Bump okhttp from 3.14.1 to 4.9.1 (#2006)
Summary: Bumps [okhttp](https://github.com/square/okhttp) from 3.14.1 to 4.9.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/square/okhttp/blob/master/CHANGELOG.md">okhttp's changelog</a>.</em></p> <blockquote> <h2>Version 4.9.1</h2> <p><em>2021-01-30</em></p> <ul> <li>Fix: Work around a crash in Android 10 and 11 that may be triggered when two threads concurrently close an SSL socket. This would have appeared in crash logs as <code>NullPointerException: bio == null</code>.</li> </ul> <h2>Version 4.9.0</h2> <p><em>2020-09-11</em></p> <p><strong>With this release, <code>okhttp-tls</code> no longer depends on Bouncy Castle and doesn't install the Bouncy Castle security provider.</strong> If you still need it, you can do it yourself:</p> <pre><code>Security.addProvider(BouncyCastleProvider()) </code></pre> <p>You will also need to configure this dependency:</p> <pre><code>dependencies { implementation "org.bouncycastle:bcprov-jdk15on:1.65" } </code></pre> <ul> <li>Upgrade: [Kotlin 1.4.10][kotlin_1_4_10]. We now use Kotlin 1.4.x [functional interfaces][fun_interface] for <code>Authenticator</code>, <code>Interceptor</code>, and others.</li> <li>Upgrade: Build with Conscrypt 2.5.1.</li> </ul> <h2>Version 4.8.1</h2> <p><em>2020-08-06</em></p> <ul> <li>Fix: Don't crash in <code>HeldCertificate.Builder</code> when creating certificates on older versions of Android, including Android 6. We were using a feature of <code>SimpleDateFormat</code> that wasn't available in those versions!</li> </ul> <h2>Version 4.8.0</h2> <p><em>2020-07-11</em></p> <ul> <li>New: Change <code>HeldCertificate.Builder</code> to use its own ASN.1 certificate encoder. This is part of our effort to remove the okhttp-tls module's dependency on Bouncy Castle. We think Bouncy Castle is great! But it's a large dependency (6.5 MiB) and its security provider feature impacts VM-wide behavior.</li> </ul> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="63dcd95bfa"><code>63dcd95</code></a> Prepare for release 4.9.1.</li> <li><a href="d2e28ab672"><code>d2e28ab</code></a> Silently ignore 'bio == null' NullPointerExceptions (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6534">#6534</a>)</li> <li><a href="cbeaf8f955"><code>cbeaf8f</code></a> Prepare for release 4.9.0.</li> <li><a href="8fd74a7482"><code>8fd74a7</code></a> Conscrypt 2.5.1 Upgrade (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6263">#6263</a>)</li> <li><a href="2bd749dd9d"><code>2bd749d</code></a> Kotlin 1.4.10 Upgrade (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6264">#6264</a>)</li> <li><a href="0164696a8a"><code>0164696</code></a> Fix build on windows (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6257">#6257</a>)</li> <li><a href="e4c3b28c39"><code>e4c3b28</code></a> Fix HttpUrl documentation (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6259">#6259</a>)</li> <li><a href="8c2f383f14"><code>8c2f383</code></a> Document interceptor throwing modes (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6235">#6235</a>)</li> <li><a href="a76c40a935"><code>a76c40a</code></a> Kotlin 1.4 dependency upgrade and language features (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/5947">#5947</a>)</li> <li><a href="1589741a90"><code>1589741</code></a> Fix Caching documentation. (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6247">#6247</a>)</li> <li>Additional commits viewable in <a href="https://github.com/square/okhttp/compare/parent-3.14.1...parent-4.9.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `dependabot rebase` will rebase this PR - `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `dependabot merge` will merge this PR after your CI passes on it - `dependabot squash and merge` will squash and merge this PR after your CI passes on it - `dependabot cancel merge` will cancel a previously requested merge and block automerging - `dependabot reopen` will reopen this PR if it is closed - `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Pull Request resolved: https://github.com/facebook/flipper/pull/2006 Reviewed By: nikoant Differential Revision: D26888990 Pulled By: passy fbshipit-source-id: d84e67fefcc0ed12cc20423b5fdd77fb9423ba77
This commit is contained in:
committed by
Facebook GitHub Bot
parent
27c5f2390e
commit
b8d54aa1a4
@@ -99,7 +99,7 @@ ext.deps = [
|
|||||||
junit : 'junit:junit:4.13.2',
|
junit : 'junit:junit:4.13.2',
|
||||||
hamcrest : 'org.hamcrest:hamcrest-library:1.3',
|
hamcrest : 'org.hamcrest:hamcrest-library:1.3',
|
||||||
mockito : 'org.mockito:mockito-core:2.26.0',
|
mockito : 'org.mockito:mockito-core:2.26.0',
|
||||||
okhttp3 : 'com.squareup.okhttp3:okhttp:3.14.1',
|
okhttp3 : 'com.squareup.okhttp3:okhttp:4.9.1',
|
||||||
leakcanary : 'com.squareup.leakcanary:leakcanary-android:1.6.3',
|
leakcanary : 'com.squareup.leakcanary:leakcanary-android:1.6.3',
|
||||||
leakcanary2 : 'com.squareup.leakcanary:leakcanary-android:2.6',
|
leakcanary2 : 'com.squareup.leakcanary:leakcanary-android:2.6',
|
||||||
testCore : 'androidx.test:core:1.1.0',
|
testCore : 'androidx.test:core:1.1.0',
|
||||||
|
|||||||
Reference in New Issue
Block a user