Skip to content

fix(deps): update dependency com.gradleup.shadow:shadow-gradle-plugin to v9.6.0#1175

Open
elastic-renovate-prod[bot] wants to merge 1 commit into
mainfrom
renovate/shadow
Open

fix(deps): update dependency com.gradleup.shadow:shadow-gradle-plugin to v9.6.0#1175
elastic-renovate-prod[bot] wants to merge 1 commit into
mainfrom
renovate/shadow

Conversation

@elastic-renovate-prod

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
com.gradleup.shadow:shadow-gradle-plugin 9.5.19.6.0 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

GradleUp/shadow (com.gradleup.shadow:shadow-gradle-plugin)

v9.6.0

Compare Source

Added
  • Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#​2089)
Changed
  • Rename ShadowDslMarker to ShadowDsl. (#​2091)
  • POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#​2090)
    This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.
Fixed
  • Validate ZIP entry names to prevent Zip Slip path traversal.
  • Avoid resolving unused R8 dependency. (#​2101)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@elastic-renovate-prod elastic-renovate-prod Bot added changelog:skip dependencies Pull requests that update a dependency file labels Jul 16, 2026
@elastic-renovate-prod
elastic-renovate-prod Bot requested a review from a team as a code owner July 16, 2026 08:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

agent-java changelog:skip dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants