Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 20, 2020

Bumps okhttp from 3.14.8 to 4.7.2.

Changelog

Sourced from okhttp's changelog.

Version 4.7.2

2020-05-20

  • Fix: Don't crash inspecting whether the host platform is JVM or Android. With 4.7.0 and 4.7.1 we had a crash IllegalArgumentException: Not a Conscrypt trust manager because we depended on initialization order of companion objects.

Version 4.7.1

2020-05-18

  • Fix: Pass the right arguments in the trust manager created for addInsecureHost(). Without the fix insecure hosts crash with an IllegalArgumentException on Android.

Version 4.7.0

2020-05-17

  • New: HandshakeCertificates.Builder.addInsecureHost() makes it easy to turn off security in private development environments that only carry test data. Prefer this over creating an all-trusting TrustManager because only hosts on the allowlist are insecure. From [our DevServer sample][dev_server]:

    val clientCertificates = HandshakeCertificates.Builder()
        .addPlatformTrustedCertificates()
        .addInsecureHost("localhost")
        .build()
    val client = OkHttpClient.Builder()
    .sslSocketFactory(clientCertificates.sslSocketFactory(), clientCertificates.trustManager)
    .build()

  • New: Add cacheHit, cacheMiss, and cacheConditionalHit() events to EventListener. Use these in logs, metrics, and even test cases to confirm your cache headers are configured as expected.

  • New: Constant string okhttp3.VERSION. This is a string like "4.5.0-RC1", "4.5.0", or "4.6.0-SNAPSHOT" indicating the version of OkHttp in the current runtime. Use this to include the OkHttp version in custom User-Agent headers.

  • Fix: Don't crash when running as a plugin in Android Studio Canary 4.1. To enable platform-specific TLS features OkHttp must detect whether it's running in a JVM or in Android. The upcoming Android Studio runs in a JVM but has classes from Android and that confused OkHttp!

  • Fix: Include the header Accept: text/event-stream for SSE calls. This header is not added if

Commits
  • 4c59555 Prepare for release 4.7.2.
  • b733d29 Merge pull request #6073 from yschimke/android_init_ordering
  • 1d183cb Fix Android init ordering
  • 9c173d2 Merge pull request #6071 from yschimke/android_tests_safe_on_23
  • d149069 Make the Android tests pass on <= 23
  • 6fcabb1 Prepare next development version.
  • 186ec88 Prepare for release 4.7.1.
  • 67f77be Fix for insecureHost on Android (#6063)
  • 370ebcf Prepare next development version.
  • ef7c5f3 Prepare for release 4.7.0.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested review from bsideup, kiview and rnorth as code owners June 20, 2020 20:04
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 20, 2020
@dependabot dependabot bot force-pushed the dependabot/gradle/examples/com.squareup.okhttp3-okhttp-4.7.2 branch from 1fcf075 to f9dc71a Compare June 20, 2020 20:06
@rnorth rnorth merged commit 043d9ea into master Jun 21, 2020
@rnorth rnorth deleted the dependabot/gradle/examples/com.squareup.okhttp3-okhttp-4.7.2 branch June 21, 2020 08:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants