Bump okhttp from 4.5.0 to 4.8.0 in /engine #2112

dependabot-preview · 2020-07-13T09:11:57Z

Bumps okhttp from 4.5.0 to 4.8.0.

Changelog

Version 4.8.0

2020-07-11
New: Change HeldCertificate.Builder to use its own ASN.1 certificate encoder. This is part of our effort to remove the okhttp-tls module's dependency on Bouncy Castle. We think Bouncy Castle is great! But it's a large dependency (6.5 MiB) and its security provider feature impacts VM-wide behavior.

New: Reduce contention for applications that make a very high number of concurrent requests. Previously OkHttp used its connection pool as a lock when making changes to connections and calls. With this change each connection is locked independently.
Upgrade: [Okio 2.7.0][okio_2_7_0].
implementation("com.squareup.okio:okio:2.7.0")
Fix: Avoid log messages like "Didn't find class org.conscrypt.ConscryptHostnameVerifier" when detecting the TLS capabilities of the host platform.

Fix: Don't crash in HttpUrl.topPrivateDomain() when the hostname is malformed.

Fix: Don't attempt Brotli decompression if the response body is empty.
Version 4.7.2

2020-05-20

Fix: Don't crash inspecting whether the host platform is JVM or Android. With 4.7.0 and 4.7.1 we had a crash IllegalArgumentException: Not a Conscrypt trust manager because we depended on initialization order of companion objects.

Version 4.7.1

2020-05-18

Fix: Pass the right arguments in the trust manager created for addInsecureHost(). Without the fix insecure hosts crash with an IllegalArgumentException on Android.

Version 4.7.0

2020-05-17

New: HandshakeCertificates.Builder.addInsecureHost() makes it easy to turn off security in private development environments that only carry test data. Prefer this over creating an

Commits

a70e992 Prepare for release 4.8.0.
cf367d9 Add defensive checks for malformed ASN.1 DER (#6180)
0e0f3a2 Push OkHttp 3.14.x into the sea. It is no longer supported. (#6179)
7c9cfd6 Fix typo (#6178)
4bfa33e Upgrade to Okio 2.7.0 (#6175)
c4cbb57 Don't crash on unknown GeneralName types. (#6170)
19e9a8f Drop support for indefinite length in DER (#6166)
c04b57e Add limits to what length values DerReader supports (#6164)
353a52b Improve code style for the new DER package (#6157)
45df82e Honor RFC 5280 when choosing a time format (#6154)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in the .dependabot/config.yml file in this repo:

Update frequency
Out-of-range updates (receive only lockfile updates, if desired)
Security updates (receive only security updates, if desired)

Bumps [okhttp](https://github.com/square/okhttp) from 4.5.0 to 4.8.0. - [Release notes](https://github.com/square/okhttp/releases) - [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md) - [Commits](square/okhttp@parent-4.5.0...parent-4.8.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

seldondev · 2020-07-13T09:12:01Z

Hi @dependabot-preview[bot]. Thanks for your PR.

I'm waiting for a SeldonIO member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the jenkins-x/lighthouse repository.

adriangonz · 2020-07-15T11:57:20Z

/ok-to-test
/test engine

seldondev · 2020-07-15T11:59:02Z

Wed Jul 15 11:59:00 UTC 2020
The logs for [engine] [2] will show after the pipeline context has finished.
https://github.com/SeldonIO/seldon-core/blob/gh-pages/jenkins-x/logs/SeldonIO/seldon-core/PR-2112/2.log

impatient try
jx get build logs SeldonIO/seldon-core/PR-2112 --build=2

seldondev · 2020-07-15T11:59:24Z

Wed Jul 15 11:59:22 UTC 2020
The logs for [pr-build] [1] will show after the pipeline context has finished.
https://github.com/SeldonIO/seldon-core/blob/gh-pages/jenkins-x/logs/SeldonIO/seldon-core/PR-2112/1.log

impatient try
jx get build logs SeldonIO/seldon-core/PR-2112 --build=1

seldondev · 2020-07-15T11:59:33Z

Wed Jul 15 11:59:31 UTC 2020
The logs for [lint] [3] will show after the pipeline context has finished.
https://github.com/SeldonIO/seldon-core/blob/gh-pages/jenkins-x/logs/SeldonIO/seldon-core/PR-2112/3.log

impatient try
jx get build logs SeldonIO/seldon-core/PR-2112 --build=3

adriangonz · 2020-07-15T13:39:51Z

/approve

seldondev · 2020-07-15T13:40:15Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: adriangonz

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

~~OWNERS~~ [adriangonz]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

seldondev · 2020-07-15T13:42:59Z

Wed Jul 15 13:42:54 UTC 2020
The logs for [pr-build] [4] will show after the pipeline context has finished.
https://github.com/SeldonIO/seldon-core/blob/gh-pages/jenkins-x/logs/SeldonIO/seldon-core/PR-2112/4.log

impatient try
jx get build logs SeldonIO/seldon-core/PR-2112 --build=4

seldondev · 2020-07-15T13:43:35Z

Wed Jul 15 13:43:33 UTC 2020
The logs for [lint] [5] will show after the pipeline context has finished.
https://github.com/SeldonIO/seldon-core/blob/gh-pages/jenkins-x/logs/SeldonIO/seldon-core/PR-2112/5.log

impatient try
jx get build logs SeldonIO/seldon-core/PR-2112 --build=5

seldondev · 2020-07-15T14:19:47Z

Wed Jul 15 14:19:46 UTC 2020
The logs for [pr-build] [6] will show after the pipeline context has finished.
https://github.com/SeldonIO/seldon-core/blob/gh-pages/jenkins-x/logs/SeldonIO/seldon-core/PR-2112/6.log

impatient try
jx get build logs SeldonIO/seldon-core/PR-2112 --build=6

seldondev · 2020-07-15T14:19:57Z

Wed Jul 15 14:19:56 UTC 2020
The logs for [lint] [7] will show after the pipeline context has finished.
https://github.com/SeldonIO/seldon-core/blob/gh-pages/jenkins-x/logs/SeldonIO/seldon-core/PR-2112/7.log

impatient try
jx get build logs SeldonIO/seldon-core/PR-2112 --build=7

dependabot-preview bot added dependencies Pull requests that update a dependency file Java labels Jul 13, 2020

dependabot-preview bot requested a review from adriangonz July 13, 2020 09:11

seldondev added the needs-ok-to-test label Jul 13, 2020

seldondev added the size/XS label Jul 13, 2020

seldondev added ok-to-test and removed needs-ok-to-test labels Jul 15, 2020

seldondev added the approved label Jul 15, 2020

seldondev merged commit cbd86d5 into master Jul 15, 2020

dependabot-preview bot deleted the dependabot/maven/engine/com.squareup.okhttp3-okhttp-4.8.0 branch July 15, 2020 14:49

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump okhttp from 4.5.0 to 4.8.0 in /engine #2112

Bump okhttp from 4.5.0 to 4.8.0 in /engine #2112

dependabot-preview bot commented Jul 13, 2020

seldondev commented Jul 13, 2020

adriangonz commented Jul 15, 2020

seldondev commented Jul 15, 2020

seldondev commented Jul 15, 2020

seldondev commented Jul 15, 2020

adriangonz commented Jul 15, 2020

seldondev commented Jul 15, 2020

seldondev commented Jul 15, 2020

seldondev commented Jul 15, 2020

seldondev commented Jul 15, 2020

seldondev commented Jul 15, 2020

Bump okhttp from 4.5.0 to 4.8.0 in /engine #2112

Bump okhttp from 4.5.0 to 4.8.0 in /engine #2112

Conversation

dependabot-preview bot commented Jul 13, 2020

Version 4.8.0

Version 4.7.2

Version 4.7.1

Version 4.7.0

seldondev commented Jul 13, 2020

adriangonz commented Jul 15, 2020

seldondev commented Jul 15, 2020

seldondev commented Jul 15, 2020

seldondev commented Jul 15, 2020

adriangonz commented Jul 15, 2020

seldondev commented Jul 15, 2020

seldondev commented Jul 15, 2020

seldondev commented Jul 15, 2020

seldondev commented Jul 15, 2020

seldondev commented Jul 15, 2020