Skip to content

Bump com.gradleup.shadow from 8.3.6 to 9.3.1#18

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/com.gradleup.shadow-9.3.1
Closed

Bump com.gradleup.shadow from 8.3.6 to 9.3.1#18
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/com.gradleup.shadow-9.3.1

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Jan 13, 2026

Bumps com.gradleup.shadow from 8.3.6 to 9.3.1.

Release notes

Sourced from com.gradleup.shadow's releases.

9.3.1

Fixed

  • Use ASM from jdependency embedded. (#1898)
    This fixes potential classpath conflicts when using Shadow with other plugins that also use ASM.

9.3.0

Added

  • Add PatternFilterableResourceTransformer to simplify pattern based ResourceTransformers. (#1849)
  • Expose patternSet of ServiceFileTransformer as public. (#1849)
  • Expose patternSet of ApacheLicenseResourceTransformer as public. (#1850)
  • Expose patternSet of ApacheNoticeResourceTransformer as public. (#1850)
  • Expose patternSet of PreserveFirstFoundResourceTransformer as public. (#1855)
  • Support overriding output path of ApacheNoticeResourceTransformer. (#1851)
  • Add new merge strategy Fail to PropertiesFileTransformer. (#1856)
  • Add FindResourceInClasspath task to help with debugging issues with merged duplicate resources. (#1860)
  • Add MergeLicenseResourceTransformer. (#1858)
  • Add DeduplicatingResourceTransformer to deduplicate on path and content. (#1859)
  • Support disabling Kotlin module metadata remapping. (#1875)
    tasks.shadowJar {
      // Disable remapping of Kotlin module metadata (`.kotlin_module`) files. This is enabled by default.
      enableKotlinModuleRemapping = false
    }

Changed

  • Change the group of startShadowScripts from application to other. (#1797)
  • Update ASM and jdependency to support Java 26. (#1799)
  • Bump min Gradle requirement to 9.0.0. (#1801)
  • Deprecate PreserveFirstFoundResourceTransformer.resources. (#1855)
  • Make the output of PropertiesFileTransformer reproducible. (#1861)
  • Deprecate ShadowCopyAction. (#1876)
    It should not be used as a public API. Will be made internal in a future release.

Fixed

  • Fix Develocity integration when Isolated Projects enabled. (#1836)

9.2.2

Fixed

  • Fix the regression of registering ShadowJar tasks without ShadowPlugin applied. (#1787)

9.2.1

Added

  • Support relocating Groovy extensions in Module descriptors. (#1705)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.gradleup.shadow](https://github.com/GradleUp/shadow) from 8.3.6 to 9.3.1.
- [Release notes](https://github.com/GradleUp/shadow/releases)
- [Commits](GradleUp/shadow@8.3.6...9.3.1)

---
updated-dependencies:
- dependency-name: com.gradleup.shadow
  dependency-version: 9.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Jan 13, 2026

Labels

The following labels could not be found: dependencies, java. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions
Copy link
Copy Markdown

This pull request is stale because it has been open for 14 days with no activity.

@github-actions github-actions Bot added the stale label Jan 28, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Feb 4, 2026

This pull request was closed because it has been inactive for 7 days since being marked as stale.

@github-actions github-actions Bot closed this Feb 4, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Feb 4, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/gradle/com.gradleup.shadow-9.3.1 branch February 4, 2026 02:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants