Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 30, 2025

Bumps the gradle group with 1 update: com.squareup.okhttp3:logging-interceptor.

Updates com.squareup.okhttp3:logging-interceptor from 5.0.0-alpha.14 to 5.0.0-alpha.16

Changelog

Sourced from com.squareup.okhttp3:logging-interceptor's changelog.

Version 5.0.0-alpha.16

2024-05-29

  • Fix: The previous release would crash when running on Robolectric. We didn't anticipate running our Android artifact on the JVM platform!

Version 5.0.0-alpha.15

2024-05-28

This release introduces separate JVM and Android artifacts. Until now, we've distributed OkHttp as a JVM library that detects Android capabilities at runtime, but that doesn't offer Android-specific APIs. With this release we're starting to publish OkHttp as an AAR for Android users in addition to our existing JAR for JVM users.

This first Android-specific artifact adopts Android's assets mechanism to embed the public suffix data. We will build more Android integration in future releases.

The okhttp-android artifact first introduced in 5.0.0-alpha.7 is no longer available:

  • The AndroidAsyncDns class moved to the okhttp artifact.
  • The AndroidLogging class is no longer necessary. LoggingEventListener and HttpLoggingInterceptor write to logcat by default.

The rest of this release is our highest-quality release yet. Though we continue to use the word alpha in the version name, the only unstable thing in it is some non-final APIs tagged @ExperimentalOkHttpApi. You can safely use this release in production.

  • Fix: Attempt to read the response even if sending the request failed. This makes it possible to handle response statuses like HTTP/1.1 431 "Request Header Fields Too Large.

  • Fix: Handle multiple 1xx responses.

  • Fix: Address a performance bug in our internal task runner. We had a race condition that could result in it OkHttp starting a thread for each queued task, even when a single thread could run all of them.

  • Fix: Address a performance bug in MultipartReader. We were scanning the entire input stream for a delimiter when we only needed to scan enough to return a result.

  • Fix: Don't double-compress the public suffix database. OkHttp is usually distributed in a compressed file (like a JAR or APK), so compressing its internal data was redundant.

  • Fix: Call ProxySelector.connectFailed() when a connection's initial TCP handshake fails.

  • Fix: Change the signature of Dispatcher to accept a nullable ExecutorService. Changing this parameter to be non-null was an unintended signature change in OkHttp 4.0.

... (truncated)

Commits
  • e6daf2e Prepare for release 5.0.0-alpha.16.
  • 54cbf31 Fix test execution on Robolectric (#8822)
  • 0e17a67 Prepare next development version.
  • a2b9c0c Prepare for release .
  • b70841f Update dependency com.android.tools.build:gradle to v8.10.1 (#8819)
  • 90d3a6b Be consistent about syntax to lock, wait, and notify (#8818)
  • acd192a Change the locking mechanism to 'synchronized' (#8817)
  • 1ae04ad Update dependency com.diffplug.spotless:spotless-plugin-gradle to v7.0.4 (#8814)
  • 7e83c84 Start using BufferedSource.indexOf() with a toIndex (#8813)
  • 82a3793 Upgrade Okio to 3.12.0 (#8812)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @poad.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gradle group with 1 update: [com.squareup.okhttp3:logging-interceptor](https://github.com/square/okhttp).


Updates `com.squareup.okhttp3:logging-interceptor` from 5.0.0-alpha.14 to 5.0.0-alpha.16
- [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md)
- [Commits](square/okhttp@parent-5.0.0-alpha.14...parent-5.0.0-alpha.16)

---
updated-dependencies:
- dependency-name: com.squareup.okhttp3:logging-interceptor
  dependency-version: 5.0.0-alpha.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels May 30, 2025
@amazon-q-developer
Copy link
Contributor

⏳ I'm reviewing this pull request for security vulnerabilities and code quality issues. I'll provide an update when I'm done

@amazon-q-developer
Copy link
Contributor

✅ I finished the code review, and didn't find any security or code quality issues.

Copy link
Owner

@poad poad left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dependabot merge

@dependabot dependabot bot merged commit 98ceafe into main May 30, 2025
3 checks passed
@dependabot dependabot bot deleted the dependabot/gradle/gradle-41c86e1c5c branch May 30, 2025 12:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants