Byte Buddy 1.18.17
- Resolve Android classes jars for AAR Byte Buddy plugins on AGP 9.5
Byte Buddy 1.18.16
- Correct detection of a dropped implicit
thisframe in constructors withlongordoubleparameters when usingAdvice. - Detect a dropped uninitialized
thisframe in constructors after full frames when usingAdvicewith copied arguments. - Update ASM to version 9.11.1 and the ASM to Class File API bridge to version 0.0.14.
- Use a valid tag for the Gradle plugin portal.
Byte Buddy 1.18.15
- Update ASM to version 9.11 and add support for Java 28.
Byte Buddy 1.18.14
- Avoid exposure of the agent argument on the command line of the process that is spawned for an external attachment.
- Avoid the resolution of symbolic links when the Gradle plugin deletes a folder recursively.
- Limit the nesting depth that is accepted when parsing a generic type signature to avoid an exhaustion of the stack for a malformed class file.
- Sign all deployed files using sigstore, in addition to the existing GPG signature.
- Validate entry names when the Android plugin retains a file to avoid the propagation of path traversals.
Byte Buddy 1.18.13
- Actually include the SBOM within the published artifacts.
- Avoid propagation of path traversals that are contained in jar files which are copied without transformation.
- Avoid repeated traversal of previously visited type hierarchies to improve performance.
- Correct Kotlin support of the Gradle plugin to redirect the classes directory of a source set while retaining support for legacy Gradle versions.
- Create Gradle tasks using Gradle's task registration API if available.
Byte Buddy 1.18.12
- Automatically support Kotlin in Gradle plugin.
- Add support for native attach on Windows for ARM64.
- Correct JNA injector which accidentally created on based on Unsafe.
Byte Buddy 1.18.11
- Add SBOM to published artifacts.
- Check for traversable paths injected into class files as a rather hypothetical attack vector.
Byte Buddy 1.18.10
- Delay change of default for unsage use to Java 26 and improve error message.
Byte Buddy 1.18.9
- Disable use of Unsafe by default when Java 25or newer is discovered.
- Check for escape when creating folders in
Plugin.Engine. - Improve OpenJ9 attachment.
- Avoid null pointer on missing annotation types.
- Improve diagnostics for external agent attachment.
- Improve on Gradle context discovery.
- Support Android libraries on AGP9 or newer.
- Update ASM.
Byte Buddy 1.18.8
- Improve support for repeatable builds.
- Fix reordering of exception table in type initializers when instrumenting.