cashapp / licensee

Gradle plugin which validates the licenses of your dependency graph match what you expect
https://cashapp.github.io/licensee/docs/1.x/
Apache License 2.0
626 stars 28 forks source link

Update plugin download to v5.6.0 #302

Closed renovate[bot] closed 7 months ago

renovate[bot] commented 7 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
de.undercouch.download 5.5.0 -> 5.6.0 age adoption passing confidence

[!WARNING] Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

michel-kraemer/gradle-download-task (de.undercouch.download) ### [`v5.6.0`](https://togithub.com/michel-kraemer/gradle-download-task/releases/tag/5.6.0) [Compare Source](https://togithub.com/michel-kraemer/gradle-download-task/compare/5.5.0...5.6.0) New features: - Add possibility to configure HTTP status code validator (using the `validateStatus` property) - Add integration tests for Gradle versions up to 8.6 Bug fixes: - Do not unnecessarily enable preemptive auth for proxy (possible security issue) - Remove sensitive headers from request after redirect (possible security issue). Thanks to [@​diederikfaber](https://togithub.com/diederikfaber) for reporting this and to [@​dtretyakov](https://togithub.com/dtretyakov) and [@​eghobo](https://togithub.com/eghobo) for the pointers. - Really log all requests (including redirects) and all headers in debug mode. It seems something has changed in Apache HttpClient since we initially implemented this feature. Maintenance: - Update dependencies - Update to Gradle 8.6 - Fix some warnings in build script - Set dependabot interval to weekly - Split CI tests of Gradle 7.x versions

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.