fix(deps): update dependency net.bytebuddy:byte-buddy to v1.18.11

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
net.bytebuddy:byte-buddy (source)	1.12.9 → 1.18.11

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

raphw/byte-buddy (net.bytebuddy:byte-buddy)

v1.18.11

• Add SBOM to published artifacts.
• Check for traversable paths injected into class files as a rather hypothetical attack vector.

v1.18.10

• Delay change of default for unsage use to Java 26 and improve error message.

v1.18.9

• Disable use of Unsafe by default when Java 25or newer is discovered.
• Check for escape when creating folders in Plugin.Engine.
• Improve OpenJ9 attachment.
• Avoid null pointer on missing annotation types.
• Improve diagnostics for external agent attachment.
• Improve on Gradle context discovery.
• Support Android libraries on AGP9 or newer.
• Update ASM.

v1.18.8

• Improve support for repeatable builds.
• Fix reordering of exception table in type initializers when instrumenting.

v1.18.7

• Introduce new versioning concept with -jdk5 suffix for backwards-compatible jar and Java 8 baseline for regular jar.

v1.18.5

• Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted.
• Add super classes to hash code / equals computation in Advice that were missing.

v1.18.4

• Add support for new build description in Android 9.

v1.18.3

• Avoid using Class File API when Byte Buddy is loaded on the boot loader where multi-release jars are not available.
• Add additional safety when processing class files with illegally formed parameters.
• Update to latest ASM.

v1.18.2

• Support modifiers for value classes in Valhalla builds.
• Improve use of build cache in Gradle.

v1.18.1

• Support dynamic attach on Windows ARM64 by shipping a native attach_hotspot_windows library for win32-aarch64.

v1.18.0

• Add support for module-info class files and ModuleDescriptions.
• Allow for manipulating module information using the ByteBuddy API.

v1.17.8

• Avoid use of types that are deprecated as of Java 26.
• Include ASM 9.9 that offers ASM support for Java 26.
• Make sure that generated code internal to Byte Buddy supports CDS if available.
• Update version of ASM to JDK Class File API bridge to fix some minor bugs related to type annotations.

v1.17.7

• Specify correct JVM environment for Android builds when using the Gradle plugin.
• Avoid recomputing the size of a parameter list for performance reasons after measuring the significant impact.
• Correct validation of JVM names to avoid breaking when Java names are not allowed while JVM names are, with Kotlin and others.

v1.17.6

• Add convenience wrapper for ResettableClassFileTransformer that implicitly delegates to correct transformer method.
• Add filter for deduplicate fields and methods in class file.
• Add missing static requirement of Spotbugs annotations to module descriptors.
• Add LazinessMode for TypePool and add convenience support to AgentBuilder.
• Fix source jars for multi-version release to contain duplicated source.

v1.17.5

• Update ASM to version 9.8 to support Java 25 using ASM reader and writer.
• Include AnnotationRemoval visitor for removing or replacing annotations.

v1.17.4

• Add SafeVarargs plugin.
• Fix OSGi declaration for byte-buddy-agent.

v1.17.3

• Fix bug in ASM to Class File API bridge handling tableswitch instructions.
• Add plugin for adding SafeVarargs annotations.
• Further generify MemberSubstitution API.

v1.17.2

• Update Class File API integration to include support for several omitted byte codes.
• Adjust attach API emulation for OpenJ9 to not create subfolder if temporary folder is set explicitly.

v1.17.1

• Fix bug in MemberSubstitution were argument indices were resolved by one digit off.
• Update Class File API integration to avoid that parameter annotations are lost.

v1.17.0

• Assure that implicit choice for class reader and class writer are always symmetric with regard to internal representation.
• Retrofit MemberSubstitution to also allow for intercepting invokedynamic instructions.
• Introduce @Handle annotations to allow for injecting constant pool-stored method handle in Advice, MemberSubstitution and MethodDelegation.
• Introduce @DynamicConstant annotations to allow for injecting constant pool-stored dynamic constants in Advice, MemberSubstitution and MethodDelegation.

v1.16.1

• Correct reflective activation of Class File API.
• Reject array descriptors that are not well-formed in TypePool.

v1.16.0

• Allow for erasure of types of bootstrapped methods in Advice within instrumented class.
• Rework Advice post-processing to allow for erasure of bootstrapped methods.
• Fix missing application of hashCode/equals plugin for Java 8 code.
• Include support for JDK Class File API.
• Allow Plugin.Engine to retain folders.

v1.15.11

• Avoid dependency of CachedReturnPlugin on precompiled class files.
• Add NOP instruction when Advice is used on void methods as those might be empty which results on a frame being written to the same offset, causing an exception.
• Allow Plugin.Engine to link files instead of copying.
• Adjust validator code to avoid compiler bug that was reported by multiple users.
• Allow injection of class path as File[] to Plugin constructors.
• Allow for configuring variants when using the Android Gradle plugin.

v1.15.10

• Fix Java 8 patterns for multi-release jars to avoid that inner classes are excluded.

v1.15.9

• Additional release after time out during previous Gradle plugin release.

v1.15.8

• Extend ClassInjector API to support lazy resolution of class files.
• Extend DynamicType API to support lazy resolution of auxiliary types.
• Extend AgentBuilder.Transformer.ForAdvice to support injection of new classes by their name.

v1.15.7

• Additional release after time out during previous Gradle plugin release.

v1.15.5

• Publish Byte Buddy and Byte Buddy agent artifacts as multi-release jars to support CDS and faster validation.

v1.15.4

• Add non-experimental support for Java 24.

v1.15.3

• Treat multi-release class files that are newer than the supported version as regular resources.
• Allow overriding the multi-release class file version from Maven and Gradle plugin.
• Correctly resolve multi-release class files in Android.

v1.15.2

• Add support for multi-release JAR files in ClassFileLocators and Plugin.Engine.Default.
• Add Gradle task for transforming multiple jar files with ByteBuddyJarsTask.
• Avoid validation of JarFile when extracting individual entries.
• Rework discovery in ByteBuddyMojo.

v1.15.1

• Avoid dependency of CachedReturnPlugin on precompiled class files.
• Add NOP instruction when Advice is used on void methods as those might be empty which results on a frame being written to the same offset, causing an exception.
• Allow Plugin.Engine to link files instead of copying.
• Adjust validator code to avoid compiler bug that was reported by multiple users.
• Allow injection of class path as File[] to Plugin constructors.
• Allow for configuring variants when using the Android Gradle plugin.

v1.15.0

• Introduce AsmClassWriter and AsmClassReader abstractions that allow for plugging different implementations of readers and writers.
• Add configuration extension to the Android Gradle plugin and make it behave like regular Gradle plugin with standard configuration.
• Throw TypeNotPresentException upon discovering undeclared type variables as it was recently fixed on the JVM.

v1.14.19

• Add Maven Mojo for transforming jars and for transforming dependencies folder.
• Better error handling for unresolved type variables.
• Allow loading arguments of the instrumented method in MemberSubstitution.
• Fix checks for method visibility.

v1.14.18

• Avoid verification error if constructor advice meats dropped implicit this frame and throw exception during instrumentation instead.
• Add support to resolve ByteBuddyAgent from non-obfuscated name if obfuscation is used.
• Make sure CircularityLock implementations never load classes during locking.
• Offer use of istat if stat command is not available for emulated attachment.
• Avoid locking entire class loader when child-first class loader loads shadowed class and parallel class loading is supported.

v1.14.17

• Avoid crashing of Android plugin when there are duplicate files for licenses or license notices.

v1.14.16

• Update ASM and introduce support for Java 23.

v1.14.15

• Allow attaching from root on J9.

v1.14.14

• Adjust type validation to accept additional names that are legal in the class file format.
• Fix dynamic attach on Windows when a service user is active.
• Avoid failure when using Android's strict mode.

v1.14.13

• Avoid resolving type variables when generic type processing is disabled.
• Improve error message for Byte Buddy agent external attach.
• Fix build for modular jars when using later version than Java 8.

v1.14.12

• Pin proxy class file version to avoid implicit changes when using Graal native image.
• Add support for Java 23.
• Add missing @MaybeNull annotation.

v1.14.11

• Adjusts Gradle plugin to support Gradle 8.4 without warnings.
• Avoid blurry exception on build plugin for fail fast.

v1.14.10

• Add lazy facade to default TypePool in AgentBuilder to avoid parsing of types ignored by name.
• Avoid module info classes in Android plugin.

v1.14.9

• Update ASM to version 9.6
• Support Android plugin to support APG version 7.4

v1.14.8

• Correctly read versions from class file that would use both bytes.
• Fix Byte Buddy Gradle plugin for Gradle 8.3+.
• Correct field and static method access on subtypes in MemberSubstitution.
• Support APK 7.4+ versions in Byte Buddy Gradle for Android plugin.

v1.14.7

• Correctly read minor version from class file.
• Catch type resolution errors when applying Plugin.Engine.

v1.14.6

• Add PatchMode.SUBSTITUTE and ResettableClassFileTransformer.Substitutable for in-order patching.
• Allow for explicit specification og differential matcher when patching an AgentBuilder.
• Add platform loader to locator for build plugins.
• Correctly resolve accessors for fields with capitalized first letter.
• Make jars for Android read-only as newer versions require it.

v1.14.5

• Avoid use of location if agent argument separator is contained.
• Allow failure of member substitution if no element is separated.
• Allow retry in case of parallel class injection.

v1.14.4

• Include instrumented type and auxiliary types in TypePool that is passed to TypeWriter.

v1.14.3

• Make MethodGraph.Compiler failsafe when processing incomplete methods.
• Update ASM.

v1.14.2

• Fix offset mapping for local variable array remapping in Advice.
• Add possibility to specify an index for skipOn and repeatOn which resolves the checked value from a returned array.

v1.14.1

• Add Maven Mojo for transforming jars and for transforming dependencies folder.
• Better error handling for unresolved type variables.
• Allow loading arguments of the instrumented method in MemberSubstitution.
• Fix checks for method visibility.

v1.14.0

• Add Step.Factory.ForDelegation in MemberSubstitution that allows for delegation similar to MethodDelegation but in-code.
• Add handlers for MethodDelegation and Advice that leverage method handles for field access and self-invocation.
• Add Step.Factory for type assignment that allows casting the return value from a previous step to another type.
• Avoid usage of URL class loader as it is deprecated, and use newer method if available.

v1.13.0

• Complete MemberSubstitution API which now retains the original instruction for invocation.
• Allow excluding methods from a MethodGraph.Compiler using an ElementMatcher.
• Add a filtering ClassFileLocator.
• Add a matcher for a type's ClassFileVersion.
• Unify resolution of constant values by introducing a ConstantValue API.
• Do not exclude ToThrown assignment on void methods.
• Allow constructors as target in MemberSubstitution.

v1.12.23

• Allow using ClassFileLocator to AgentBuilder to append boot-injected types.
• Add RenamingPlugin that allows for migration of names using the build plugin.
• Add wrapper method to ForAdvice transformation to allow for easier wrapping.
• Fix Gradle plugin raw folder and improve detection of unused configurations.
• Add additional default Steps to MemberSubstitution to reduce need for custom bytecode generation.

v1.12.22

• Support MethodHandle and MethodType in Advice.Origin annotation.
• Support MethodHandles.Lookup in Origin and Advice.Origin annotations.
• Use modern API for Gradle Android API, if available, to avoid now failing cast.

v1.12.21

• Create a Gradle source set for each JVM build automatically to reduce boilerplate.
• Fix Gradle plugin class loading to use correct class loader.
• Use updated release plugin to avoid outdated timestamp in jar.

v1.12.20

• Avoid stack overflow error when type variable cannot be resolve during error message generation.
• Allow dumping error message to file when remote attach fails.

v1.12.19

• Avoid possible lock through circular class loading of TypeDescription subtypes.
• Avoid access error when using unsafe API on Java 17 with an active security manager.
• Close URL class loader used in Gradle plugin.

v1.12.18

• Allow writing to field from enter Advice in constructor, as byte code allows it.
• Refactor Android plugin processor to avoid skipping local classes.
• Improve staleness filter for Maven plugin.
• Fix incorrect resolution of custom bound invokedynamic values in Advice.

v1.12.17

• Use decorating EntryPoint in Android Gradle plugin.
• Introduce PatchMode on AgentBuilder patching to allow for control over overlap.

v1.12.16

• Fix Gradle release script to publish plugin.

v1.12.14

• Add wrap method to DynamicType.Builder that allows for the representation of a dynamic type via a ClassVisitor.
• Add ClassVisitorFactory that allows to translate between Byte Buddy's, the original, or other shaded representations of ASM.
• Fix visibility check for types in the default package.
• Return correct value for types in the default package.

v1.12.13

• Avoid duplicate application of Byte Buddy Maven plugin.
• Allow for class path discovery of Plugins when using Maven.
• Fix build cache when using Byte Buddy Gradle plugin.
• Allow Plugins to define new types prior to transformation.

v1.12.12

• Use correct annotation in Byte Buddy Gradle plugin.
• Correctly resolve generified anonymous/local types that are declared within a method.

v1.12.11

• Remove use of thread-local to guarantee Loom compatibility.
• Allow usage of byte-buddy-parent as BOM for imports.
• Add convenience for Maven to disable type validation on entry point.
• Allow Gradle plugin to consume pluginName property and discoverySet to only load plugins in the plugin class loader.

v1.12.10

• Correctly resolve temporary folder, if custom folder is set, on Linux during emulated attach.
• Attempt guessing if Graal automatic configuration agent for native image is run.
• Avoid hard-coded dependencies to classes of java.management module.
• Do not include OSGi info in Byte Buddy source module.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.