Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump google-http-client from 1.34.0 to 1.36.0 #2630

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 27, 2020

Bumps google-http-client from 1.34.0 to 1.36.0.

Release notes

Sourced from google-http-client's releases.

v1.36.0

1.36.0 (2020-06-30)

Features

  • add Android 19 compatible FileDataStoreFactory implementation (#1070) (1150acd)

Bug Fixes

  • restore the thread's interrupted status after catching InterruptedException (#1005) (#1006) (0a73a46)

v1.35.0

1.35.0 (2020-04-27)

Features

  • add logic for verifying ES256 JsonWebSignatures (#1033) (bb4227f)

Bug Fixes

  • add linkage monitor plugin (#1000) (027c227)
  • Correctly handling chunked response streams with gzip (#990) (1ba2197), closes #367
  • FileDataStoreFactory will throw IOException for any permissions errors (#1012) (fd33073)
  • include request method and URL into HttpResponseException message (#1002) (15111a1)
  • incorrect check for Windows OS in FileDataStoreFactory (#927) (8b4eabe)
  • reuse reference instead of calling getter twice (#983) (1f66222), closes #982
  • android: set minimum API level to 19 a.k.a. 4.4 Kit Kat (#1016) (b9a8023), closes #1015

Documentation

Dependencies

v1.34.2

1.34.2 (2020-02-12)

Changelog

Sourced from google-http-client's changelog.

1.36.0 (2020-06-30)

Features

  • add Android 19 compatible FileDataStoreFactory implementation (#1070) (1150acd)

Bug Fixes

  • restore the thread's interrupted status after catching InterruptedException (#1005) (#1006) (0a73a46)

1.35.0 (2020-04-27)

Features

  • add logic for verifying ES256 JsonWebSignatures (#1033) (bb4227f)

Bug Fixes

  • add linkage monitor plugin (#1000) (027c227)
  • Correctly handling chunked response streams with gzip (#990) (1ba2197), closes #367
  • FileDataStoreFactory will throw IOException for any permissions errors (#1012) (fd33073)
  • include request method and URL into HttpResponseException message (#1002) (15111a1)
  • incorrect check for Windows OS in FileDataStoreFactory (#927) (8b4eabe)
  • reuse reference instead of calling getter twice (#983) (1f66222), closes #982
  • android: set minimum API level to 19 a.k.a. 4.4 Kit Kat (#1016) (b9a8023), closes #1015

Documentation

Dependencies

1.34.2 (2020-02-12)

Bug Fixes

Commits
  • 8ea3348 chore: release 1.36.0 (#1073)
  • 1150acd feat: add Android 19 compatible FileDataStoreFactory implementation (#1070)
  • 05160aa samples: replace Google+ json example with YouTube example (#1069)
  • d32d852 build(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3 (#1051)
  • 193fecd chore: regenerate common templates (#1067)
  • b1353f8 chore(docs): libraries-bom 8.0.0 (#1066)
  • a966dec chore(deps): update dependency org.codehaus.mojo:build-helper-maven-plugin to...
  • 4e294b4 chore(deps): update dependency org.apache.maven.plugins:maven-site-plugin to ...
  • 8325020 chore(deps): update dependency com.fasterxml.jackson.core:jackson-core to v2....
  • a82b980 chore(deps): update dependency org.apache.maven.plugins:maven-project-info-re...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jul 27, 2020
@loosebazooka
Copy link
Member

@chanseokoh I think we specifically don't want to update this dependency?

@chanseokoh
Copy link
Member

We shouldn't have problems upgrading this (as well as google-http-client-apache-v2 and google-auth-library-oauth2-http together). But we have a history to have broken things a couple times after upgrading the library:

However, in general, we should be able to freely upgrade these. It's just that I think it's safer to punt upgrading them to the release after the next one.

@dependabot dependabot bot force-pushed the dependabot/gradle/com.google.http-client-google-http-client-1.36.0 branch from 72a2fad to 34360f7 Compare August 7, 2020 15:00
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 14, 2020

Superseded by #2822.

@dependabot dependabot bot closed this Oct 14, 2020
@dependabot dependabot bot deleted the dependabot/gradle/com.google.http-client-google-http-client-1.36.0 branch October 14, 2020 05:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cla: yes dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants