You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.
We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.
CONJ-1223 - cache TLS trust/key managers across connections to reduce SSL connection cost
CONJ-1314 - add SPI for interactive dialog (PAM) authentication callback
CONJ-1311 - add dedicated option useIpForKillQuery for query cancellation
CONJ-1310 - Add full native image support and CI coverage
Issues Resolved
CONJ-1320 - PAM (dialog) authentication must require a secure connection (report by fg0x0)
CONJ-1319 - Use constant-time comparison when validating the server certificate fingerprint (report by jmestwa-coder)
CONJ-1318 - enforce allowLocalInfile=false on the server's local-infile request, so a malicious server cannot read a client file despite the option being disabled
CONJ-1322 - match local infile filename case-sensitively (thanks to jmestwa-coder)
CONJ-1323 - LOAD LOCAL INFILE validation rejects statements preceded by line comments (thanks to sebdomdev)
CONJ-1315 - cap BigDecimal/BigInteger string parsing length to prevent CPU exhaustion if MitM (report by tonghuaroot)
CONJ-1317 - ensure non-UTF8 charset cannot be used for protocol exchanges (report by fg0x0)
CONJ-1304 - CallableStatement parameter metadata read from mysql.proc, with MySQL info_schema fallback
CONJ-1299 - keep VALUES literals after the last placeholder when rewriting batches
CONJ-1313 - race condition in HaMode#getAvailableHostInOrder can cause NPE
CONJ-1311 - Connection.cancelCurrentQuery fails with SslMode.VERIFY_FULL when client socket IP is set
CONJ-1264 - handle LocalDateTime as a zoneless wall-clock value
CONJ-1316 - pin Locale.ROOT on locale-sensitive call sites and date/time/Duration text formatting (fixes
locale-dependent parsing/formatting, e.g. under tr_TR) (thanks to jmestwa-coder)
CONJ-1324 - fix SQL parser to correctly handle '--' in expressions and reset lastChar after block comments
CONJ-1323 - LOAD LOCAL INFILE validation rejects statements preceded by line comments (thanks to sebdomdev)
CONJ-1318 - allowLocalInfile=false does not block LOAD DATA LOCAL INFILE against a malicious server (thanks to tharavel)
When publishing to Maven Central, redundant checksum files are now excluded by default: checksums of .asc
signature files (gradle/gradle#20232) and the sha256/sha512
checksums, which are never read by Gradle or Maven Central. The published checksums can be configured through checksums(...) in the DSL or the mavenCentralChecksums Gradle property (default md5,sha1). Signature checksum
exclusion can be controlled through excludeSignatureChecksums() or the mavenCentralExcludeSignatureChecksums
Gradle property.
Maven Central deployment id is being logged after upload.
Minimum supported versions
JDK 17
Gradle 9.0.0
Android Gradle Plugin 8.13.0
Kotlin Gradle Plugin 2.2.0
Compatibility tested up to
JDK 26
Gradle 9.6.0
Gradle 9.7.0-milestone-1
Android Gradle Plugin 9.2.1
Android Gradle Plugin 9.3.0-rc01
Android Gradle Plugin 9.4.0-alpha01
Kotlin Gradle Plugin 2.4.0
Configuration
📅 Schedule: (UTC)
Branch creation
At any time (no schedule defined)
Automerge
At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
If you want to rebase/retry this PR, check this box
What I checked: All 11 files changed by Renovate across the Gradle (Kotlin/JVM) and sbt (Scala) builds.
What I fixed: Reverted sbt from 2.0.0 → 1.12.11 in project/build.properties. The sbt 2.0.0 upgrade is incompatible with sbt-sonatype 3.12.2, which was only published for the sbt 2.0.0-M2 milestone (_sbt2.0.0-M2_3 artifact suffix), not the stable sbt 2.0.0 release (_sbt2_3). All other Renovate updates are left intact.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v6→v79.5.1→9.6.09.6.11.3.2→1.3.30.5.6→0.5.73.5.8→3.6.0v46.1.15→v46.1.16v46.1.171.12.11→2.0.02.0.13.5.8→3.5.97.0.2→7.1.00.36.0→0.37.0Release Notes
actions/checkout (actions/checkout)
v7.0.0Compare Source
v7Compare Source
gradle/gradle (gradle)
v9.6.0: 9.6.0Compare Source
The Gradle team is excited to announce Gradle 9.6.0.
Here are the highlights of this release:
Read the Release Notes
We would like to thank the following community members for their contributions to this release of Gradle:
Aharnish Solanki,
Benedikt Johannes,
Devendra Reddy Pennabadi,
Dmytro Rodionov,
Dreeam,
Elías Hernández Rodríguez,
Eng Zer Jun,
FinlayRJW,
Kamal Kansal,
Marcono1234,
Nelson Osacky,
Philip Wedemann,
Ravi,
Roberto Perez Alcolea,
Ryan Schmitt,
Sebastian Schuberth,
seunghun.ham,
sk-reddy17,
Suvrat Acharya,
Vedant Madane.
Upgrade instructions
Switch your build to use Gradle 9.6.0 by updating your wrapper:
See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.
For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.
Reporting problems
If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.
We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.
scalameta/munit (org.scalameta:munit)
v1.3.3Compare Source
Pull Requests
typelevel/sbt-tpolecat (org.typelevel:sbt-tpolecat)
v0.5.7Compare Source
What's Changed
Dependencies
Full Changelog: typelevel/sbt-tpolecat@v0.5.6...v0.5.7
wartremover/wartremover (org.wartremover:sbt-wartremover)
v3.6.0Compare Source
renovatebot/github-action (renovatebot/github-action)
v46.1.16Compare Source
Documentation
Miscellaneous Chores
Build System
Continuous Integration
sbt/sbt (sbt/sbt)
v2.0.0: 2.0.0Compare Source
See sbt 2.0 change summary.
Full Changelog: sbt/sbt@v1.12.12...v2.0.0
v1.12.13: 1.12.13Compare Source
🐛 bug fixes
ArrayIndexOutOfBoundsExceptionerror when Unix domain socket is closed by @merlinorg in sbt/ipcsocket#77Full Changelog: sbt/sbt@v1.12.12...v1.12.13
v1.12.12: 1.12.12Compare Source
bug fixes
sbt --versionto now show JDK warnings on JDK 25 by @bitloi in #8822behind the scenes
Full Changelog: sbt/sbt@v1.12.11...v1.12.12
mariadb-corporation/mariadb-connector-j (org.mariadb.jdbc:mariadb-java-client)
v3.5.9Compare Source
Full Changelog
Key Enhancements
useIpForKillQueryfor query cancellationIssues Resolved
allowLocalInfile=falseon the server's local-infile request, so a malicious server cannot read a client file despite the option being disabledlocale-dependent parsing/formatting, e.g. under tr_TR) (thanks to jmestwa-coder)
vanniktech/gradle-maven-publish-plugin (com.vanniktech:gradle-maven-publish-plugin)
v0.37.0Compare Source
.ascsignature files (gradle/gradle#20232) and the
sha256/sha512checksums, which are never read by Gradle or Maven Central. The published checksums can be configured through
checksums(...)in the DSL or themavenCentralChecksumsGradle property (defaultmd5,sha1). Signature checksumexclusion can be controlled through
excludeSignatureChecksums()or themavenCentralExcludeSignatureChecksumsGradle property.
Minimum supported versions
Compatibility tested up to
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate.