Byte Buddy 1.18.14
- Avoid exposure of the agent argument on the command line of the process that is spawned for an external attachment.
- Avoid the resolution of symbolic links when the Gradle plugin deletes a folder recursively.
- Limit the nesting depth that is accepted when parsing a generic type signature to avoid an exhaustion of the stack for a malformed class file.
- Sign all deployed files using sigstore, in addition to the existing GPG signature.
- Validate entry names when the Android plugin retains a file to avoid the propagation of path traversals.
Byte Buddy 1.18.13
- Actually include the SBOM within the published artifacts.
- Avoid propagation of path traversals that are contained in jar files which are copied without transformation.
- Avoid repeated traversal of previously visited type hierarchies to improve performance.
- Correct Kotlin support of the Gradle plugin to redirect the classes directory of a source set while retaining support for legacy Gradle versions.
- Create Gradle tasks using Gradle's task registration API if available.
Byte Buddy 1.18.12
- Automatically support Kotlin in Gradle plugin.
- Add support for native attach on Windows for ARM64.
- Correct JNA injector which accidentally created on based on Unsafe.
Byte Buddy 1.18.11
- Add SBOM to published artifacts.
- Check for traversable paths injected into class files as a rather hypothetical attack vector.
Byte Buddy 1.18.10
- Delay change of default for unsage use to Java 26 and improve error message.
Byte Buddy 1.18.9
- Disable use of Unsafe by default when Java 25or newer is discovered.
- Check for escape when creating folders in
Plugin.Engine. - Improve OpenJ9 attachment.
- Avoid null pointer on missing annotation types.
- Improve diagnostics for external agent attachment.
- Improve on Gradle context discovery.
- Support Android libraries on AGP9 or newer.
- Update ASM.
Byte Buddy 1.18.8
- Improve support for repeatable builds.
- Fix reordering of exception table in type initializers when instrumenting.
Byte Buddy 1.18.7
- Introduce new versioning concept with -jdk5 suffix for backwards-compatible jar and Java 8 baseline for regular jar.
Byte Buddy 1.18.5
- Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted.
- Add super classes to hash code / equals computation in
Advicethat were missing.
Byte Buddy 1.18.4
- Add support for new build description in Android 9.