Skip to content
This repository was archived by the owner on Mar 18, 2025. It is now read-only.

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2025

Bumps com.autonomousapps.dependency-analysis from 1.13.1 to 2.8.0.

Changelog

Sourced from com.autonomousapps.dependency-analysis's changelog.

Version 2.8.0

  • [Feat]: support reasoning about multiple pieces of advice.
  • [Fix]: compute/printDuplicateDependencies works even when not all projects apply this plugin.
  • [Fix]: do not filter out advice to add to testImplementation if there is conflicting advice to downgrade from implementation.
  • [Fix]: compileOnly dependencies are not visible to the test compile classpath.
  • [Build]: use Gradle 8.12.1
  • [Chore]: update to AGP 8.8.0
  • [Refactor]: use DependencyHandler.project() instead of Project.project().
  • [Test]: only run functionalTest against latest combination of AGP and Gradle.
  • [Test]: don't forward stdout on CI.

Version 2.7.0

  • [Feat]: can set severity and filter duplicate class warnings.
  • [Feat]: don't recommend removing implementation dependency on necessary superclass.
  • [Chore]: use non-deprecated method when available.
  • [Chore]: update various dependencies, including antlr.

New DSL option for configuring duplicate class warnings:

// root build.gradle[.kts]
dependencyAnalysis {
  issues {
    all {
      onDuplicateClassWarnings {
        severity(<"fail"|"warn"|"ignore">)
        // Fully-qualified class reference to exclude, slash- or dot-delimited
        exclude("org/jetbrains/annotations/NotNull", "org.jetbrains.annotations.Nullable")
      }
    }
  }
}

Version 2.6.1

  • [Fix]: superClassName can be null (Object has no superclass).

Version 2.6.0

  • [Feat]: improvements relating to generating project graphs.
  • [Fix]: use stable kotlin-metadata 2.0.21.
  • [Fix]: error message code example
  • [Chore]: use graph-support v0.4.
  • [Chore]: build with Gradle 8.11.1.
  • [Chore]: use com.gradle.develocity plugin exclusively.
  • [Chore]: replace deprecated kotlinOptions with compilerOptions.

Version 2.5.0

  • [Feat]: use KotlinEditor to rewrite Gradle Kotlin DSL scripts.
  • [Fix]: ProjectAdvice is totally Comparable.
  • [Refactor]: make a lot of data models internal that don't need to be public.

... (truncated)

Commits
  • 8eb746f chore: prepare for release 2.8.0.
  • 09b77a5 fix: compute/printDuplicateDependencies works even when not all projects appl...
  • 523d7bc refactor: use DependencyHandler.project() instead of Project.project().
  • c00d006 test: minor cleanup/refactor.
  • 239c825 test: only run functionalTest against latest combination of AGP and Gradle.
  • e17041d test: don't forward stdout on CI.
  • abcd840 feat: support reasoning about multiple pieces of advice.
  • fcab399 fix: do not filter out advice to add to testImplementation if there is confli...
  • 97cb447 fix: compileOnly dependencies are not visible to the test compile classpath.
  • 55377ea build: use Gradle 8.12.1.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.autonomousapps.dependency-analysis](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin) from 1.13.1 to 2.8.0.
- [Changelog](https://github.com/autonomousapps/dependency-analysis-gradle-plugin/blob/main/CHANGELOG.md)
- [Commits](autonomousapps/dependency-analysis-gradle-plugin@v1.13.1...v2.8.0)

---
updated-dependencies:
- dependency-name: com.autonomousapps.dependency-analysis
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Involves coding in java labels Feb 1, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 1, 2025

Superseded by #174.

@dependabot dependabot bot closed this Mar 1, 2025
@dependabot dependabot bot deleted the dependabot/gradle/com.autonomousapps.dependency-analysis-2.8.0 branch March 1, 2025 09:10
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file java Involves coding in java

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant