Update OkHttp & Okio - #4850

Open
solrbot wants to merge 2 commits into
apache:mainfrom
solrbot:renovate/okhttp-and-okio
Open

Update OkHttp & Okio#4850
solrbot wants to merge 2 commits into
apache:mainfrom
solrbot:renovate/okhttp-and-okio

Conversation

@solrbot

@solrbotsolrbot commented Sep 1, 2026

Copy link
Copy Markdown
Collaborator

This PR contains the following updates:

PackageTypeUpdateChange
com.squareup.okio:okiodependenciesminor3.17.0 → 3.18.1
com.squareup.okhttp3:okhttp-jvm (source)dependenciesminor5.4.0 → 5.5.0
com.squareup.okhttp3:okhttp (source)dependenciesminor5.4.0 → 5.5.0

Release Notes

lysine-dev/okio (com.squareup.okio:okio)

v3.18.1

2026-07-28

  • Fix: Restore binary-compatibility with Okio 3.17.x for Kotlin/Native users. When we introduced
    the new base64() function, we inadvertently changed the binary signature! Ugh! This is now
    fixed and we've automated binary-compatibility checking for Kotlin/Native going forward.

v3.18.0

2026-07-21

  • Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.
  • Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a
    FileNotFoundException.
  • Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in
    NodeJS, causing our WasiFileSystem to be unable to access files!
  • New: Optionally ignore whitespace when decoding hexadecimal.
  • New: Optionally omit padding when encoding Base64.
  • New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte,
    UShort and ULong. Also add support for unsigned and little-endian.
  • New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.
  • New: Source.limit() returns a wrapped source with a strict limit on how many bytes are
    returned.
  • New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.
lysine-dev/okhttp (com.squareup.okhttp3:okhttp-jvm)

v5.5.0

2026-08-16

This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature
improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s
Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re
looking at. With ECH, the router observes only the IP address. This additional privacy is most
effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.

This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37,
released June 2026). When other TLS stacks add ECH support, we'll integrate them.

ECH took a lot of work to implement because the encryption keys are published over DNS in the
[HTTPS resource record], and we needed to write new code to fetch these records. This release
includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not
just IP addresses!), asynchronous streaming results, and in-memory caching.

To opt in, you can use DnsOverHttps:

// DnsOverHttps itself uses OkHttpClient. Build both clients upon the// same bootstrap client so they share a connection pool and dispatcher.val bootstrapClient =OkHttpClient()
// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.val client = bootstrapClient.newBuilder()
.dns(DnsOverHttps.Builder()
.client(bootstrapClient)
.url("https://1.1.1.1/dns-query".toHttpUrl())
.build())
.build()

You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are
thwarted because its DNS queries are not encrypted by default.

// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.val client =OkHttpClient.Builder()
.dns(AndroidDns())
.build()
  • New: OkHttp artifacts are now signed with our [new signing key]. This project and three sibling
    projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
  • Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
  • Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
  • Fix: Closing a multipart part's sink no longer closes the entire request body.
  • Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts
    weren’t applied correctly.
  • Fix: Follow [RFC 1008]'s requirements for HTTP QUERY redirects.
  • Fix: Fall back to no proxy when the system proxy selector throws. Previously this would cause
    the HTTP call to crash.
  • Upgrade: [Okio 3.18.1][okio_3_18_1].

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 9am on the first day of the month"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot

@solrbotsolrbot added the exempt-stale Prevent a PR from going stale label Sep 1, 2026
@solrbotsolrbot added this to the 10.x milestone Sep 1, 2026
@solrbot

solrbot commented Sep 1, 2026

Copy link
Copy Markdown
CollaboratorAuthor

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️Warning: custom changes will be lost.

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

admin-uidependenciesDependency upgradesexempt-stalePrevent a PR from going stalemodule:jwt-authmodule:language-modelstool:build

Projects

None yet

Milestone

10.x

Development

Successfully merging this pull request may close these issues.

1 participant

@solrbot
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
Update OkHttp & Okio - #4850
Open
solrbot wants to merge 2 commits into
apache:mainfrom 
solrbot:renovate/okhttp-and-okio
Open
Update OkHttp & Okio#4850
solrbot wants to merge 2 commits into
apache:mainfrom 
solrbot:renovate/okhttp-and-okio
Conversation
@solrbot
@solrbotsolrbot
commented
Sep 1, 2026

Copy link


Copy Markdown

Collaborator
This PR contains the following updates:
PackageTypeUpdateChange
com.squareup.okio:okiodependenciesminor3.17.0 → 3.18.1
com.squareup.okhttp3:okhttp-jvm (source)dependenciesminor5.4.0 → 5.5.0
com.squareup.okhttp3:okhttp (source)dependenciesminor5.4.0 → 5.5.0
Release Notes
lysine-dev/okio (com.squareup.okio:okio)
v3.18.1
2026-07-28
  • Fix: Restore binary-compatibility with Okio 3.17.x for Kotlin/Native users. When we introduced
    
the new base64() function, we inadvertently changed the binary signature! Ugh! This is now
    
fixed and we've automated binary-compatibility checking for Kotlin/Native going forward.
v3.18.0
2026-07-21
  • Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.
  • Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a
    FileNotFoundException.
  • Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in
    
NodeJS, causing our WasiFileSystem to be unable to access files!
  • New: Optionally ignore whitespace when decoding hexadecimal.
  • New: Optionally omit padding when encoding Base64.
  • New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte,
    UShort and ULong. Also add support for unsigned and little-endian.
  • New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.
  • New: Source.limit() returns a wrapped source with a strict limit on how many bytes are
    
returned.
  • New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.
lysine-dev/okhttp (com.squareup.okhttp3:okhttp-jvm)
v5.5.0
2026-08-16
This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature

improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s

Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re

looking at. With ECH, the router observes only the IP address. This additional privacy is most

effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.
This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37,

released June 2026). When other TLS stacks add ECH support, we'll integrate them.
ECH took a lot of work to implement because the encryption keys are published over DNS in the

[HTTPS resource record], and we needed to write new code to fetch these records. This release

includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not

just IP addresses!), asynchronous streaming results, and in-memory caching.
To opt in, you can use DnsOverHttps:
// DnsOverHttps itself uses OkHttpClient. Build both clients upon the// same bootstrap client so they share a connection pool and dispatcher.val bootstrapClient =OkHttpClient()
// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.val client = bootstrapClient.newBuilder()
.dns(DnsOverHttps.Builder()
.client(bootstrapClient)
.url("https://1.1.1.1/dns-query".toHttpUrl())
.build())
.build()
You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are

thwarted because its DNS queries are not encrypted by default.
// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.val client =OkHttpClient.Builder()
.dns(AndroidDns())
.build()
  • New: OkHttp artifacts are now signed with our [new signing key]. This project and three sibling
    
projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
  • Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
  • Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
  • Fix: Closing a multipart part's sink no longer closes the entire request body.
  • Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts
    
weren’t applied correctly.
  • Fix: Follow [RFC 1008]'s requirements for HTTP QUERY redirects.
  • Fix: Fall back to no proxy when the system proxy selector throws. Previously this would cause
    
the HTTP call to crash.
  • Upgrade: [Okio 3.18.1][okio_3_18_1].
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • "before 9am on the first day of the month"
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Renovate Bot
@solrbotsolrbot
added
the 
exempt-stale
Prevent a PR from going stale
label
Sep 1, 2026
@solrbotsolrbot
added this to the 10.x milestone
Sep 1, 2026
@solrbot
solrbot
commented
Sep 1, 2026

Copy link


Copy Markdown

CollaboratorAuthor
Edited/Blocked Notification
Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.
You can manually request rebase by checking the rebase/retry box above.
⚠️Warning: custom changes will be lost.
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

admin-uidependenciesDependency upgradesexempt-stalePrevent a PR from going stalemodule:jwt-authmodule:language-modelstool:build

Projects


None yet


Milestone

10.x

Development

Successfully merging this pull request may close these issues.

1 participant

@solrbot

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Update OkHttp & Okio - #4850
Open
solrbot wants to merge 2 commits into
apache:mainfrom 
solrbot:renovate/okhttp-and-okio
Open
Update OkHttp & Okio#4850
solrbot wants to merge 2 commits into
apache:mainfrom 
solrbot:renovate/okhttp-and-okio
Conversation
@solrbot
@solrbotsolrbot
commented
Sep 1, 2026

Copy link


Copy Markdown

Collaborator
This PR contains the following updates:
PackageTypeUpdateChange
com.squareup.okio:okiodependenciesminor3.17.0 → 3.18.1
com.squareup.okhttp3:okhttp-jvm (source)dependenciesminor5.4.0 → 5.5.0
com.squareup.okhttp3:okhttp (source)dependenciesminor5.4.0 → 5.5.0
Release Notes
lysine-dev/okio (com.squareup.okio:okio)
v3.18.1
2026-07-28
  • Fix: Restore binary-compatibility with Okio 3.17.x for Kotlin/Native users. When we introduced
    
the new base64() function, we inadvertently changed the binary signature! Ugh! This is now
    
fixed and we've automated binary-compatibility checking for Kotlin/Native going forward.
v3.18.0
2026-07-21
  • Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.
  • Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a
    FileNotFoundException.
  • Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in
    
NodeJS, causing our WasiFileSystem to be unable to access files!
  • New: Optionally ignore whitespace when decoding hexadecimal.
  • New: Optionally omit padding when encoding Base64.
  • New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte,
    UShort and ULong. Also add support for unsigned and little-endian.
  • New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.
  • New: Source.limit() returns a wrapped source with a strict limit on how many bytes are
    
returned.
  • New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.
lysine-dev/okhttp (com.squareup.okhttp3:okhttp-jvm)
v5.5.0
2026-08-16
This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature

improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s

Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re

looking at. With ECH, the router observes only the IP address. This additional privacy is most

effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.
This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37,

released June 2026). When other TLS stacks add ECH support, we'll integrate them.
ECH took a lot of work to implement because the encryption keys are published over DNS in the

[HTTPS resource record], and we needed to write new code to fetch these records. This release

includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not

just IP addresses!), asynchronous streaming results, and in-memory caching.
To opt in, you can use DnsOverHttps:
// DnsOverHttps itself uses OkHttpClient. Build both clients upon the// same bootstrap client so they share a connection pool and dispatcher.val bootstrapClient =OkHttpClient()
// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.val client = bootstrapClient.newBuilder()
.dns(DnsOverHttps.Builder()
.client(bootstrapClient)
.url("https://1.1.1.1/dns-query".toHttpUrl())
.build())
.build()
You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are

thwarted because its DNS queries are not encrypted by default.
// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.val client =OkHttpClient.Builder()
.dns(AndroidDns())
.build()
  • New: OkHttp artifacts are now signed with our [new signing key]. This project and three sibling
    
projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
  • Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
  • Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
  • Fix: Closing a multipart part's sink no longer closes the entire request body.
  • Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts
    
weren’t applied correctly.
  • Fix: Follow [RFC 1008]'s requirements for HTTP QUERY redirects.
  • Fix: Fall back to no proxy when the system proxy selector throws. Previously this would cause
    
the HTTP call to crash.
  • Upgrade: [Okio 3.18.1][okio_3_18_1].
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • "before 9am on the first day of the month"
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Renovate Bot
@solrbotsolrbot
added
the 
exempt-stale
Prevent a PR from going stale
label
Sep 1, 2026
@solrbotsolrbot
added this to the 10.x milestone
Sep 1, 2026
@solrbot
solrbot
commented
Sep 1, 2026

Copy link


Copy Markdown

CollaboratorAuthor
Edited/Blocked Notification
Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.
You can manually request rebase by checking the rebase/retry box above.
⚠️Warning: custom changes will be lost.
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

admin-uidependenciesDependency upgradesexempt-stalePrevent a PR from going stalemodule:jwt-authmodule:language-modelstool:build

Projects


None yet


Milestone

10.x

Development

Successfully merging this pull request may close these issues.

1 participant

@solrbot

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Update OkHttp & Okio - #4850
Open
solrbot wants to merge 2 commits into
apache:mainfrom 
solrbot:renovate/okhttp-and-okio
Open
Update OkHttp & Okio#4850
solrbot wants to merge 2 commits into
apache:mainfrom 
solrbot:renovate/okhttp-and-okio
Conversation
@solrbot
@solrbotsolrbot
commented
Sep 1, 2026

Copy link


Copy Markdown

Collaborator
This PR contains the following updates:
PackageTypeUpdateChange
com.squareup.okio:okiodependenciesminor3.17.0 → 3.18.1
com.squareup.okhttp3:okhttp-jvm (source)dependenciesminor5.4.0 → 5.5.0
com.squareup.okhttp3:okhttp (source)dependenciesminor5.4.0 → 5.5.0
Release Notes
lysine-dev/okio (com.squareup.okio:okio)
v3.18.1
2026-07-28
  • Fix: Restore binary-compatibility with Okio 3.17.x for Kotlin/Native users. When we introduced
    
the new base64() function, we inadvertently changed the binary signature! Ugh! This is now
    
fixed and we've automated binary-compatibility checking for Kotlin/Native going forward.
v3.18.0
2026-07-21
  • Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.
  • Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a
    FileNotFoundException.
  • Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in
    
NodeJS, causing our WasiFileSystem to be unable to access files!
  • New: Optionally ignore whitespace when decoding hexadecimal.
  • New: Optionally omit padding when encoding Base64.
  • New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte,
    UShort and ULong. Also add support for unsigned and little-endian.
  • New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.
  • New: Source.limit() returns a wrapped source with a strict limit on how many bytes are
    
returned.
  • New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.
lysine-dev/okhttp (com.squareup.okhttp3:okhttp-jvm)
v5.5.0
2026-08-16
This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature

improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s

Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re

looking at. With ECH, the router observes only the IP address. This additional privacy is most

effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.
This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37,

released June 2026). When other TLS stacks add ECH support, we'll integrate them.
ECH took a lot of work to implement because the encryption keys are published over DNS in the

[HTTPS resource record], and we needed to write new code to fetch these records. This release

includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not

just IP addresses!), asynchronous streaming results, and in-memory caching.
To opt in, you can use DnsOverHttps:
// DnsOverHttps itself uses OkHttpClient. Build both clients upon the// same bootstrap client so they share a connection pool and dispatcher.val bootstrapClient =OkHttpClient()
// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.val client = bootstrapClient.newBuilder()
.dns(DnsOverHttps.Builder()
.client(bootstrapClient)
.url("https://1.1.1.1/dns-query".toHttpUrl())
.build())
.build()
You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are

thwarted because its DNS queries are not encrypted by default.
// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.val client =OkHttpClient.Builder()
.dns(AndroidDns())
.build()
  • New: OkHttp artifacts are now signed with our [new signing key]. This project and three sibling
    
projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
  • Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
  • Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
  • Fix: Closing a multipart part's sink no longer closes the entire request body.
  • Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts
    
weren’t applied correctly.
  • Fix: Follow [RFC 1008]'s requirements for HTTP QUERY redirects.
  • Fix: Fall back to no proxy when the system proxy selector throws. Previously this would cause
    
the HTTP call to crash.
  • Upgrade: [Okio 3.18.1][okio_3_18_1].
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • "before 9am on the first day of the month"
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Renovate Bot
@solrbotsolrbot
added
the 
exempt-stale
Prevent a PR from going stale
label
Sep 1, 2026
@solrbotsolrbot
added this to the 10.x milestone
Sep 1, 2026
@solrbot
solrbot
commented
Sep 1, 2026

Copy link


Copy Markdown

CollaboratorAuthor
Edited/Blocked Notification
Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.
You can manually request rebase by checking the rebase/retry box above.
⚠️Warning: custom changes will be lost.
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

admin-uidependenciesDependency upgradesexempt-stalePrevent a PR from going stalemodule:jwt-authmodule:language-modelstool:build

Projects


None yet


Milestone

10.x

Development

Successfully merging this pull request may close these issues.

1 participant

@solrbot

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
Update OkHttp & Okio - #4850
Open
solrbot wants to merge 2 commits into
apache:mainfrom 
solrbot:renovate/okhttp-and-okio
Open
Update OkHttp & Okio#4850
solrbot wants to merge 2 commits into
apache:mainfrom 
solrbot:renovate/okhttp-and-okio
Conversation
@solrbot
@solrbotsolrbot
commented
Sep 1, 2026

Copy link


Copy Markdown

Collaborator
This PR contains the following updates:
PackageTypeUpdateChange
com.squareup.okio:okiodependenciesminor3.17.0 → 3.18.1
com.squareup.okhttp3:okhttp-jvm (source)dependenciesminor5.4.0 → 5.5.0
com.squareup.okhttp3:okhttp (source)dependenciesminor5.4.0 → 5.5.0
Release Notes
lysine-dev/okio (com.squareup.okio:okio)
v3.18.1
2026-07-28
  • Fix: Restore binary-compatibility with Okio 3.17.x for Kotlin/Native users. When we introduced
    
the new base64() function, we inadvertently changed the binary signature! Ugh! This is now
    
fixed and we've automated binary-compatibility checking for Kotlin/Native going forward.
v3.18.0
2026-07-21
  • Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.
  • Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a
    FileNotFoundException.
  • Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in
    
NodeJS, causing our WasiFileSystem to be unable to access files!
  • New: Optionally ignore whitespace when decoding hexadecimal.
  • New: Optionally omit padding when encoding Base64.
  • New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte,
    UShort and ULong. Also add support for unsigned and little-endian.
  • New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.
  • New: Source.limit() returns a wrapped source with a strict limit on how many bytes are
    
returned.
  • New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.
lysine-dev/okhttp (com.squareup.okhttp3:okhttp-jvm)
v5.5.0
2026-08-16
This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature

improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s

Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re

looking at. With ECH, the router observes only the IP address. This additional privacy is most

effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.
This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37,

released June 2026). When other TLS stacks add ECH support, we'll integrate them.
ECH took a lot of work to implement because the encryption keys are published over DNS in the

[HTTPS resource record], and we needed to write new code to fetch these records. This release

includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not

just IP addresses!), asynchronous streaming results, and in-memory caching.
To opt in, you can use DnsOverHttps:
// DnsOverHttps itself uses OkHttpClient. Build both clients upon the// same bootstrap client so they share a connection pool and dispatcher.val bootstrapClient =OkHttpClient()
// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.val client = bootstrapClient.newBuilder()
.dns(DnsOverHttps.Builder()
.client(bootstrapClient)
.url("https://1.1.1.1/dns-query".toHttpUrl())
.build())
.build()
You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are

thwarted because its DNS queries are not encrypted by default.
// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.val client =OkHttpClient.Builder()
.dns(AndroidDns())
.build()
  • New: OkHttp artifacts are now signed with our [new signing key]. This project and three sibling
    
projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
  • Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
  • Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
  • Fix: Closing a multipart part's sink no longer closes the entire request body.
  • Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts
    
weren’t applied correctly.
  • Fix: Follow [RFC 1008]'s requirements for HTTP QUERY redirects.
  • Fix: Fall back to no proxy when the system proxy selector throws. Previously this would cause
    
the HTTP call to crash.
  • Upgrade: [Okio 3.18.1][okio_3_18_1].
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • "before 9am on the first day of the month"
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Renovate Bot
@solrbotsolrbot
added
the 
exempt-stale
Prevent a PR from going stale
label
Sep 1, 2026
@solrbotsolrbot
added this to the 10.x milestone
Sep 1, 2026
@solrbot
solrbot
commented
Sep 1, 2026

Copy link


Copy Markdown

CollaboratorAuthor
Edited/Blocked Notification
Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.
You can manually request rebase by checking the rebase/retry box above.
⚠️Warning: custom changes will be lost.
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

admin-uidependenciesDependency upgradesexempt-stalePrevent a PR from going stalemodule:jwt-authmodule:language-modelstool:build

Projects


None yet


Milestone

10.x

Development

Successfully merging this pull request may close these issues.

1 participant

@solrbot

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Update OkHttp & Okio - #4850
Open
solrbot wants to merge 2 commits into
apache:mainfrom 
solrbot:renovate/okhttp-and-okio
Open
Update OkHttp & Okio#4850
solrbot wants to merge 2 commits into
apache:mainfrom 
solrbot:renovate/okhttp-and-okio
Conversation
@solrbot
@solrbotsolrbot
commented
Sep 1, 2026

Copy link


Copy Markdown

Collaborator
This PR contains the following updates:
PackageTypeUpdateChange
com.squareup.okio:okiodependenciesminor3.17.0 → 3.18.1
com.squareup.okhttp3:okhttp-jvm (source)dependenciesminor5.4.0 → 5.5.0
com.squareup.okhttp3:okhttp (source)dependenciesminor5.4.0 → 5.5.0
Release Notes
lysine-dev/okio (com.squareup.okio:okio)
v3.18.1
2026-07-28
  • Fix: Restore binary-compatibility with Okio 3.17.x for Kotlin/Native users. When we introduced
    
the new base64() function, we inadvertently changed the binary signature! Ugh! This is now
    
fixed and we've automated binary-compatibility checking for Kotlin/Native going forward.
v3.18.0
2026-07-21
  • Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.
  • Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a
    FileNotFoundException.
  • Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in
    
NodeJS, causing our WasiFileSystem to be unable to access files!
  • New: Optionally ignore whitespace when decoding hexadecimal.
  • New: Optionally omit padding when encoding Base64.
  • New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte,
    UShort and ULong. Also add support for unsigned and little-endian.
  • New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.
  • New: Source.limit() returns a wrapped source with a strict limit on how many bytes are
    
returned.
  • New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.
lysine-dev/okhttp (com.squareup.okhttp3:okhttp-jvm)
v5.5.0
2026-08-16
This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature

improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s

Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re

looking at. With ECH, the router observes only the IP address. This additional privacy is most

effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.
This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37,

released June 2026). When other TLS stacks add ECH support, we'll integrate them.
ECH took a lot of work to implement because the encryption keys are published over DNS in the

[HTTPS resource record], and we needed to write new code to fetch these records. This release

includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not

just IP addresses!), asynchronous streaming results, and in-memory caching.
To opt in, you can use DnsOverHttps:
// DnsOverHttps itself uses OkHttpClient. Build both clients upon the// same bootstrap client so they share a connection pool and dispatcher.val bootstrapClient =OkHttpClient()
// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.val client = bootstrapClient.newBuilder()
.dns(DnsOverHttps.Builder()
.client(bootstrapClient)
.url("https://1.1.1.1/dns-query".toHttpUrl())
.build())
.build()
You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are

thwarted because its DNS queries are not encrypted by default.
// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.val client =OkHttpClient.Builder()
.dns(AndroidDns())
.build()
  • New: OkHttp artifacts are now signed with our [new signing key]. This project and three sibling
    
projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
  • Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
  • Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
  • Fix: Closing a multipart part's sink no longer closes the entire request body.
  • Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts
    
weren’t applied correctly.
  • Fix: Follow [RFC 1008]'s requirements for HTTP QUERY redirects.
  • Fix: Fall back to no proxy when the system proxy selector throws. Previously this would cause
    
the HTTP call to crash.
  • Upgrade: [Okio 3.18.1][okio_3_18_1].
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • "before 9am on the first day of the month"
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Renovate Bot
@solrbotsolrbot
added
the 
exempt-stale
Prevent a PR from going stale
label
Sep 1, 2026
@solrbotsolrbot
added this to the 10.x milestone
Sep 1, 2026
@solrbot
solrbot
commented
Sep 1, 2026

Copy link


Copy Markdown

CollaboratorAuthor
Edited/Blocked Notification
Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.
You can manually request rebase by checking the rebase/retry box above.
⚠️Warning: custom changes will be lost.
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

admin-uidependenciesDependency upgradesexempt-stalePrevent a PR from going stalemodule:jwt-authmodule:language-modelstool:build

Projects


None yet


Milestone

10.x

Development

Successfully merging this pull request may close these issues.

1 participant

@solrbot

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Update OkHttp & Okio - #4850
Open
solrbot wants to merge 2 commits into
apache:mainfrom 
solrbot:renovate/okhttp-and-okio
Open
Update OkHttp & Okio#4850
solrbot wants to merge 2 commits into
apache:mainfrom 
solrbot:renovate/okhttp-and-okio
Conversation
@solrbot
@solrbotsolrbot
commented
Sep 1, 2026

Copy link


Copy Markdown

Collaborator
This PR contains the following updates:
PackageTypeUpdateChange
com.squareup.okio:okiodependenciesminor3.17.0 → 3.18.1
com.squareup.okhttp3:okhttp-jvm (source)dependenciesminor5.4.0 → 5.5.0
com.squareup.okhttp3:okhttp (source)dependenciesminor5.4.0 → 5.5.0
Release Notes
lysine-dev/okio (com.squareup.okio:okio)
v3.18.1
2026-07-28
  • Fix: Restore binary-compatibility with Okio 3.17.x for Kotlin/Native users. When we introduced
    
the new base64() function, we inadvertently changed the binary signature! Ugh! This is now
    
fixed and we've automated binary-compatibility checking for Kotlin/Native going forward.
v3.18.0
2026-07-21
  • Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.
  • Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a
    FileNotFoundException.
  • Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in
    
NodeJS, causing our WasiFileSystem to be unable to access files!
  • New: Optionally ignore whitespace when decoding hexadecimal.
  • New: Optionally omit padding when encoding Base64.
  • New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte,
    UShort and ULong. Also add support for unsigned and little-endian.
  • New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.
  • New: Source.limit() returns a wrapped source with a strict limit on how many bytes are
    
returned.
  • New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.
lysine-dev/okhttp (com.squareup.okhttp3:okhttp-jvm)
v5.5.0
2026-08-16
This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature

improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s

Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re

looking at. With ECH, the router observes only the IP address. This additional privacy is most

effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.
This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37,

released June 2026). When other TLS stacks add ECH support, we'll integrate them.
ECH took a lot of work to implement because the encryption keys are published over DNS in the

[HTTPS resource record], and we needed to write new code to fetch these records. This release

includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not

just IP addresses!), asynchronous streaming results, and in-memory caching.
To opt in, you can use DnsOverHttps:
// DnsOverHttps itself uses OkHttpClient. Build both clients upon the// same bootstrap client so they share a connection pool and dispatcher.val bootstrapClient =OkHttpClient()
// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.val client = bootstrapClient.newBuilder()
.dns(DnsOverHttps.Builder()
.client(bootstrapClient)
.url("https://1.1.1.1/dns-query".toHttpUrl())
.build())
.build()
You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are

thwarted because its DNS queries are not encrypted by default.
// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.val client =OkHttpClient.Builder()
.dns(AndroidDns())
.build()
  • New: OkHttp artifacts are now signed with our [new signing key]. This project and three sibling
    
projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
  • Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
  • Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
  • Fix: Closing a multipart part's sink no longer closes the entire request body.
  • Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts
    
weren’t applied correctly.
  • Fix: Follow [RFC 1008]'s requirements for HTTP QUERY redirects.
  • Fix: Fall back to no proxy when the system proxy selector throws. Previously this would cause
    
the HTTP call to crash.
  • Upgrade: [Okio 3.18.1][okio_3_18_1].
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • "before 9am on the first day of the month"
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Renovate Bot
@solrbotsolrbot
added
the 
exempt-stale
Prevent a PR from going stale
label
Sep 1, 2026
@solrbotsolrbot
added this to the 10.x milestone
Sep 1, 2026
@solrbot
solrbot
commented
Sep 1, 2026

Copy link


Copy Markdown

CollaboratorAuthor
Edited/Blocked Notification
Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.
You can manually request rebase by checking the rebase/retry box above.
⚠️Warning: custom changes will be lost.
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

admin-uidependenciesDependency upgradesexempt-stalePrevent a PR from going stalemodule:jwt-authmodule:language-modelstool:build

Projects


None yet


Milestone

10.x

Development

Successfully merging this pull request may close these issues.

1 participant

@solrbot

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
Update OkHttp & Okio - #4850
Open
solrbot wants to merge 2 commits into
apache:mainfrom 
solrbot:renovate/okhttp-and-okio
Open
Update OkHttp & Okio#4850
solrbot wants to merge 2 commits into
apache:mainfrom 
solrbot:renovate/okhttp-and-okio
Conversation
@solrbot
@solrbotsolrbot
commented
Sep 1, 2026

Copy link


Copy Markdown

Collaborator
This PR contains the following updates:
PackageTypeUpdateChange
com.squareup.okio:okiodependenciesminor3.17.0 → 3.18.1
com.squareup.okhttp3:okhttp-jvm (source)dependenciesminor5.4.0 → 5.5.0
com.squareup.okhttp3:okhttp (source)dependenciesminor5.4.0 → 5.5.0
Release Notes
lysine-dev/okio (com.squareup.okio:okio)
v3.18.1
2026-07-28
  • Fix: Restore binary-compatibility with Okio 3.17.x for Kotlin/Native users. When we introduced
    
the new base64() function, we inadvertently changed the binary signature! Ugh! This is now
    
fixed and we've automated binary-compatibility checking for Kotlin/Native going forward.
v3.18.0
2026-07-21
  • Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.
  • Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a
    FileNotFoundException.
  • Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in
    
NodeJS, causing our WasiFileSystem to be unable to access files!
  • New: Optionally ignore whitespace when decoding hexadecimal.
  • New: Optionally omit padding when encoding Base64.
  • New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte,
    UShort and ULong. Also add support for unsigned and little-endian.
  • New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.
  • New: Source.limit() returns a wrapped source with a strict limit on how many bytes are
    
returned.
  • New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.
lysine-dev/okhttp (com.squareup.okhttp3:okhttp-jvm)
v5.5.0
2026-08-16
This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature

improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s

Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re

looking at. With ECH, the router observes only the IP address. This additional privacy is most

effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.
This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37,

released June 2026). When other TLS stacks add ECH support, we'll integrate them.
ECH took a lot of work to implement because the encryption keys are published over DNS in the

[HTTPS resource record], and we needed to write new code to fetch these records. This release

includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not

just IP addresses!), asynchronous streaming results, and in-memory caching.
To opt in, you can use DnsOverHttps:
// DnsOverHttps itself uses OkHttpClient. Build both clients upon the// same bootstrap client so they share a connection pool and dispatcher.val bootstrapClient =OkHttpClient()
// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.val client = bootstrapClient.newBuilder()
.dns(DnsOverHttps.Builder()
.client(bootstrapClient)
.url("https://1.1.1.1/dns-query".toHttpUrl())
.build())
.build()
You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are

thwarted because its DNS queries are not encrypted by default.
// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.val client =OkHttpClient.Builder()
.dns(AndroidDns())
.build()
  • New: OkHttp artifacts are now signed with our [new signing key]. This project and three sibling
    
projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
  • Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
  • Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
  • Fix: Closing a multipart part's sink no longer closes the entire request body.
  • Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts
    
weren’t applied correctly.
  • Fix: Follow [RFC 1008]'s requirements for HTTP QUERY redirects.
  • Fix: Fall back to no proxy when the system proxy selector throws. Previously this would cause
    
the HTTP call to crash.
  • Upgrade: [Okio 3.18.1][okio_3_18_1].
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • "before 9am on the first day of the month"
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
  •  If you want to rebase/retry this PR, check this box
This PR has been generated by Renovate Bot
@solrbotsolrbot
added
the 
exempt-stale
Prevent a PR from going stale
label
Sep 1, 2026
@solrbotsolrbot
added this to the 10.x milestone
Sep 1, 2026
@solrbot
solrbot
commented
Sep 1, 2026

Copy link


Copy Markdown

CollaboratorAuthor
Edited/Blocked Notification
Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.
You can manually request rebase by checking the rebase/retry box above.
⚠️Warning: custom changes will be lost.
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

admin-uidependenciesDependency upgradesexempt-stalePrevent a PR from going stalemodule:jwt-authmodule:language-modelstool:build

Projects


None yet


Milestone

10.x

Development

Successfully merging this pull request may close these issues.

1 participant

@solrbot