Skip to content

chore(deps): bump com.autonomousapps.dependency-analysis from 3.4.1 to 3.13.0#919

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/com.autonomousapps.dependency-analysis-3.13.0
Open

chore(deps): bump com.autonomousapps.dependency-analysis from 3.4.1 to 3.13.0#919
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/com.autonomousapps.dependency-analysis-3.13.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Bumps com.autonomousapps.dependency-analysis from 3.4.1 to 3.13.0.

Changelog

Sourced from com.autonomousapps.dependency-analysis's changelog.

Version 3.13.0

  • [feat]: new computeTypeUsage<variant> task generates usage report.
  • [fix]: when computing actual usages, actually look at the runtime graph.
  • [refactor]: use Graphs wrapper instead of Guava directly.

Version 3.12.2

  • [fix]: The new "exceptions are special" (in v3.12.0) handling was over-eager and flagging things that only referenced exceptions. We only want to flag things that provide the exception types.
  • [fix]: MutableSet<Usage>.simplify(visibility, bucket) in StandardTransform wasn't properly handling the case when a usage was visible on both compile and runtime classpaths. In such a case, we can filter out all usages.
  • [fix]: reason output said "implies implementation" when it should have been "implies runtimeOnly" in the android lint jar case.

Version 3.12.1

  • [fix]: don't suggest non-existent Android unit test variant in advice.

Version 3.12.0

  • [feat]: exceptions are special. Exceptions get verified early by the JVM and so if a dependency is missing an exception's type from the runtime classpath, that can cause failures in the consumer at runtime.

Version 3.11.0

  • [fix]: when following a bundle rule, don't drop api dependencies.

Version 3.10.0

  • [feat]: Gradle plugin markers are the preferred way to depend on a plugin.
  • [feat]: Gradle plugin markers are part of an implicit bundle.
  • [fix]: handle dependencies blocks that have a single line.
  • [docs]: add 'partial analysis' section to readme.

Version 3.9.0

  • (Reverted) Compiled against Kotlin 2.3.20. Compiling against Kotlin 2.2.21 again, with language level 2.2.

Version 3.8.0

  • [feat]: record lambda in binaryClassAccesses.
  • [feat]: support analysis of a Gradle version catalog dependency.
  • [feat]: remove unused 'file' property.
  • Compiled against Kotlin 2.3.20.

Version 3.7.0

  • [feat]: Expose useParenthesesForGroovy configuration for Groovy DSL syntax control.
  • [fix]: fix regex for excluding all *Generated annotations.
  • [fix]: don't attempt to suggest upgrading an undeclared 'parent' dependency of a KMP dependency.
  • [fix]: the 'androidMain' source set is special.
  • [chore]: Compiled against Kotlin 2.2 and Gradle 9.4.1.
  • [chore]: add Code of Conduct.

Version 3.6.1

  • [Fix]: use compilation.disambiguatedName for crafting the task suffix.

Version 3.6.0

... (truncated)

Commits
  • e5e693e chore: prepare for release 3.13.0.
  • 22ec67b refactor: use Graphs wrapper instead of Guava directly.
  • 843e01b fix: when computing actual usages, actually look at the runtime graph.
  • c969969 feat: new computeTypeUsage task generates usage report.
  • dfaca3a chore: prepare next development version.
  • e20532a chore: prepare for release 3.12.2.
  • 5e3eb8c fix: exceptions, main->test visibility, reason for android lint jars.
  • 99b10f8 chore: prepare next development version.
  • e309436 chore: prepare for release 3.12.1.
  • a5c2c44 test: fix the remaining broken Android functional tests on earlier versions o...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.autonomousapps.dependency-analysis](https://github.com/autonomousapps/dependency-analysis-android-gradle-plugin) from 3.4.1 to 3.13.0.
- [Changelog](https://github.com/autonomousapps/dependency-analysis-gradle-plugin/blob/main/CHANGELOG.md)
- [Commits](autonomousapps/dependency-analysis-gradle-plugin@v3.4.1...v3.13.0)

---
updated-dependencies:
- dependency-name: com.autonomousapps.dependency-analysis
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels May 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant