Skip to content

chore(deps): bump com.autonomousapps.dependency-analysis from 3.4.1 to 3.19.1 - #984

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/com.autonomousapps.dependency-analysis-3.19.1
Open

chore(deps): bump com.autonomousapps.dependency-analysis from 3.4.1 to 3.19.1#984
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/com.autonomousapps.dependency-analysis-3.19.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps com.autonomousapps.dependency-analysis from 3.4.1 to 3.19.1.

Release notes

Sourced from com.autonomousapps.dependency-analysis's releases.

3.19.1

  • [fix]: an 'analyzable class file' should have non-zero length.

3.19.0

  • [feat]: ':printDuplicateDependencies' will now store the console output in a file on disk.
  • [fix]: incorrect Android-variant configuration advice.
  • [fix]: merge binary classes from all jar artifacts when building map.
  • [fix]: track component identifiers as input to tasks that write them to output.
  • [fix]: handle mixed source sets better.
  • [fix]: make ArtifactsReportTask cacheable again.
  • [fix]: simplify kotlin-metadata-jvm runtime handling.
  • [refactor]: use non-deprecated API in KMP analysis.
  • [refactor]: add ExpensiveJar type to hold BinaryClasses, removing them from ExplodedJar.
  • [test]: add test to ensure cache correctness.
  • [maintenance]: build with (and test against) Gradle 9.7.1 and KGP 2.4.0.
  • [maintenance]: update (and test against) AGP 9.3.1.
  • [security]: (GH actions) add 'persist-credentials: false' and disable all permissions by default.
  • [docs]: update issue templates and add a PR template.
  • [docs]: add GH workflow for creating GH releases.
  • [chore]: do not skip metadata version check.
  • [chore]: enable feature preview: NO_IMPLICIT_LOOKUP_IN_PARENT_PROJECTS.
  • [chore]: update dependency org.apache.groovy:groovy to v4.0.33.
  • [chore]: update dependency com.android.tools.metalava:metalava to v1.0.0-alpha15.
  • [chore]: update dependency com.github.ben-manes.caffeine:caffeine to v3.2.4.
  • [chore]: update dependency org.jspecify:jspecify to v1.0.1.
  • [chore]: update dependency org.junit:junit-bom to v5.14.4.
  • [chore]: update Develocity to latest.
  • [chore]: configure Renovate.
  • [chore]: add 'setup-testlens' action to CI workflow.

3.18.0

  • [feat]: isolate usage of "kotlin-metadata-jvm" to workers and downgrade Kotlin version used by the plugin.
  • [feat]: allow to exclude ABI by source path.
  • [fix]: GraphViewTask's inputs are inputs, not internal details.
  • [fix]: make GraphViewTask sensitive to new transitive project edges.
  • [fix]: disable caching for ArtifactsReportTask.
  • [fix]: Don't fail IDEA sync when registering InMemoryCache with a task.
  • [chore]: update kotlin-editor-relocated to 0.25.0.
  • [chore]: update gradle-script-grammar to 0.7.
  • [chore]: use Gradle 9.6.1.
  • [docs]: add 'troubleshooting' section to README with discussion of the "kotlin-metadata-jvm" issue.
  • [maintenance]: resolve Gradle deprecations.
  • [test]: the usual gradle flags should be set for all tests (in particular, org.gradle.caching=true).

3.17.0

  • [feat]: support KMP with 'fixDependencies' (RewriteTask) in Kotlin DSL only.
  • [feat]: add DSL option for binary-compatibility check. It now defaults to 'false'. This is a breaking behavioral change.
  • [fix]: close leaked ZipFile objects.
  • [fix]: use Iterator.remove() to remove changes in Android project analysis.

... (truncated)

Changelog

Sourced from com.autonomousapps.dependency-analysis's changelog.

Version 3.19.1

  • [fix]: an 'analyzable class file' should have non-zero length.

Version 3.19.0

  • [feat]: ':printDuplicateDependencies' will now store the console output in a file on disk.
  • [fix]: incorrect Android-variant configuration advice.
  • [fix]: merge binary classes from all jar artifacts when building map.
  • [fix]: track component identifiers as input to tasks that write them to output.
  • [fix]: handle mixed source sets better.
  • [fix]: make ArtifactsReportTask cacheable again.
  • [fix]: simplify kotlin-metadata-jvm runtime handling.
  • [refactor]: use non-deprecated API in KMP analysis.
  • [refactor]: add ExpensiveJar type to hold BinaryClasses, removing them from ExplodedJar.
  • [test]: add test to ensure cache correctness.
  • [maintenance]: build with (and test against) Gradle 9.7.1 and KGP 2.4.0.
  • [maintenance]: update (and test against) AGP 9.3.1.
  • [security]: (GH actions) add 'persist-credentials: false' and disable all permissions by default.
  • [docs]: update issue templates and add a PR template.
  • [docs]: add GH workflow for creating GH releases.
  • [chore]: do not skip metadata version check.
  • [chore]: enable feature preview: NO_IMPLICIT_LOOKUP_IN_PARENT_PROJECTS.
  • [chore]: update dependency org.apache.groovy:groovy to v4.0.33.
  • [chore]: update dependency com.android.tools.metalava:metalava to v1.0.0-alpha15.
  • [chore]: update dependency com.github.ben-manes.caffeine:caffeine to v3.2.4.
  • [chore]: update dependency org.jspecify:jspecify to v1.0.1.
  • [chore]: update dependency org.junit:junit-bom to v5.14.4.
  • [chore]: update Develocity to latest.
  • [chore]: configure Renovate.
  • [chore]: add 'setup-testlens' action to CI workflow.

Version 3.18.0

  • [feat]: isolate usage of "kotlin-metadata-jvm" to workers and downgrade Kotlin version used by the plugin.
  • [feat]: allow to exclude ABI by source path.
  • [fix]: GraphViewTask's inputs are inputs, not internal details.
  • [fix]: make GraphViewTask sensitive to new transitive project edges.
  • [fix]: disable caching for ArtifactsReportTask.
  • [fix]: Don't fail IDEA sync when registering InMemoryCache with a task.
  • [chore]: update kotlin-editor-relocated to 0.25.0.
  • [chore]: update gradle-script-grammar to 0.7.
  • [chore]: use Gradle 9.6.1.
  • [docs]: add 'troubleshooting' section to README with discussion of the "kotlin-metadata-jvm" issue.
  • [maintenance]: resolve Gradle deprecations.
  • [test]: the usual gradle flags should be set for all tests (in particular, org.gradle.caching=true).

Version 3.17.0

  • [feat]: support KMP with 'fixDependencies' (RewriteTask) in Kotlin DSL only.
  • [feat]: add DSL option for binary-compatibility check. It now defaults to 'false'. This is a breaking behavioral change.
  • [fix]: close leaked ZipFile objects.
  • [fix]: use Iterator.remove() to remove changes in Android project analysis.

... (truncated)

Commits
  • 06d20da chore: prepare for release 3.19.1.
  • a064fe1 fix: an 'analyzable class file' should have non-zero length.
  • 8ca79e0 docs: revert manual trigger for release workflow (meaningless).
  • 08e45ca test: tell 'test' workflow to ignore changes to other workflow files.
  • 211ad21 docs: allow 'create-release' workflow to run manually.
  • 9773ae5 docs: fix GH 'create-release' action.
  • ab85666 chore: prepare next development version.
  • d8f37f7 chore: prepare for release 3.19.0.
  • 6d83153 chore(testkit-plugin): prepare next development version of testkit-plugin.
  • a05095b chore(testkit-plugin): prepare for testkit-plugin release 0.20.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.autonomousapps.dependency-analysis](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin) from 3.4.1 to 3.19.1.
- [Release notes](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin/releases)
- [Changelog](https://github.com/autonomousapps/dependency-analysis-gradle-plugin/blob/main/CHANGELOG.md)
- [Commits](autonomousapps/dependency-analysis-gradle-plugin@v3.4.1...v3.19.1)

---
updated-dependencies:
- dependency-name: com.autonomousapps.dependency-analysis
  dependency-version: 3.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant