Bump com.squareup.okhttp3:okhttp from 3.14.2 to 4.12.0

[dependabot]

Bumps com.squareup.okhttp3:okhttp from 3.14.2 to 4.12.0.

Changelog

Sourced from com.squareup.okhttp3:okhttp's changelog.

Change Log

Version 4.x

See 4.x Change log for the stable version changelogs.

Version 5.0.0-alpha.12

2023-12-17

We took too long to cut this release and there's a lot of changes in it. We've been busy.

Although this release is labeled alpha, the only unstable thing in it is our new APIs. This release has many critical bug fixes and is safe to run in production. We're eager to stabilize our new APIs so we can get out of alpha.

• New: Support Java 21's virtual threads (‘OpenJDK Project Loom’). We changed OkHttp's internals to use Lock and Condition instead of synchronized for best resource utilization.

• New: Switch our Internationalized Domain Name (IDN) implementation to [UTS #46 Nontransitional Processing][uts46]. With this fix, the ß code point no longer maps to ss. OkHttp now embeds its own IDN mapping table in the library.

• New: Prefer the client's configured precedence order for TLS cipher suites. (OkHttp used to prefer the JDK’s precedence order.) This change may cause your HTTP calls to negotiate a different cipher suite than before! OkHttp's defaults cipher suites are selected for good security and performance.

• New: ConnectionListener publishes events for connects, disconnects, and use of pooled connections.

• Fix: Immediately update the connection's flow control window instead of waiting for the receiving stream to process it.

  This change may increase OkHttp's memory use for applications that make many concurrent HTTP calls and that can receive data faster than they can process it. Previously, OkHttp limited HTTP/2 to 16 MiB of unacknowledged data per connection. With this fix there is a limit of 16 MiB of unacknowledged data per stream and no per-connection limit.

• Fix: Don't close a Deflater while we're still using it to compress a web socket message. We had a severe bug where web sockets were closed on the wrong thread, which caused NullPointerException crashes in Deflater.

• Fix: Don't crash after a web socket fails its connection upgrade. We incorrectly released the web socket's connections back to the pool before their resources were cleaned up.

• Fix: Don't infinite loop when a received web socket message has self-terminating compressed data.

... (truncated)

Commits

• 4984568 Prepare for release 4.12.0.
• ea720d3 [4.x] Add test for 103 handling (#8055)
• a6e54bf Avoid hanging on takeHeaders (incorrect 103 handling) when response body is e...
• 4190ca8 [4.x] Bump okio to 3.6 (#8052)
• 9553f6d [4.x] Fix bad merge (#8053)
• cd581af Handle certificate corruption (#7982)
• 708d89b Make Public Suffix Database failures permanent (#7828)
• b147d28 Fix for stalled streams (#7801) (#7818)
• f04809d [4.x] Fix websocket reconnect race condition (#7815) (#7817)
• 07b5d82 [4.x] Suppress removed (#7953)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[cjkent]

@dependabot rebase