Skip to content

chore(deps): bump Gradle wrapper to 9.9.1 - #21

Merged
dkhawk merged 1 commit into
mainfrom
chore/gradle-9.9.1
Nov 13, 2026
Merged

dkhawk merged 1 commit into
mainfrom
chore/gradle-9.9.1

Conversation

@kikoso

@kikoso kikoso commented Nov 11, 2026

Copy link
Copy Markdown
Collaborator

Bumps the Gradle wrapper from 9.8.2 to 9.9.1, which fixes GHSA-3cfg-jpcr-gfp3 (critical): version catalog values were copied into the generated accessors without escaping, so a crafted version, coordinate or plugin id could run code as soon as the settings are evaluated, including on IDE sync.

This repository doesn't import any published catalog and no .toml file here contains */ or \u, so this is a precaution rather than a fix for a known problem. Generated with ./gradlew wrapper --gradle-version 9.9.1 --distribution-type bin. Also updates distributionSha256Sum to the published checksum of the 9.9.1 distribution.

@github-actions

Copy link
Copy Markdown

Coverage (unit tests)

No unit baseline recorded in coverage/history.csv yet, so this run only reports absolute numbers.

Module Line % Change Branch % Change
golden-testing 90.42% new 58.00% new
robolectric-testing 84.06% new 51.71% new
visual-testing 63.58% new 35.16% new
TOTAL 82.12% new 47.02% new

Line and branch coverage from unit test reports. History is recorded in coverage/history.csv after each merge to main.

@dkhawk
dkhawk merged commit 5bedf9a into main Nov 13, 2026
12 of 14 checks passed
@dkhawk
dkhawk deleted the chore/gradle-9.9.1 branch November 13, 2026 22:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants