Skip to content

build(deps): bump the gradle-all group across 1 directory with 2 updates - #63

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-all-80402b01d3
Open

build(deps): bump the gradle-all group across 1 directory with 2 updates#63
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-all-80402b01d3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the gradle-all group with 2 updates in the / directory: com.gradleup.shadow and gradle-wrapper.

Updates com.gradleup.shadow from 9.4.2 to 9.6.1

Release notes

Sourced from com.gradleup.shadow's releases.

9.6.1

Changed

  • Use GradleException for expected build failures. (#2113)

Fixed

  • Preserve repeated lines in R8 rule files when using minimize { r8 { ... } }. (#2115)

9.6.0

Added

  • Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#2089)

Changed

  • Rename ShadowDslMarker to ShadowDsl. (#2091)
  • POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#2090)
    This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.

Fixed

  • Validate ZIP entry names to prevent Zip Slip path traversal.
  • Avoid resolving unused R8 dependency. (#2101)

9.5.1

Fixed

  • Fix eager calls for toolchainSpec in Kotlin DSL. (#2087)

9.5.0

[!NOTE] With the introduction of DuplicatesStrategy checking for transformers, you may see warnings like:

'META-INF/...kotlin_module' is matched by com.github.jengelman.gradle.plugins.shadow.transformers.KotlinModuleMetadataTransformer but its DuplicatesStrategy is EXCLUDE — duplicates may be silently dropped before the transformer processes them.

If you do not need Kotlin module metadata remapping, you can disable it:

tasks.shadowJar {
  @Suppress("DEPRECATION") // This flag will be disabled and removed in the next major version of Shadow.
  enableKotlinModuleRemapping = false
}

Added

  • Check DuplicatesStrategy for merging transformers. (#2026)

... (truncated)

Changelog

Sourced from com.gradleup.shadow's changelog.

9.6.1 - 2026-07-22

Changed

  • Use GradleException for expected build failures. (#2113)

Fixed

  • Preserve repeated lines in R8 rule files when using minimize { r8 { ... } }. (#2115)

9.6.0 - 2026-07-16

Added

  • Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#2089)

Changed

  • Rename ShadowDslMarker to ShadowDsl. (#2091)
  • POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#2090)
    This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.

Fixed

  • Validate ZIP entry names to prevent Zip Slip path traversal.
  • Avoid resolving unused R8 dependency. (#2101)

9.5.1 - 2026-07-06

Fixed

  • Fix eager calls for toolchainSpec in Kotlin DSL. (#2087)

9.5.0 - 2026-07-06

[!NOTE] With the introduction of DuplicatesStrategy checking for transformers, you may see warnings like:

'META-INF/...kotlin_module' is matched by com.github.jengelman.gradle.plugins.shadow.transformers.KotlinModuleMetadataTransformer but its DuplicatesStrategy is EXCLUDE — duplicates may be silently dropped before the transformer processes them.

If you do not need Kotlin module metadata remapping, you can disable it:

tasks.shadowJar {
  @Suppress("DEPRECATION") // This flag will be disabled and removed in the next major version of Shadow.
  enableKotlinModuleRemapping = false
}

... (truncated)

Commits

Updates gradle-wrapper from 9.5.1 to 9.7.1

Release notes

Sourced from gradle-wrapper's releases.

9.7.1

The Gradle team is excited to announce Gradle 9.7.1.

This is a patch release for 9.7.0. We recommend using 9.7.1 instead of 9.7.0.

Here are the highlights of 9.7.0 release:

  • Isolated Projects graduates to incubating
  • Broader Configuration Cache compatibility
  • Resilient Sync helps you fix broken builds
  • More source locations in problem reports

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Adam, Aman Gautam, Aman Kumar, Anton Dubrouski, Aurimas, gbhavya07, Josh Friend, nicklauslittle-gov, Pragati, project516, Qin Mi, Ravi, sk-reddy17, Suvrat Acharya, Yongshun Ye.

Upgrade instructions

Switch your build to use Gradle 9.7.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.7.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.7.0

The Gradle team is excited to announce Gradle 9.7.0.

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jun 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/gradle/gradle-all-80402b01d3 branch from 4c51575 to ec169a7 Compare August 24, 2026 17:45
Bumps the gradle-all group with 2 updates in the / directory: [com.gradleup.shadow](https://github.com/GradleUp/shadow) and [gradle-wrapper](https://github.com/gradle/gradle).


Updates `com.gradleup.shadow` from 9.4.2 to 9.6.1
- [Release notes](https://github.com/GradleUp/shadow/releases)
- [Changelog](https://github.com/GradleUp/shadow/blob/main/CHANGELOG.md)
- [Commits](GradleUp/shadow@9.4.2...9.6.1)

Updates `gradle-wrapper` from 9.5.1 to 9.7.1
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.5.1...v9.7.1)

---
updated-dependencies:
- dependency-name: com.gradleup.shadow
  dependency-version: 9.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-all
- dependency-name: gradle-wrapper
  dependency-version: 9.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/gradle/gradle-all-80402b01d3 branch from ec169a7 to 5accc9c Compare September 2, 2026 17:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants