Skip to content

chore(deps): bump Gradle wrapper to 9.9.1 - #2470

Open
kikoso wants to merge 1 commit into
mainfrom
chore/gradle-9.9.1
Open

kikoso wants to merge 1 commit into
mainfrom
chore/gradle-9.9.1

Conversation

@kikoso

@kikoso kikoso commented Nov 11, 2026

Copy link
Copy Markdown
Collaborator

Bumps the Gradle wrapper from 9.8.2 to 9.9.1, which fixes GHSA-3cfg-jpcr-gfp3 (critical): version catalog values were copied into the generated accessors without escaping, so a crafted version, coordinate or plugin id could run code as soon as the settings are evaluated, including on IDE sync.

This repository doesn't import any published catalog and no .toml file here contains */ or \u, so this is a precaution rather than a fix for a known problem. Generated with ./gradlew wrapper --gradle-version 9.9.1 --distribution-type bin.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant