Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump version.okHttp3 from 4.9.1 to 4.9.2 #157

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump version.okHttp3 from 4.9.1 to 4.9.2 #157

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2021

Bumps version.okHttp3 from 4.9.1 to 4.9.2.
Updates okhttp from 4.9.1 to 4.9.2

Changelog

Sourced from okhttp's changelog.

Version 4.9.2

2021-09-30

  • Fix: Don't include potentially-sensitive header values in Headers.toString() or exceptions. This applies to Authorization, Cookie, Proxy-Authorization, and Set-Cookie headers.
  • Fix: Don't crash with an InaccessibleObjectException when running on JDK17+ with strong encapsulation enabled.
  • Fix: Strictly verify hostnames used with OkHttp's HostnameVerifier. Programs that make direct manual calls to HostnameVerifier could be defeated if the hostnames they pass in are not strictly ASCII. This issue is tracked as [CVE-2021-0341].

Version 5.0.0-alpha.2

2021-01-30

In this release MockWebServer has a new Maven coordinate and package name. A longstanding problem with MockWebServer has been its API dependency on JUnit 4. We've reorganized things to remove that dependency while preserving backwards compatibility.

Maven Coordinate Package Name Description
com.squareup.okhttp3:mockwebserver3:5.0.0-alpha.2 mockwebserver3 Core module. No JUnit dependency!
com.squareup.okhttp3:mockwebserver3-junit4:5.0.0-alpha.2 mockwebserver3.junit4 Optional JUnit 4 integration.
com.squareup.okhttp3:mockwebserver3-junit5:5.0.0-alpha.2 mockwebserver3.junit5 Optional JUnit 5 integration.
com.squareup.okhttp3:mockwebserver:5.0.0-alpha.2 okhttp3.mockwebserver Obsolete. Depends on JUnit 4.

The new APIs use mockwebserver3 in both the Maven coordinate and package name. This new API is not stable and will likely change before the final 5.0.0 release.

If you have code that subclasses okhttp3.mockwebserver.QueueDispatcher, this update is not source or binary compatible. Migrating to the new mockwebserver3 package will fix this problem.

  • New: DNS over HTTPS is now a stable feature of OkHttp. We introduced this as an experimental module in 2018. We are confident in its stable API and solid implementation.
  • Fix: Work around a crash in Android 10 and 11 that may be triggered when two threads concurrently close an SSL socket. This would have appeared in crash logs as NullPointerException: bio == null.
  • Fix: Use plus + instead of %20 to encode space characters in FormBody. This was a longstanding bug in OkHttp. The fix makes OkHttp consistent with major web browsers.
  • Fix: Don't crash if Conscrypt returns a null version.
  • Fix: Include the public suffix data as a resource in GraalVM native images.
  • Fix: Fail fast when the cache is corrupted.
  • Fix: Fail fast when a private key cannot be encoded.
  • Fix: Fail fast when attempting to verify a non-ASCII hostname.
  • Upgrade: [GraalVM 21][graalvm_21].
  • Upgrade: [Kotlin 1.4.20][kotlin_1_4_20].

... (truncated)

Commits

Updates okhttp-sse from 4.9.1 to 4.9.2

Changelog

Sourced from okhttp-sse's changelog.

Version 4.9.2

2021-09-30

  • Fix: Don't include potentially-sensitive header values in Headers.toString() or exceptions. This applies to Authorization, Cookie, Proxy-Authorization, and Set-Cookie headers.
  • Fix: Don't crash with an InaccessibleObjectException when running on JDK17+ with strong encapsulation enabled.
  • Fix: Strictly verify hostnames used with OkHttp's HostnameVerifier. Programs that make direct manual calls to HostnameVerifier could be defeated if the hostnames they pass in are not strictly ASCII. This issue is tracked as [CVE-2021-0341].

Version 5.0.0-alpha.2

2021-01-30

In this release MockWebServer has a new Maven coordinate and package name. A longstanding problem with MockWebServer has been its API dependency on JUnit 4. We've reorganized things to remove that dependency while preserving backwards compatibility.

Maven Coordinate Package Name Description
com.squareup.okhttp3:mockwebserver3:5.0.0-alpha.2 mockwebserver3 Core module. No JUnit dependency!
com.squareup.okhttp3:mockwebserver3-junit4:5.0.0-alpha.2 mockwebserver3.junit4 Optional JUnit 4 integration.
com.squareup.okhttp3:mockwebserver3-junit5:5.0.0-alpha.2 mockwebserver3.junit5 Optional JUnit 5 integration.
com.squareup.okhttp3:mockwebserver:5.0.0-alpha.2 okhttp3.mockwebserver Obsolete. Depends on JUnit 4.

The new APIs use mockwebserver3 in both the Maven coordinate and package name. This new API is not stable and will likely change before the final 5.0.0 release.

If you have code that subclasses okhttp3.mockwebserver.QueueDispatcher, this update is not source or binary compatible. Migrating to the new mockwebserver3 package will fix this problem.

  • New: DNS over HTTPS is now a stable feature of OkHttp. We introduced this as an experimental module in 2018. We are confident in its stable API and solid implementation.
  • Fix: Work around a crash in Android 10 and 11 that may be triggered when two threads concurrently close an SSL socket. This would have appeared in crash logs as NullPointerException: bio == null.
  • Fix: Use plus + instead of %20 to encode space characters in FormBody. This was a longstanding bug in OkHttp. The fix makes OkHttp consistent with major web browsers.
  • Fix: Don't crash if Conscrypt returns a null version.
  • Fix: Include the public suffix data as a resource in GraalVM native images.
  • Fix: Fail fast when the cache is corrupted.
  • Fix: Fail fast when a private key cannot be encoded.
  • Fix: Fail fast when attempting to verify a non-ASCII hostname.
  • Upgrade: [GraalVM 21][graalvm_21].
  • Upgrade: [Kotlin 1.4.20][kotlin_1_4_20].

... (truncated)

Commits

Updates mockwebserver from 4.9.1 to 4.9.2

Changelog

Sourced from mockwebserver's changelog.

Version 4.9.2

2021-09-30

  • Fix: Don't include potentially-sensitive header values in Headers.toString() or exceptions. This applies to Authorization, Cookie, Proxy-Authorization, and Set-Cookie headers.
  • Fix: Don't crash with an InaccessibleObjectException when running on JDK17+ with strong encapsulation enabled.
  • Fix: Strictly verify hostnames used with OkHttp's HostnameVerifier. Programs that make direct manual calls to HostnameVerifier could be defeated if the hostnames they pass in are not strictly ASCII. This issue is tracked as [CVE-2021-0341].

Version 5.0.0-alpha.2

2021-01-30

In this release MockWebServer has a new Maven coordinate and package name. A longstanding problem with MockWebServer has been its API dependency on JUnit 4. We've reorganized things to remove that dependency while preserving backwards compatibility.

Maven Coordinate Package Name Description
com.squareup.okhttp3:mockwebserver3:5.0.0-alpha.2 mockwebserver3 Core module. No JUnit dependency!
com.squareup.okhttp3:mockwebserver3-junit4:5.0.0-alpha.2 mockwebserver3.junit4 Optional JUnit 4 integration.
com.squareup.okhttp3:mockwebserver3-junit5:5.0.0-alpha.2 mockwebserver3.junit5 Optional JUnit 5 integration.
com.squareup.okhttp3:mockwebserver:5.0.0-alpha.2 okhttp3.mockwebserver Obsolete. Depends on JUnit 4.

The new APIs use mockwebserver3 in both the Maven coordinate and package name. This new API is not stable and will likely change before the final 5.0.0 release.

If you have code that subclasses okhttp3.mockwebserver.QueueDispatcher, this update is not source or binary compatible. Migrating to the new mockwebserver3 package will fix this problem.

  • New: DNS over HTTPS is now a stable feature of OkHttp. We introduced this as an experimental module in 2018. We are confident in its stable API and solid implementation.
  • Fix: Work around a crash in Android 10 and 11 that may be triggered when two threads concurrently close an SSL socket. This would have appeared in crash logs as NullPointerException: bio == null.
  • Fix: Use plus + instead of %20 to encode space characters in FormBody. This was a longstanding bug in OkHttp. The fix makes OkHttp consistent with major web browsers.
  • Fix: Don't crash if Conscrypt returns a null version.
  • Fix: Include the public suffix data as a resource in GraalVM native images.
  • Fix: Fail fast when the cache is corrupted.
  • Fix: Fail fast when a private key cannot be encoded.
  • Fix: Fail fast when attempting to verify a non-ASCII hostname.
  • Upgrade: [GraalVM 21][graalvm_21].
  • Upgrade: [Kotlin 1.4.20][kotlin_1_4_20].

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
Bump version.okHttp3 from 4.9.1 to 4.9.2
8633935 
Bumps `version.okHttp3` from 4.9.1 to 4.9.2.

Updates `okhttp` from 4.9.1 to 4.9.2
- [Release notes](https://github.com/square/okhttp/releases)
- [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md)
- [Commits](square/okhttp@parent-4.9.1...parent-4.9.2)

Updates `okhttp-sse` from 4.9.1 to 4.9.2
- [Release notes](https://github.com/square/okhttp/releases)
- [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md)
- [Commits](square/okhttp@parent-4.9.1...parent-4.9.2)

Updates `mockwebserver` from 4.9.1 to 4.9.2
- [Release notes](https://github.com/square/okhttp/releases)
- [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md)
- [Commits](square/okhttp@parent-4.9.1...parent-4.9.2)

---
updated-dependencies:
- dependency-name: com.squareup.okhttp3:okhttp
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: com.squareup.okhttp3:okhttp-sse
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: com.squareup.okhttp3:mockwebserver
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 1, 2021
@codecov
Copy link

codecov bot commented Oct 1, 2021

Codecov Report

Merging #157 (8633935) into main (a505476) will increase coverage by 0.10%.
The diff coverage is 78.43%.

Impacted file tree graph

@@             Coverage Diff              @@
##               main     #157      +/-   ##
============================================
+ Coverage     72.89%   73.00%   +0.10%     
- Complexity     2632     2642      +10     
============================================
  Files            89       89              
  Lines         11024    11027       +3     
  Branches       1719     1719              
============================================
+ Hits           8036     8050      +14     
+ Misses         2021     2015       -6     
+ Partials        967      962       -5
Impacted Files Coverage Δ
.../opencmw/client/cmwlight/DirectoryLightClient.java 7.31% <0.00%> (ø)
...va/io/opencmw/client/cmwlight/CmwLightMessage.java 71.42% <44.11%> (-1.26%) ⬇️
...main/java/io/opencmw/client/OpenCmwDataSource.java 76.39% <71.42%> (ø)
...ain/java/io/opencmw/client/OpenCmwDnsResolver.java 71.66% <71.42%> (-3.34%) ⬇️
...va/io/opencmw/server/rest/MajordomoRestPlugin.java 71.38% <77.50%> (+1.14%) ⬆️
...a/io/opencmw/client/cmwlight/CmwLightProtocol.java 71.50% <80.00%> (+0.19%) ⬆️
...in/java/io/opencmw/client/DataSourcePublisher.java 85.42% <84.61%> (+0.38%) ⬆️
.../io/opencmw/serialiser/spi/CmwLightSerialiser.java 63.43% <85.71%> (ø)
...c/main/java/io/opencmw/server/MajordomoBroker.java 79.21% <86.66%> (+0.46%) ⬆️
...io/opencmw/client/cmwlight/CmwLightDataSource.java 68.15% <96.96%> (ø)
... and 11 more

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update c86f9d6...8633935. Read the comment docs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants