Skip to content

chore(deps): bump com.squareup.okhttp3:okhttp from 4.12.0 to 5.0.0#3255

Merged
GMishx merged 4 commits intomainfrom
dependabot/maven/com.squareup.okhttp3-okhttp-5.0.0
Apr 3, 2026
Merged

chore(deps): bump com.squareup.okhttp3:okhttp from 4.12.0 to 5.0.0#3255
GMishx merged 4 commits intomainfrom
dependabot/maven/com.squareup.okhttp3-okhttp-5.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Jul 7, 2025 •
edited
Loading

Bumps com.squareup.okhttp3:okhttp from 4.12.0 to 5.0.0.

Changelog

Sourced from com.squareup.okhttp3:okhttp's changelog.

Version 5.0.0

2025-07-02

This is our first stable release of OkHttp since 2023. Here's the highlights if you're upgrading from OkHttp 4.x:

OkHttp is now packaged as separate JVM and Android artifacts. This allows us to offer platform-specific features and optimizations. If your build system handles [Gradle module metadata], this change should be automatic.

MockWebServer has a new coordinate and package name. We didn’t like that our old artifact depends on JUnit 4 so the new one doesn’t. It also has a better API built on immutable values. (We intend to continue publishing the old okhttp3.mockwebserver artifact so there’s no urgency to migrate.)

Coordinate Package Name Description
com.squareup.okhttp3:mockwebserver3:5.0.0 mockwebserver3 Core module. No JUnit dependency!
com.squareup.okhttp3:mockwebserver3-junit4:5.0.0 mockwebserver3.junit4 Optional JUnit 4 integration.
com.squareup.okhttp3:mockwebserver3-junit5:5.0.0 mockwebserver3.junit5 Optional JUnit 5 integration.
com.squareup.okhttp3:mockwebserver:5.0.0 okhttp3.mockwebserver Obsolete. Depends on JUnit 4.

OkHttp now supports Happy Eyeballs ([RFC 8305][rfc_8305]) for IPv4+IPv6 networks. It attempts both IPv6 and IPv4 connections concurrently, keeping whichever connects first.

We’ve improved our Kotlin APIs. You can skip the builder:

val request = Request(
  url = "https://cash.app/".toHttpUrl(),
)

OkHttp now supports [GraalVM].

Here’s what has changed since 5.0.0-alpha.17:

  • Upgrade: [Okio 3.15.0][okio_3_15_0].
  • Upgrade: [Kotlin 2.2.0][kotlin_2_2_0].
  • Fix: Don't crash with a NoSuchMethodError when using OkHttp with the Sentry SDK.
  • Fix: Retain the query data in the old okhttp3.mockwebserver.RecordedRequest.path property. We inadvertently changed this behavior when we introduced the mockwebserver3 API.

Version 5.0.0-alpha.17

2025-06-29

This release stabilizes many APIs for the imminent OkHttp 5.0.0 release.

... (truncated)

Commits
  • 1b703d5 Prepare for release 5.0.0.
  • dcb640c Fix breaking change from alpha.17 release (#8899)
  • 75661d4 Fix a NoSuchMethodError loading OkHttp on Android (#8898)
  • a84a09f Update com.squareup.okio to v3.15.0 (#8896)
  • 06a88ad Update dependency com.gradleup.shadow:shadow-gradle-plugin to v8.3.8 (#8895)
  • 9ba8962 Document change of RecordedRequest.path
  • 2864541 Update dependency com.puppycrawl.tools:checkstyle to v10.26.1 (#8894)
  • 4309b55 Prepare next development version.
  • ae1145c Prepare for release 5.0.0-alpha.17.
  • dba12fc Update dependency de.mannodermaus.gradle.plugins:android-junit5 to v1.13.1.0 ...
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jul 7, 2025
@dependabot dependabot bot requested a review from heliocastro as a code owner July 7, 2025 02:22
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jul 7, 2025
@dependabot dependabot bot requested a review from GMishx as a code owner July 7, 2025 02:22
@dependabot dependabot bot added the java Pull requests that update Java code label Jul 7, 2025
@GMishx
Copy link
Copy Markdown
Member

GMishx commented Jul 8, 2025

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/maven/com.squareup.okhttp3-okhttp-5.0.0 branch from 0dea65c to 0ec4845 Compare July 8, 2025 05:09
@GMishx
Copy link
Copy Markdown
Member

GMishx commented Jul 8, 2025

The compilation is failing due to conflicting dependency version of OkHTTP (4.12.0) used by com.ibm.cloud:sdk-core:jar:9.24.1 and OkHTTP (5.0.0) upgraded by this PR. Would have to wait for Cloudant to upgrade to 5.0.0 to fix the build issue.

In the meantime, I have upgraded the JUnit from 4 to 5 in preparation (as okhttp5 now has support for it)

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Jul 14, 2025

A newer version of com.squareup.okhttp3:okhttp exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@GMishx
Copy link
Copy Markdown
Member

GMishx commented Jan 23, 2026

Cloudant sdk core has been updated with the okhttp version 5. Waiting for our dependency cloudant sdk core to release with the new version after this PR: IBM/cloudant-java-sdk#812

dependabot bot and others added 2 commits April 3, 2026 11:46
@dependabot @GMishx
chore(deps): bump com.squareup.okhttp3:okhttp from 4.12.0 to 5.0.0
d9ddbd2 
Bumps [com.squareup.okhttp3:okhttp](https://github.com/square/okhttp) from 4.12.0 to 5.0.0.
- [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md)
- [Commits](square/okhttp@parent-4.12.0...parent-5.0.0)

---
updated-dependencies:
- dependency-name: com.squareup.okhttp3:okhttp
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@GMishx
fix(junit): upgrade to JUnit5
6342052 
Signed-off-by: Gaurav Mishra <mishra.gaurav@siemens.com>
@GMishx GMishx force-pushed the dependabot/maven/com.squareup.okhttp3-okhttp-5.0.0 branch 2 times, most recently from 73454bc to bcc0d47 Compare April 3, 2026 06:57
@GMishx
Copy link
Copy Markdown
Member

GMishx commented Apr 3, 2026

Cloudant made new release with updated okhttp, so updated cloudant and okhttp now have a quirk, so put a fix for it

https://github.com/square/okhttp/blob/6f053fe03ec5edcd1ce442d7a70883765b652f52/README.md#maven-and-jvm-projects

@GMishx
chore(okhttp): update to 5.3.2
4b31eba 
Since okhttp 5.2, you need to choose `okhttp-jvm` or `okhttp-android`.

https://github.com/square/okhttp/blob/
6f053fe03ec5edcd1ce442d7a70883765b652f52/
README.md#maven-and-jvm-projects

Signed-off-by: Gaurav Mishra <mishra.gaurav@siemens.com>
@GMishx GMishx force-pushed the dependabot/maven/com.squareup.okhttp3-okhttp-5.0.0 branch from bcc0d47 to 4b31eba Compare April 3, 2026 07:01
@GMishx GMishx added the ready ready to merge label Apr 3, 2026
@GMishx
fix(test): align JUnit 5 and resolve WireMock
8dbee94 
* Prioritized custom `junit-bom` properties over Spring Boot defaults.
* Removed hardcoded JUnit versions from child rest sub-modules to
  universally respect the consolidated `1.13.3`/`5.13.3` configuration.
* Swapped `org.wiremock:wiremock` for the
  `org.wiremock:wiremock-standalone` artifact uniformly across the root
  and child module deployments (`backend-vmcomponents`, `http-support`,
  `client`) which officially restores the missing Jetty 11 integration
  mandatory for testing standalone APIs in WireMock 3.x.

Signed-off-by: Gaurav Mishra <mishra.gaurav@siemens.com>
@GMishx GMishx force-pushed the dependabot/maven/com.squareup.okhttp3-okhttp-5.0.0 branch from 0546145 to 8dbee94 Compare April 3, 2026 09:24
@GMishx GMishx merged commit 8c5d119 into main Apr 3, 2026
3 checks passed
@GMishx GMishx deleted the dependabot/maven/com.squareup.okhttp3-okhttp-5.0.0 branch April 3, 2026 09:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@heliocastro heliocastro Awaiting requested review from heliocastro

@GMishx GMishx Awaiting requested review from GMishx GMishx is a code owner

@KoukiHama KoukiHama Awaiting requested review from KoukiHama KoukiHama is a code owner

@arunazhakesan arunazhakesan Awaiting requested review from arunazhakesan arunazhakesan is a code owner

@ag4ums ag4ums Awaiting requested review from ag4ums ag4ums is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code ready ready to merge

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@GMishx