gradle/gradle (gradle)
### [`v7.6.2`](https://togithub.com/gradle/gradle/releases/tag/v7.6.2): 7.6.2
This is a patch release for 7.6. We recommend using 7.6.2 instead of 7.6.
This release addresses two security vulnerabilities:
- [Dependency cache path traversal](https://togithub.com/gradle/gradle/security/advisories/GHSA-2h6c-rv6q-494v)
- [Path traversal vulnerabilities in handling of Tar archives](https://togithub.com/gradle/gradle/security/advisories/GHSA-84mw-qh6q-v842)
It also fixes the following issues:
- [#23201](https://togithub.com/gradle/gradle/issues/23201) Backport dependency upgrades to 7.x
- [#23202](https://togithub.com/gradle/gradle/issues/23202) Backport Scala incremental compilation fixes
- [#23325](https://togithub.com/gradle/gradle/issues/23325) Backport JSoup update to resolve CVE-2022-36033
- [#23458](https://togithub.com/gradle/gradle/issues/23458) Backport JUnit5 dynamic test logging bug fix
- [#23681](https://togithub.com/gradle/gradle/issues/23681) Dependency graph resolution: Equivalent excludes can cause un-necessary graph mutations \[backport 7.x]
- [#23922](https://togithub.com/gradle/gradle/issues/23922) Backport "Use Compiler API data for incremental compilation after a failure" to 7.x
- [#23951](https://togithub.com/gradle/gradle/issues/23951) Exclude rule merging: missing optimization \[Backport 7.x]
- [#24132](https://togithub.com/gradle/gradle/issues/24132) Extending an already resolved configuration no longer works correctly \[backport 7.x]
- [#24234](https://togithub.com/gradle/gradle/issues/24234) 7.6.1 breaks gradle-consistent-versions
- [#24390](https://togithub.com/gradle/gradle/issues/24390) Gradle 7.4 fails on multi release jar's with JDK 19 code
- [#24439](https://togithub.com/gradle/gradle/issues/24439) Gradle complains about invalid tool chain - picking up the source package location - it should just ignore them \[Backport]
- [#24443](https://togithub.com/gradle/gradle/issues/24443) Maven artifact referenced only in dependency constraints raises IllegalStateException: Corrupt serialized resolution result \[backport]
- [#24901](https://togithub.com/gradle/gradle/issues/24901) Backport fix for test exception that cannot be deserialized to 7.x
[Read the Release Notes](https://docs.gradle.org/7.6.2/release-notes.html)
#### Upgrade Instructions
Switch your build to use Gradle 7.6.2 by updating your wrapper:
./gradlew wrapper --gradle-version=7.6.2
See the [Gradle 7.x upgrade guide](https://docs.gradle.org/7.6.2/userguide/upgrading_version\_7.html#changes\_7.6) to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.2.
#### Reporting Problems
If you find a problem with this release, please file a bug on [GitHub Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss).
### [`v7.6.1`](https://togithub.com/gradle/gradle/releases/tag/v7.6.1): 7.6.1
This is a patch release for 7.6. We recommend using 7.6.1 instead of 7.6.
It fixes the following issues:
- [#19065](https://togithub.com/gradle/gradle/issues/19065) Platform dependencies not possible in dependency block of test suite plugin
- [#22688](https://togithub.com/gradle/gradle/issues/22688) Increased memory usage (with -p option)
- [#22796](https://togithub.com/gradle/gradle/issues/22796) Building gradle itself fails during toolchain download: permission denied copying a file within `.gradle/jdks`
- [#22875](https://togithub.com/gradle/gradle/issues/22875) Regression with 7.6: @​pom artifact in JVM library project is no longer found
- [#22937](https://togithub.com/gradle/gradle/issues/22937) Remove safe credentials reference
- [#22973](https://togithub.com/gradle/gradle/issues/22973) Kotlin MPP plugin broken with Gradle 7.6 due to signature change in TestResultProcessor
- [#23016](https://togithub.com/gradle/gradle/issues/23016) toolchainManagement.jvm.javaRepositories should not expose the full surface of NamedDomainObjectList
- [#23025](https://togithub.com/gradle/gradle/issues/23025) Back-port toolchain related fixes to 7.6.1
- [#23053](https://togithub.com/gradle/gradle/issues/23053) Auto-provisioning/auto-detection of IBM Semeru toolchains is broken with Gradle 7.6
- [#23074](https://togithub.com/gradle/gradle/issues/23074) Docs: Build Lifecycle starts halfway through a point
- [#23096](https://togithub.com/gradle/gradle/issues/23096) Classifiers of version catalog are discarded while copied to anothor dependency
- [#23111](https://togithub.com/gradle/gradle/issues/23111) Ant closures are broken with Gradle 7.6
- [#23178](https://togithub.com/gradle/gradle/issues/23178) Mention the Foojay Toolchain Resolver plugin in the Gradle manual
- [#23215](https://togithub.com/gradle/gradle/issues/23215) Gradle 7.6: high memory usage (android project)
- [#23224](https://togithub.com/gradle/gradle/issues/23224) Backport to 7.6.1 "Fix for Incremental compilation with modules"
- [#23294](https://togithub.com/gradle/gradle/issues/23294) "Unable to make progress running work" together with --continue and failing tasks (Backport to 7.6.1)
- [#23555](https://togithub.com/gradle/gradle/issues/23555) Improve Toolchain related deprecation nagging in 7.6
- [#23894](https://togithub.com/gradle/gradle/issues/23894) Update EOL policy
- [#23910](https://togithub.com/gradle/gradle/issues/23910) Backport trusting only full GPG keys in dependency verification \[Backport 7.6.1]
- [#23941](https://togithub.com/gradle/gradle/issues/23941) Typo in v7.6 docs about disabling_the_daemon
- [#23985](https://togithub.com/gradle/gradle/issues/23985) Resolving of manually created configuration creates a ResolveException
[Read the Release Notes](https://docs.gradle.org/7.6.1/release-notes.html)
#### Upgrade Instructions
Switch your build to use Gradle 7.6.1 by updating your wrapper:
./gradlew wrapper --gradle-version=7.6.1
See the [Gradle 7.x upgrade guide](https://docs.gradle.org/7.6.1/userguide/upgrading_version\_7.html#changes\_7.6) to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.1.
#### Reporting Problems
If you find a problem with this release, please file a bug on [GitHub Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss).
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
[ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
stefanbethke
commented
1 year ago
This PR contains the following updates:
7.5.1->7.6.2Release Notes
gradle/gradle (gradle)
### [`v7.6.2`](https://togithub.com/gradle/gradle/releases/tag/v7.6.2): 7.6.2 This is a patch release for 7.6. We recommend using 7.6.2 instead of 7.6. This release addresses two security vulnerabilities: - [Dependency cache path traversal](https://togithub.com/gradle/gradle/security/advisories/GHSA-2h6c-rv6q-494v) - [Path traversal vulnerabilities in handling of Tar archives](https://togithub.com/gradle/gradle/security/advisories/GHSA-84mw-qh6q-v842) It also fixes the following issues: - [#23201](https://togithub.com/gradle/gradle/issues/23201) Backport dependency upgrades to 7.x - [#23202](https://togithub.com/gradle/gradle/issues/23202) Backport Scala incremental compilation fixes - [#23325](https://togithub.com/gradle/gradle/issues/23325) Backport JSoup update to resolve CVE-2022-36033 - [#23458](https://togithub.com/gradle/gradle/issues/23458) Backport JUnit5 dynamic test logging bug fix - [#23681](https://togithub.com/gradle/gradle/issues/23681) Dependency graph resolution: Equivalent excludes can cause un-necessary graph mutations \[backport 7.x] - [#23922](https://togithub.com/gradle/gradle/issues/23922) Backport "Use Compiler API data for incremental compilation after a failure" to 7.x - [#23951](https://togithub.com/gradle/gradle/issues/23951) Exclude rule merging: missing optimization \[Backport 7.x] - [#24132](https://togithub.com/gradle/gradle/issues/24132) Extending an already resolved configuration no longer works correctly \[backport 7.x] - [#24234](https://togithub.com/gradle/gradle/issues/24234) 7.6.1 breaks gradle-consistent-versions - [#24390](https://togithub.com/gradle/gradle/issues/24390) Gradle 7.4 fails on multi release jar's with JDK 19 code - [#24439](https://togithub.com/gradle/gradle/issues/24439) Gradle complains about invalid tool chain - picking up the source package location - it should just ignore them \[Backport] - [#24443](https://togithub.com/gradle/gradle/issues/24443) Maven artifact referenced only in dependency constraints raises IllegalStateException: Corrupt serialized resolution result \[backport] - [#24901](https://togithub.com/gradle/gradle/issues/24901) Backport fix for test exception that cannot be deserialized to 7.x [Read the Release Notes](https://docs.gradle.org/7.6.2/release-notes.html) #### Upgrade Instructions Switch your build to use Gradle 7.6.2 by updating your wrapper: ./gradlew wrapper --gradle-version=7.6.2 See the [Gradle 7.x upgrade guide](https://docs.gradle.org/7.6.2/userguide/upgrading_version\_7.html#changes\_7.6) to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.2. #### Reporting Problems If you find a problem with this release, please file a bug on [GitHub Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss). ### [`v7.6.1`](https://togithub.com/gradle/gradle/releases/tag/v7.6.1): 7.6.1 This is a patch release for 7.6. We recommend using 7.6.1 instead of 7.6. It fixes the following issues: - [#19065](https://togithub.com/gradle/gradle/issues/19065) Platform dependencies not possible in dependency block of test suite plugin - [#22688](https://togithub.com/gradle/gradle/issues/22688) Increased memory usage (with -p option) - [#22796](https://togithub.com/gradle/gradle/issues/22796) Building gradle itself fails during toolchain download: permission denied copying a file within `.gradle/jdks` - [#22875](https://togithub.com/gradle/gradle/issues/22875) Regression with 7.6: @​pom artifact in JVM library project is no longer found - [#22937](https://togithub.com/gradle/gradle/issues/22937) Remove safe credentials reference - [#22973](https://togithub.com/gradle/gradle/issues/22973) Kotlin MPP plugin broken with Gradle 7.6 due to signature change in TestResultProcessor - [#23016](https://togithub.com/gradle/gradle/issues/23016) toolchainManagement.jvm.javaRepositories should not expose the full surface of NamedDomainObjectList - [#23025](https://togithub.com/gradle/gradle/issues/23025) Back-port toolchain related fixes to 7.6.1 - [#23053](https://togithub.com/gradle/gradle/issues/23053) Auto-provisioning/auto-detection of IBM Semeru toolchains is broken with Gradle 7.6 - [#23074](https://togithub.com/gradle/gradle/issues/23074) Docs: Build Lifecycle starts halfway through a point - [#23096](https://togithub.com/gradle/gradle/issues/23096) Classifiers of version catalog are discarded while copied to anothor dependency - [#23111](https://togithub.com/gradle/gradle/issues/23111) Ant closures are broken with Gradle 7.6 - [#23178](https://togithub.com/gradle/gradle/issues/23178) Mention the Foojay Toolchain Resolver plugin in the Gradle manual - [#23215](https://togithub.com/gradle/gradle/issues/23215) Gradle 7.6: high memory usage (android project) - [#23224](https://togithub.com/gradle/gradle/issues/23224) Backport to 7.6.1 "Fix for Incremental compilation with modules" - [#23294](https://togithub.com/gradle/gradle/issues/23294) "Unable to make progress running work" together with --continue and failing tasks (Backport to 7.6.1) - [#23555](https://togithub.com/gradle/gradle/issues/23555) Improve Toolchain related deprecation nagging in 7.6 - [#23894](https://togithub.com/gradle/gradle/issues/23894) Update EOL policy - [#23910](https://togithub.com/gradle/gradle/issues/23910) Backport trusting only full GPG keys in dependency verification \[Backport 7.6.1] - [#23941](https://togithub.com/gradle/gradle/issues/23941) Typo in v7.6 docs about disabling_the_daemon - [#23985](https://togithub.com/gradle/gradle/issues/23985) Resolving of manually created configuration creates a ResolveException [Read the Release Notes](https://docs.gradle.org/7.6.1/release-notes.html) #### Upgrade Instructions Switch your build to use Gradle 7.6.1 by updating your wrapper: ./gradlew wrapper --gradle-version=7.6.1 See the [Gradle 7.x upgrade guide](https://docs.gradle.org/7.6.1/userguide/upgrading_version\_7.html#changes\_7.6) to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.1. #### Reporting Problems If you find a problem with this release, please file a bug on [GitHub Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss).Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.