prepare 5.0.3 release (#202)

Author: LaunchDarklyCI

CHANGELOG.md

@@ -68,6 +68,10 @@ This is a major rewrite that introduces a cleaner API design, adds new features,
 - The Redis integration is no longer built into the main SDK library. See: https://github.com/launchdarkly/java-server-sdk-redis
 - The deprecated New Relic integration has been removed.
 
+## [4.14.1] - 2020-08-04
+### Fixed:
+- Deserializing `LDUser` from JSON using Gson resulted in an object that had nulls in some fields where nulls were not expected, which could cause null pointer exceptions later. While there was no defined behavior for deserializing users in the 4.x SDK (it is supported in 5.0 and above), it was simple to fix. Results of deserializing with any other JSON framework are undefined. ([#199](https://github.com/launchdarkly/java-server-sdk/issues/199))
+
 ## [4.14.0] - 2020-05-13
 ### Added:
 - `EventSender` interface and `EventsConfigurationBuilder.eventSender()` allow you to specify a custom implementation of how event data is sent. This is mainly to facilitate testing, but could also be used to store and forward event data.

build.gradle

@@ -169,6 +169,11 @@ shadowJar {
         exclude(dependency('org.slf4j:.*:.*'))
     }
 
+    // Kotlin metadata for shaded classes should not be included - it confuses IDEs
+    exclude '**/*.kotlin_metadata'
+    exclude '**/*.kotlin_module'
+    exclude '**/*.kotlin_builtins'
+
     // doFirst causes the following steps to be run during Gradle's execution phase rather than the
     // configuration phase; this is necessary because they access the build products
     doFirst {
@@ -193,6 +198,10 @@ task shadowJarAll(type: com.github.jengelman.gradle.plugins.shadow.tasks.ShadowJ
     configurations = [project.configurations.runtimeClasspath]
     exclude('META-INF/INDEX.LIST', 'META-INF/*.SF', 'META-INF/*.DSA', 'META-INF/*.RSA')
 
+    exclude '**/*.kotlin_metadata'
+    exclude '**/*.kotlin_module'
+    exclude '**/*.kotlin_builtins'
+
     // doFirst causes the following steps to be run during Gradle's execution phase rather than the
     // configuration phase; this is necessary because they access the build products
     doFirst {
@@ -315,7 +324,7 @@ def replaceUnshadedClasses(jarTask) {
         } getFiles()
     }
     def jarPath = jarTask.archiveFile.asFile.get().toPath()
-    FileSystems.newFileSystem(jarPath, null).withCloseable { fs ->
+    FileSystems.newFileSystem(jarPath, (ClassLoader)null).withCloseable { fs ->
         protectedClassFiles.forEach { classFile ->
             def classSubpath = classFile.path.substring(classFile.path.indexOf("com/launchdarkly"))
             Files.copy(classFile.toPath(), fs.getPath(classSubpath), StandardCopyOption.REPLACE_EXISTING)
@@ -580,8 +589,13 @@ signing {
     sign publishing.publications.shadow
 }
 
-tasks.withType(Sign) {
-    onlyIf { !"1".equals(project.findProperty("LD_SKIP_SIGNING")) } // so we can build jars for testing in CI
+tasks.withType(Sign) { t ->
+    onlyIf { !shouldSkipSigning() } // so we can build jars for testing in CI
+}
+
+def shouldSkipSigning() {
+    return "1".equals(project.findProperty("LD_SKIP_SIGNING")) ||
+        "1".equals(System.getenv("LD_SKIP_SIGNING"))
 }
 
 // This task is used by the logic in ./packaging-test to get copies of all the direct and transitive