[Snyk] Upgrade com.squareup.okhttp3:okhttp from 4.11.0 to 5.4.0

[mhill-os]

Snyk has created this PR to upgrade com.squareup.okhttp3:okhttp from 4.11.0 to 5.4.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 28 versions ahead of your current version.

• The recommended version was released 21 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Denial of Service (DoS) SNYK-JAVA-COMSQUAREUPOKIO-5820002	147	Proof of Concept
	Denial of Service (DoS) SNYK-JAVA-COMSQUAREUPOKIO-5773320	147	Proof of Concept
	Information Exposure SNYK-JAVA-ORGJETBRAINSKOTLIN-2393744	147	Proof of Concept

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[mhill-os]

This major version upgrade from OkHttp 4.x to 5.x introduces significant breaking changes that require developer action. The library has been refactored with new artifacts and major API changes, particularly for testing.

Key Breaking Changes:

• New Artifacts for JVM & Android: OkHttp 5 is now packaged as separate JVM and Android artifacts (okhttp-jvm and okhttp-android). While build systems using Gradle module metadata may handle this automatically, manual verification of build configurations is recommended.
• MockWebServer Overhaul: The testing library MockWebServer has been moved to a new coordinate (com.squareup.okhttp3:mockwebserver3) and package (mockwebserver3). This was done to remove the dependency on JUnit 4. This change breaks existing test setups and requires migration to the new artifact and its updated APIs (e.g., RecordedRequest.path is now target).
• API Removals: Several classes, including AddressPolicy, AsyncDns, and ConnectionListener, have been removed from the public API.
• Behavioral Changes: The handling of multipart bodies has changed; they no longer include a Content-Length header, which may affect servers that rely on it.

Recommendation:
This upgrade requires careful migration. Review the official changelog thoroughly. Pay close attention to test code using MockWebServer as it will require significant updates. Consider using automated migration tools like OpenRewrite, which offers recipes for upgrading to OkHttp 5, to handle some of the mechanical code changes.

Source: OkHttp Change Log

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[mhill-os]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.