Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 26, 2026

Bumps com.diffplug.spotless:spotless-plugin-gradle from 7.1.0 to 8.2.0.

Release notes

Sourced from com.diffplug.spotless:spotless-plugin-gradle's releases.

Gradle Plugin v8.2.0

Added

  • Add a expandWildcardImports API for java (#2679)
  • Add the ability to specify a wildcard version (*) for external formatter executables. (#2757)
  • Add support for passing multiple file paths using the -PspotlessIdeHook option. (#2774)

Fixed

  • configuration cache for groovy. (#2797)
  • [fix] NPE due to workingTreeIterator being null for git ignored files. #911 (#2771)
  • Prevent race conditions when multiple npm-based formatters launch the server process simultaneously while sharing the same node_modules directory. (#2786)

Changes

  • Bump default ktfmt version to latest 0.59 -> 0.61. (2804)
  • Bump default ktlint version to latest 1.7.1 -> 1.8.0. (2763)
  • Bump default gherkin-utils version to latest 9.2.0 -> 10.0.0. (#2619)

Gradle Plugin v8.1.0

Changes

  • Bump default ktfmt version to latest 0.58 -> 0.59. (#2681
  • Bump default jackson version to latest 2.20.0 -> 2.20.1. (#2730)
  • Bump default cleanthat version to latest 2.23 -> 2.24. (#2620)
  • POTENTIALLY BREAKING Removed support for ktlint versions below 1.0. (#2711)

Fixed

  • Tasks were being eagerly instantiated, now avoided using TaskProviders. #2719
    • POTENTIALLY BREAKING Bump minimum supported Gradle version from 7.3 to 8.1. #2719
  • Use absolute path in the git pre push hook.
  • palantirJavaFormat is no longer arbitrarily set to outdated versions on Java 17, latest available version is always used (#2686 fixes #2685)

Added

  • forbidModuleImports() API for java (#2679)
  • new options to customize Flexmark, e.g. to allow YAML front matter (#2616)

Gradle Plugin v8.0.0

Changed

  • BREAKING Bump the required Gradle to 7.3 and required Java to 17. (#2375, #2540)
  • BREAKING Renamed removeWildcardImports to forbidWildcardImports. (#2633)
  • BREAKING spotlessInstallGitPrePushHook task is now installed only on the root project. (#2570)
  • BREAKING LintSuppression now enforces unix-style paths in its setPath method. (#2629)
  • Running spotlessCheck with violations unilaterally produces the error message Run './gradlew spotlessApply' to fix these violations. (#2592)
  • Bump JGit from 6.10.1 to 7.3.0 (#2257)
    • Adds support for worktrees (fixes #1765)
  • Bump default google-java-format version to latest 1.24.0 -> 1.28.0. (#2345)
  • Bump default gson version to latest 2.13.1 -> 2.13.2. (#2615)
  • Bump default jackson version to latest 2.19.2 -> 2.20.0. (#2606)
  • Bump default ktfmt version to latest 0.53 -> 0.58 (#2613)
    • BREAKING use TrailingCommaManagementStrategy enum instead of manageTrailingCommas boolean configuration option
  • Bump default ktlint version to latest 1.5.0 -> 1.7.1. (#2555)
  • Bump default palantir-java-format version to latest 2.57.0 -> 2.71.0.

Fixed

  • Respect system gitconfig when performing git operations (#2404)
  • Fix spaceBeforeSeparator in Jackson formatter. (#2103)
  • spotlessInstallGitPrePushHook is now compatible with configuration cache. (#2570)

Added

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.diffplug.spotless:spotless-plugin-gradle](https://github.com/diffplug/spotless) from 7.1.0 to 8.2.0.
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@gradle/7.1.0...gradle/8.2.0)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-plugin-gradle
  dependency-version: 8.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jan 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants