Skip to content

dependency: Update dependency com.gradleup.shadow:com.gradleup.shadow.gradle.plugin to v9.6.0#242

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/com.gradleup.shadow-com.gradleup.shadow.gradle.plugin-9.x
Open

dependency: Update dependency com.gradleup.shadow:com.gradleup.shadow.gradle.plugin to v9.6.0#242
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/com.gradleup.shadow-com.gradleup.shadow.gradle.plugin-9.x

Conversation

@renovate

@renovate renovate Bot commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
com.gradleup.shadow:com.gradleup.shadow.gradle.plugin 9.5.19.6.0 age confidence

Release Notes

GradleUp/shadow (com.gradleup.shadow:com.gradleup.shadow.gradle.plugin)

v9.6.0

Compare Source

Added
  • Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#​2089)
Changed
  • Rename ShadowDslMarker to ShadowDsl. (#​2091)
  • POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#​2090)
    This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.
Fixed
  • Validate ZIP entry names to prevent Zip Slip path traversal.
  • Avoid resolving unused R8 dependency. (#​2101)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the 🔄 dependencies Pull requests that update a dependency file label Jul 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

🔄 dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants