Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

Bumps com.autonomousapps.dependency-analysis from 3.0.4 to 3.3.0.

Changelog

Sourced from com.autonomousapps.dependency-analysis's changelog.

Version 3.3.0

  • [Feat]: detect reflective access using Class.forName().

Version 3.2.0

  • [Feat]: don't drop transitive runtime dependencies when removing 'unused' dependencies. See the PR description for more information.
  • [Fix]: consider suspend function return types with type parameters.
  • [Fix]: consider imports when computing usage of typealiases.
  • [Fix]: annotation processors are not blank strings.
  • [Fix]: update Kotlin metadata to 2.2.20 for Kotlin 2.3 support.
  • [Chore]: always publish build scans on CI. Optionally publish them locally.

To publish build scans, add the following, as indicated:

# ~/.gradle/gradle.properties
dependency.analysis.scans.publish=true

Version 3.1.0

  • [Fix] Updated asm to 9.9 (and use latest asm-relocated) for Java 25 support.
  • [Fix]: Test fixtures in a Spring Boot project are allowed to have testFixturesApi dependencies.
  • [Test]: run tests against Gradle 9.1.0.
Commits
  • c94d94d chore: prepare for release 3.3.0.
  • 79fa9bd chore(testkit): prepare next development version of testkit-support.
  • e800e60 chore(testkit): prepare for testkit-support release 0.22.
  • c50ef63 refactor: move producers.kt to producers package.
  • 261da37 feat: detect reflective access using Class.forName().
  • 2a03eae Revert "chore: mark GHA steps as 'continue-on-error: true'"
  • 1336904 feat(testkit): expose pluginManagement.repositories.repositories.
  • 958c0c8 chore: prepare next development version.
  • f2d38c8 chore: prepare for release 3.2.0.
  • 3558e2f chore(testkit): prepare next development version of testkit-plugin.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.autonomousapps.dependency-analysis](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin) from 3.0.4 to 3.3.0.
- [Changelog](https://github.com/autonomousapps/dependency-analysis-gradle-plugin/blob/main/CHANGELOG.md)
- [Commits](autonomousapps/dependency-analysis-gradle-plugin@v3.0.4...v3.3.0)

---
updated-dependencies:
- dependency-name: com.autonomousapps.dependency-analysis
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 27, 2025
@github-project-automation github-project-automation bot moved this to 📋 Backlog in Pillarbox Oct 27, 2025
@github-actions
Copy link

Code Coverage

Overall Project 47.67% 🟢

There is no coverage information present for the Files changed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

Status: 📋 Backlog

Development

Successfully merging this pull request may close these issues.

0 participants