Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 29, 2025

Bumps the development-dependencies group with 2 updates: com.uber.nullaway:nullaway and org.apache.httpcomponents.client5:httpclient5.

Updates com.uber.nullaway:nullaway from 0.12.4 to 0.12.6

Release notes

Sourced from com.uber.nullaway:nullaway's releases.

NullAway 0.12.6

  • JSpecify: view type as super in generic method inference (#1177)
  • Infer @​Nullable type arguments for type variables from unmarked code (#1181)
  • Convert android-jar.py to Python 3 (#1175)
  • Suggest castToNonNull fix for unboxing error (#1182)

NullAway 0.12.5

Changelog

Sourced from com.uber.nullaway:nullaway's changelog.

Version 0.12.6

  • JSpecify: view type as super in generic method inference (#1177)
  • Infer @​Nullable type arguments for type variables from unmarked code (#1181)
  • Convert android-jar.py to Python 3 (#1175)
  • Suggest castToNonNull fix for unboxing error (#1182)

Version 0.12.5

Commits
  • 649f25a Prepare for release 0.12.6.
  • 9369704 Suggest castToNonNull fix for unboxing error (#1182)
  • f1aca1b Convert android-jar.py to Python 3 (#1175)
  • 33588de Infer @Nullable type arguments for type variables from unmarked code (#1181)
  • dd0fe71 JSpecify: view type as super in generic method inference (#1177)
  • 2c8049c Prepare next development version.
  • 9613fb7 Prepare for release 0.12.5.
  • b84feb7 Don't treat @ParametricNullness as @Nullable in JSpecify mode (#1174)
  • 3da2c82 Use proper name for constructors in JarInfer (#1167)
  • 685065a Update to Error Prone 2.37.0 (#1169)
  • Additional commits viewable in compare view

Updates org.apache.httpcomponents.client5:httpclient5 from 5.4.2 to 5.4.3

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.

Release 5.4.3

This maintenance release upgrades HttpCore to version 5.3.4 and fixes a regression preventing the PublicSuffixMatcherLoader from finding the resource containing the Public Suffix List and causing the Public Suffix List to be empty by default.

Change Log

  • MultipartEntityBuilder to include a random UUID in the boundary value by default. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2363: Ensure requests have a scheme and an authority populated before they get committed to the execution pipeline. Contributed by Oleg Kalnichevski

  • Upgraded HttpCore to version 5.3.4. Contributed by Oleg Kalnichevski

  • Fix PublicSuffixMatcherLoader#getDefault (#621). Contributed by Joe Gallo [email protected]

  • HTTPCLIENT-2361: HTTP protocol handler to tolerate multiple Cookie headers added manually by the caller. Contributed by Oleg Kalnichevski

Commits
  • 48236f5 HttpClient 5.4.3 release
  • 36e40cd Updated release notes for HttpClient 5.4.3 release
  • d5622dc MultipartEntityBuilder to include a random UUID in the boundary value by default
  • 8d0f3b1 HTTPCLIENT-2363: ensure requests have a scheme and an authority populated bef...
  • 783502e Upgraded HttpCore to version 5.3.4
  • 98e8e9d Updated MultipartEntityBuilder javadocs clarifying content validation and san...
  • bff9c47 Fix PublicSuffixMatcherLoader#getDefault (#621)
  • b7ece75 HTTPCLIENT-2361: Tolerate multiple Cookie headers added by the caller
  • ad82f0d Upgraded HttpClient version to 5.4.3-SNAPSHOT
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 2 updates: [com.uber.nullaway:nullaway](https://github.com/uber/NullAway) and [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client).


Updates `com.uber.nullaway:nullaway` from 0.12.4 to 0.12.6
- [Release notes](https://github.com/uber/NullAway/releases)
- [Changelog](https://github.com/uber/NullAway/blob/master/CHANGELOG.md)
- [Commits](uber/NullAway@v0.12.4...v0.12.6)

Updates `org.apache.httpcomponents.client5:httpclient5` from 5.4.2 to 5.4.3
- [Changelog](https://github.com/apache/httpcomponents-client/blob/rel/v5.4.3/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-client@rel/v5.4.2...rel/v5.4.3)

---
updated-dependencies:
- dependency-name: com.uber.nullaway:nullaway
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: org.apache.httpcomponents.client5:httpclient5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the type: dependency-upgrade Pull requests that update a dependency file label Mar 29, 2025
@github-actions github-actions bot added type: task and removed type: dependency-upgrade Pull requests that update a dependency file labels Mar 29, 2025
@artembilan artembilan added this to the 4.0.0-M3 milestone Mar 29, 2025
@artembilan artembilan merged commit 7d089af into main Mar 29, 2025
2 of 3 checks passed
@dependabot dependabot bot deleted the dependabot/gradle/development-dependencies-f41d3bfcd2 branch March 29, 2025 12:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants