Skip to content

chore(deps): bump the gradle group across 1 directory with 6 updates - #117

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/gradle/dev/gradle-4016a753fa
Open

chore(deps): bump the gradle group across 1 directory with 6 updates#117
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/gradle/dev/gradle-4016a753fa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the gradle group with 6 updates in the / directory:

Package From To
org.bouncycastle:bcpg-jdk18on 1.84 1.85
gradle-wrapper 9.6.1 9.7.1
com.squareup.okhttp3:okhttp 5.4.0 5.5.0
com.squareup.okhttp3:mockwebserver3-junit4 5.4.0 5.5.0
com.mikepenz:multiplatform-markdown-renderer-m3 0.43.0 0.44.0
com.google.devtools.ksp 2.3.10 2.3.11

Updates org.bouncycastle:bcpg-jdk18on from 1.84 to 1.85

Changelog

Sourced from org.bouncycastle:bcpg-jdk18on's changelog.

... (truncated)

Commits

Updates gradle-wrapper from 9.6.1 to 9.7.1

Release notes

Sourced from gradle-wrapper's releases.

9.7.1

The Gradle team is excited to announce Gradle 9.7.1.

This is a patch release for 9.7.0. We recommend using 9.7.1 instead of 9.7.0.

Here are the highlights of 9.7.0 release:

  • Isolated Projects graduates to incubating
  • Broader Configuration Cache compatibility
  • Resilient Sync helps you fix broken builds
  • More source locations in problem reports

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Adam, Aman Gautam, Aman Kumar, Anton Dubrouski, Aurimas, gbhavya07, Josh Friend, nicklauslittle-gov, Pragati, project516, Qin Mi, Ravi, sk-reddy17, Suvrat Acharya, Yongshun Ye.

Upgrade instructions

Switch your build to use Gradle 9.7.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.7.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.7.0

The Gradle team is excited to announce Gradle 9.7.0.

... (truncated)

Commits

Updates com.squareup.okhttp3:okhttp from 5.4.0 to 5.5.0

Changelog

Sourced from com.squareup.okhttp3:okhttp's changelog.

Version 5.5.0

2026-08-16

This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re looking at. With ECH, the router observes only the IP address. This additional privacy is most effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.

This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37, released June 2026). When other TLS stacks add ECH support, we'll integrate them.

ECH took a lot of work to implement because the encryption keys are published over DNS in the [HTTPS resource record], and we needed to write new code to fetch these records. This release includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not just IP addresses!), asynchronous streaming results, and in-memory caching.

To opt in, you can use DnsOverHttps:

// DnsOverHttps itself uses OkHttpClient. Build both clients upon the
// same bootstrap client so they share a connection pool and dispatcher.
val bootstrapClient = OkHttpClient()
// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.
val client = bootstrapClient.newBuilder()
.dns(DnsOverHttps.Builder()
.client(bootstrapClient)
.url("https://1.1.1.1/dns-query".toHttpUrl())
.build())
.build()

You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are thwarted because its DNS queries are not encrypted by default.

// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.
val client = OkHttpClient.Builder()
  .dns(AndroidDns())
  .build()
  • New: OkHttp artifacts are now signed with our [new signing key]. This project and three sibling projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
  • Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
  • Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
  • Fix: Closing a multipart part's sink no longer closes the entire request body.
  • Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts

... (truncated)

Commits

Updates com.squareup.okhttp3:mockwebserver3-junit4 from 5.4.0 to 5.5.0

Changelog

Sourced from com.squareup.okhttp3:mockwebserver3-junit4's changelog.

Version 5.5.0

2026-08-16

This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re looking at. With ECH, the router observes only the IP address. This additional privacy is most effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.

This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37, released June 2026). When other TLS stacks add ECH support, we'll integrate them.

ECH took a lot of work to implement because the encryption keys are published over DNS in the [HTTPS resource record], and we needed to write new code to fetch these records. This release includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not just IP addresses!), asynchronous streaming results, and in-memory caching.

To opt in, you can use DnsOverHttps:

// DnsOverHttps itself uses OkHttpClient. Build both clients upon the
// same bootstrap client so they share a connection pool and dispatcher.
val bootstrapClient = OkHttpClient()
// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.
val client = bootstrapClient.newBuilder()
.dns(DnsOverHttps.Builder()
.client(bootstrapClient)
.url("https://1.1.1.1/dns-query".toHttpUrl())
.build())
.build()

You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are thwarted because its DNS queries are not encrypted by default.

// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.
val client = OkHttpClient.Builder()
  .dns(AndroidDns())
  .build()
  • New: OkHttp artifacts are now signed with our [new signing key]. This project and three sibling projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
  • Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
  • Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
  • Fix: Closing a multipart part's sink no longer closes the entire request body.
  • Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts

... (truncated)

Commits

Updates com.squareup.okhttp3:mockwebserver3-junit4 from 5.4.0 to 5.5.0

Changelog

Sourced from com.squareup.okhttp3:mockwebserver3-junit4's changelog.

Version 5.5.0

2026-08-16

This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re looking at. With ECH, the router observes only the IP address. This additional privacy is most effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.

This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37, released June 2026). When other TLS stacks add ECH support, we'll integrate them.

ECH took a lot of work to implement because the encryption keys are published over DNS in the [HTTPS resource record], and we needed to write new code to fetch these records. This release includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not just IP addresses!), asynchronous streaming results, and in-memory caching.

To opt in, you can use DnsOverHttps:

// DnsOverHttps itself uses OkHttpClient. Build both clients upon the
// same bootstrap client so they share a connection pool and dispatcher.
val bootstrapClient = OkHttpClient()
// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.
val client = bootstrapClient.newBuilder()
.dns(DnsOverHttps.Builder()
.client(bootstrapClient)
.url("https://1.1.1.1/dns-query".toHttpUrl())
.build())
.build()

You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are thwarted because its DNS queries are not encrypted by default.

// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.
val client = OkHttpClient.Builder()
  .dns(AndroidDns())
  .build()
  • New: OkHttp artifacts are now signed with our [new signing key]. This project and three sibling projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
  • Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
  • Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
  • Fix: Closing a multipart part's sink no longer closes the entire request body.
  • Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts

... (truncated)

Commits

Updates com.mikepenz:multiplatform-markdown-renderer-m3 from 0.43.0 to 0.44.0

Release notes

Sourced from com.mikepenz:multiplatform-markdown-renderer-m3's releases.

v0.44.0

🚀 Features

  • feat: add GitHub alert banner component
  • fix: render email autolinks (#608)
  • fix(alert): honor explicit title color and horizontal content padding
  • ci: add OpenSSF Scorecard and scope workflow token permissions

💬 Other

  • chore(deps): update github actions updates
  • chore(deps): update actions/checkout action to v7
  • chore(deps): update gradle to v9.6.0
  • chore(deps): update github actions updates
  • chore(deps): update actions/cache action to v6
  • fix(deps): update ktor monorepo to v3.5.1
  • chore(deps): update gradle to v9.6.1
  • chore(deps): update mcr.microsoft.com/devcontainers/java:3-21 docker digest to d397e49
  • chore(deps): update github/codeql-action action to v4.36.3
  • chore(deps): update github actions updates
  • fix(deps): update dependency com.mikepenz:version-catalog to v0.18.0
  • chore(deps): update github actions updates
  • chore(deps): update github/codeql-action action to v4.37.3
  • chore(deps): update mcr.microsoft.com/devcontainers/java:3-21 docker digest to 0f06786
  • chore(deps): update github actions updates
  • fix(deps): update dependency com.mikepenz:version-catalog to v0.19.0
  • fix(deps): update ktor monorepo to v3.5.2
  • ci: attest build provenance for releases

... (truncated)

Commits
  • 7abcc4e Merge pull request #623 from mikepenz/develop
  • ffe4c70 - [release] v0.44.0
  • c7b6aa2 Merge pull request #605 from mikepenz/renovate/markdown
  • bf6ad1f chore update to 0.7.9
  • 52e98d4 fix(deps): update dependency org.jetbrains:markdown to v0.7.8
  • 6eaccaf Merge pull request #622 from mikepenz/renovate/gradle-wrapper
  • 2063d2b chore(deps): update gradle to v9.7.0
  • 79838a8 chore(deps): update github/codeql-action action to v4.37.6 (#621)
  • 67b0f97 Merge pull request #620 from mikepenz/docs/readme-redesign
  • 14e1650 Revert "docs: point README images at the review branch [REVERT BEFORE MERGE]"
  • Additional commits viewable in compare view

Updates com.google.devtools.ksp from 2.3.10 to 2.3.11

Release notes

Sourced from com.google.devtools.ksp's releases.

2.3.11

What's Changed

  • Support org.gradle.isolated-projects for project isolation (#3051)
  • Fix premature kspDebugAndroidTest task skipping on Android library modules (#3050)
  • Fix missing parent declaration exception for @NotNull annotations during incremental compilation (#3030)
  • Clean output directories instead of skipping tasks when processor classpath transitions to empty (#3046)
  • Fix build cache misses by marking KspGradleConfig.logLevel as @Internal (#3039)
  • Add org.gradle.isolated-projects=true to KSP Gradle properties reference table (#3076)
  • Add KSP Gradle properties reference table to README documentation (#3070)
  • Document collection values in KSValueArgument.value (#3069)
  • Update error messaging for ksp.useKSP2 deprecation notice (#3066)

Contributors

Full Changelog: google/ksp@2.3.10...2.3.11

Commits
  • c44fd9a Rename coroutines core-jvm alias to coreJvm per review
  • 5cec34d Move root build plugin versions to the version catalog
  • b956e6b Move remaining kotlin-analysis-api versions to the version catalog
  • 9aed497 Do not cherry-pick conflicting commits in CI auto-merge workflow
  • 145dcd6 Update gradle wrapper to 9.5.0
  • 68762a9 Check for valid gradle wrapper jar in CI
  • 336a2e4 Regenerate gradle wrapper
  • 94d5e09 Use gh cli for release asset upload
  • d244982 Disable all permissions in main workflow
  • b88bc0d Pin actions/upload-release-asset at v1.0.2 SHA
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the gradle group across 1 directory with 6 updates
8bfdf4b 
Bumps the gradle group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.bouncycastle:bcpg-jdk18on](https://github.com/bcgit/bc-java) | `1.84` | `1.85` |
| [gradle-wrapper](https://github.com/gradle/gradle) | `9.6.1` | `9.7.1` |
| [com.squareup.okhttp3:okhttp](https://github.com/lysine-dev/okhttp) | `5.4.0` | `5.5.0` |
| [com.squareup.okhttp3:mockwebserver3-junit4](https://github.com/lysine-dev/okhttp) | `5.4.0` | `5.5.0` |
| [com.mikepenz:multiplatform-markdown-renderer-m3](https://github.com/mikepenz/multiplatform-markdown-renderer) | `0.43.0` | `0.44.0` |
| [com.google.devtools.ksp](https://github.com/google/ksp) | `2.3.10` | `2.3.11` |



Updates `org.bouncycastle:bcpg-jdk18on` from 1.84 to 1.85
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `gradle-wrapper` from 9.6.1 to 9.7.1
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.6.1...v9.7.1)

Updates `com.squareup.okhttp3:okhttp` from 5.4.0 to 5.5.0
- [Changelog](https://github.com/lysine-dev/okhttp/blob/main/CHANGELOG.md)
- [Commits](lysine-dev/okhttp@parent-5.4.0...parent-5.5.0)

Updates `com.squareup.okhttp3:mockwebserver3-junit4` from 5.4.0 to 5.5.0
- [Changelog](https://github.com/lysine-dev/okhttp/blob/main/CHANGELOG.md)
- [Commits](lysine-dev/okhttp@parent-5.4.0...parent-5.5.0)

Updates `com.squareup.okhttp3:mockwebserver3-junit4` from 5.4.0 to 5.5.0
- [Changelog](https://github.com/lysine-dev/okhttp/blob/main/CHANGELOG.md)
- [Commits](lysine-dev/okhttp@parent-5.4.0...parent-5.5.0)

Updates `com.mikepenz:multiplatform-markdown-renderer-m3` from 0.43.0 to 0.44.0
- [Release notes](https://github.com/mikepenz/multiplatform-markdown-renderer/releases)
- [Changelog](https://github.com/mikepenz/multiplatform-markdown-renderer/blob/develop/CHANGELOG.md)
- [Commits](mikepenz/multiplatform-markdown-renderer@v0.43.0...v0.44.0)

Updates `com.google.devtools.ksp` from 2.3.10 to 2.3.11
- [Release notes](https://github.com/google/ksp/releases)
- [Commits](google/ksp@2.3.10...2.3.11)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcpg-jdk18on
  dependency-version: '1.85'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: gradle-wrapper
  dependency-version: 9.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: com.squareup.okhttp3:okhttp
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: com.squareup.okhttp3:mockwebserver3-junit4
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: com.squareup.okhttp3:mockwebserver3-junit4
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: com.mikepenz:multiplatform-markdown-renderer-m3
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: com.google.devtools.ksp
  dependency-version: 2.3.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency label Aug 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants