Bump okhttp from 4.3.1 to 4.8.0

[dependabot-preview[bot]]

Bumps okhttp from 4.3.1 to 4.8.0.

Changelog

Sourced from okhttp's changelog.

Version 4.8.0

2020-07-11

• New: Change HeldCertificate.Builder to use its own ASN.1 certificate encoder. This is part of our effort to remove the okhttp-tls module's dependency on Bouncy Castle. We think Bouncy Castle is great! But it's a large dependency (6.5 MiB) and its security provider feature impacts VM-wide behavior.

• New: Reduce contention for applications that make a very high number of concurrent requests. Previously OkHttp used its connection pool as a lock when making changes to connections and calls. With this change each connection is locked independently.

• Upgrade: [Okio 2.7.0][okio_2_7_0].

  implementation("com.squareup.okio:okio:2.7.0")
  

• Fix: Avoid log messages like "Didn't find class org.conscrypt.ConscryptHostnameVerifier" when detecting the TLS capabilities of the host platform.

• Fix: Don't crash in HttpUrl.topPrivateDomain() when the hostname is malformed.

• Fix: Don't attempt Brotli decompression if the response body is empty.

Version 4.7.2

2020-05-20

• Fix: Don't crash inspecting whether the host platform is JVM or Android. With 4.7.0 and 4.7.1 we had a crash IllegalArgumentException: Not a Conscrypt trust manager because we depended on initialization order of companion objects.

Version 4.7.1

2020-05-18

• Fix: Pass the right arguments in the trust manager created for addInsecureHost(). Without the fix insecure hosts crash with an IllegalArgumentException on Android.

Version 4.7.0

2020-05-17

• New: HandshakeCertificates.Builder.addInsecureHost() makes it easy to turn off security in private development environments that only carry test data. Prefer this over creating an

Commits

• a70e992 Prepare for release 4.8.0.
• cf367d9 Add defensive checks for malformed ASN.1 DER (#6180)
• 0e0f3a2 Push OkHttp 3.14.x into the sea. It is no longer supported. (#6179)
• 7c9cfd6 Fix typo (#6178)
• 4bfa33e Upgrade to Okio 2.7.0 (#6175)
• c4cbb57 Don't crash on unknown GeneralName types. (#6170)
• 19e9a8f Drop support for indefinite length in DER (#6166)
• c04b57e Add limits to what length values DerReader supports (#6164)
• 353a52b Improve code style for the new DER package (#6157)
• 45df82e Honor RFC 5280 when choosing a time format (#6154)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)

[dependabot-preview[bot]]

Superseded by #36.