gradle-versions-plugin

• Ensure Kotlin dependencies are properly handled when not forced (#823, #824, #825; thanks @tresat)

Fixed xml report "Unrecognized configuration feature: indent-number" (#818)

Replaced xstreams with javax.xml for Gradle 8.4 compatibility (#814)

If you still have a legacy xml provider listed in your buildEnvironment dependency tree, such as old version of xerces, then you can force the default provider to OpenJDK's by adding the following to your gradle.properties.

systemProp.javax.xml.parsers.SAXParserFactory=com.sun.org.apache.xerces.internal.jaxp.SAXParserFactoryImpl
systemProp.javax.xml.transform.TransformerFactory=com.sun.org.apache.xalan.internal.xsltc.trax.TransformerFactoryImpl
systemProp.javax.xml.parsers.DocumentBuilderFactory=com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderFactoryImpl

Allow the gradle versions api url to be customized to support restricted environments (#807)

What's Changed

• Avoid configuring dependencyUpdates task by @dreis2211 in https://github.com/ben-manes/gradle-versions-plugin/pull/736
• Update dependabot.yml by @jaredsburrows in https://github.com/ben-manes/gradle-versions-plugin/pull/739
• Bump com.squareup.okhttp3:okhttp from 4.9.3 to 4.10.0 by @dependabot in https://github.com/ben-manes/gradle-versions-plugin/pull/740
• Bump org.jetbrains.dokka from 1.6.21 to 1.8.10 by @dependabot in https://github.com/ben-manes/gradle-versions-plugin/pull/744
• Bump org.jetbrains.kotlin.jvm from 1.6.21 to 1.8.10 by @dependabot in https://github.com/ben-manes/gradle-versions-plugin/pull/741
• gradle 8 by @jaredsburrows in https://github.com/ben-manes/gradle-versions-plugin/pull/745
• Fix broken Sonatype links in HTML reports by @marcosalis in https://github.com/ben-manes/gradle-versions-plugin/pull/750
• Bump com.thoughtworks.xstream:xstream from 1.4.19 to 1.4.20 by @dependabot in https://github.com/ben-manes/gradle-versions-plugin/pull/751
• Bump org.jetbrains.kotlin:kotlin-reflect from 1.6.21 to 1.8.10 by @dependabot in https://github.com/ben-manes/gradle-versions-plugin/pull/752
• Bump actions/setup-java from 3.10.0 to 3.11.0 by @dependabot in https://github.com/ben-manes/gradle-versions-plugin/pull/760
• Bump org.jetbrains.kotlin.jvm from 1.8.10 to 1.8.20 by @dependabot in https://github.com/ben-manes/gradle-versions-plugin/pull/762
• Bump org.jetbrains.kotlin:kotlin-stdlib-jdk8 from 1.6.21 to 1.8.20 by @dependabot in https://github.com/ben-manes/gradle-versions-plugin/pull/763
• Bump org.jetbrains.kotlin:kotlin-reflect from 1.8.10 to 1.8.20 by @dependabot in https://github.com/ben-manes/gradle-versions-plugin/pull/767
• Fix inherited collection to not be always empty by @tresat in https://github.com/ben-manes/gradle-versions-plugin/pull/768
• Replace deprecated toUpperCase() kotlin.text calls by @smelfungus in https://github.com/ben-manes/gradle-versions-plugin/pull/779
• Bump org.jetbrains.kotlin:kotlin-stdlib-jdk8 from 1.8.20 to 1.8.21 by @dependabot in https://github.com/ben-manes/gradle-versions-plugin/pull/775
• Bump com.squareup.okhttp3:okhttp from 4.10.0 to 4.11.0 by @dependabot in https://github.com/ben-manes/gradle-versions-plugin/pull/770
• Allow filtering configurations by @bh-tt in https://github.com/ben-manes/gradle-versions-plugin/pull/785

New Contributors

• @dreis2211 made their first contribution in https://github.com/ben-manes/gradle-versions-plugin/pull/736
• @marcosalis made their first contribution in https://github.com/ben-manes/gradle-versions-plugin/pull/750
• @tresat made their first contribution in https://github.com/ben-manes/gradle-versions-plugin/pull/768
• @smelfungus made their first contribution in https://github.com/ben-manes/gradle-versions-plugin/pull/779
• @bh-tt made their first contribution in https://github.com/ben-manes/gradle-versions-plugin/pull/785

Full Changelog: https://github.com/ben-manes/gradle-versions-plugin/compare/v0.46.0...v0.47.0

• Ignore constraints of own projects (#724)
• Set the JVM attribute on the copied configuration (#727)
• Do not use textual 'null' for dependencies without group (#731)

• Fix HTML report structure (#715)
• Only resolve resolvable configurations (#721)

• report results should be modifiable (#704)
• trim whitespace between output format options (#703)

• Ignore failOnDynamicVersions() to fetch latest versions (#593)
• Requires Gradle 7.0 baseline (earlier plugin versions can be used otherwise)

This release migrated the plugin from Groovy to Kotlin, and therefore there may be some slight regressions. Please let us know if you find any problems.

Prevent builds from failing w/ configuration cache enabled on Gradle 7.4+ (#410)

Fixed ConcurrentModificationException (#578)

New parameter to improve on the resolution of dependency constraints: checkBuildEnvironmentConstraints
It will enabled project to check external constraints, like those defined in init script
For details see PR #577 .

Some important changes:

• During the check we now try all project configurations instead of only selected ones. Those which cannot be checked are logged at info level so no more Failed to resolve ... error logs.
• The dependency ambiguity issue in the report has been resolved. There no longer is an up-to-date dependency with version none and the same dependency with a concrete version in the out-of-date section.
• A new result category has been added: Dependencies that were declared without version are categorized undeclared emphasizing that version comparison cannot be performed because no version is given.
• For details see PR #522 .

Fixed dangling open file handle (#472)

Show the current dependency's reason in the report (#477)

• Ignore when kotlin-stdlib has a null version (#443)

• Copy Kotlin variant metadata from alternative source (#442)

• Copy Kotlin's MPP legacy metadata for variant selection (#438)

• Restrict inherited dependencies to Kotlin's stdlib (#424)

• Copy configuration attributes for variant resolution (#334)
• Resolve with the classifier and extension if specified (#224)
• Retain inherited dependencies from super configurations (#423)