Skip to content

fix(deps): update shadowplugin to v9.6.0#897

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/shadowplugin
Jul 16, 2026
Merged

fix(deps): update shadowplugin to v9.6.0#897
renovate[bot] merged 1 commit into
mainfrom
renovate/shadowplugin

Conversation

@renovate

@renovate renovate Bot commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
com.gradleup.shadow 9.5.19.6.0 age confidence
com.gradleup.shadow:shadow-gradle-plugin 9.5.19.6.0 age confidence

Release Notes

GradleUp/shadow (com.gradleup.shadow:shadow-gradle-plugin)

v9.6.0

Compare Source

Added
  • Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#​2089)
Changed
  • Rename ShadowDslMarker to ShadowDsl. (#​2091)
  • POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#​2090)
    This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.
Fixed
  • Validate ZIP entry names to prevent Zip Slip path traversal.
  • Avoid resolving unused R8 dependency. (#​2101)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Jul 16, 2026
@renovate
renovate Bot enabled auto-merge (squash) July 16, 2026 08:26
@renovate
renovate Bot merged commit 50836ae into main Jul 16, 2026
3 checks passed
@renovate
renovate Bot deleted the renovate/shadowplugin branch July 16, 2026 08:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants