1e841b7e6d
Summary: Bumps [okhttp](https://github.com/square/okhttp) from 4.9.1 to 4.9.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/square/okhttp/blob/master/CHANGELOG.md">okhttp's changelog</a>.</em></p> <blockquote> <h2>Version 4.9.2</h2> <p><em>2021-09-30</em></p> <ul> <li>Fix: Don't include potentially-sensitive header values in <code>Headers.toString()</code> or exceptions. This applies to <code>Authorization</code>, <code>Cookie</code>, <code>Proxy-Authorization</code>, and <code>Set-Cookie</code> headers.</li> <li>Fix: Don't crash with an <code>InaccessibleObjectException</code> when running on JDK17+ with strong encapsulation enabled.</li> <li>Fix: Strictly verify hostnames used with OkHttp's <code>HostnameVerifier</code>. Programs that make direct manual calls to <code>HostnameVerifier</code> could be defeated if the hostnames they pass in are not strictly ASCII. This issue is tracked as [CVE-2021-0341].</li> </ul> <h2>Version 5.0.0-alpha.2</h2> <p><em>2021-01-30</em></p> <p><strong>In this release MockWebServer has a new Maven coordinate and package name.</strong> A longstanding problem with MockWebServer has been its API dependency on JUnit 4. We've reorganized things to remove that dependency while preserving backwards compatibility.</p> <table> <thead> <tr> <th align="left">Maven Coordinate</th> <th align="left">Package Name</th> <th align="left">Description</th> </tr> </thead> <tbody> <tr> <td align="left">com.squareup.okhttp3:mockwebserver3:5.0.0-alpha.2</td> <td align="left">mockwebserver3</td> <td align="left">Core module. No JUnit dependency!</td> </tr> <tr> <td align="left">com.squareup.okhttp3:mockwebserver3-junit4:5.0.0-alpha.2</td> <td align="left">mockwebserver3.junit4</td> <td align="left">Optional JUnit 4 integration.</td> </tr> <tr> <td align="left">com.squareup.okhttp3:mockwebserver3-junit5:5.0.0-alpha.2</td> <td align="left">mockwebserver3.junit5</td> <td align="left">Optional JUnit 5 integration.</td> </tr> <tr> <td align="left">com.squareup.okhttp3:mockwebserver:5.0.0-alpha.2</td> <td align="left">okhttp3.mockwebserver</td> <td align="left">Obsolete. Depends on JUnit 4.</td> </tr> </tbody> </table> <p>The new APIs use <code>mockwebserver3</code> in both the Maven coordinate and package name. This new API is <strong>not stable</strong> and will likely change before the final 5.0.0 release.</p> <p>If you have code that subclasses <code>okhttp3.mockwebserver.QueueDispatcher</code>, this update is not source or binary compatible. Migrating to the new <code>mockwebserver3</code> package will fix this problem.</p> <ul> <li>New: DNS over HTTPS is now a stable feature of OkHttp. We introduced this as an experimental module in 2018. We are confident in its stable API and solid implementation.</li> <li>Fix: Work around a crash in Android 10 and 11 that may be triggered when two threads concurrently close an SSL socket. This would have appeared in crash logs as <code>NullPointerException: bio == null</code>.</li> <li>Fix: Use plus <code>+</code> instead of <code>%20</code> to encode space characters in <code>FormBody</code>. This was a longstanding bug in OkHttp. The fix makes OkHttp consistent with major web browsers.</li> <li>Fix: Don't crash if Conscrypt returns a null version.</li> <li>Fix: Include the public suffix data as a resource in GraalVM native images.</li> <li>Fix: Fail fast when the cache is corrupted.</li> <li>Fix: Fail fast when a private key cannot be encoded.</li> <li>Fix: Fail fast when attempting to verify a non-ASCII hostname.</li> <li>Upgrade: [GraalVM 21][graalvm_21].</li> <li>Upgrade: [Kotlin 1.4.20][kotlin_1_4_20].</li> </ul> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="3edf17ca8a"><code>3edf17c</code></a> Prepare for release 4.9.2.</li> <li><a href="262b3cde9f"><code>262b3cd</code></a> Handle strict module handling on JDK17 (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6707">#6707</a>) (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6742">#6742</a>)</li> <li><a href="f574ea2f52"><code>f574ea2</code></a> Cherry pick fix for CVE-2021-0341 onto 4.9.x (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6741">#6741</a>)</li> <li><a href="1fd7c0afdc"><code>1fd7c0a</code></a> Make it more difficult to accidentally log sensitive headers (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6551">#6551</a>) (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6740">#6740</a>)</li> <li><a href="b0397cc7a9"><code>b0397cc</code></a> 4.9.x GitHub builds update (<a href="https://github-redirect.dependabot.com/square/okhttp/issues/6732">#6732</a>)</li> <li><a href="eb5a8343ea"><code>eb5a834</code></a> Prepare next development version.</li> <li>See full diff in <a href="https://github.com/square/okhttp/compare/parent-4.9.1...parent-4.9.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `dependabot rebase` will rebase this PR - `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `dependabot merge` will merge this PR after your CI passes on it - `dependabot squash and merge` will squash and merge this PR after your CI passes on it - `dependabot cancel merge` will cancel a previously requested merge and block automerging - `dependabot reopen` will reopen this PR if it is closed - `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Pull Request resolved: https://github.com/facebook/flipper/pull/2937 Reviewed By: muraziz Differential Revision: D31502045 Pulled By: passy fbshipit-source-id: 32af7cda9440b01eab1bca83dc694391d99bf7e6
Flipper
Flipper (formerly Sonar) is a platform for debugging mobile apps on iOS and Android. Visualize, inspect, and control your apps from a simple desktop interface. Use Flipper as is or extend it using the plugin API.
Table of Contents
- Mobile development
- Extending Flipper
- Contributing to Flipper
- In this repo
- Getting started
- Building from Source
- iOS SDK + Sample App
- Android SDK + Sample app
- Documentation
- Contributing
- License
Mobile development
Flipper aims to be your number one companion for mobile app development on iOS and Android. Therefore, we provide a bunch of useful tools, including a log viewer, interactive layout inspector, and network inspector.
Extending Flipper
Flipper is built as a platform. In addition to using the tools already included, you can create your own plugins to visualize and debug data from your mobile apps. Flipper takes care of sending data back and forth, calling functions, and listening for events on the mobile app.
Contributing to Flipper
Both Flipper's desktop app and native mobile SDKs are open-source and MIT licensed. This enables you to see and understand how we are building plugins, and of course, join the community and help to improve Flipper. We are excited to see what you will build on this platform.
In this repo
This repository includes all parts of Flipper. This includes:
- Flipper's desktop app built using Electron (
/desktop) - native Flipper SDKs for iOS (
/iOS) - native Flipper SDKs for Android (
/android) - Plugins:
- Logs (
/desktop/plugins/public/logs) - Layout inspector (
/desktop/plugins/public/layout) - Network inspector (
/desktop/plugins/public/network) - Shared Preferences/NSUserDefaults inspector (
/desktop/plugins/public/shared_preferences)
- Logs (
- website and documentation (
/website//docs)
Getting started
Please refer to our Getting Started guide to set up Flipper.
Requirements
- node >= 8
- yarn >= 1.5
- iOS developer tools (for developing iOS plugins)
- Android SDK and adb
Building from Source
Desktop
Running from source
git clone https://github.com/facebook/flipper.git
cd flipper/desktop
yarn
yarn start
NOTE: If you're on Windows, you need to use Yarn 1.5.1 until this issue is resolved.
Building standalone application
Provide either --mac, --win, --linux or any combination of them
to yarn build to build a release zip file for the given platform(s). E.g.
yarn build --mac --version $buildNumber
You can find the resulting artifact in the dist/ folder.
iOS SDK + Sample App
cd iOS/Sample
rm -f Podfile.lock
pod install --repo-update
open Sample.xcworkspace
<Run app from xcode>
You can omit --repo-update to speed up the installation, but watch out as you may be building against outdated dependencies.
Android SDK + Sample app
Start up an android emulator and run the following in the project root:
./gradlew :sample:installDebug
React Native SDK + Sample app
cd react-native/ReactNativeFlipperExample
yarn
yarn android
Note that the first 2 steps need to be done only once.
Alternatively, the app can be started on iOS by running yarn ios.
Troubleshooting
Older yarn versions might show an error / hang with the message 'Waiting for the other yarn instance to finish'. If that happens, run the command yarn first separately in the directory react-native/react-native-flipper.
Documentation
Find the full documentation for this project at fbflipper.com.
Our documentation is built with Docusaurus. You can build it locally by running this:
cd website
yarn
yarn start
Contributing
See the CONTRIBUTING file for how to help out.
License
Flipper is MIT licensed, as found in the LICENSE file.