Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency gradle to v6.9.4 #65

Closed
wants to merge 1 commit into from
Closed

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Dec 21, 2021

Mend Renovate logo banner

This PR contains the following updates:

Package Update Change
gradle (source) patch 6.9.1 -> 6.9.4

Release Notes

gradle/gradle (gradle)

v6.9.4: 6.9.4

Compare Source

This is a patch release for 6.9. We recommend using 6.9.4 instead of 6.9.

It fixes the following issues:

  • #​23680 Dependency graph resolution: Equivalent excludes can cause un-necessary graph mutations [backport 6.x]
  • #​23945 Backport trusting only full GPG keys in dependency verification [Backport 6.9.4]
  • #​23950 Exclude rule merging: missing optimization [backport 6.x]

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 6.9.4 by updating your wrapper:

./gradlew wrapper --gradle-version=6.9.4

See the Gradle 6.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 6.9.4.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v6.9.3: 6.9.3

Compare Source

This is a patch release for Gradle 6.9, containing backported bugfixes in Gradle 7.x to Gradle 6.x.

It fixes the following issues:

  • #​19523 Fix buffer overflow error in KryoBackedDecoder [Backport 6.x]
  • #​20189 Support constraints without version in GMM [Backport 6.9.x]
  • #​22358 Missing exclude rule merging optimizations

We recommend users upgrade to 6.9.3 instead of 6.9.

Upgrade Instructions

Switch your build to use Gradle 6.9.3 by updating your wrapper:

./gradlew wrapper --gradle-version=6.9.3

See the Gradle 6.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 6.9.3.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v6.9.2: 6.9.2

Compare Source

This is a patch release for Gradle 6.9, containing backported bugfixes in Gradle 7.2 to Gradle 6.x.

It fixes the following issues:

  • #​18163 Fix excludes for substituted dependencies
  • #​18164 POSIX shell scripts improvements
  • #​18697 Fix corrupted resolution result from replacement / capability conflict
  • #​19328 Mitigations for log4j vulnerability in Gradle builds
  • #​19372 Multiple transformed artifacts selected

We recommend users upgrade to 6.9.2 instead of 6.9.

Given the context of the Log4Shell vulnerability, make sure you take a look at our blog post on this topic.

Upgrade Instructions

Switch your build to use Gradle 6.9.2 by updating your wrapper:

./gradlew wrapper --gradle-version=6.9.2

See the Gradle 6.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 6.9.2.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot requested a review from Clivern as a code owner December 21, 2021 23:24
@renovate renovate bot changed the title Update dependency gradle to v6.9.2 Update dependency gradle to v6.9.3 Nov 20, 2022
@renovate renovate bot changed the title Update dependency gradle to v6.9.3 Update dependency gradle to v6.9.4 Mar 18, 2023
@Clivern Clivern closed this Nov 30, 2023
Copy link
Contributor Author

renovate bot commented Nov 30, 2023

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (6.9.4). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

@renovate renovate bot deleted the renovate/gradle-6.x branch November 30, 2023 23:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant