Skip to content

chore(deps): bump com.autonomousapps.dependency-analysis from 3.4.1 to 3.8.0#898

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/com.autonomousapps.dependency-analysis-3.8.0
Open

chore(deps): bump com.autonomousapps.dependency-analysis from 3.4.1 to 3.8.0#898
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/com.autonomousapps.dependency-analysis-3.8.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Bumps com.autonomousapps.dependency-analysis from 3.4.1 to 3.8.0.

Changelog

Sourced from com.autonomousapps.dependency-analysis's changelog.

Version 3.8.0

  • [feat]: record lambda in binaryClassAccesses.
  • [feat]: support analysis of a Gradle version catalog dependency.
  • [feat]: remove unused 'file' property.
  • Compiled against Kotlin 2.3.20.

Version 3.7.0

  • [feat]: Expose useParenthesesForGroovy configuration for Groovy DSL syntax control.
  • [fix]: fix regex for excluding all *Generated annotations.
  • [fix]: don't attempt to suggest upgrading an undeclared 'parent' dependency of a KMP dependency.
  • [fix]: the 'androidMain' source set is special.
  • [chore]: Compiled against Kotlin 2.2 and Gradle 9.4.1.
  • [chore]: add Code of Conduct.

Version 3.6.1

  • [Fix]: use compilation.disambiguatedName for crafting the task suffix.

Version 3.6.0

  • [Breaking]: min version of Android Gradle Plugin (AGP) is now 8.10.0.
  • [Feat]: support KMP projects with JVM targets.
  • [Feat]: support KMP projects with Android targets.
  • [Feat]: update console report to be more idiomatic for KMP.
  • [Feat]: implement ABI inclusions filter.
  • [Feat]: add lifecycle resolveExternalDependencies task.
  • [Fix]: improve Class.forName handling.
  • [Fix]: remove dependency to javax.inject.
  • [Fix]: potential resource leak in JarExploder.
  • [Fix]: duplicate class detection for annotations.
  • [Fix]: use latest-kotlin editor.
  • [Refactor]: move two public types to an internal package to exclude from published api, and exclude the com.autonomousapps.model.internal package from the published api.
  • [Refactor]: moved a lot of task-registration code into AbstractDependencyAnalyzer.
  • [Docs]: add link to maven-hijack blog post.

Version 3.5.1

  • [Fix]: don't try to process a non-match as a binary incompatibility.
  • [Fix]: use version catalog when applying the build-health plugin.
  • [Fix]: bundleTraces is a sortedSet and BundleTrace is Comparable.

Version 3.5.0

  • [Feat]: check binary compatibility between consumer and producer code.
  • [Feat]: support the com.google.cloud.tools.jib plugin as an application-type plugin.
  • [Fix]: 'reason' works for project dependencies.
  • [Fix]: strip empty lines from service loaders.
  • [Docs]: clarify compatibilities with other plugins.
  • [Docs]: document the existence of dependencyAnalysis.app().
Commits
  • e481384 chore: prepare for release 3.8.0.
  • d78a30d chore(graph-support): prepare for graph-support release 0.11.0.
  • 15ad573 chore(variant-artifacts): prepare for variant-artifacts release 0.5.0.
  • 06982cb chore: update dokka.
  • 692156f test: update tests that change with Kotlin version.
  • 6be062d feat: re-update to Kotlin 2.3.20 after resolving daemon issue.
  • 1bec349 refactor(variant-artifacts): don't call deprecated API.
  • b1faef7 feat: remove unused 'file' property.
  • 84796d7 chore: update API. Should have done this earlier. No breakages.
  • b10e5d8 refactor: extract method.
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.autonomousapps.dependency-analysis](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin) from 3.4.1 to 3.8.0.
- [Changelog](https://github.com/autonomousapps/dependency-analysis-gradle-plugin/blob/main/CHANGELOG.md)
- [Commits](autonomousapps/dependency-analysis-gradle-plugin@v3.4.1...v3.8.0)

---
updated-dependencies:
- dependency-name: com.autonomousapps.dependency-analysis
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Apr 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant