chore(deps): update dependency gradle to v8

[renovate]

This PR contains the following updates:

Package	Update	Change
gradle (source)	major	7.5 -> 8.8

---

Release Notes

gradle/gradle (gradle)

v8.8

Compare Source

v8.7

Compare Source

v8.6

Compare Source

v8.5: 8.5

Compare Source

The Gradle team is excited to announce Gradle 8.5.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Ahmed Ehab,
Alex Landau,
Aurimas,
Björn Kautler,
bodhili,
Daniel Le Berre,
davidburstrom,
Franz Wimmer,
Jongwoo Han,
Ken,
Leonardo Silveira,
Martin Bonnin,
Matthew Von-Maszewski,
Nik Clayton,
noeppi_noeppi,
Philip Wedemann,
Philipp Schneider,
Tomas Bjerre

Upgrade instructions

Switch your build to use Gradle 8.5 by updating your wrapper:

./gradlew wrapper --gradle-version=8.5

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.4: 8.4

Compare Source

The Gradle team is excited to announce Gradle 8.4.

Amongst other improvements, this release addresses two security vulnerabilities:

• Incorrect permission assignment for symlinked files used in copy or archiving operations
• Possible local text file exfiltration by XML External entity injection

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Ahmed Ehab,
Andrei Rybak,
Baptiste Decroix,
Björn Kautler,
Cesar de la Vega,
Ganavi Jayaram,
Gaurav Padam,
hwanseok,
J.T. McQuigg,
Jakub Chrzanowski,
Jendrik Johannes,
kackey0-1,
Konstantin Gribov,
Pratik Haldankar,
Qinglin,
Sebastian Schuberth,
Thad House,
valery1707,
Vladimir Sitnikov,
wuyangnju,
Yanming Zhou,
Yanshun Li,
Yusuke Uehara,
zeners

Upgrade instructions

Switch your build to use Gradle 8.4 by updating your wrapper:

./gradlew wrapper --gradle-version=8.4

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.3: 8.3

Compare Source

The Gradle team is excited to announce Gradle 8.3.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
Ahmed Ehab,
Aurimas,
Baptiste Decroix,
Björn Kautler,
Borewit,
Korov,
Mohammed Thavaf,
Patrick Brückner,
Philip Wedemann,
Róbert Papp,
Shi Chen,
Tony Robalik

Upgrade instructions

Switch your build to use Gradle 8.3 by updating your wrapper:

./gradlew wrapper --gradle-version=8.3

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.2.1

Compare Source

v8.2: 8.2

Compare Source

The Gradle team is excited to announce Gradle 8.2.

Amongst other improvements, this release addresses two security vulnerabilities:

• Dependency cache path traversal
• Path traversal vulnerabilities in handling of Tar archives

Read the Release Notes

We would like to thank the following community contributors for their contributions to this release of Gradle:

Bruno Didot,
Eric Vantillard,
esfomeado,
Jendrik Johannes,
Jonathan Leitschuh,
Lee Euije,
Stefan Oehme,
Todor Dinev,
Yanshun Li

Upgrade instructions

Switch your build to use Gradle 8.2 by updating your wrapper:

./gradlew wrapper --gradle-version=8.2

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.1.1: 8.1.1

Compare Source

This is a patch release for Gradle 8.1. We recommend using 8.1.1 instead of 8.1.

It fixes the following issues:

• #​24748 MethodTooLargeException when instrumenting a class with thousand of lambdas for configuration cache
• #​24754 Kotlin DSL precompiled script plugins built with Gradle 8.1 cannot be used with other versions of Gradle
• #​24788 Gradle 8.1 configure freeCompilerArgs for Kotlin in buildSrc breaks build with unhelpful errors

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 8.1.1 by updating your wrapper:

./gradlew wrapper --gradle-version=8.1.1

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 8.1.1.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v8.1: 8.1

Compare Source

The Gradle team is excited to announce Gradle 8.1.

Read the Release Notes

We would like to thank the following community contributors for their contributions to this release of Gradle:

André Sousa,
Attila Király,
Aurimas,
Björn Kautler,
Christoph Dreis,
David Morris,
DJtheRedstoner,
Gabriel Feo,
J.T. McQuigg,
JavierSegoviaCordoba,
JayaKrishnan Nair K,
Jeff Widman,
kackey0-1,
Martin Bonnin,
Martin Kealey,
modmuss50,
pan93412,
Sebastian Schuberth,
Simon Marquis,
TheDadda,
Thrillpool,
valery1707,
Xin Wang,
Yanshun Li

Upgrade instructions

Switch your build to use Gradle 8.1 by updating your wrapper:

./gradlew wrapper --gradle-version=8.1

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.0.2: 8.0.2

Compare Source

The Gradle team is excited to announce Gradle 8.0.2.

This is the second patch release for Gradle 8.0. We recommend using 8.0.2 instead of 8.0.

It fixes the following issues:

• #​23698 Gradle 8 RC2 runs out of metaspace
• #​23962 Java/Scala build with no explicit toolchain: build fails with Gradle 8.0.1 / Scala 2.13
• #​23990 Gradle 8.0.+ silently dropped support for custom compilers in JavaCompile
• #​24031 InstrumentingTransformer generates different class files in Gradle 8 and 7.6 which leads to Remote Build-Cache misses
• #​24109 Extending an already resolved configuration no longer works correctly
• #​24122 Update configuration cache state for some plugins
• #​24129 includeBuild in PluginManagementSpec deincubated in Gradle 8, docs still say it's incubating

Issues fixed in the first patch release:

• #​21551 Document integration of Scala plugin with toolchains and problems with target flag
• #​23888 --no-rebuild suddenly gone without new deprecation cycle and without the reason for its undeprecation being void
• #​23905 Gradle 8.0 fails Scala build with isBlank not found in String class error

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 8.0.2 by updating your wrapper:

./gradlew wrapper --gradle-version=8.0.2

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 8.0.2.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v8.0.1: 8.0.1

Compare Source

This is a patch release for 8.0. We recommend using 8.0.1 instead of 8.0.

It fixes the following issues:

• #​21551 - Document integration of Scala plugin with toolchains and problems with target flag
• #​23888 - --no-rebuild suddenly gone without new deprecation cycle and without the reason for its undeprecation being void
• #​23905 - Gradle 8.0 fails Scala build with isBlank not found in String class error

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 8.0.1 by updating your wrapper:

./gradlew wrapper --gradle-version=8.0.1

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 8.0.1.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v8.0: 8.0

Compare Source

The Gradle team is excited to announce Gradle 8.0

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Abdul Rauf,
Andrei Nevedomskii,
aSemy,
Ben Cox,
Björn Kautler,
bodhili,
Cédric Champeau,
Christoph Dreis,
Clara Guerrero Sánchez,
David Marin Vaquero,
David Morris,
Denis Buzmakov,
Dmitry Pogrebnoy,
Dzmitry Neviadomski,
Eliezer Graber,
Eric Pederson,
Fedor Ihnatkevich,
Gabriel Rodriguez,
Herbert von Broeuschmeul,
Hyeonmin Park,
Jeff,
Jendrik Johannes,
Korov,
Marcono1234,
Madhead,
Mariell Hoversholm,
Matthew Haughton,
Matthias Ernst,
Michael Bailey,
Michael Ernst,
Michael Torres,
Pankaj,
prasad-333,
RicardoJiang,
Siddardha Bezawada,
Stephen Topley,
Victor Maldonado,
Vinay Potluri,
Xin Wang.

Upgrade instructions

Switch your build to use Gradle 8.0 by updating your wrapper:

./gradlew wrapper --gradle-version=8.0

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 8.0.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v7.6.4: 7.6.4

Compare Source

This is a patch release for 7.6. We recommend using 7.6.4 instead of 7.6.

Read the Release Notes

Upgrade instructions

Switch your build to use Gradle 7.6.4 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.4

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v7.6.3: 7.6.3

Compare Source

This is a patch release for 7.6. We recommend using 7.6.3 instead of 7.6.

This release addresses two security vulnerabilities:

• Incorrect permission assignment for symlinked files used in copy or archiving operations
• Possible local text file exfiltration by XML External entity injection

It also fixes the following issues:

• #​25781 Backport finalized task performance fix to 7.6.x
• #​25802 Backport cgroups fix to 7.6.x

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 7.6.3 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.3

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.3.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v7.6.2: 7.6.2

Compare Source

This is a patch release for 7.6. We recommend using 7.6.2 instead of 7.6.

This release addresses two security vulnerabilities:

• Dependency cache path traversal
• Path traversal vulnerabilities in handling of Tar archives

It also fixes the following issues:

• #​23201 Backport dependency upgrades to 7.x
• #​23202 Backport Scala incremental compilation fixes
• #​23325 Backport JSoup update to resolve CVE-2022-36033
• #​23458 Backport JUnit5 dynamic test logging bug fix
• #​23681 Dependency graph resolution: Equivalent excludes can cause un-necessary graph mutations [backport 7.x]
• #​23922 Backport "Use Compiler API data for incremental compilation after a failure" to 7.x
• #​23951 Exclude rule merging: missing optimization [Backport 7.x]
• #​24132 Extending an already resolved configuration no longer works correctly [backport 7.x]
• #​24234 7.6.1 breaks gradle-consistent-versions
• #​24390 Gradle 7.4 fails on multi release jar's with JDK 19 code
• #​24439 Gradle complains about invalid tool chain - picking up the source package location - it should just ignore them [Backport]
• #​24443 Maven artifact referenced only in dependency constraints raises IllegalStateException: Corrupt serialized resolution result [backport]
• #​24901 Backport fix for test exception that cannot be deserialized to 7.x

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 7.6.2 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.2

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.2.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v7.6.1: 7.6.1

Compare Source

This is a patch release for 7.6. We recommend using 7.6.1 instead of 7.6.

It fixes the following issues:

• #​19065 Platform dependencies not possible in dependency block of test suite plugin
• #​22688 Increased memory usage (with -p option)
• #​22796 Building gradle itself fails during toolchain download: permission denied copying a file within .gradle/jdks
• #​22875 Regression with 7.6: @​​pom artifact in JVM library project is no longer found
• #​22937 Remove safe credentials reference
• #​22973 Kotlin MPP plugin broken with Gradle 7.6 due to signature change in TestResultProcessor
• #​23016 toolchainManagement.jvm.javaRepositories should not expose the full surface of NamedDomainObjectList
• #​23025 Back-port toolchain related fixes to 7.6.1
• #​23053 Auto-provisioning/auto-detection of IBM Semeru toolchains is broken with Gradle 7.6
• #​23074 Docs: Build Lifecycle starts halfway through a point
• #​23096 Classifiers of version catalog are discarded while copied to anothor dependency
• #​23111 Ant closures are broken with Gradle 7.6
• #​23178 Mention the Foojay Toolchain Resolver plugin in the Gradle manual
• #​23215 Gradle 7.6: high memory usage (android project)
• #​23224 Backport to 7.6.1 "Fix for Incremental compilation with modules"
• #​23294 "Unable to make progress running work" together with --continue and failing tasks (Backport to 7.6.1)
• #​23555 Improve Toolchain related deprecation nagging in 7.6
• #​23894 Update EOL policy
• #​23910 Backport trusting only full GPG keys in dependency verification [Backport 7.6.1]
• #​23941 Typo in v7.6 docs about disabling_the_daemon
• #​23985 Resolving of manually created configuration creates a ResolveException

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 7.6.1 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.1

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.1.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v7.6

Compare Source

v7.5.1: 7.5.1

Compare Source

This is a patch release for 7.5. We recommend using 7.5.1 instead of 7.5

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Michael Bailey,
Josh Kasten,
Marcono1234,
mataha,
Lieven Vaneeckhaute,
kiwi-oss,
Stefan Neuhaus,
George Thomas,
Anja Papatola,
Björn Kautler,
David Burström,
Vladimir Sitnikov,
Roland Weisleder,
Konstantin Gribov,
David Op de Beeck,
aSemy,
Rene Groeschke,
Jonathan Leitschuh,
Aurimas Liutikas,
Jamie Tanna,
Xin Wang,
Atsuto Yamashita,
Taeik Lim,
Peter Gafert,
Alex Landau,
Jerry Wiltse,
Tyler Burke,
Matthew Haughton,
Filip Daca,
Simão Gomes Viana,
Vaidotas Valuckas,
Edgars Jasmans,
Tomasz Godzik,
Jeff,
Lajos Veres

Upgrade instructions

Switch your build to use Gradle 7.5.1 by updating your wrapper:

./gradlew wrapper --gradle-version=7.5.1

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

Share

• X
• Mastodon
• Reddit
• LinkedIn

Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>.
  • Generate unit testing code for this file.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
  • @coderabbitai generate unit testing code for this file.
  • @coderabbitai modularize this function.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai generate interesting stats about this repository and render them as a table.
  • @coderabbitai show all the console.log statements in this repository.
  • @coderabbitai read src/utils.ts and generate unit testing code.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
  • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (invoked as PR comments)

• @coderabbitai pause to pause the reviews on a PR.
• @coderabbitai resume to resume the paused reviews.
• @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
• @coderabbitai full review to do a full review from scratch and review all the files again.
• @coderabbitai summary to regenerate the summary of the PR.
• @coderabbitai resolve resolve all the CodeRabbit review comments.
• @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
• @coderabbitai help to get help.

Additionally, you can add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.

CodeRabbit Configration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• Please see the configuration documentation for more information.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 8.x releases. But if you manually upgrade to 8.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.