search

arrow-kt / arrow-integrations

Λrrow Integrations is part of Λrrow, a functional companion to Kotlin's Standard Library
http://arrow-kt.io
Other
27 stars 6 forks source link

Update all dependencies #123

Open renovate[bot] opened 1 year ago

renovate[bot] commented 1 year ago

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
actions/checkout action minor v3.5.2 -> v3.6.0 age adoption passing confidence
actions/setup-java action minor v3.11.0 -> v3.13.0 age adoption passing confidence
actions/upload-artifact action minor v3.1.2 -> v3.2.1 age adoption passing confidence
gradle (source) minor 8.1.1 -> 8.10.2 age adoption passing confidence
gradle/gradle-build-action action minor v2.4.0 -> v2.12.0 age adoption passing confidence
io.kotest.extensions:kotest-assertions-arrow dependencies minor 1.3.3 -> 1.4.0 age adoption passing confidence
io.kotest.extensions:kotest-property-arrow dependencies minor 1.3.3 -> 1.4.0 age adoption passing confidence
org.codehaus.mojo:animal-sniffer-annotations (source) dependencies minor 1.23 -> 1.24 age adoption passing confidence
com.fasterxml.jackson.module:jackson-module-kotlin dependencies minor 2.15.2 -> 2.18.0 age adoption passing confidence
ru.vyarus.animalsniffer plugin patch 1.7.0 -> 1.7.1 age adoption passing confidence
io.gitlab.arturbosch.detekt (source) plugin patch 1.23.0 -> 1.23.7 age adoption passing confidence
org.jetbrains.kotlinx.binary-compatibility-validator plugin minor 0.13.2 -> 0.16.3 age adoption passing confidence
io.kotest:kotest-runner-junit5 dependencies minor 5.6.2 -> 5.9.1 age adoption passing confidence
io.kotest:kotest-property dependencies minor 5.6.2 -> 5.9.1 age adoption passing confidence
io.kotest:kotest-framework-engine dependencies minor 5.6.2 -> 5.9.1 age adoption passing confidence
io.kotest:kotest-assertions-core dependencies minor 5.6.2 -> 5.9.1 age adoption passing confidence
org.jetbrains.kotlin.multiplatform (source) plugin minor 1.8.21 -> 1.9.25 age adoption passing confidence
org.jetbrains.kotlin.jvm (source) plugin minor 1.8.21 -> 1.9.25 age adoption passing confidence
org.jetbrains.dokka plugin minor 1.8.10 -> 1.9.20 age adoption passing confidence
io.arrow-kt:arrow-optics dependencies minor 1.1.5 -> 1.2.4 age adoption passing confidence
io.arrow-kt:arrow-core dependencies minor 1.1.5 -> 1.2.4 age adoption passing confidence
io.arrow-kt:arrow-annotations dependencies minor 1.1.5 -> 1.2.4 age adoption passing confidence

Release Notes

actions/checkout (actions/checkout) ### [`v3.6.0`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v360) [Compare Source](https://redirect.github.com/actions/checkout/compare/v3.5.3...v3.6.0) - [Fix: Mark test scripts with Bash'isms to be run via Bash](https://redirect.github.com/actions/checkout/pull/1377) - [Add option to fetch tags even if fetch-depth > 0](https://redirect.github.com/actions/checkout/pull/579) ### [`v3.5.3`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v353) [Compare Source](https://redirect.github.com/actions/checkout/compare/v3.5.2...v3.5.3) - [Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in](https://redirect.github.com/actions/checkout/pull/1196) - [Fix typos found by codespell](https://redirect.github.com/actions/checkout/pull/1287) - [Add support for sparse checkouts](https://redirect.github.com/actions/checkout/pull/1369)
actions/setup-java (actions/setup-java) ### [`v3.13.0`](https://redirect.github.com/actions/setup-java/releases/tag/v3.13.0) [Compare Source](https://redirect.github.com/actions/setup-java/compare/v3.12.0...v3.13.0) ##### What's changed In the scope of this release, support for Dragonwell JDK was added by [@​Accelerator1996](https://redirect.github.com/Accelerator1996) in [https://github.com/actions/setup-java/pull/532](https://redirect.github.com/actions/setup-java/pull/532) ```yaml steps: - name: Checkout uses: actions/checkout@v3 - name: Setup-java uses: actions/setup-java@v3 with: distribution: 'dragonwell' java-version: '17' ``` Several inaccuracies were also fixed: - Fix XML namespaces wrongly using https by [@​gnodet](https://redirect.github.com/gnodet) in [https://github.com/actions/setup-java/pull/503](https://redirect.github.com/actions/setup-java/pull/503) - Fix typo and remove unintentional(?) word by [@​CyberFlameGO](https://redirect.github.com/CyberFlameGO) in [https://github.com/actions/setup-java/pull/518](https://redirect.github.com/actions/setup-java/pull/518) - Fix usage link within the README.md file by [@​dassiorleando](https://redirect.github.com/dassiorleando) in [https://github.com/actions/setup-java/pull/525](https://redirect.github.com/actions/setup-java/pull/525) ##### New Contributors - [@​CyberFlameGO](https://redirect.github.com/CyberFlameGO) made their first contribution in [https://github.com/actions/setup-java/pull/518](https://redirect.github.com/actions/setup-java/pull/518) - [@​dassiorleando](https://redirect.github.com/dassiorleando) made their first contribution in [https://github.com/actions/setup-java/pull/525](https://redirect.github.com/actions/setup-java/pull/525) - [@​gnodet](https://redirect.github.com/gnodet) made their first contribution in [https://github.com/actions/setup-java/pull/503](https://redirect.github.com/actions/setup-java/pull/503) - [@​Accelerator1996](https://redirect.github.com/Accelerator1996) made their first contribution in [https://github.com/actions/setup-java/pull/532](https://redirect.github.com/actions/setup-java/pull/532) **Full Changelog**: https://github.com/actions/setup-java/compare/v3...v3.13.0 ### [`v3.12.0`](https://redirect.github.com/actions/setup-java/releases/tag/v3.12.0) [Compare Source](https://redirect.github.com/actions/setup-java/compare/v3.11.0...v3.12.0) In scope of this release the following changes were made: **Bug fixes:** - Always check postfix "Contents/Home" on macOS by [@​erwin1](https://redirect.github.com/erwin1) in [https://github.com/actions/setup-java/pull/397](https://redirect.github.com/actions/setup-java/pull/397) - Fix sbt/scala cache key by [@​Dogacel](https://redirect.github.com/Dogacel) in [https://github.com/actions/setup-java/pull/478](https://redirect.github.com/actions/setup-java/pull/478) - Corretto toolcache folder name fix by [@​IvanZosimov](https://redirect.github.com/IvanZosimov) in [https://github.com/actions/setup-java/pull/480](https://redirect.github.com/actions/setup-java/pull/480) - Update versions of Oracle JDK and Microsoft Build of OpenJDK by [@​anishi1222](https://redirect.github.com/anishi1222) in [https://github.com/actions/setup-java/pull/489](https://redirect.github.com/actions/setup-java/pull/489) - Update Oracle JDK download URL calculation by [@​nikolai-laevskii](https://redirect.github.com/nikolai-laevskii) in [https://github.com/actions/setup-java/pull/507](https://redirect.github.com/actions/setup-java/pull/507) **Feature implementations:** - Add versions properties to cache by [@​Endi327](https://redirect.github.com/Endi327) in [https://github.com/actions/setup-java/pull/280](https://redirect.github.com/actions/setup-java/pull/280) **Resolving dependencies issues:** - Remove implicit dependencies by [@​nikolai-laevskii](https://redirect.github.com/nikolai-laevskii) in [https://github.com/actions/setup-java/pull/494](https://redirect.github.com/actions/setup-java/pull/494) - Update xml2js by [@​dmitry-shibanov](https://redirect.github.com/dmitry-shibanov) in [https://github.com/actions/setup-java/pull/484](https://redirect.github.com/actions/setup-java/pull/484) - Update dependencies by [@​IvanZosimov](https://redirect.github.com/IvanZosimov) in [https://github.com/actions/setup-java/pull/511](https://redirect.github.com/actions/setup-java/pull/511) **Infrastructure updates:** - Fix glob bug in package.json scripts section by [@​IvanZosimov](https://redirect.github.com/IvanZosimov) in [https://github.com/actions/setup-java/pull/475](https://redirect.github.com/actions/setup-java/pull/475) - Update mocks by [@​nikolai-laevskii](https://redirect.github.com/nikolai-laevskii) in [https://github.com/actions/setup-java/pull/498](https://redirect.github.com/actions/setup-java/pull/498) **Documentation changes:** - Instruction to download custom distribution JDK and install by [@​ragsmpl](https://redirect.github.com/ragsmpl) in [https://github.com/actions/setup-java/pull/500](https://redirect.github.com/actions/setup-java/pull/500) ##### New Contributors - [@​erwin1](https://redirect.github.com/erwin1) made their first contribution in [https://github.com/actions/setup-java/pull/397](https://redirect.github.com/actions/setup-java/pull/397) - [@​Dogacel](https://redirect.github.com/Dogacel) made their first contribution in [https://github.com/actions/setup-java/pull/478](https://redirect.github.com/actions/setup-java/pull/478) - [@​anishi1222](https://redirect.github.com/anishi1222) made their first contribution in [https://github.com/actions/setup-java/pull/489](https://redirect.github.com/actions/setup-java/pull/489) - [@​nikolai-laevskii](https://redirect.github.com/nikolai-laevskii) made their first contribution in [https://github.com/actions/setup-java/pull/498](https://redirect.github.com/actions/setup-java/pull/498) - [@​ragsmpl](https://redirect.github.com/ragsmpl) made their first contribution in [https://github.com/actions/setup-java/pull/500](https://redirect.github.com/actions/setup-java/pull/500) - [@​Endi327](https://redirect.github.com/Endi327) made their first contribution in [https://github.com/actions/setup-java/pull/280](https://redirect.github.com/actions/setup-java/pull/280) **Full Changelog**: https://github.com/actions/setup-java/compare/v3...v3.12.0
actions/upload-artifact (actions/upload-artifact) ### [`v3.2.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v3.2.1) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v3.2.0...v3.2.1) #### What's Changed This fixes the `include-hidden-files` input introduced in https://github.com/actions/upload-artifact/releases/tag/v3.2.0 - Ensure hidden files input is used by [@​joshmgross](https://redirect.github.com/joshmgross) in [https://github.com/actions/upload-artifact/pull/609](https://redirect.github.com/actions/upload-artifact/pull/609) **Full Changelog**: https://github.com/actions/upload-artifact/compare/v3.2.0...v3.2.1 ### [`v3.2.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v3.2.0) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v3.1.3...v3.2.0) #### Notice: Breaking Changes :warning: We will no longer include hidden files and folders by default in the `upload-artifact` action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, `include-hidden-files`, to continue to do so. See ["Notice of upcoming deprecations and breaking changes in GitHub Actions runners"](https://github.blog/changelog/2024-08-19-notice-of-upcoming-deprecations-and-breaking-changes-in-github-actions-runners/) changelog and [this issue](https://redirect.github.com/actions/upload-artifact/issues/602) for more details. #### What's Changed - V3 backport: Exclude hidden files by default by [@​SrRyan](https://redirect.github.com/SrRyan) in [https://github.com/actions/upload-artifact/pull/604](https://redirect.github.com/actions/upload-artifact/pull/604) **Full Changelog**: https://github.com/actions/upload-artifact/compare/v3.1.3...v3.2.0 ### [`v3.1.3`](https://redirect.github.com/actions/upload-artifact/releases/tag/v3.1.3) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v3.1.2...v3.1.3) #### What's Changed - chore(github): remove trailing whitespaces by [@​ljmf00](https://redirect.github.com/ljmf00) in [https://github.com/actions/upload-artifact/pull/313](https://redirect.github.com/actions/upload-artifact/pull/313) - Bump [@​actions/artifact](https://redirect.github.com/actions/artifact) version to v1.1.2 by [@​bethanyj28](https://redirect.github.com/bethanyj28) in [https://github.com/actions/upload-artifact/pull/436](https://redirect.github.com/actions/upload-artifact/pull/436) **Full Changelog**: https://github.com/actions/upload-artifact/compare/v3...v3.1.3
gradle/gradle (gradle) ### [`v8.10.2`](https://redirect.github.com/gradle/gradle/compare/v8.10.1...v8.10.2) [Compare Source](https://redirect.github.com/gradle/gradle/compare/v8.10.1...v8.10.2) ### [`v8.10.1`](https://redirect.github.com/gradle/gradle/compare/v8.10.0...v8.10.1) [Compare Source](https://redirect.github.com/gradle/gradle/compare/v8.10.0...v8.10.1) ### [`v8.10`](https://redirect.github.com/gradle/gradle/compare/v8.9.0...v8.10.0) [Compare Source](https://redirect.github.com/gradle/gradle/compare/v8.9.0...v8.10.0) ### [`v8.9`](https://redirect.github.com/gradle/gradle/compare/v8.8.0...v8.9.0) [Compare Source](https://redirect.github.com/gradle/gradle/compare/v8.8.0...v8.9.0) ### [`v8.8`](https://redirect.github.com/gradle/gradle/releases/tag/v8.8.0): 8.8 [Compare Source](https://redirect.github.com/gradle/gradle/compare/v8.7.0...v8.8.0) The Gradle team is excited to announce Gradle 8.8. [Read the Release Notes](https://docs.gradle.org/8.8/release-notes.html) We would like to thank the following community members for their contributions to this release of Gradle: [Björn Kautler](https://redirect.github.com/Vampire), [Denes Daniel](https://redirect.github.com/pantherdd), [Fabian Windheuser](https://redirect.github.com/fawind), [Hélio Fernandes Sebastião](https://redirect.github.com/helfese), [Jay Wei](https://redirect.github.com/JayWei1215), [jhrom](https://redirect.github.com/jhrom), [jwp345](https://redirect.github.com/jwp345), [Jörgen Andersson](https://redirect.github.com/jorander), [Kirill Gavrilov](https://redirect.github.com/gavvvr), [MajesticMagikarpKing](https://redirect.github.com/yctomwang), [Maksim Lazeba](https://redirect.github.com/M-Lazeba), [Philip Wedemann](https://redirect.github.com/hfhbd), [Robert Elliot](https://redirect.github.com/Mahoney), [Róbert Papp](https://redirect.github.com/TWiStErRob), [Stefan M.](https://redirect.github.com/StefMa), [Tibor Vyletel](https://redirect.github.com/TiborVyletel), [Tony Robalik](https://redirect.github.com/autonomousapps), [Valentin Kulesh](https://redirect.github.com/unshare), [Yanming Zhou](https://redirect.github.com/quaff), [김용후](https://redirect.github.com/who-is-hu) #### Upgrade instructions Switch your build to use Gradle 8.8 by updating your wrapper: ./gradlew wrapper --gradle-version=8.8 See the Gradle [8.x upgrade guide](https://docs.gradle.org/8.8/userguide/upgrading_version\_8.html) to learn about deprecations, breaking changes and other considerations when upgrading. For Java, Groovy, Kotlin and Android compatibility, see the [full compatibility notes](https://docs.gradle.org/8.8/userguide/compatibility.html). #### Reporting problems If you find a problem with this release, please file a bug on [GitHub Issues](https://redirect.github.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss). We hope you will build happiness with Gradle, and we look forward to your feedback via [Twitter](https://twitter.com/gradle) or on [GitHub](https://redirect.github.com/gradle). ### [`v8.7`](https://redirect.github.com/gradle/gradle/compare/v8.6.0...v8.7.0) [Compare Source](https://redirect.github.com/gradle/gradle/compare/v8.6.0...v8.7.0) ### [`v8.6`](https://redirect.github.com/gradle/gradle/compare/v8.5.0...v8.6.0) [Compare Source](https://redirect.github.com/gradle/gradle/compare/v8.5.0...v8.6.0) ### [`v8.5`](https://redirect.github.com/gradle/gradle/releases/tag/v8.5.0): 8.5 [Compare Source](https://redirect.github.com/gradle/gradle/compare/v8.4.0...v8.5.0) The Gradle team is excited to announce Gradle 8.5. [Read the Release Notes](https://docs.gradle.org/8.5/release-notes.html) We would like to thank the following community members for their contributions to this release of Gradle: [Ahmed Ehab](https://redirect.github.com/ahmedehabb), [Alex Landau](https://redirect.github.com/AlexLandau), [Aurimas](https://redirect.github.com/liutikas), [Björn Kautler](https://redirect.github.com/Vampire), [bodhili](https://redirect.github.com/bodhili), [Daniel Le Berre](https://redirect.github.com/danielleberre), [davidburstrom](https://redirect.github.com/davidburstrom), [Franz Wimmer](https://redirect.github.com/zalintyre), [Jongwoo Han](https://redirect.github.com/jongwooo), [Ken](https://redirect.github.com/kennethshackleton), [Leonardo Silveira](https://redirect.github.com/sombriks), [Martin Bonnin](https://redirect.github.com/martinbonnin), [Matthew Von-Maszewski](https://redirect.github.com/matthewvon), [Nik Clayton](https://redirect.github.com/nikclayton), [noeppi_noeppi](https://redirect.github.com/noeppi-noeppi), [Philip Wedemann](https://redirect.github.com/hfhbd), [Philipp Schneider](https://redirect.github.com/p-schneider), [Tomas Bjerre](https://redirect.github.com/tomasbjerre) #### Upgrade instructions Switch your build to use Gradle 8.5 by updating your wrapper: ./gradlew wrapper --gradle-version=8.5 See the Gradle [8.x upgrade guide](https://docs.gradle.org/8.5/userguide/upgrading_version\_8.html) to learn about deprecations, breaking changes and other considerations when upgrading. For Java, Groovy, Kotlin and Android compatibility, see the [full compatibility notes](https://docs.gradle.org/8.5/userguide/compatibility.html). #### Reporting problems If you find a problem with this release, please file a bug on [GitHub Issues](https://redirect.github.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss). We hope you will build happiness with Gradle, and we look forward to your feedback via [Twitter](https://twitter.com/gradle) or on [GitHub](https://redirect.github.com/gradle). ### [`v8.4`](https://redirect.github.com/gradle/gradle/releases/tag/v8.4.0): 8.4 [Compare Source](https://redirect.github.com/gradle/gradle/compare/v8.3.0...v8.4.0) The Gradle team is excited to announce Gradle 8.4. Amongst other improvements, this release addresses two security vulnerabilities: - [Incorrect permission assignment for symlinked files used in copy or archiving operations](https://redirect.github.com/gradle/gradle/security/advisories/GHSA-43r3-pqhv-f7h9) - [Possible local text file exfiltration by XML External entity injection](https://redirect.github.com/gradle/gradle/security/advisories/GHSA-mrff-q8qj-xvg8) [Read the Release Notes](https://docs.gradle.org/8.4/release-notes.html) We would like to thank the following community members for their contributions to this release of Gradle: [Ahmed Ehab](https://redirect.github.com/ahmedehabb), [Andrei Rybak](https://redirect.github.com/rybak), [Baptiste Decroix](https://redirect.github.com/bdecroix-spiria), [Björn Kautler](https://redirect.github.com/Vampire), [Cesar de la Vega](https://redirect.github.com/vegaro), [Ganavi Jayaram](https://redirect.github.com/ganavijayaram), [Gaurav Padam](https://redirect.github.com/Gauravpadam), [hwanseok](https://redirect.github.com/hwanseok-dev), [J.T. McQuigg](https://redirect.github.com/JT122406), [Jakub Chrzanowski](https://redirect.github.com/hsz), [Jendrik Johannes](https://redirect.github.com/jjohannes), [kackey0-1](https://redirect.github.com/kackey0-1), [Konstantin Gribov](https://redirect.github.com/grossws), [Pratik Haldankar](https://redirect.github.com/pratik2315), [Qinglin](https://redirect.github.com/nodmp), [Sebastian Schuberth](https://redirect.github.com/sschuberth), [Thad House](https://redirect.github.com/ThadHouse), [valery1707](https://redirect.github.com/valery1707), [Vladimir Sitnikov](https://redirect.github.com/vlsi), [wuyangnju](https://redirect.github.com/wuyangnju), [Yanming Zhou](https://redirect.github.com/quaff), [Yanshun Li](https://redirect.github.com/Chaoba), [Yusuke Uehara](https://redirect.github.com/uskey512), [zeners](https://redirect.github.com/zeners) #### Upgrade instructions Switch your build to use Gradle 8.4 by updating your wrapper: ./gradlew wrapper --gradle-version=8.4 #### Reporting problems If you find a problem with this release, please file a bug on [GitHub Issues](https://redirect.github.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss). We hope you will build happiness with Gradle, and we look forward to your feedback via [Twitter](https://twitter.com/gradle) or on [GitHub](https://redirect.github.com/gradle). ### [`v8.3`](https://redirect.github.com/gradle/gradle/releases/tag/v8.3.0): 8.3 [Compare Source](https://redirect.github.com/gradle/gradle/compare/v8.2.1...v8.3.0) The Gradle team is excited to announce Gradle 8.3. [Read the Release Notes](https://docs.gradle.org/8.3/release-notes.html) We would like to thank the following community members for their contributions to this release of Gradle: [Adam](https://redirect.github.com/aSemy), [Ahmed Ehab](https://redirect.github.com/ahmedehabb), [Aurimas](https://redirect.github.com/liutikas), [Baptiste Decroix](https://redirect.github.com/bdecroix-spiria), [Björn Kautler](https://redirect.github.com/Vampire), [Borewit](https://redirect.github.com/Borewit), [Korov](https://redirect.github.com/Korov), [Mohammed Thavaf](https://redirect.github.com/mthavaf), [Patrick Brückner](https://redirect.github.com/madmuffin1), [Philip Wedemann](https://redirect.github.com/hfhbd), [Róbert Papp](https://redirect.github.com/TWiStErRob), [Shi Chen](https://redirect.github.com/CsCherrYY), [Tony Robalik](https://redirect.github.com/autonomousapps) #### Upgrade instructions Switch your build to use Gradle 8.3 by updating your wrapper: ./gradlew wrapper --gradle-version=8.3 #### Reporting problems If you find a problem with this release, please file a bug on [GitHub Issues](https://redirect.github.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss). We hope you will build happiness with Gradle, and we look forward to your feedback via [Twitter](https://twitter.com/gradle) or on [GitHub](https://redirect.github.com/gradle). ### [`v8.2.1`](https://redirect.github.com/gradle/gradle/compare/v8.2.0...v8.2.1) [Compare Source](https://redirect.github.com/gradle/gradle/compare/v8.2.0...v8.2.1) ### [`v8.2`](https://redirect.github.com/gradle/gradle/releases/tag/v8.2.0): 8.2 [Compare Source](https://redirect.github.com/gradle/gradle/compare/v8.1.1...v8.2.0) The Gradle team is excited to announce Gradle 8.2. Amongst other improvements, this release addresses two security vulnerabilities: - [Dependency cache path traversal](https://redirect.github.com/gradle/gradle/security/advisories/GHSA-2h6c-rv6q-494v) - [Path traversal vulnerabilities in handling of Tar archives](https://redirect.github.com/gradle/gradle/security/advisories/GHSA-84mw-qh6q-v842) [Read the Release Notes](https://docs.gradle.org/8.2/release-notes.html) We would like to thank the following community contributors for their contributions to this release of Gradle: [Bruno Didot](https://redirect.github.com/didot), [Eric Vantillard](https://redirect.github.com/evantill), [esfomeado](https://redirect.github.com/esfomeado), [Jendrik Johannes](https://redirect.github.com/jjohannes), [Jonathan Leitschuh](https://redirect.github.com/JLLeitschuh), [Lee Euije](https://redirect.github.com/euije), [Stefan Oehme](https://redirect.github.com/oehme), [Todor Dinev](https://redirect.github.com/tdinev), [Yanshun Li](https://redirect.github.com/Chaoba) #### Upgrade instructions Switch your build to use Gradle 8.2 by updating your wrapper: `./gradlew wrapper --gradle-version=8.2` #### Reporting problems If you find a problem with this release, please file a bug on [GitHub Issues](https://redirect.github.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss). We hope you will build happiness with Gradle, and we look forward to your feedback via [Twitter](https://twitter.com/gradle) or on [GitHub](https://redirect.github.com/gradle).
gradle/gradle-build-action (gradle/gradle-build-action) ### [`v2.12.0`](https://redirect.github.com/gradle/gradle-build-action/releases/tag/v2.12.0) [Compare Source](https://redirect.github.com/gradle/gradle-build-action/compare/v2.11.1...v2.12.0) Adds a new option to clear a previously submitted dependency-graph. ```yaml steps: - uses: gradle/gradle-build-action@v2 with: dependency-graph: clear ``` This may prove useful when migrating to a workflow using the upcoming `gradle/actions/dependency-submission` action. **Full-changelog**: https://github.com/gradle/gradle-build-action/compare/v2.11.1...v2.12.0 ### [`v2.11.1`](https://redirect.github.com/gradle/gradle-build-action/releases/tag/v2.11.1) [Compare Source](https://redirect.github.com/gradle/gradle-build-action/compare/v2.11.0...v2.11.1) This patch release fixes an issue that prevented the `gradle-build-action` from executing with Gradle 1.12, and improves error reporting for dependency submission failures. ##### Changelog - \[FIX] Poor error reporting for dependency-submission failure [#​1008](https://redirect.github.com/gradle/gradle-build-action/issues/1008) - \[FIX] Error with gradle-build-action v2.11.0 and Gradle 1.12: unable to resolve class PluginManager [#​1007](https://redirect.github.com/gradle/gradle-build-action/issues/1007) **Full-changelog**: https://github.com/gradle/gradle-build-action/compare/v2.11.0...v2.11.1 ### [`v2.11.0`](https://redirect.github.com/gradle/gradle-build-action/releases/tag/v2.11.0) [Compare Source](https://redirect.github.com/gradle/gradle-build-action/compare/v2.10.0...v2.11.0) In addition to a number of dependency updates, this release: - Allows a custom Plugin Repository to be specified when resolving the [github-dependency-graph-gradle-plugin](https://plugins.gradle.org/plugin/org.gradle.github-dependency-graph-gradle-plugin). See [the documentation](https://redirect.github.com/gradle/gradle-build-action#using-a-custom-plugin-repository) for details. - Brings increased resilience when failures occur collecting build results or cleaning the Gradle User Home. Such failures should no longer prevent the caching of Gradle User Home or lead to build failures. ##### Changelog - \[NEW] Allow a custom plugin repository to be used to resolve dependency-graph plugin [#​933](https://redirect.github.com/gradle/gradle-build-action/issues/933) - \[FIX] Cache entries and Job Summary not written on cache-cleanup failure [#​990](https://redirect.github.com/gradle/gradle-build-action/issues/990) [#​858](https://redirect.github.com/gradle/gradle-build-action/issues/858) - \[FIX] Failure to write build results file should not cause overall build to fail [#​866](https://redirect.github.com/gradle/gradle-build-action/issues/866) **Full-changelog**: https://github.com/gradle/gradle-build-action/compare/v2.10.0...v2.11.0 ### [`v2.10.0`](https://redirect.github.com/gradle/gradle-build-action/releases/tag/v2.10.0) [Compare Source](https://redirect.github.com/gradle/gradle-build-action/compare/v2.9.0...v2.10.0) This release introduces a new `artifact-retention-days` parameter, which allows a user to configure how long the generated dependency-graph artifacts are retained by GitHub Actions. Adjusting the retention period can be useful to reduce storage costs associated with these dependency-graph artifacts. See [the documentation](https://redirect.github.com/gradle/gradle-build-action/tree/v2.10.0#reducing-storage-costs-for-saved-dependency-graph-artifacts) for more details. ##### Changelog - \[NEW] Add `artifact-retention-days` configuration parameter [#​903](https://redirect.github.com/gradle/gradle-build-action/issues/903) - \[FIX] Update to `v1.0.0` of the [github-dependency-graph-gradle-plugin](https://plugins.gradle.org/plugin/org.gradle.github-dependency-graph-gradle-plugin) - \[FIX] Update `@babel/traverse` to address [reported security vulnerability](https://redirect.github.com/gradle/gradle-build-action/security/dependabot/18) **Full-changelog**: https://github.com/gradle/gradle-build-action/compare/v2.9.0...v2.10.0 ### [`v2.9.0`](https://redirect.github.com/gradle/gradle-build-action/releases/tag/v2.9.0) [Compare Source](https://redirect.github.com/gradle/gradle-build-action/compare/v2.8.1...v2.9.0) The GitHub [dependency-review-action](https://redirect.github.com/actions/dependency-review-action) helps you understand dependency changes (and the security impact of these changes) for a pull request. This release updates the GItHub Dependency Graph support to be compatible with the `dependency-review-action`. See [the documentation](https://redirect.github.com/gradle/gradle-build-action#integrating-the-dependency-review-action) for detailed examples. ##### Changelog - \[FIX] Use correct SHA for `pull-request` events [#​882](https://redirect.github.com/gradle/gradle-build-action/issues/882) - \[FIX] Avoid generating dependency graph during cache cleanup [#​905](https://redirect.github.com/gradle/gradle-build-action/issues/905) - \[NEW] Improve warning on failure to submit dependency graph - \[NEW] Compatibility with GitHub `dependency-review-action` [#​879](https://redirect.github.com/gradle/gradle-build-action/issues/879) **Full-changelog**: https://github.com/gradle/gradle-build-action/compare/v2.8.1...v2.9.0 ### [`v2.8.1`](https://redirect.github.com/gradle/gradle-build-action/releases/tag/v2.8.1) [Compare Source](https://redirect.github.com/gradle/gradle-build-action/compare/v2.8.0...v2.8.1) Fixes an issue that prevented Dependency Graph submission when running on GitHub Enterprise Server. ##### Fixes - Incorrect endpoint used to submit Dependency Graph on GitHub Enterprise [#​885](https://redirect.github.com/gradle/gradle-build-action/issues/885) ##### Changelog ### [`v2.8.0`](https://redirect.github.com/gradle/gradle-build-action/releases/tag/v2.8.0) [Compare Source](https://redirect.github.com/gradle/gradle-build-action/compare/v2.7.1...v2.8.0) The `v2.8.0` release of the `gradle-build-action` introduces an easy mechanism to connect to Gradle Enterprise, as well improved support for self-hosted GitHub Actions runners. ##### Automatic injection of Gradle Enterprise connectivity It is now possible to connect a Gradle build to Gradle Enterprise without changing any of the Gradle project sources. This is achieved through Gradle Enterprise injection, where an init-script will apply the Gradle Enterprise plugin and associated configuration. This feature can be useful to easily trial Gradle Enterprise on a project, or to centralize Gradle Enterprise configuration for all GitHub Actions workflows in an organization. See [Gradle Enterprise injection in the README](https://redirect.github.com/gradle/gradle-build-action/blob/v2.8.0/README.md#gradle-enterprise-plugin-injection) for more info. ##### Restore Gradle User Home when directory already exists Previously, the Gradle User Home would not be restored if the directory already exists. This wasn't normally an issue with GitHub-hosted runners, but limited the usefulness of the action for persistent, self-hosted runners. This behaviour has been improved in this release: - The Job Summary now includes a useful error message when Gradle User Home was not restored because the directory already exists. - The action can now be configured to restore the Gradle User Home when the directory already exists, overwriting existing content with content from the GitHub Actions cache. See https://github.com/gradle/gradle-build-action#overwriting-an-existing-gradle-user-home for more details. ##### Changes **Issues fixed**: https://github.com/gradle/gradle-build-action/issues?q=milestone%3A2.8.0+is%3Aclosed **Full changelog**: https://github.com/gradle/gradle-build-action/compare/v2.7.1...v2.8.0 ### [`v2.7.1`](https://redirect.github.com/gradle/gradle-build-action/releases/tag/v2.7.1) [Compare Source](https://redirect.github.com/gradle/gradle-build-action/compare/v2.7.0...v2.7.1) This release contains no code changes, only dependency updates and documentation improvements. ##### Changelog ### [`v2.7.0`](https://redirect.github.com/gradle/gradle-build-action/releases/tag/v2.7.0) [Compare Source](https://redirect.github.com/gradle/gradle-build-action/compare/v2.6.1...v2.7.0) ##### GitHub Dependency Graph support In this release, the GitHub Dependency Graph support is no longer considered "experimental", and should be considered ready for production use. You can read more about the Dependency Graph support in [the README chapter](https://redirect.github.com/gradle/gradle-build-action#github-dependency-graph-support). ##### Changes - Update to [`github-dependency-graph-gradle-plugin@v0.2.0`](https://plugins.gradle.org/plugin/org.gradle.github-dependency-graph-gradle-plugin/0.2.0) - Dependency graph uses Gradle Settings file as manifest location (if Settings file exists) - Adds a `dependency-graph-file` output to any step that generates a Dependency Graph file ##### Changelog ### [`v2.6.1`](https://redirect.github.com/gradle/gradle-build-action/releases/tag/v2.6.1) [Compare Source](https://redirect.github.com/gradle/gradle-build-action/compare/v2.6.0...v2.6.1) ##### Dependency Graph support This patch release fixes and improves a couple of aspects of the experimental Dependency Graph support: - The action will now generate a unique `job.correlator` value for each Gradle invocation within a Job. This permits multiple Gradle invocations in a single job to generate and submit a separate dependency graph. - Update to use [`github-dependency-graph-gradle-plugin@v0.1.0`](https://plugins.gradle.org/plugin/org.gradle.github-dependency-graph-gradle-plugin), which brings a number of improvements to the generated dependency graph: - Each Gradle build invocation is mapped to a single GitHub Dependency Graph manifest. This should result in fewer duplicate security alerts being generated. - Configurations that contribute to the GitHub Dependency Graph can be filtered by regular expression ### [`v2.6.0`](https://redirect.github.com/gradle/gradle-build-action/releases/tag/v2.6.0) [Compare Source](https://redirect.github.com/gradle/gradle-build-action/compare/v2.5.1...v2.6.0) ##### GitHub Dependency Graph support (Experimental) This release brings experimental support for submitting a [GitHub Dependency Graph](https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph) snapshot via the [GitHub Dependency Submission API](https://docs.github.com/en/rest/dependency-graph/dependency-submission?apiVersion=2022-11-28). The dependency graph snapshot is generated via integration with the [GitHub Dependency Graph Gradle Plugin](https://plugins.gradle.org/plugin/org.gradle.github-dependency-graph-gradle-plugin), and saved as a workflow artifact. The generated snapshot files can be submitted either in the same job, or in a subsequent job (in the same or a dependent workflow). The generated dependency graph snapshot reports all of the dependencies that were resolved during a bulid execution, and is used by GitHub to generate [Dependabot Alerts](https://docs.github.com/en/code-security/dependabot/dependabot-alerts/about-dependabot-alerts) for vulnerable dependencies, as well as to populate the [Dependency Graph insights view](https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/exploring-the-dependencies-of-a-repository#viewing-the-dependency-graph). Check out the README chapter for more details on how this works and how to configure a workflow that submits a dependency graph. ##### Changelog ### [`v2.5.1`](https://redirect.github.com/gradle/gradle-build-action/releases/tag/v2.5.1) [Compare Source](https://redirect.github.com/gradle/gradle-build-action/compare/v2.5.0...v2.5.1) Fixes a regression in v2.5.0 that resulted in failure when running a workflow that has a name containing a comma. ##### Fixes - Cache key Validation Error when workflow name contains a comma [#​756](https://redirect.github.com/gradle/gradle-build-action/issues/756) ##### Changelog ### [`v2.5.0`](https://redirect.github.com/gradle/gradle-build-action/releases/tag/v2.5.0) [Compare Source](https://redirect.github.com/gradle/gradle-build-action/compare/v2.4.2...v2.5.0) This minor release fixes a couple of issues that affected the action in particular scenarios, and updates all dependencies to recent versions. ##### Fixes - Parallel workflows containing jobs with the same name use the same cache key [#​699](https://redirect.github.com/gradle/gradle-build-action/issues/699) - Build scans are not captured when GE plugin is applied within `settingsEvaluated` [#​626](https://redirect.github.com/gradle/gradle-build-action/issues/626) **Full changelog**: https://github.com/gradle/gradle-build-action/compare/v2.4.2...v2.5.0 ### [`v2.4.2`](https://redirect.github.com/gradle/gradle-build-action/releases/tag/v2.4.2) [Compare Source](https://redirect.github.com/gradle/gradle-build-action/compare/v2.4.1...v2.4.2) This release disables the save/restore of configuration-cache data, since this functionality has been shown to be problematic. Gradle 8.1 has made changes to this functionality which will require a more comprehensive rework of the action before we can re-enable this. ### [`v2.4.1`](https://redirect.github.com/gradle/gradle-build-action/releases/tag/v2.4.1) [Compare Source](https://redirect.github.com/gradle/gradle-build-action/compare/v2.4.0...v2.4.1) This patch release updates a number of dependencies, including `xmljs` which was reported to have a security vulnerability (https://nvd.nist.gov/vuln/detail/CVE-2023-0842). There is no evidence that this vulnerability affected the `gradle-build-action`. **Full changelog**: https://github.com/gradle/gradle-build-action/compare/v2.4.0...v2.4.1
detekt/detekt (io.gitlab.arturbosch.detekt) ### [`v1.23.7`](https://redirect.github.com/detekt/detekt/releases/tag/v1.23.7) ##### 1.23.7 - 2024-09-08 This is a point release for Detekt `1.23.0`, built against Kotlin `2.0.10`, with fixes for several bugs that got reported by the community. ##### Notable Changes - fix(deps): update kotlin monorepo to v2.0.10 - [#​7517](https://redirect.github.com/detekt/detekt/pull/7517) - Update to Kotlin 2.0.0 [#​6640](https://redirect.github.com/detekt/detekt/pull/6640) - fix(deps): update kotlin monorepo to v1.9.24 - [#​7264](https://redirect.github.com/detekt/detekt/pull/7264) - fix(deps): update dependency com.android.tools.build:gradle to v8.5.2 - [#​7525](https://redirect.github.com/detekt/detekt/pull/7525) - chore(deps): update dependency gradle to v8.10 - [#​7546](https://redirect.github.com/detekt/detekt/pull/7546) ##### Changelog - Add basic support for isolated projects to 1.x - [#​7526](https://redirect.github.com/detekt/detekt/pull/7526) - ExplicitCollectionElementAccessMethod: fix false positive when Map put has 3 arguments - [#​7563](https://redirect.github.com/detekt/detekt/pull/7563) - BracesOnIfStatements: fix false-positive when chained - [#​7444](https://redirect.github.com/detekt/detekt/pull/7444) - Add enum entry check in `UndocumentedPublicProperty` - [#​7426](https://redirect.github.com/detekt/detekt/pull/7426) - Use the anchor which is already present before - [#​7423](https://redirect.github.com/detekt/detekt/pull/7423) - Fix small corner-case in "SerialVersionUIDInSerializableClass" rule, … - [#​7346](https://redirect.github.com/detekt/detekt/pull/7346) - SwallowedException: fix false positive when exception is used as a receiver - [#​7288](https://redirect.github.com/detekt/detekt/pull/7288) - NamedArguments: fix false positive on spread varargs - [#​7283](https://redirect.github.com/detekt/detekt/pull/7283) - MultilineLambdaItParameter: fix false negative with single statement on multiple lines - [#​7221](https://redirect.github.com/detekt/detekt/pull/7221) - Check for root of receiver in selector expression - [#​7220](https://redirect.github.com/detekt/detekt/pull/7220) - Check for `public companion` object for `UndocumentedPublicClass` - [#​7219](https://redirect.github.com/detekt/detekt/pull/7219) - fix: TopLevelPropertyNaming also detecting extension property name - [#​7212](https://redirect.github.com/detekt/detekt/pull/7212) - Publish detekt-compiler-plugin-all to Maven and GH Releases - [#​7179](https://redirect.github.com/detekt/detekt/pull/7179) - versioned default detekt config file link - [#​7161](https://redirect.github.com/detekt/detekt/pull/7161) - Support rangeUntil operator for UnusedImport rule - [#​7104](https://redirect.github.com/detekt/detekt/pull/7104) - Fix false positive on it usages when type parameter is specified - [#​6850](https://redirect.github.com/detekt/detekt/pull/6850) ##### Housekeeping/Docs - \[bugfix] AnnotationOnSeparateLine in snippets - [#​6526](https://redirect.github.com/detekt/detekt/pull/6526) - Add docs about using the Compiler Plugin with the Kotlin CLI compiler - [#​7184](https://redirect.github.com/detekt/detekt/pull/7184) ### [`v1.23.6`](https://redirect.github.com/detekt/detekt/releases/tag/v1.23.6) ##### 1.23.6 - 2024-03-23 This is a point release for Detekt `1.23.0`, where we added support for Kotlin `1.9.23` and fixed several bugs that got reported by the community. ##### Changelog - UselessPostfixExpression - Fix [#​7037](https://redirect.github.com/detekt/detekt/issues/7037) false positive postfix - [#​7084](https://redirect.github.com/detekt/detekt/pull/7084) - Don't allow invalid Source Locations - [#​7030](https://redirect.github.com/detekt/detekt/pull/7030) - UnusedPrivateClass: don't report if private classes are used for type conversion - [#​6995](https://redirect.github.com/detekt/detekt/pull/6995) - RedundantSusp

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

This PR was generated by Mend Renovate. View the repository job log.