Bump okhttp from 3.14.1 to 4.9.1 (#2006)

Summary:
Bumps [okhttp](https://github.com/square/okhttp) from 3.14.1 to 4.9.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/square/okhttp/blob/master/CHANGELOG.md">okhttp's changelog</a>.</em></p>
<blockquote>
<h2>Version 4.9.1</h2>
<p><em>2021-01-30</em></p>
<ul>
<li>Fix: Work around a crash in Android 10 and 11 that may be triggered when two threads
concurrently close an SSL socket. This would have appeared in crash logs as
<code>NullPointerException: bio == null</code>.</li>
</ul>
<h2>Version 4.9.0</h2>
<p><em>2020-09-11</em></p>
<p><strong>With this release, <code>okhttp-tls</code> no longer depends on Bouncy Castle and doesn't install the
Bouncy Castle security provider.</strong> If you still need it, you can do it yourself:</p>
<pre><code>Security.addProvider(BouncyCastleProvider())
</code></pre>
<p>You will also need to configure this dependency:</p>
<pre><code>dependencies {
  implementation &quot;org.bouncycastle:bcprov-jdk15on:1.65&quot;
}
</code></pre>
<ul>
<li>Upgrade: [Kotlin 1.4.10][kotlin_1_4_10]. We now use Kotlin 1.4.x [functional
interfaces][fun_interface] for <code>Authenticator</code>, <code>Interceptor</code>, and others.</li>
<li>Upgrade: Build with Conscrypt 2.5.1.</li>
</ul>
<h2>Version 4.8.1</h2>
<p><em>2020-08-06</em></p>
<ul>
<li>Fix: Don't crash in <code>HeldCertificate.Builder</code> when creating certificates on older versions of
Android, including Android 6. We were using a feature of <code>SimpleDateFormat</code> that wasn't
available in those versions!</li>
</ul>
<h2>Version 4.8.0</h2>
<p><em>2020-07-11</em></p>
<ul>
<li>New: Change <code>HeldCertificate.Builder</code> to use its own ASN.1 certificate encoder. This is part
of our effort to remove the okhttp-tls module's dependency on Bouncy Castle. We think Bouncy
Castle is great! But it's a large dependency (6.5 MiB) and its security provider feature
impacts VM-wide behavior.</li>
</ul>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="63dcd95bfa"><code>63dcd95</code></a> Prepare for release 4.9.1.</li>
<li><a href="d2e28ab672"><code>d2e28ab</code></a> Silently ignore 'bio == null' NullPointerExceptions (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6534">#6534</a>)</li>
<li><a href="cbeaf8f955"><code>cbeaf8f</code></a> Prepare for release 4.9.0.</li>
<li><a href="8fd74a7482"><code>8fd74a7</code></a> Conscrypt 2.5.1 Upgrade (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6263">#6263</a>)</li>
<li><a href="2bd749dd9d"><code>2bd749d</code></a> Kotlin 1.4.10 Upgrade (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6264">#6264</a>)</li>
<li><a href="0164696a8a"><code>0164696</code></a> Fix build on windows (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6257">#6257</a>)</li>
<li><a href="e4c3b28c39"><code>e4c3b28</code></a> Fix HttpUrl documentation (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6259">#6259</a>)</li>
<li><a href="8c2f383f14"><code>8c2f383</code></a> Document interceptor throwing modes (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6235">#6235</a>)</li>
<li><a href="a76c40a935"><code>a76c40a</code></a> Kotlin 1.4 dependency upgrade and language features (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/5947">#5947</a>)</li>
<li><a href="1589741a90"><code>1589741</code></a> Fix Caching documentation. (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6247">#6247</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/square/okhttp/compare/parent-3.14.1...parent-4.9.1">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.squareup.okhttp3:okhttp&package-manager=gradle&previous-version=3.14.1&new-version=4.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

 ---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `dependabot rebase` will rebase this PR
- `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `dependabot merge` will merge this PR after your CI passes on it
- `dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `dependabot cancel merge` will cancel a previously requested merge and block automerging
- `dependabot reopen` will reopen this PR if it is closed
- `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

</details>

Pull Request resolved: https://github.com/facebook/flipper/pull/2006

Reviewed By: nikoant

Differential Revision: D26888990

Pulled By: passy

fbshipit-source-id: d84e67fefcc0ed12cc20423b5fdd77fb9423ba77
This commit is contained in:
dependabot[bot]
2021-03-09 09:46:27 -08:00
committed by Facebook GitHub Bot
parent 27c5f2390e
commit b8d54aa1a4

View File

@@ -99,7 +99,7 @@ ext.deps = [
junit : 'junit:junit:4.13.2',
hamcrest : 'org.hamcrest:hamcrest-library:1.3',
mockito : 'org.mockito:mockito-core:2.26.0',
okhttp3 : 'com.squareup.okhttp3:okhttp:3.14.1',
okhttp3 : 'com.squareup.okhttp3:okhttp:4.9.1',
leakcanary : 'com.squareup.leakcanary:leakcanary-android:1.6.3',
leakcanary2 : 'com.squareup.leakcanary:leakcanary-android:2.6',
testCore : 'androidx.test:core:1.1.0',