Skip to content

Bump com.guardsquare:proguard-core from 8.0.6 to 9.1.1#69

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/com.guardsquare-proguard-core-9.1.1
Open

Bump com.guardsquare:proguard-core from 8.0.6 to 9.1.1#69
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/com.guardsquare-proguard-core-9.1.1

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Dec 20, 2023

Bumps com.guardsquare:proguard-core from 8.0.6 to 9.1.1.

Release notes

Sourced from com.guardsquare:proguard-core's releases.

9.1.1

Version 9.1.1

Bugfixes

  • Enable fix previously behind system property: fix TypedReferenceValue.generalize() not setting mayBeExtension to true when generalizing to common parent type.
  • Avoid printing PartialEvaluator messages when an ExcessiveComplexityException occurs.
  • Fix incorrect writing of flags for type parameters with name annotations.
  • Fix incorrect writing of flags for reified type parameters.
  • Fix model for types and type parameters, removing the incorrect HAS_ANNOTATION common flag.

Improved

  • Enable new PartialEvaluator error message format by default.
  • Add the ability to implement a custom renaming strategy for ClassReferenceFixer.
  • Add new MaxStackSizeComputer to compute the maximum stack size of a code attribute which is more memory efficient than the existing StackSizeComputer.
  • Add IdentifiedArrayReferenceValue.generalize() to maintain ID when applied to two instances with same ID.

9.1.0

Version 9.1

New

  • Added PartialEvaluator JSON output for use with the new proguard-core-visualizer tool.
  • Improve PartialEvaluator error messages when enabled with PartialEvaluator.Builder.setPrettyPrinting().

Improved

Bug fixes

  • Fix UnsupportedOperationException when trying to shrink Kotlin metadata from a lambda function.

API Changes

  • No longer consider Record attributes empty when they have no components in NonEmptyAttributeFilter. (#118)
  • Add new ProguardCoreException subclasses with more specific meanings.

9.0.10

Improved

  • TaintSink can now be configured with a predicate to filter on which TaintSources trigger it.
  • Improve performance of DynamicClassReferenceInitializer.
  • Improve performance of DynamicClassMemberReferenceInitializer.

API changes

  • The constructors in JvmInvokeTaintSink are now deprecated, JvmInvokeTaintSink#Builder should be used instead.
  • MultiTypedReferenceValue.generalize() now removes the null type from the set of potential types, and sets maybeNull on the other types instead.

... (truncated)

Commits
  • 38f2a86 Update version in README.md
  • c0f552e Update version in gradle.properties
  • 07afa7c Remove common flags from type (parameter) flag model.
  • 22e974a Fix incorrect writing of flags for type parameters with name annotations.
  • 8c64cbf Maintain id if generalize applied to two similar IdentifiedArrayReferenceValue
  • ece26d2 Don't log ExcessiveComplexityException with formatter
  • 1534bdf Fix incorrect code length in JsonPrinter
  • 9f41510 Fix TypedReferenceValue#generalize not setting mayBeExtension to true whe...
  • c192b74 Make id public in IdentifiedArrayReferenceValue
  • 75d0011 Add MaxStackSizeComputer
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.guardsquare:proguard-core](https://github.com/Guardsquare/proguard-core) from 8.0.6 to 9.1.1.
- [Release notes](https://github.com/Guardsquare/proguard-core/releases)
- [Commits](Guardsquare/proguard-core@v8.0.6...v9.1.1)

---
updated-dependencies:
- dependency-name: com.guardsquare:proguard-core
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 20, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants