search

twilio / twilio-java

A Java library for communicating with the Twilio REST API and generating TwiML.
MIT License
477 stars 422 forks source link

Bump com.squareup.okio:okio from 2.9.0 to 3.4.0 #776

Open dependabot[bot] opened 6 months ago

dependabot[bot] commented 6 months ago

Bumps com.squareup.okio:okio from 2.9.0 to 3.4.0.

Changelog

Sourced from com.squareup.okio:okio's changelog.

Version 3.4.0

2023-07-07

  • New: Adapt a Java NIO FileSystem (java.nio.file.FileSystem) as an Okio FileSystem using fileSystem.asOkioFileSystem().
  • New: Adapt Android’s AssetManager as an Okio FileSystem using AssetFileSystem. This is in the new okio-assetfilesystem module. Android applications should prefer this over FileSystem.RESOURCES as it’s faster to load.
  • Fix: Don't crash decoding GZIP files when the optional extra data (XLEN) is 32 KiB or larger.
  • Fix: Resolve symlinks in FakeFileSystem.canonicalize().
  • Fix: Report the correct createdAtMillis in NodeJsFileSystem file metadata. We were incorrectly using ctimeMs, where c means changed, not created.
  • Fix: UnsafeCursor is now Closeable.

Version 3.3.0

2023-01-07

  • Fix: Don't leak resources when use {} is used with a non-local return. We introduced this performance and stability bug by not considering that non-local returns execute neither the return nor catch control flows.
  • Fix: Use a sealed interface for BufferedSink and BufferedSource. These were never intended for end-users to implement, and we're happy that Kotlin now allows us to express that in our API.
  • New: Change internal locks from synchronized to ReentrantLock and Condition. We expect this to improve help when using Okio with Java virtual threads ([Project Loom][loom]).
  • Upgrade: [Kotlin 1.8.0][kotlin_1_8_0].

Version 3.2.0

2022-06-26

  • Fix: Configure the multiplatform artifact (com.squareup.okio:okio:3.x.x) to depend on the JVM artifact (com.squareup.okio:okio-jvm:3.x.x) for Maven builds. This should work-around an issue where Maven doesn't interpret Gradle metadata.
  • Fix: Change CipherSource and CipherSink to recover if the cipher doesn't support streaming. This should work around a crash with AES/GCM ciphers on Android.
  • New: Enable compatibility with non-hierarchical projects.

Version 3.1.0

2022-04-19

  • Upgrade: [Kotlin 1.6.20][kotlin_1_6_20].
  • New: Support [Hierarchical project structure][hierarchical_projects]. If you're using Okio in a multiplatform project please upgrade your project to Kotlin 1.6.20 (or newer) to take advantage of this. With hierarchical projects it's easier to use properties like FileSystem.SYSTEM that

... (truncated)

Commits
  • a161b07 Prepare for release 3.4.0.
  • c5f462b Copyright to files in build-support (#1285)
  • f21714d Upgrade Gradle and JMH (#1283)
  • 5f5db4a Merge pull request #1284 from square/renovate/com.google.jimfs
  • 8af8d2a Update dependency com.google.jimfs:jimfs to v1.3.0
  • b64c198 Update dependency com.vanniktech:gradle-maven-publish-plugin to v0.25.3 (#1282)
  • ea82713 Merge pull request #1281 from square/renovate/gradle-7.x
  • 3569daa Update dependency gradle to v7.6.2
  • e937a50 Merge pull request #1277 from sifmelcara/fix-int-sign-conversion
  • 81bce1a Fix a bug where xlen larger than 0x7fff was rejected (#1280)
  • Additional commits viewable in compare view


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/twilio/twilio-java/network/alerts).

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.