Bump okhttp3-version from 3.14.3 to 4.8.0

[dependabot]

Bumps okhttp3-version from 3.14.3 to 4.8.0.
Updates okhttp from 3.14.3 to 4.8.0

Changelog

Sourced from okhttp's changelog.

Version 4.8.0

2020-07-11

• New: Change HeldCertificate.Builder to use its own ASN.1 certificate encoder. This is part of our effort to remove the okhttp-tls module's dependency on Bouncy Castle. We think Bouncy Castle is great! But it's a large dependency (6.5 MiB) and its security provider feature impacts VM-wide behavior.

• New: Reduce contention for applications that make a very high number of concurrent requests. Previously OkHttp used its connection pool as a lock when making changes to connections and calls. With this change each connection is locked independently.

• Upgrade: [Okio 2.7.0][okio_2_7_0].

  implementation("com.squareup.okio:okio:2.7.0")

• Fix: Avoid log messages like "Didn't find class org.conscrypt.ConscryptHostnameVerifier" when detecting the TLS capabilities of the host platform.

• Fix: Don't crash in HttpUrl.topPrivateDomain() when the hostname is malformed.

• Fix: Don't attempt Brotli decompression if the response body is empty.

Version 4.7.2

2020-05-20

• Fix: Don't crash inspecting whether the host platform is JVM or Android. With 4.7.0 and 4.7.1 we had a crash IllegalArgumentException: Not a Conscrypt trust manager because we depended on initialization order of companion objects.

Version 4.7.1

2020-05-18

• Fix: Pass the right arguments in the trust manager created for addInsecureHost(). Without the fix insecure hosts crash with an IllegalArgumentException on Android.

Version 4.7.0

2020-05-17

• New: HandshakeCertificates.Builder.addInsecureHost() makes it easy to turn off security in private development environments that only carry test data. Prefer this over creating an

Commits

• a70e992 Prepare for release 4.8.0.
• cf367d9 Add defensive checks for malformed ASN.1 DER (#6180)
• 0e0f3a2 Push OkHttp 3.14.x into the sea. It is no longer supported. (#6179)
• 7c9cfd6 Fix typo (#6178)
• 4bfa33e Upgrade to Okio 2.7.0 (#6175)
• c4cbb57 Don't crash on unknown GeneralName types. (#6170)
• 19e9a8f Drop support for indefinite length in DER (#6166)
• c04b57e Add limits to what length values DerReader supports (#6164)
• 353a52b Improve code style for the new DER package (#6157)
• 45df82e Honor RFC 5280 when choosing a time format (#6154)
• Additional commits viewable in compare view

Updates logging-interceptor from 3.14.3 to 4.8.0

Changelog

Sourced from logging-interceptor's changelog.

Version 4.8.0

2020-07-11

• New: Change HeldCertificate.Builder to use its own ASN.1 certificate encoder. This is part of our effort to remove the okhttp-tls module's dependency on Bouncy Castle. We think Bouncy Castle is great! But it's a large dependency (6.5 MiB) and its security provider feature impacts VM-wide behavior.

• New: Reduce contention for applications that make a very high number of concurrent requests. Previously OkHttp used its connection pool as a lock when making changes to connections and calls. With this change each connection is locked independently.

• Upgrade: [Okio 2.7.0][okio_2_7_0].

  implementation("com.squareup.okio:okio:2.7.0")

• Fix: Avoid log messages like "Didn't find class org.conscrypt.ConscryptHostnameVerifier" when detecting the TLS capabilities of the host platform.

• Fix: Don't crash in HttpUrl.topPrivateDomain() when the hostname is malformed.

• Fix: Don't attempt Brotli decompression if the response body is empty.

Version 4.7.2

2020-05-20

• Fix: Don't crash inspecting whether the host platform is JVM or Android. With 4.7.0 and 4.7.1 we had a crash IllegalArgumentException: Not a Conscrypt trust manager because we depended on initialization order of companion objects.

Version 4.7.1

2020-05-18

• Fix: Pass the right arguments in the trust manager created for addInsecureHost(). Without the fix insecure hosts crash with an IllegalArgumentException on Android.

Version 4.7.0

2020-05-17

• New: HandshakeCertificates.Builder.addInsecureHost() makes it easy to turn off security in private development environments that only carry test data. Prefer this over creating an

Commits

• a70e992 Prepare for release 4.8.0.
• cf367d9 Add defensive checks for malformed ASN.1 DER (#6180)
• 0e0f3a2 Push OkHttp 3.14.x into the sea. It is no longer supported. (#6179)
• 7c9cfd6 Fix typo (#6178)
• 4bfa33e Upgrade to Okio 2.7.0 (#6175)
• c4cbb57 Don't crash on unknown GeneralName types. (#6170)
• 19e9a8f Drop support for indefinite length in DER (#6166)
• c04b57e Add limits to what length values DerReader supports (#6164)
• 353a52b Improve code style for the new DER package (#6157)
• 45df82e Honor RFC 5280 when choosing a time format (#6154)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)