proguard-maven-plugin icon indicating copy to clipboard operation
proguard-maven-plugin copied to clipboard

Bump com.guardsquare:proguard-core from 9.1.1 to 9.1.3

Open dependabot[bot] opened this issue 2 months ago • 0 comments

Bumps com.guardsquare:proguard-core from 9.1.1 to 9.1.3.

Release notes

Sourced from com.guardsquare:proguard-core's releases.

9.1.3

Version 9.1.3

Kotlin support

  • Add support for processing Kotlin 2.0 metadata.
  • Update to stable version of the Kotlin metadata library.

9.1.2

Java support

  • Update maximum supported Java class version to 66.65535 (Java 22). (#127)

API changes

  • Remove deprecated ReferenceValueFactory, ParticularReferenceValueFactory should be used instead.
  • Deprecate methods in ValueFactory taking an Object as parameter. The alternatives using ParticularObject should be used instead.

Improved

  • Add support for selective parameter reconstruction to define which methods should have their calls evaluated.
  • Refactor ExecutingInvocationUnit to be customizable using executors. Improve checking whether method instance should be replaced in stack and variables.
  • Support execution of methods that operate on 1D arrays of all primitive and reference types with ReflectionExecutor.
  • Use runtime type instead of static type when possible in ExecutingInvocationUnit.
  • Introduce ParticularObject as the value tracked by ParticularReferenceValue. This makes explicit which kind of values can be tracked during the analysis, and introduces the possibility of tracking a model of the values that differ from the actual tracked object.

Bug fixes

  • Improve Kotlin MultiFileFacade metadata assertions to detect uninitialized references.
  • Fix handling of category 2 values in JvmValueTransferRelation to work correctly with ExecutingInvocationUnit.
  • Fix concurrency problems in CallGraph and ValueFactory ids.
  • Fix a bug in ReturnClassExtractor returning the last parameter type instead of null for primitive return values.
  • Fix ExecutorMethodSignatureMatcher trying to mutate an immutable map.
  • Fix TypedReferenceValue.cast() not handling null values correctly.
Commits
  • 4327472 Add releasenote for kotlin support
  • d41e795 Fix KotlinSyntheticClassConstructor not properly handling lambda's
  • f9e9b49 Update to stable kotlin.metadata library
  • f6bfc16 Fix bugs in ExecutingInvocationUnit
  • bd74a66 Extend information that Executors can provide to ExecutingInvocationUnit
  • e37898f Prevent NPE in MultiAttributeVisitor
  • f1e922e Add class resolver function to ClassDataEntryWriter
  • d796d3e Bump version to 9.1.3
  • eef07d3 Update releasenotes.md
  • 6d24462 Add optional ignoreStackMapAttributes parameter to ClassPoolBuilder.java
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependabot[bot] avatar Apr 29 '24 23:04 dependabot[bot]