Skip to content

build(deps): bump the general-updates group across 1 directory with 6 updates - #314

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/general-updates-7d330e9e50
Open

build(deps): bump the general-updates group across 1 directory with 6 updates#314
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/general-updates-7d330e9e50

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the general-updates group with 6 updates in the / directory:

Package From To
gradle-wrapper 9.6.1 9.7.0
androidx.fragment:fragment-ktx 1.8.9 1.9.0
at.yawk.lz4:lz4-java 1.11.1 1.11.2
com.squareup.okhttp3:okhttp 5.4.0 5.5.0
com.android.application 9.2.1 9.3.1
com.android.library 9.2.1 9.3.1

Updates gradle-wrapper from 9.6.1 to 9.7.0

Release notes

Sourced from gradle-wrapper's releases.

9.7.0

The Gradle team is excited to announce Gradle 9.7.0.

Here are the highlights of this release:

  • Isolated Projects graduates to incubating
  • Broader Configuration Cache compatibility
  • More source locations in problem reports

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Adam, Aman Gautam, Aman Kumar, Anton Dubrouski, Aurimas, gbhavya07, Josh Friend, nicklauslittle-gov, Pragati, project516, Qin Mi, Ravi, sk-reddy17, Suvrat Acharya, Yongshun Ye.

Upgrade instructions

Switch your build to use Gradle 9.7.0 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.7.0 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.7.0 RC3

The Gradle team is excited to announce Gradle 9.7.0 RC3.

Here are the highlights of this release:

  • Isolated Projects graduates to incubating

... (truncated)

Commits
  • 3defbfc make DistributionIntegrationSpec more permissive for releases (#38766)
  • f176043 make DistributionIntegrationSpec more permissive for releases
  • b0828da Prepare release notes for Gradle 9.7.0GA (#38756)
  • 064b6d6 cleanup
  • dfe7bdc add new training to release notes
  • 7561968 add release notes for 37801
  • 68a1f35 cherrypick 38367 to release
  • a462c95 Rebalance AllVersionsCrossVersion buckets for agents without TestDistribution...
  • 820e2b1 Update Gradle wrapper to version 9.7.0-rc-3 (#38743)
  • 75ea3d7 Update Gradle wrapper to version 9.7.0-rc-3
  • Additional commits viewable in compare view

Updates androidx.fragment:fragment-ktx from 1.8.9 to 1.9.0

Updates at.yawk.lz4:lz4-java from 1.11.1 to 1.11.2

Release notes

Sourced from at.yawk.lz4:lz4-java's releases.

lz4-java v1.11.2

Security release for GHSA-6cx8-rjf8-pr8g and GHSA-4v53-57pg-c464.

What's Changed

New Contributors

Full Changelog: yawkat/lz4-java@v1.11.1...v1.11.2

Commits
  • 0569f2e Update 8BitJonny/gh-get-current-pr action to v4 (#73)
  • 591ce42 Update astral-sh/setup-uv action to v9 (#75)
  • 38e96f3 Update cloudflare/wrangler-action action to v4 (#76)
  • 7fd3610 Update junit-framework monorepo to v6 (#79)
  • 1a9d944 Update GitHub Artifact Actions (#78)
  • 0a8a91d Update dependency org.apache.maven.plugins:maven-gpg-plugin to v3 (#77)
  • a2381f3 Update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.5.6 (#70)
  • 8bb8100 Update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.1 (#67)
  • 8e4f5cc Update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.15.0 (...
  • 86752f6 Update dependency org.sonatype.central:central-publishing-maven-plugin to v0....
  • Additional commits viewable in compare view

Updates com.squareup.okhttp3:okhttp from 5.4.0 to 5.5.0

Changelog

Sourced from com.squareup.okhttp3:okhttp's changelog.

Version 5.5.0

2026-08-16

This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re looking at. With ECH, the router observes only the IP address. This additional privacy is most effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.

This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37, released June 2026). When other TLS stacks add ECH support, we'll integrate them.

ECH took a lot of work to implement because the encryption keys are published over DNS in the [HTTPS resource record], and we needed to write new code to fetch these records. This release includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not just IP addresses!), asynchronous streaming results, and in-memory caching.

To opt in, you can use DnsOverHttps:

// DnsOverHttps itself uses OkHttpClient. Build both clients upon the
// same bootstrap client so they share a connection pool and dispatcher.
val bootstrapClient = OkHttpClient()
// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.
val client = bootstrapClient.newBuilder()
.dns(DnsOverHttps.Builder()
.client(bootstrapClient)
.url("https://1.1.1.1/dns-query".toHttpUrl())
.build())
.build()

You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are thwarted because its DNS queries are not encrypted by default.

// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.
val client = OkHttpClient.Builder()
  .dns(AndroidDns())
  .build()
  • New: OkHttp artifacts are now signed with our [new signing key]. This project and three sibling projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
  • Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
  • Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
  • Fix: Closing a multipart part's sink no longer closes the entire request body.
  • Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts

... (truncated)

Commits

Updates com.android.application from 9.2.1 to 9.3.1

Updates com.android.library from 9.2.1 to 9.3.1

Updates com.android.library from 9.2.1 to 9.3.1

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
@dependabot
build(deps): bump the general-updates group across 1 directory with 6…
f71f76c 
… updates

Bumps the general-updates group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [gradle-wrapper](https://github.com/gradle/gradle) | `9.6.1` | `9.7.0` |
| androidx.fragment:fragment-ktx | `1.8.9` | `1.9.0` |
| [at.yawk.lz4:lz4-java](https://github.com/yawkat/lz4-java) | `1.11.1` | `1.11.2` |
| [com.squareup.okhttp3:okhttp](https://github.com/lysine-dev/okhttp) | `5.4.0` | `5.5.0` |
| com.android.application | `9.2.1` | `9.3.1` |
| com.android.library | `9.2.1` | `9.3.1` |



Updates `gradle-wrapper` from 9.6.1 to 9.7.0
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.6.1...v9.7.0)

Updates `androidx.fragment:fragment-ktx` from 1.8.9 to 1.9.0

Updates `at.yawk.lz4:lz4-java` from 1.11.1 to 1.11.2
- [Release notes](https://github.com/yawkat/lz4-java/releases)
- [Changelog](https://github.com/yawkat/lz4-java/blob/main/CHANGES.md)
- [Commits](yawkat/lz4-java@v1.11.1...v1.11.2)

Updates `com.squareup.okhttp3:okhttp` from 5.4.0 to 5.5.0
- [Changelog](https://github.com/lysine-dev/okhttp/blob/main/CHANGELOG.md)
- [Commits](lysine-dev/okhttp@parent-5.4.0...parent-5.5.0)

Updates `com.android.application` from 9.2.1 to 9.3.1

Updates `com.android.library` from 9.2.1 to 9.3.1

Updates `com.android.library` from 9.2.1 to 9.3.1

---
updated-dependencies:
- dependency-name: gradle-wrapper
  dependency-version: 9.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: general-updates
- dependency-name: androidx.fragment:fragment-ktx
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: general-updates
- dependency-name: at.yawk.lz4:lz4-java
  dependency-version: 1.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: general-updates
- dependency-name: com.squareup.okhttp3:okhttp
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: general-updates
- dependency-name: com.android.application
  dependency-version: 9.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: general-updates
- dependency-name: com.android.library
  dependency-version: 9.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: general-updates
- dependency-name: com.android.library
  dependency-version: 9.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: general-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

0 participants