Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 7, 2025

Bumps com.gradleup.shadow:shadow-gradle-plugin from 9.0.0-beta17 to 9.0.0-rc1.

Release notes

Sourced from com.gradleup.shadow:shadow-gradle-plugin's releases.

9.0.0-rc1

[!IMPORTANT]
This release is a major update from the 8.3.x series. The plugin has been fully rewritten in Kotlin, bringing significant improvements to maintainability, performance, and future extensibility. It introduces many new features, enhancements, and bug fixes, and includes several breaking changes. Please review the changelog carefully and consult the new doc site before upgrading.

BREAKING

  • Rewrite this plugin in Kotlin. (#1012) Some APIs are marked as internal, and there are serial ABI changes.
  • Remove Develocity integration. (#1014)
  • Migrate Transformers to using lazy properties. (#1036)
  • Migrate ShadowJar to using lazy properties. isEnableRelocation is removed, use enableRelocation instead. (#1044)
  • Resolve Configuration directly in DependencyFilter. (#1045)
  • Some public getters are removed from SimpleRelocator, includes and excludes are exposed as SetPropertys. (#1079)
  • Migrate all ListProperty usages to SetProperty. Some public List parameters are also changed to Set. (#1103)
  • Remove JavaJarExec, now use JavaExec directly for runShadow task. (#1197)
  • ServiceFileTransformer.ServiceStream has been removed. (#1218)
  • Mark RelocatorRemapper as internal. (#1227)
  • Remove KnowsTask as it's useless. (#1236)
  • Remove TransformerContext.getEntryTimestamp. (#1245)
  • Move tracking unused classes logic out of ShadowCopyAction. (#1257)
  • Remove BaseStreamAction. (#1258)
  • Remove ShadowStats. (#1264)
  • Move DependencyFilter from com.github.jengelman.gradle.plugins.shadow.internal into com.github.jengelman.gradle.plugins.shadow.tasks. (#1272)
  • Rename Transformer to ResourceTransformer. Aims to better align with the name of org.apache.maven.plugins.shade.resource.ResourceTransformer.java and to distinguish itself from org.gradle.api.Transformer.java. (#1288)
  • Mark DefaultInheritManifest as internal. (#1303)
  • Polish ShadowSpec. Return values of ShadowSpec functions are changed to Unit to avoid confusion. ShadowSpec no longer extends CopySpec. Overload relocate, transform and things for better usability in Kotlin. (#1307)
  • Remove redundant types from function returning. (#1308)
  • Reduce dependency and project overloads in DependencyFilter. (#1328)
  • Align the behavior of ShadowTask.from with Gradle's AbstractCopyTask.from. In the previous versions, ShadowTask.from would always unzip the files before processing them, which caused serial issues that are hard to fix. Now it behaves like Gradle's AbstractCopyTask.from, which means it will not unzip the files, only copy the files as-is. (#1233)
  • Remove ShadowCopyAction.ArchiveFileTreeElement and RelativeArchivePath. (#1233)

Added

  • Add .md support to the Apache License and Notice transformers. (#1041)
  • Sync SimpleRelocator changes from maven-shade-plugin. (#1076)
  • Exclude module-info.class in Multi-Release folders by default. (#1177)
  • Inject TargetJvmVersion attribute for Gradle Module Metadata. (#1199)
  • Support Java 24. (#1222)
  • Sync ShadowApplicationPlugin with ApplicationPlugin. (#1224)
  • Inject Multi-Release manifest attribute if any dependency contains it. (#1239)
  • Mark Transformer as throwing IOException. (#1248)
  • Compat Kotlin Multiplatform plugin. You still need to manually configure manifest.attributes (e.g. Main-Class attr) in the shadowJar task if necessary. (#1280)
  • Add Kotlin DSL examples in docs. (#1306)
  • Support using type-safe dependency accessors in ShadowJar.dependencies. (#1322)
  • Set Main-Class attr for KMP 2.1.0 or above. (#1337)
  • Support command line options for ShadowJar. (#1365)

Changed

  • Exclude kotlin-stdlib from plugin dependencies. (#1093)

... (truncated)

Commits
  • 52295cf Prepare version 9.0.0-rc1
  • 6013d44 Prepare the release notes for 9.0.0-rc1 (#1496)
  • de8ecf5 Don't re-add suppressed Gradle API to compileOnly configuration (#1422)
  • a3482b6 Reflect the snapshot changes from central portal (#1426)
  • e167474 Sync the changelog for 8.3.8
  • 181309a Bump the min Gradle requirement to 8.11 and update test matrix (#1479)
  • e2a9510 Add functional tests for PropertiesFileTransformer (#1485)
  • 701b5f7 Rearrange and comment
  • f3b66b8 Pin Java release on 11 (#1490)
  • a10d8ff Fix the changelog for PR 1488
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.gradleup.shadow:shadow-gradle-plugin](https://github.com/GradleUp/shadow) from 9.0.0-beta17 to 9.0.0-rc1.
- [Release notes](https://github.com/GradleUp/shadow/releases)
- [Commits](GradleUp/shadow@9.0.0-beta17...9.0.0-rc1)

---
updated-dependencies:
- dependency-name: com.gradleup.shadow:shadow-gradle-plugin
  dependency-version: 9.0.0-rc1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Type: Pull requests that update a dependency file java Pull requests that update Java code labels Jul 7, 2025
@dependabot dependabot bot requested a review from a team as a code owner July 7, 2025 02:57
@dependabot dependabot bot added the java Pull requests that update Java code label Jul 7, 2025
@dependabot dependabot bot requested a review from bilyana-gospodinova July 7, 2025 02:57
@lfdt-bot
Copy link

lfdt-bot commented Jul 7, 2025

🎉 Snyk checks have passed. No issues have been found so far.

security/snyk check is complete. No issues have been found. (View Details)

Copy link

Coverage summary from Codacy

See diff coverage on Codacy

Coverage variation Diff coverage
Report missing for b06f49b1
Coverage variation details
Coverable lines Covered lines Coverage
Common ancestor commit (b06f49b) Report Missing Report Missing Report Missing
Head commit (ad724af) 59355 36152 60.91%

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details
Coverable lines Covered lines Diff coverage
Pull request (#11517) 0 0 ∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

See your quality gate settings    Change summary preferences

Footnotes

  1. Codacy didn't receive coverage data for the commit, or there was an error processing the received data. Check your integration for errors and validate that your coverage setup is correct.

@steven-sheehy steven-sheehy added this to the 0.134.0 milestone Jul 7, 2025
@steven-sheehy steven-sheehy merged commit 9ca6ea5 into main Jul 7, 2025
30 of 47 checks passed
@steven-sheehy steven-sheehy deleted the dependabot/gradle/com.gradleup.shadow-shadow-gradle-plugin-9.0.0-rc1 branch July 7, 2025 16:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Type: Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants