gradle/gradle (gradle)
### [`v7.6.2`](https://togithub.com/gradle/gradle/releases/tag/v7.6.2): 7.6.2
[Compare Source](https://togithub.com/gradle/gradle/compare/v7.6.1...v7.6.2)
This is a patch release for 7.6. We recommend using 7.6.2 instead of 7.6.
This release addresses two security vulnerabilities:
- [Dependency cache path traversal](https://togithub.com/gradle/gradle/security/advisories/GHSA-2h6c-rv6q-494v)
- [Path traversal vulnerabilities in handling of Tar archives](https://togithub.com/gradle/gradle/security/advisories/GHSA-84mw-qh6q-v842)
It also fixes the following issues:
- [#23201](https://togithub.com/gradle/gradle/issues/23201) Backport dependency upgrades to 7.x
- [#23202](https://togithub.com/gradle/gradle/issues/23202) Backport Scala incremental compilation fixes
- [#23325](https://togithub.com/gradle/gradle/issues/23325) Backport JSoup update to resolve CVE-2022-36033
- [#23458](https://togithub.com/gradle/gradle/issues/23458) Backport JUnit5 dynamic test logging bug fix
- [#23681](https://togithub.com/gradle/gradle/issues/23681) Dependency graph resolution: Equivalent excludes can cause un-necessary graph mutations \[backport 7.x]
- [#23922](https://togithub.com/gradle/gradle/issues/23922) Backport "Use Compiler API data for incremental compilation after a failure" to 7.x
- [#23951](https://togithub.com/gradle/gradle/issues/23951) Exclude rule merging: missing optimization \[Backport 7.x]
- [#24132](https://togithub.com/gradle/gradle/issues/24132) Extending an already resolved configuration no longer works correctly \[backport 7.x]
- [#24234](https://togithub.com/gradle/gradle/issues/24234) 7.6.1 breaks gradle-consistent-versions
- [#24390](https://togithub.com/gradle/gradle/issues/24390) Gradle 7.4 fails on multi release jar's with JDK 19 code
- [#24439](https://togithub.com/gradle/gradle/issues/24439) Gradle complains about invalid tool chain - picking up the source package location - it should just ignore them \[Backport]
- [#24443](https://togithub.com/gradle/gradle/issues/24443) Maven artifact referenced only in dependency constraints raises IllegalStateException: Corrupt serialized resolution result \[backport]
- [#24901](https://togithub.com/gradle/gradle/issues/24901) Backport fix for test exception that cannot be deserialized to 7.x
[Read the Release Notes](https://docs.gradle.org/7.6.2/release-notes.html)
#### Upgrade Instructions
Switch your build to use Gradle 7.6.2 by updating your wrapper:
./gradlew wrapper --gradle-version=7.6.2
See the [Gradle 7.x upgrade guide](https://docs.gradle.org/7.6.2/userguide/upgrading_version\_7.html#changes\_7.6) to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.2.
#### Reporting Problems
If you find a problem with this release, please file a bug on [GitHub Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss).
### [`v7.6.1`](https://togithub.com/gradle/gradle/releases/tag/v7.6.1): 7.6.1
[Compare Source](https://togithub.com/gradle/gradle/compare/v7.6.0...v7.6.1)
This is a patch release for 7.6. We recommend using 7.6.1 instead of 7.6.
It fixes the following issues:
- [#19065](https://togithub.com/gradle/gradle/issues/19065) Platform dependencies not possible in dependency block of test suite plugin
- [#22688](https://togithub.com/gradle/gradle/issues/22688) Increased memory usage (with -p option)
- [#22796](https://togithub.com/gradle/gradle/issues/22796) Building gradle itself fails during toolchain download: permission denied copying a file within `.gradle/jdks`
- [#22875](https://togithub.com/gradle/gradle/issues/22875) Regression with 7.6: @pom artifact in JVM library project is no longer found
- [#22937](https://togithub.com/gradle/gradle/issues/22937) Remove safe credentials reference
- [#22973](https://togithub.com/gradle/gradle/issues/22973) Kotlin MPP plugin broken with Gradle 7.6 due to signature change in TestResultProcessor
- [#23016](https://togithub.com/gradle/gradle/issues/23016) toolchainManagement.jvm.javaRepositories should not expose the full surface of NamedDomainObjectList
- [#23025](https://togithub.com/gradle/gradle/issues/23025) Back-port toolchain related fixes to 7.6.1
- [#23053](https://togithub.com/gradle/gradle/issues/23053) Auto-provisioning/auto-detection of IBM Semeru toolchains is broken with Gradle 7.6
- [#23074](https://togithub.com/gradle/gradle/issues/23074) Docs: Build Lifecycle starts halfway through a point
- [#23096](https://togithub.com/gradle/gradle/issues/23096) Classifiers of version catalog are discarded while copied to anothor dependency
- [#23111](https://togithub.com/gradle/gradle/issues/23111) Ant closures are broken with Gradle 7.6
- [#23178](https://togithub.com/gradle/gradle/issues/23178) Mention the Foojay Toolchain Resolver plugin in the Gradle manual
- [#23215](https://togithub.com/gradle/gradle/issues/23215) Gradle 7.6: high memory usage (android project)
- [#23224](https://togithub.com/gradle/gradle/issues/23224) Backport to 7.6.1 "Fix for Incremental compilation with modules"
- [#23294](https://togithub.com/gradle/gradle/issues/23294) "Unable to make progress running work" together with --continue and failing tasks (Backport to 7.6.1)
- [#23555](https://togithub.com/gradle/gradle/issues/23555) Improve Toolchain related deprecation nagging in 7.6
- [#23894](https://togithub.com/gradle/gradle/issues/23894) Update EOL policy
- [#23910](https://togithub.com/gradle/gradle/issues/23910) Backport trusting only full GPG keys in dependency verification \[Backport 7.6.1]
- [#23941](https://togithub.com/gradle/gradle/issues/23941) Typo in v7.6 docs about disabling_the_daemon
- [#23985](https://togithub.com/gradle/gradle/issues/23985) Resolving of manually created configuration creates a ResolveException
[Read the Release Notes](https://docs.gradle.org/7.6.1/release-notes.html)
#### Upgrade Instructions
Switch your build to use Gradle 7.6.1 by updating your wrapper:
./gradlew wrapper --gradle-version=7.6.1
See the [Gradle 7.x upgrade guide](https://docs.gradle.org/7.6.1/userguide/upgrading_version\_7.html#changes\_7.6) to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.1.
#### Reporting Problems
If you find a problem with this release, please file a bug on [GitHub Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss).
### [`v7.6`](https://togithub.com/gradle/gradle/releases/tag/v7.6.0): 7.6
[Compare Source](https://togithub.com/gradle/gradle/compare/v7.5.1...v7.6.0)
The Gradle team is excited to announce Gradle 7.6.
[Read the Release Notes](https://docs.gradle.org/7.6/release-notes.html)
We would like to thank the following community members for their contributions to this release of Gradle:
[altrisi](https://togithub.com/altrisi),
[aSemy](https://togithub.com/aSemy),
[Ashwin Pankaj](https://togithub.com/ashwinpankaj),
[Aurimas](https://togithub.com/liutikas),
[BJ Hargrave](https://togithub.com/bjhargrave),
[Björn Kautler](https://togithub.com/Vampire),
[Bradley Turek](https://togithub.com/TurekBot),
[Craig Andrews](https://togithub.com/candrews),
[Daniel Lin](https://togithub.com/ephemient),
[David Morris](https://togithub.com/codefish1),
[Edmund Mok](https://togithub.com/edmundmok),
[Frosty-J](https://togithub.com/Frosty-J),
[Gabriel Feo](https://togithub.com/gabrielfeo),
[Ivan Gavrilovic](https://togithub.com/gavra0),
[Jendrik Johannes](https://togithub.com/jjohannes),
[John](https://togithub.com/goughy000),
[Joseph Woolf](https://togithub.com/jsmwoolf),
[Karl-Michael Schindler](https://togithub.com/kamischi),
[Konstantin Gribov](https://togithub.com/grossws),
[Leonardo Brondani Schenkel](https://togithub.com/lbschenkel),
[Martin d'Anjou](https://togithub.com/martinda),
[Michael Bailey](https://togithub.com/yogurtearl),
[Pete Bentley](https://togithub.com/prbprbprb),
[Rob Bavey](https://togithub.com/robbavey),
[Sam Snyder](https://togithub.com/sambsnyd),
[sll552](https://togithub.com/sll552),
[teawithbrownsugar](https://togithub.com/teawithbrownsugar),
[Thomas Broadley](https://togithub.com/tbroadley),
[urdak](https://togithub.com/urdak),
[Varun Sharma](https://togithub.com/varunsh-coder),
[Xin Wang](https://togithub.com/scaventz)
### Upgrade instructions
Switch your build to use Gradle 7.6 by updating your wrapper:
`./gradlew wrapper --gradle-version=7.6`
See the [Gradle 7.x upgrade guide](https://docs.gradle.org/7.6/userguide/upgrading_version\_7.html#changes\_7.6) to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.
### Reporting problems
If you find a problem with this release, please file a bug on [GitHub Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss).
We hope you will build happiness with Gradle, and we look forward to your feedback via [Twitter](https://twitter.com/gradle) or on [GitHub](https://togithub.com/gradle).
Configuration
📅 Schedule: Branch creation - "before 3am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
7.5.1
->7.6.2
Release Notes
gradle/gradle (gradle)
### [`v7.6.2`](https://togithub.com/gradle/gradle/releases/tag/v7.6.2): 7.6.2 [Compare Source](https://togithub.com/gradle/gradle/compare/v7.6.1...v7.6.2) This is a patch release for 7.6. We recommend using 7.6.2 instead of 7.6. This release addresses two security vulnerabilities: - [Dependency cache path traversal](https://togithub.com/gradle/gradle/security/advisories/GHSA-2h6c-rv6q-494v) - [Path traversal vulnerabilities in handling of Tar archives](https://togithub.com/gradle/gradle/security/advisories/GHSA-84mw-qh6q-v842) It also fixes the following issues: - [#23201](https://togithub.com/gradle/gradle/issues/23201) Backport dependency upgrades to 7.x - [#23202](https://togithub.com/gradle/gradle/issues/23202) Backport Scala incremental compilation fixes - [#23325](https://togithub.com/gradle/gradle/issues/23325) Backport JSoup update to resolve CVE-2022-36033 - [#23458](https://togithub.com/gradle/gradle/issues/23458) Backport JUnit5 dynamic test logging bug fix - [#23681](https://togithub.com/gradle/gradle/issues/23681) Dependency graph resolution: Equivalent excludes can cause un-necessary graph mutations \[backport 7.x] - [#23922](https://togithub.com/gradle/gradle/issues/23922) Backport "Use Compiler API data for incremental compilation after a failure" to 7.x - [#23951](https://togithub.com/gradle/gradle/issues/23951) Exclude rule merging: missing optimization \[Backport 7.x] - [#24132](https://togithub.com/gradle/gradle/issues/24132) Extending an already resolved configuration no longer works correctly \[backport 7.x] - [#24234](https://togithub.com/gradle/gradle/issues/24234) 7.6.1 breaks gradle-consistent-versions - [#24390](https://togithub.com/gradle/gradle/issues/24390) Gradle 7.4 fails on multi release jar's with JDK 19 code - [#24439](https://togithub.com/gradle/gradle/issues/24439) Gradle complains about invalid tool chain - picking up the source package location - it should just ignore them \[Backport] - [#24443](https://togithub.com/gradle/gradle/issues/24443) Maven artifact referenced only in dependency constraints raises IllegalStateException: Corrupt serialized resolution result \[backport] - [#24901](https://togithub.com/gradle/gradle/issues/24901) Backport fix for test exception that cannot be deserialized to 7.x [Read the Release Notes](https://docs.gradle.org/7.6.2/release-notes.html) #### Upgrade Instructions Switch your build to use Gradle 7.6.2 by updating your wrapper: ./gradlew wrapper --gradle-version=7.6.2 See the [Gradle 7.x upgrade guide](https://docs.gradle.org/7.6.2/userguide/upgrading_version\_7.html#changes\_7.6) to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.2. #### Reporting Problems If you find a problem with this release, please file a bug on [GitHub Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss). ### [`v7.6.1`](https://togithub.com/gradle/gradle/releases/tag/v7.6.1): 7.6.1 [Compare Source](https://togithub.com/gradle/gradle/compare/v7.6.0...v7.6.1) This is a patch release for 7.6. We recommend using 7.6.1 instead of 7.6. It fixes the following issues: - [#19065](https://togithub.com/gradle/gradle/issues/19065) Platform dependencies not possible in dependency block of test suite plugin - [#22688](https://togithub.com/gradle/gradle/issues/22688) Increased memory usage (with -p option) - [#22796](https://togithub.com/gradle/gradle/issues/22796) Building gradle itself fails during toolchain download: permission denied copying a file within `.gradle/jdks` - [#22875](https://togithub.com/gradle/gradle/issues/22875) Regression with 7.6: @pom artifact in JVM library project is no longer found - [#22937](https://togithub.com/gradle/gradle/issues/22937) Remove safe credentials reference - [#22973](https://togithub.com/gradle/gradle/issues/22973) Kotlin MPP plugin broken with Gradle 7.6 due to signature change in TestResultProcessor - [#23016](https://togithub.com/gradle/gradle/issues/23016) toolchainManagement.jvm.javaRepositories should not expose the full surface of NamedDomainObjectList - [#23025](https://togithub.com/gradle/gradle/issues/23025) Back-port toolchain related fixes to 7.6.1 - [#23053](https://togithub.com/gradle/gradle/issues/23053) Auto-provisioning/auto-detection of IBM Semeru toolchains is broken with Gradle 7.6 - [#23074](https://togithub.com/gradle/gradle/issues/23074) Docs: Build Lifecycle starts halfway through a point - [#23096](https://togithub.com/gradle/gradle/issues/23096) Classifiers of version catalog are discarded while copied to anothor dependency - [#23111](https://togithub.com/gradle/gradle/issues/23111) Ant closures are broken with Gradle 7.6 - [#23178](https://togithub.com/gradle/gradle/issues/23178) Mention the Foojay Toolchain Resolver plugin in the Gradle manual - [#23215](https://togithub.com/gradle/gradle/issues/23215) Gradle 7.6: high memory usage (android project) - [#23224](https://togithub.com/gradle/gradle/issues/23224) Backport to 7.6.1 "Fix for Incremental compilation with modules" - [#23294](https://togithub.com/gradle/gradle/issues/23294) "Unable to make progress running work" together with --continue and failing tasks (Backport to 7.6.1) - [#23555](https://togithub.com/gradle/gradle/issues/23555) Improve Toolchain related deprecation nagging in 7.6 - [#23894](https://togithub.com/gradle/gradle/issues/23894) Update EOL policy - [#23910](https://togithub.com/gradle/gradle/issues/23910) Backport trusting only full GPG keys in dependency verification \[Backport 7.6.1] - [#23941](https://togithub.com/gradle/gradle/issues/23941) Typo in v7.6 docs about disabling_the_daemon - [#23985](https://togithub.com/gradle/gradle/issues/23985) Resolving of manually created configuration creates a ResolveException [Read the Release Notes](https://docs.gradle.org/7.6.1/release-notes.html) #### Upgrade Instructions Switch your build to use Gradle 7.6.1 by updating your wrapper: ./gradlew wrapper --gradle-version=7.6.1 See the [Gradle 7.x upgrade guide](https://docs.gradle.org/7.6.1/userguide/upgrading_version\_7.html#changes\_7.6) to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.1. #### Reporting Problems If you find a problem with this release, please file a bug on [GitHub Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss). ### [`v7.6`](https://togithub.com/gradle/gradle/releases/tag/v7.6.0): 7.6 [Compare Source](https://togithub.com/gradle/gradle/compare/v7.5.1...v7.6.0) The Gradle team is excited to announce Gradle 7.6. [Read the Release Notes](https://docs.gradle.org/7.6/release-notes.html) We would like to thank the following community members for their contributions to this release of Gradle: [altrisi](https://togithub.com/altrisi), [aSemy](https://togithub.com/aSemy), [Ashwin Pankaj](https://togithub.com/ashwinpankaj), [Aurimas](https://togithub.com/liutikas), [BJ Hargrave](https://togithub.com/bjhargrave), [Björn Kautler](https://togithub.com/Vampire), [Bradley Turek](https://togithub.com/TurekBot), [Craig Andrews](https://togithub.com/candrews), [Daniel Lin](https://togithub.com/ephemient), [David Morris](https://togithub.com/codefish1), [Edmund Mok](https://togithub.com/edmundmok), [Frosty-J](https://togithub.com/Frosty-J), [Gabriel Feo](https://togithub.com/gabrielfeo), [Ivan Gavrilovic](https://togithub.com/gavra0), [Jendrik Johannes](https://togithub.com/jjohannes), [John](https://togithub.com/goughy000), [Joseph Woolf](https://togithub.com/jsmwoolf), [Karl-Michael Schindler](https://togithub.com/kamischi), [Konstantin Gribov](https://togithub.com/grossws), [Leonardo Brondani Schenkel](https://togithub.com/lbschenkel), [Martin d'Anjou](https://togithub.com/martinda), [Michael Bailey](https://togithub.com/yogurtearl), [Pete Bentley](https://togithub.com/prbprbprb), [Rob Bavey](https://togithub.com/robbavey), [Sam Snyder](https://togithub.com/sambsnyd), [sll552](https://togithub.com/sll552), [teawithbrownsugar](https://togithub.com/teawithbrownsugar), [Thomas Broadley](https://togithub.com/tbroadley), [urdak](https://togithub.com/urdak), [Varun Sharma](https://togithub.com/varunsh-coder), [Xin Wang](https://togithub.com/scaventz) ### Upgrade instructions Switch your build to use Gradle 7.6 by updating your wrapper: `./gradlew wrapper --gradle-version=7.6` See the [Gradle 7.x upgrade guide](https://docs.gradle.org/7.6/userguide/upgrading_version\_7.html#changes\_7.6) to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6. ### Reporting problems If you find a problem with this release, please file a bug on [GitHub Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss). We hope you will build happiness with Gradle, and we look forward to your feedback via [Twitter](https://twitter.com/gradle) or on [GitHub](https://togithub.com/gradle).Configuration
📅 Schedule: Branch creation - "before 3am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.