commit a37043f917adde6ef46550682a1ed86e4e091888
author dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Fri Sep 19 22:14:08 2025 +0000
committer GitHub <noreply@github.com> Fri Sep 19 22:14:08 2025 +0000
tree 3c65abec713e3f7cc3fc517cad3b4917472d82bb
parent 3d5c4196d9c825bb21ab3d4cfbd1df1d91204cec

[dependabot]: Bump okhttp, junit, and truth in /packages/espresso/android (#10010)

Bumps [com.squareup.okhttp3:okhttp](https://github.com/square/okhttp) from 4.12.0 to 5.1.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/square/okhttp/blob/master/CHANGELOG.md">com.squareup.okhttp3:okhttp's changelog</a>.</em></p>
<blockquote>
<h2>Version 5.1.0</h2>
<p><em>2025-07-07</em></p>
<ul>
<li>
<p>New: <code>Response.peekTrailers()</code>. When we changed <code>Response.trailers()</code> to block instead of
throwing in 5.0.0, we inadvertently removed the ability for callers to peek the trailers
(by catching the <code>IllegalStateException</code> if they weren't available). This new API restores that
capability.</p>
</li>
<li>
<p>Fix: Don't crash on <code>trailers()</code> if the response doesn't have a body. We broke [Retrofit] users
who read the trailers on the <code>raw()</code> OkHttp response, after its body was decoded.</p>
</li>
</ul>
<h2>Version 5.0.0</h2>
<p><em>2025-07-02</em></p>
<p>This is our first stable release of OkHttp since 2023. Here's the highlights if you're upgrading
from OkHttp 4.x:</p>
<p><strong>OkHttp is now packaged as separate JVM and Android artifacts.</strong> This allows us to offer
platform-specific features and optimizations. If your build system handles [Gradle module metadata],
this change should be automatic.</p>
<p><strong>MockWebServer has a new coordinate and package name.</strong> We didn’t like that our old artifact
depends on JUnit 4 so the new one doesn’t. It also has a better API built on immutable values. (We
intend to continue publishing the old <code>okhttp3.mockwebserver</code> artifact so there’s no urgency to
migrate.)</p>
<table>
<thead>
<tr>
<th align="left">Coordinate</th>
<th align="left">Package Name</th>
<th align="left">Description</th>
</tr>
</thead>
<tbody>
<tr>
<td align="left">com.squareup.okhttp3:mockwebserver3:5.0.0</td>
<td align="left">mockwebserver3</td>
<td align="left">Core module. No JUnit dependency!</td>
</tr>
<tr>
<td align="left">com.squareup.okhttp3:mockwebserver3-junit4:5.0.0</td>
<td align="left">mockwebserver3.junit4</td>
<td align="left">Optional JUnit 4 integration.</td>
</tr>
<tr>
<td align="left">com.squareup.okhttp3:mockwebserver3-junit5:5.0.0</td>
<td align="left">mockwebserver3.junit5</td>
<td align="left">Optional JUnit 5 integration.</td>
</tr>
<tr>
<td align="left">com.squareup.okhttp3:mockwebserver:5.0.0</td>
<td align="left">okhttp3.mockwebserver</td>
<td align="left">Obsolete. Depends on JUnit 4.</td>
</tr>
</tbody>
</table>
<p><strong>OkHttp now supports Happy Eyeballs ([RFC 8305][rfc_8305]) for IPv4+IPv6 networks.</strong> It attempts
both IPv6 and IPv4 connections concurrently, keeping whichever connects first.</p>
<p><strong>We’ve improved our Kotlin APIs.</strong> You can skip the builder:</p>
<pre lang="kotlin"><code>val request = Request(
  url = &quot;https://cash.app/&quot;.toHttpUrl(),
)
</code></pre>
<p><strong>OkHttp now supports [GraalVM].</strong></p>
<p>Here’s what has changed since 5.0.0-alpha.17:</p>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/square/okhttp/commit/d2dd1806973f7355b07a45fb1ef6a1bcfc094fdb"><code>d2dd180</code></a> Prepare for release 5.1.0.</li>
<li><a href="https://github.com/square/okhttp/commit/61a87359f64fb9506122322176a0695a6dec672c"><code>61a8735</code></a> New Response.peekTrailers() API (<a href="https://redirect.github.com/square/okhttp/issues/8921">#8921</a>)</li>
<li><a href="https://github.com/square/okhttp/commit/66844010f74a20bc076063620a06de478c6fcb26"><code>6684401</code></a> Update dependency gradle to v8.14.3 (<a href="https://redirect.github.com/square/okhttp/issues/8915">#8915</a>)</li>
<li><a href="https://github.com/square/okhttp/commit/7adb2b637cd2d214cdad741a3a1ba056db55e049"><code>7adb2b6</code></a> Update junit-framework monorepo (<a href="https://redirect.github.com/square/okhttp/issues/8914">#8914</a>)</li>
<li><a href="https://github.com/square/okhttp/commit/e41ff18df84982042e26fae6fa0cc482a55a47b8"><code>e41ff18</code></a> Link to new mockwebserver artifacts (<a href="https://redirect.github.com/square/okhttp/issues/8911">#8911</a>)</li>
<li><a href="https://github.com/square/okhttp/commit/0ff87513e2f1c75f32290d0c24d475bc0459bb7f"><code>0ff8751</code></a> Remove Graal init tracing (<a href="https://redirect.github.com/square/okhttp/issues/8909">#8909</a>)</li>
<li><a href="https://github.com/square/okhttp/commit/b9a2560e5647ff18c0a0538998c070938fc65380"><code>b9a2560</code></a> Run graal on master (<a href="https://redirect.github.com/square/okhttp/issues/8907">#8907</a>)</li>
<li><a href="https://github.com/square/okhttp/commit/8339524463f56a7d68bc43ce7af562702e371f4c"><code>8339524</code></a> Remove ExperimentalOkHttpApi references (<a href="https://redirect.github.com/square/okhttp/issues/8908">#8908</a>)</li>
<li><a href="https://github.com/square/okhttp/commit/ce29ef618240b8e4c82b5932e6bc0f7a4730adb9"><code>ce29ef6</code></a> Fix graal tests (<a href="https://redirect.github.com/square/okhttp/issues/8906">#8906</a>)</li>
<li><a href="https://github.com/square/okhttp/commit/85796896c3042935a98500e4d41b0f3ca49523e7"><code>8579689</code></a> Don't force a response body read on all trailers (<a href="https://redirect.github.com/square/okhttp/issues/8904">#8904</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/square/okhttp/compare/parent-4.12.0...parent-5.1.0">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.squareup.okhttp3:okhttp&package-manager=gradle&previous-version=4.12.0&new-version=5.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

</details>