vmware / singleton

A service that provides support for Software Internationalization and Localization
Other
68 stars 64 forks source link

Bump de.undercouch:gradle-download-task from 3.4.3 to 5.6.0 #3047

Open dependabot[bot] opened 7 months ago

dependabot[bot] commented 7 months ago

Bumps de.undercouch:gradle-download-task from 3.4.3 to 5.6.0.

Release notes

Sourced from de.undercouch:gradle-download-task's releases.

5.6.0

New features:

  • Add possibility to configure HTTP status code validator (using the validateStatus property)
  • Add integration tests for Gradle versions up to 8.6

Bug fixes:

  • Do not unnecessarily enable preemptive auth for proxy (possible security issue)
  • Remove sensitive headers from request after redirect (possible security issue). Thanks to @​diederikfaber for reporting this and to @​dtretyakov and @​eghobo for the pointers.
  • Really log all requests (including redirects) and all headers in debug mode. It seems something has changed in Apache HttpClient since we initially implemented this feature.

Maintenance:

  • Update dependencies
  • Update to Gradle 8.6
  • Fix some warnings in build script
  • Set dependabot interval to weekly
  • Split CI tests of Gradle 7.x versions

5.5.0

New features:

  • Accept URI as source (#338)
  • Support RegularFile as input for the Verify action

Bug fixes:

  • Relocate Apache HttpClient's public suffix list to avoid classpath conflicts (#317)

Maintenance:

  • Add integration tests for Gradle versions up to 8.3
  • Remove unnecessary integration tests for some 5.x and 6.x versions of Gradle
  • Update dependencies
  • Update to Gradle 8.3
  • Fix deprecation warnings in examples

5.4.0

New features:

  • Add possibility to set request method and body

Maintenance:

  • Update dependencies
  • Improve documentation
  • Add integration tests for Gradle 8.0.1

5.3.1

Bug fixes:

  • Downgrade slf4j to fix warning on console about missing slf4j provider
  • Allow download and verify extensions to be created on demand in custom tasks, so these tasks can be made compatible with Gradle's configuration cache (see #284). Thanks to @​liblit for testing!

Maintenance:

... (truncated)

Commits
  • 904c4ed Bump up version number to 5.6.0
  • 6905421 Document validateStatus
  • 1c50c9d Update Gradle to 8.6 and fix some deprecation warnings in build script
  • e31d969 Update dependencies
  • f22bde6 Merge pull request #385 from michel-kraemer/dependabot/npm_and_yarn/screencas...
  • bcbc187 Add integration tests for Gradle versions up to 8.6
  • 1d1ea79 Add more tests
  • 814e8e7 Fix typo
  • 07f09ad Split CI tests of Gradle 7.x versions
  • 1641eb8 Use default ports when comparing hosts
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
codecov[bot] commented 7 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

:exclamation: No coverage uploaded for pull request base (g11n-java-client@36360d1). Click here to learn what that means.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## g11n-java-client #3047 +/- ## =================================================== Coverage ? 55.33% Complexity ? 980 =================================================== Files ? 114 Lines ? 5767 Branches ? 1007 =================================================== Hits ? 3191 Misses ? 2046 Partials ? 530 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.