Update dependency gradle to v7.6.4

[renovate]

This PR contains the following updates:

Package	Update	Change
gradle (source)	patch	7.6 -> 7.6.4

---

Release Notes

gradle/gradle (gradle)

v7.6.4: 7.6.4

Compare Source

This is a patch release for 7.6. We recommend using 7.6.4 instead of 7.6.

Read the Release Notes

Upgrade instructions

Switch your build to use Gradle 7.6.4 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.4

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v7.6.3: 7.6.3

Compare Source

This is a patch release for 7.6. We recommend using 7.6.3 instead of 7.6.

This release addresses two security vulnerabilities:

• Incorrect permission assignment for symlinked files used in copy or archiving operations
• Possible local text file exfiltration by XML External entity injection

It also fixes the following issues:

• #​25781 Backport finalized task performance fix to 7.6.x
• #​25802 Backport cgroups fix to 7.6.x

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 7.6.3 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.3

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.3.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v7.6.2: 7.6.2

Compare Source

This is a patch release for 7.6. We recommend using 7.6.2 instead of 7.6.

This release addresses two security vulnerabilities:

• Dependency cache path traversal
• Path traversal vulnerabilities in handling of Tar archives

It also fixes the following issues:

• #​23201 Backport dependency upgrades to 7.x
• #​23202 Backport Scala incremental compilation fixes
• #​23325 Backport JSoup update to resolve CVE-2022-36033
• #​23458 Backport JUnit5 dynamic test logging bug fix
• #​23681 Dependency graph resolution: Equivalent excludes can cause un-necessary graph mutations [backport 7.x]
• #​23922 Backport "Use Compiler API data for incremental compilation after a failure" to 7.x
• #​23951 Exclude rule merging: missing optimization [Backport 7.x]
• #​24132 Extending an already resolved configuration no longer works correctly [backport 7.x]
• #​24234 7.6.1 breaks gradle-consistent-versions
• #​24390 Gradle 7.4 fails on multi release jar's with JDK 19 code
• #​24439 Gradle complains about invalid tool chain - picking up the source package location - it should just ignore them [Backport]
• #​24443 Maven artifact referenced only in dependency constraints raises IllegalStateException: Corrupt serialized resolution result [backport]
• #​24901 Backport fix for test exception that cannot be deserialized to 7.x

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 7.6.2 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.2

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.2.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v7.6.1: 7.6.1

Compare Source

This is a patch release for 7.6. We recommend using 7.6.1 instead of 7.6.

It fixes the following issues:

• #​19065 Platform dependencies not possible in dependency block of test suite plugin
• #​22688 Increased memory usage (with -p option)
• #​22796 Building gradle itself fails during toolchain download: permission denied copying a file within .gradle/jdks
• #​22875 Regression with 7.6: @​​pom artifact in JVM library project is no longer found
• #​22937 Remove safe credentials reference
• #​22973 Kotlin MPP plugin broken with Gradle 7.6 due to signature change in TestResultProcessor
• #​23016 toolchainManagement.jvm.javaRepositories should not expose the full surface of NamedDomainObjectList
• #​23025 Back-port toolchain related fixes to 7.6.1
• #​23053 Auto-provisioning/auto-detection of IBM Semeru toolchains is broken with Gradle 7.6
• #​23074 Docs: Build Lifecycle starts halfway through a point
• #​23096 Classifiers of version catalog are discarded while copied to anothor dependency
• #​23111 Ant closures are broken with Gradle 7.6
• #​23178 Mention the Foojay Toolchain Resolver plugin in the Gradle manual
• #​23215 Gradle 7.6: high memory usage (android project)
• #​23224 Backport to 7.6.1 "Fix for Incremental compilation with modules"
• #​23294 "Unable to make progress running work" together with --continue and failing tasks (Backport to 7.6.1)
• #​23555 Improve Toolchain related deprecation nagging in 7.6
• #​23894 Update EOL policy
• #​23910 Backport trusting only full GPG keys in dependency verification [Backport 7.6.1]
• #​23941 Typo in v7.6 docs about disabling_the_daemon
• #​23985 Resolving of manually created configuration creates a ResolveException

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 7.6.1 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.1

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.1.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

---

Configuration

📅 Schedule: Branch creation - "after 7am and before 11am every weekday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (7.6.4). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.