Skip to content

MINOR: Bump com.squareup.okio:okio-jvm from 3.17.0 to 3.18.2 - #1295

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/com.squareup.okio-okio-jvm-3.18.2
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/com.squareup.okio-okio-jvm-3.18.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps com.squareup.okio:okio-jvm from 3.17.0 to 3.18.2.

Changelog

Sourced from com.squareup.okio:okio-jvm's changelog.

Version 3.18.2

2026-09-04

  • Fix: Don't change behavior of base64-encoding. We introduced a bug in Okio 3.18.1 that caused base64 strings to be encoded without padding, even though the previous and expected behavior is to encode such strings with padding (= characters). The bug impacts callers who compiled against Okio releases < 3.18.0, and executed on Okio releases >= 3.18.

Version 3.18.1

2026-07-28

  • Fix: Restore binary-compatibility with Okio 3.17.x for Kotlin/Native users. When we introduced the new base64() function, we inadvertently changed the binary signature! Ugh! This is now fixed and we've automated binary-compatibility checking for Kotlin/Native going forward.

Version 3.18.0

2026-07-21

  • Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.
  • Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a FileNotFoundException.
  • Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in NodeJS, causing our WasiFileSystem to be unable to access files!
  • New: Optionally ignore whitespace when decoding hexadecimal.
  • New: Optionally omit padding when encoding Base64.
  • New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte, UShort and ULong. Also add support for unsigned and little-endian.
  • New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.
  • New: Source.limit() returns a wrapped source with a strict limit on how many bytes are returned.
  • New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.
Commits
  • 9403a09 Prepare for release 3.18.2.
  • 5a1c153 Fix an unintended behavior change with base64 padding (#1869)
  • 9f564fd Prepare for release 3.18.1.
  • 531cf07 Hide some accidentally public symbols (#1839)
  • e7ef43d Update GitHub Actions for new secrets and branch (#1840)
  • a6730de Start enforcing binary compatibility for Kotlin/Native (#1838)
  • e75a7e9 Update dependency com.android.tools.build:gradle to v9.3.1 (#1836)
  • 9d21d5c Fix interchanged docs links for 1.x and 2.x API (#1835)
  • bff1dff Track new docs locations from Dokka v2 (#1833)
  • 3b16d9b Grant write permission to the publish-website action (#1832)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 14, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 14, 2026
@jbonofre

jbonofre commented Oct 2, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [com.squareup.okio:okio-jvm](https://github.com/lysine-dev/okio) from 3.17.0 to 3.18.2.
- [Changelog](https://github.com/lysine-dev/okio/blob/main/CHANGELOG.md)
- [Commits](lysine-dev/okio@parent-3.17.0...parent-3.18.2)

---
updated-dependencies:
- dependency-name: com.squareup.okio:okio-jvm
  dependency-version: 3.18.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/com.squareup.okio-okio-jvm-3.18.2 branch from d51e65b to 75da0fc Compare October 2, 2026 15:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant