stempler / bnd-platform

Build OSGi bundles and Eclipse Update Sites from existing JARs, e.g. from Maven repositories (Plugin for Gradle)
Apache License 2.0
79 stars 30 forks source link

fix(deps): update dependency de.undercouch:gradle-download-task to v5.6.0 #91

Closed renovate[bot] closed 6 months ago

renovate[bot] commented 6 months ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change OpenSSF
de.undercouch:gradle-download-task dependencies minor 5.5.0 -> 5.6.0 OpenSSF Scorecard

Release Notes

michel-kraemer/gradle-download-task (de.undercouch:gradle-download-task) ### [`v5.6.0`](https://togithub.com/michel-kraemer/gradle-download-task/releases/tag/5.6.0) [Compare Source](https://togithub.com/michel-kraemer/gradle-download-task/compare/5.5.0...5.6.0) New features: - Add possibility to configure HTTP status code validator (using the `validateStatus` property) - Add integration tests for Gradle versions up to 8.6 Bug fixes: - Do not unnecessarily enable preemptive auth for proxy (possible security issue) - Remove sensitive headers from request after redirect (possible security issue). Thanks to [@​diederikfaber](https://togithub.com/diederikfaber) for reporting this and to [@​dtretyakov](https://togithub.com/dtretyakov) and [@​eghobo](https://togithub.com/eghobo) for the pointers. - Really log all requests (including redirects) and all headers in debug mode. It seems something has changed in Apache HttpClient since we initially implemented this feature. Maintenance: - Update dependencies - Update to Gradle 8.6 - Fix some warnings in build script - Set dependabot interval to weekly - Split CI tests of Gradle 7.x versions

Configuration

πŸ“… Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

β™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

πŸ”• Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.