GradleUp/shadow 9.6.0

on GitHub

Added

• Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#2089)

Changed

• Rename ShadowDslMarker to ShadowDsl. (#2091)
• POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#2090)
  This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.

Fixed

• Validate ZIP entry names to prevent Zip Slip path traversal.
• Avoid resolving unused R8 dependency. (#2101)