Skip to content

chore: bump the gradle-updates group across 1 directory with 5 updates#113

Merged
cloudshiftchris merged 1 commit into
mainfrom
dependabot/gradle/gradle-updates-fc370a2399
Nov 24, 2025
Merged

chore: bump the gradle-updates group across 1 directory with 5 updates#113
cloudshiftchris merged 1 commit into
mainfrom
dependabot/gradle/gradle-updates-fc370a2399

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 24, 2025

Copy link
Copy Markdown
Contributor

Bumps the gradle-updates group with 5 updates in the / directory:

Package From To
com.google.crypto.tink:tink 1.18.0 1.19.0
com.fasterxml.jackson:jackson-bom 2.20.0 2.20.1
com.squareup.okhttp3:okhttp-bom 5.2.1 5.3.2
io.kotest:kotest-bom 6.0.3 6.0.5
com.diffplug.spotless 8.0.0 8.1.0

Updates com.google.crypto.tink:tink from 1.18.0 to 1.19.0

Release notes

Sourced from com.google.crypto.tink:tink's releases.

Tink Java v1.19.0

Tink is a multi-language, cross-platform library that provides simple and misuse-proof APIs for common cryptographic tasks.

This is Tink Java 1.19

The complete list of changes since 1.18.0 can be found here.

Build changes

  • For Bazel builds, we now use Bazel 7.6.1. in our tests.
  • For Bazel builds, Tink now supports bzlmod.
  • Tink no longer supports Java 8. The minimum version starting from 1.19.0 is Java 11.

Dependencies

  • Protobuf 4.28.2 was upgraded to Protobuf 4.32.1. (Note: we plan to shade protobuf in the next minor version of Tink which should resolve compatibility issues)

Obscure behaviour changes

  • Tink will reject custom key types where the Type-Url has non-ASCII characters.

  • Tink may serialize keysets slightly differently in certain cases. For example, in the serialization of a ECDSA keyset, the points might be padded differently than before. Users should not depend on the exact format of Tink's serialization.

  • Use Conscrypt's AES-CMAC implementation when available and when the input is larger than 64 byte. This may improves the performance of AES-CMAC, AES-SIV and AES-EAX for large inputs.

  • Removed usage of thread-local Ciphers for ChaCha20Poly1305.

Added APIs

  • Added public JwtEcdsaParameters.Algorithm.getEcParameterSpec method.

  • The AES-SIV implementation in subtle now accepts multiple associated datas.

Future work

To see what we're working towards, check our project roadmap.

Getting started

To get started using Tink, see the setup guide.

Maven:

<dependency>
    <groupId>com.google.crypto.tink</groupId>
    <artifactId>tink</artifactId>
</tr></table>

... (truncated)

Commits
  • 55c022d Do not use "--verbose" on the invocation of curl as it leaks the token.
  • cbb9892 Fix the lib_name for tink-android.
  • 3c34c33 Only put the actual checksums into the checksums file.
  • bb2f27b Tag version as 1.19.0.
  • 87d732d Fix the path to the encrypted token.
  • 0c8c5ef Fix the path to encrypted_password.
  • d761f4d Use the correct suffix for the tinkey_release_wrapping_key.
  • d5b7ad9 Finish the release automation.
  • 022c2b7 Write the key and passphrase into the (hopefully) correct path.
  • d0f1937 Update the Java version to 1.19.0-pre0.
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson:jackson-bom from 2.20.0 to 2.20.1

Commits
  • 5e24010 [maven-release-plugin] prepare release jackson-bom-2.20.1
  • 59a2e4a Prep for 2.20.1 release
  • 3fc3645 Merge branch '2.19' into 2.20
  • 7539ecc Post-release dep version bump
  • 21f04ba [maven-release-plugin] prepare for next development iteration
  • 085b32f [maven-release-plugin] prepare release jackson-bom-2.19.4
  • f2a1f50 Prep for 2.19.4 release
  • ee69fcf ...
  • 3735e1e ...
  • d405492 Add helper script for safekeeping
  • Additional commits viewable in compare view

Updates com.squareup.okhttp3:okhttp-bom from 5.2.1 to 5.3.2

Changelog

Sourced from com.squareup.okhttp3:okhttp-bom's changelog.

Version 5.3.2

2025-11-18

  • Fix: Don't delay triggering timeouts. In Okio 3.16.0 we introduced a regression that caused timeouts to fire later than they were supposed to.

  • Upgrade: [Okio 3.16.4][okio_3_16_4].

Version 5.3.1

2025-11-16

This release is the same as 5.3.0. Okio 3.16.3 didn't have a necessary fix!

  • Upgrade: [Okio 3.16.3][okio_3_16_3].

Version 5.3.0

2025-10-30

  • New: Add tags to Call, including computable tags. Use this to attach application-specific metadata to a Call in an EventListener or Interceptor. The tag can be read in any other EventListener or Interceptor.

      override fun intercept(chain: Interceptor.Chain): Response {
    chain.call().tag(MyAnalyticsTag::class) {
      MyAnalyticsTag(...)
    }
return chain.proceed(chain.request())

}

  • New: Support request bodies on HTTP/1.1 connection upgrades.

  • New: EventListener.plus() makes it easier to observe events in multiple listeners.

  • Fix: Don't spam logs with ‘Method isLoggable in android.util.Log not mocked.’ when using OkHttp in Robolectric and Paparazzi tests.

  • Upgrade: [Kotlin 2.2.21][kotlin_2_2_21].

  • Upgrade: [Okio 3.16.2][okio_3_16_2].

  • Upgrade: [ZSTD-KMP 0.4.0][zstd_kmp_0_4_0]. This update fixes a bug that caused APKs to fail [16 KB ELF alignment checks][elf_alignment].

Version 5.2.3

2025-11-18

... (truncated)

Commits

Updates io.kotest:kotest-bom from 6.0.3 to 6.0.5

Release notes

Sourced from io.kotest:kotest-bom's releases.

v6.0.5

What's Changed

New Contributors

Full Changelog: kotest/kotest@6.0.4...v6.0.5

v6.0.4

What's Changed

... (truncated)

Commits
  • eb92f6e Make mingwX64 configuration conditional based on OS detection in native con...
  • 613a1c9 Remove linux-only-tests-conventions plugin from kotest-property-arrow bui...
  • bf84acc Reorder and update kotest-runner dependencies in build and settings files f...
  • 6ada4e9 Update nmcpAggregation calls to use fully qualified project paths in build ...
  • a542469 Refactor build configuration to enable conditional dependency aggregation bas...
  • 35bb982 Fix StackOverflowError on cyclic maps/collections (fixes #5105) (#5154)
  • 0b8331f use atLeast and atMost for Double (#5191) (#5192)
  • c6a6413 Skip modules in PR on !linux when JVM only (#5199)
  • 797c60e Support duplicated spec names in separate packages for KSP (#5197)
  • 9060b4c Make SpringExtension open and introduce variants (#5195)
  • Additional commits viewable in compare view

Updates com.diffplug.spotless from 8.0.0 to 8.1.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore: bump the gradle-updates group across 1 directory with 5 updates
064fc73 
Bumps the gradle-updates group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [com.google.crypto.tink:tink](https://github.com/tink-crypto/tink-java) | `1.18.0` | `1.19.0` |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.20.0` | `2.20.1` |
| [com.squareup.okhttp3:okhttp-bom](https://github.com/square/okhttp) | `5.2.1` | `5.3.2` |
| [io.kotest:kotest-bom](https://github.com/kotest/kotest) | `6.0.3` | `6.0.5` |
| com.diffplug.spotless | `8.0.0` | `8.1.0` |



Updates `com.google.crypto.tink:tink` from 1.18.0 to 1.19.0
- [Release notes](https://github.com/tink-crypto/tink-java/releases)
- [Commits](tink-crypto/tink-java@v1.18.0...v1.19.0)

Updates `com.fasterxml.jackson:jackson-bom` from 2.20.0 to 2.20.1
- [Commits](FasterXML/jackson-bom@jackson-bom-2.20.0...jackson-bom-2.20.1)

Updates `com.squareup.okhttp3:okhttp-bom` from 5.2.1 to 5.3.2
- [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md)
- [Commits](square/okhttp@parent-5.2.1...parent-5.3.2)

Updates `io.kotest:kotest-bom` from 6.0.3 to 6.0.5
- [Release notes](https://github.com/kotest/kotest/releases)
- [Commits](kotest/kotest@6.0.3...6.0.5)

Updates `com.diffplug.spotless` from 8.0.0 to 8.1.0

---
updated-dependencies:
- dependency-name: com.google.crypto.tink:tink
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-updates
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-updates
- dependency-name: com.squareup.okhttp3:okhttp-bom
  dependency-version: 5.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-updates
- dependency-name: io.kotest:kotest-bom
  dependency-version: 6.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-updates
- dependency-name: com.diffplug.spotless
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 24, 2025
@cloudshiftchris cloudshiftchris merged commit e1a60ea into main Nov 24, 2025
2 of 3 checks passed
@cloudshiftchris cloudshiftchris deleted the dependabot/gradle/gradle-updates-fc370a2399 branch November 24, 2025 14:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cloudshiftchris cloudshiftchris cloudshiftchris approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@cloudshiftchris