app:lintRelease FAILED
13:12:27  /app/com/google/api/client/util/SslUtils$1.class: Error: checkClientTrusted is empty, which could cause insecure network traffic due to trusting arbitrary TLS/SSL certificates presented by peers [TrustAllX509TrustManager]
13:12:27  /app/com/google/api/client/util/SslUtils$1.class: Error: checkServerTrusted is empty, which could cause insecure network traffic due to trusting arbitrary TLS/SSL certificates presented by peers [TrustAllX509TrustManager]
13:12:27  
13:12:27     Explanation for issues of type "TrustAllX509TrustManager":
13:12:27     This check looks for X509TrustManager implementations whose
13:12:27     checkServerTrusted or checkClientTrusted methods do nothing (thus trusting
13:12:27     any certificate chain) which could result in insecure network traffic
13:12:27     caused by trusting arbitrary TLS/SSL certificates presented by peers.
13:12:27  
13:12:27  2 errors, 0 warnings