Changelog
*Sourced from [okhttp's changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md).*
> ## Version 3.12.3
>
> _2019-05-07_
>
> * Fix: Permit multipart file names to contain non-ASCII characters.
> * Fix: Retain the `Route` when a connection is reused on a redirect or other follow-up. This was
> causing some `Authenticator` calls to see a null route when non-null was expected.
>
>
> ## Version 3.14.1
>
> _2019-04-10_
>
> * Fix: Don't crash when an interceptor retries when there are no more routes. This was an
> edge-case regression introduced with the events cleanup in 3.14.0.
>
> * Fix: Provide actionable advice when the exchange is non-null. Prior to 3.14, OkHttp would
> silently leak connections when an interceptor retries without closing the response body. With
> 3.14 we detect this problem but the exception was not helpful.
>
> ## Version 3.14.0
>
> _2019-03-14_
>
> * **This release deletes the long-deprecated `OkUrlFactory` and `OkApacheClient` APIs.** These
> facades hide OkHttp's implementation behind another client's API. If you still need this please
> copy and paste [ObsoleteUrlFactory.java][obsolete_url_factory] or
> [ObsoleteApacheClient.java][obsolete_apache_client] into your project.
>
> * **OkHttp now supports duplex calls over HTTP/2.** With normal HTTP calls the request must finish
> before the response starts. With duplex, request and response bodies are transmitted
> simultaneously. This can be used to implement interactive conversations within a single HTTP
> call.
>
> Create duplex calls by overriding the new `RequestBody.isDuplex()` method to return true.
> This simple option dramatically changes the behavior of the request body and of the entire
> call.
>
> The `RequestBody.writeTo()` method may now retain a reference to the provided sink and
> hand it off to another thread to write to it after `writeTo` returns.
>
> The `EventListener` may now see requests and responses interleaved in ways not previously
> permitted. For example, a listener may receive `responseHeadersStart()` followed by
> `requestBodyEnd()`, both on the same call. Such events may be triggered by different threads
> even for a single call.
>
> Interceptors that rewrite or replace the request body may now inadvertently interfere with
> duplex request bodies. Such interceptors should check `RequestBody.isDuplex()` and avoid
> accessing the request body when it is.
>
> ... (truncated)
Commits
- [`44b0079`](https://github.com/square/okhttp/commit/44b00791f62938497597d7fc767c9b23bba03955) [maven-release-plugin] prepare release parent-3.12.3
- [`f6543eb`](https://github.com/square/okhttp/commit/f6543eb0ebf23b7f93482612757adf37df70f510) Merge pull request [#5004](https://github-redirect.dependabot.com/square/okhttp/issues/5004) from square/jwilson.0503.null_Route
- [`9fbd82f`](https://github.com/square/okhttp/commit/9fbd82f41bc8d0414c21eb2f60c3d807a255688e) fix: StreamAllocation should keep route from reused connection
- [`8152136`](https://github.com/square/okhttp/commit/815213617b417f6798deac35f0abf9e48d20f0ee) Merge pull request [#4618](https://github-redirect.dependabot.com/square/okhttp/issues/4618) from valepakh/okhttp_3.12.x
- [`3cdce2d`](https://github.com/square/okhttp/commit/3cdce2dc69b77222aaaf9e05d33891acd3d7abea) [maven-release-plugin] prepare for next development iteration
- [`c1cbbdc`](https://github.com/square/okhttp/commit/c1cbbdc961da9ad2fd661cf67e4dc8c53eacf78d) Permit multipart filenames to contain non-ascii characters
- See full diff in [compare view](https://github.com/square/okhttp/compare/parent-3.12.2...parent-3.12.3)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
- `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Automerge options (never/patch/minor, and dev/runtime dependencies)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
Finally, you can contact us by mentioning @dependabot.
Bumps okhttp from 3.12.2 to 3.12.3.
Changelog
*Sourced from [okhttp's changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md).* > ## Version 3.12.3 > > _2019-05-07_ > > * Fix: Permit multipart file names to contain non-ASCII characters. > * Fix: Retain the `Route` when a connection is reused on a redirect or other follow-up. This was > causing some `Authenticator` calls to see a null route when non-null was expected. > > > ## Version 3.14.1 > > _2019-04-10_ > > * Fix: Don't crash when an interceptor retries when there are no more routes. This was an > edge-case regression introduced with the events cleanup in 3.14.0. > > * Fix: Provide actionable advice when the exchange is non-null. Prior to 3.14, OkHttp would > silently leak connections when an interceptor retries without closing the response body. With > 3.14 we detect this problem but the exception was not helpful. > > ## Version 3.14.0 > > _2019-03-14_ > > * **This release deletes the long-deprecated `OkUrlFactory` and `OkApacheClient` APIs.** These > facades hide OkHttp's implementation behind another client's API. If you still need this please > copy and paste [ObsoleteUrlFactory.java][obsolete_url_factory] or > [ObsoleteApacheClient.java][obsolete_apache_client] into your project. > > * **OkHttp now supports duplex calls over HTTP/2.** With normal HTTP calls the request must finish > before the response starts. With duplex, request and response bodies are transmitted > simultaneously. This can be used to implement interactive conversations within a single HTTP > call. > > Create duplex calls by overriding the new `RequestBody.isDuplex()` method to return true. > This simple option dramatically changes the behavior of the request body and of the entire > call. > > The `RequestBody.writeTo()` method may now retain a reference to the provided sink and > hand it off to another thread to write to it after `writeTo` returns. > > The `EventListener` may now see requests and responses interleaved in ways not previously > permitted. For example, a listener may receive `responseHeadersStart()` followed by > `requestBodyEnd()`, both on the same call. Such events may be triggered by different threads > even for a single call. > > Interceptors that rewrite or replace the request body may now inadvertently interfere with > duplex request bodies. Such interceptors should check `RequestBody.isDuplex()` and avoid > accessing the request body when it is. > > ... (truncated)Commits
- [`44b0079`](https://github.com/square/okhttp/commit/44b00791f62938497597d7fc767c9b23bba03955) [maven-release-plugin] prepare release parent-3.12.3 - [`f6543eb`](https://github.com/square/okhttp/commit/f6543eb0ebf23b7f93482612757adf37df70f510) Merge pull request [#5004](https://github-redirect.dependabot.com/square/okhttp/issues/5004) from square/jwilson.0503.null_Route - [`9fbd82f`](https://github.com/square/okhttp/commit/9fbd82f41bc8d0414c21eb2f60c3d807a255688e) fix: StreamAllocation should keep route from reused connection - [`8152136`](https://github.com/square/okhttp/commit/815213617b417f6798deac35f0abf9e48d20f0ee) Merge pull request [#4618](https://github-redirect.dependabot.com/square/okhttp/issues/4618) from valepakh/okhttp_3.12.x - [`3cdce2d`](https://github.com/square/okhttp/commit/3cdce2dc69b77222aaaf9e05d33891acd3d7abea) [maven-release-plugin] prepare for next development iteration - [`c1cbbdc`](https://github.com/square/okhttp/commit/c1cbbdc961da9ad2fd661cf67e4dc8c53eacf78d) Permit multipart filenames to contain non-ascii characters - See full diff in [compare view](https://github.com/square/okhttp/compare/parent-3.12.2...parent-3.12.3)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired) Finally, you can contact us by mentioning @dependabot.