release-engineering / pom-manipulation-ext

A more generic framework-style extension for preprocessing Maven pom.xml files before the build runs (from within Maven itself)
https://release-engineering.github.io/pom-manipulation-ext/
Apache License 2.0
54 stars 74 forks source link

Bump okio from 1.4.0 to 3.4.0 in /integration-test/src/it/project-inheritance #988

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps okio from 1.4.0 to 3.4.0.

Changelog

Sourced from okio's changelog.

Version 3.4.0

2023-07-07

  • New: Adapt a Java NIO FileSystem (java.nio.file.FileSystem) as an Okio FileSystem using fileSystem.asOkioFileSystem().
  • New: Adapt Android’s AssetManager as an Okio FileSystem using AssetFileSystem. This is in the new okio-assetfilesystem module. Android applications should prefer this over FileSystem.RESOURCES as it’s faster to load.
  • Fix: Don't crash decoding GZIP files when the optional extra data (XLEN) is 32 KiB or larger.
  • Fix: Resolve symlinks in FakeFileSystem.canonicalize().
  • Fix: Report the correct createdAtMillis in NodeJsFileSystem file metadata. We were incorrectly using ctimeMs, where c means changed, not created.
  • Fix: UnsafeCursor is now Closeable.

Version 3.3.0

2023-01-07

  • Fix: Don't leak resources when use {} is used with a non-local return. We introduced this performance and stability bug by not considering that non-local returns execute neither the return nor catch control flows.
  • Fix: Use a sealed interface for BufferedSink and BufferedSource. These were never intended for end-users to implement, and we're happy that Kotlin now allows us to express that in our API.
  • New: Change internal locks from synchronized to ReentrantLock and Condition. We expect this to improve help when using Okio with Java virtual threads ([Project Loom][loom]).
  • Upgrade: [Kotlin 1.8.0][kotlin_1_8_0].

Version 3.2.0

2022-06-26

  • Fix: Configure the multiplatform artifact (com.squareup.okio:okio:3.x.x) to depend on the JVM artifact (com.squareup.okio:okio-jvm:3.x.x) for Maven builds. This should work-around an issue where Maven doesn't interpret Gradle metadata.
  • Fix: Change CipherSource and CipherSink to recover if the cipher doesn't support streaming. This should work around a crash with AES/GCM ciphers on Android.
  • New: Enable compatibility with non-hierarchical projects.

Version 3.1.0

2022-04-19

  • Upgrade: [Kotlin 1.6.20][kotlin_1_6_20].
  • New: Support [Hierarchical project structure][hierarchical_projects]. If you're using Okio in a multiplatform project please upgrade your project to Kotlin 1.6.20 (or newer) to take advantage of this. With hierarchical projects it's easier to use properties like FileSystem.SYSTEM that

... (truncated)

Commits
  • a161b07 Prepare for release 3.4.0.
  • c5f462b Copyright to files in build-support (#1285)
  • f21714d Upgrade Gradle and JMH (#1283)
  • 5f5db4a Merge pull request #1284 from square/renovate/com.google.jimfs
  • 8af8d2a Update dependency com.google.jimfs:jimfs to v1.3.0
  • b64c198 Update dependency com.vanniktech:gradle-maven-publish-plugin to v0.25.3 (#1282)
  • ea82713 Merge pull request #1281 from square/renovate/gradle-7.x
  • 3569daa Update dependency gradle to v7.6.2
  • e937a50 Merge pull request #1277 from sifmelcara/fix-int-sign-conversion
  • 81bce1a Fix a bug where xlen larger than 0x7fff was rejected (#1280)
  • Additional commits viewable in compare view


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/release-engineering/pom-manipulation-ext/network/alerts).

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

codecov[bot] commented 1 year ago

Codecov Report

Patch and project coverage have no change.

Comparison is base (5cd1e33) 83.84% compared to head (12ecbe6) 83.84%.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #988 +/- ## ========================================= Coverage 83.84% 83.84% Complexity 1948 1948 ========================================= Files 120 120 Lines 7180 7180 Branches 1228 1228 ========================================= Hits 6020 6020 Misses 674 674 Partials 486 486 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Do you have feedback about the report comment? Let us know in this issue.