fix(deps): update all dependencies #1803
Open
+250
−244
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4→v6v4→v6v3→v4v4→v5v1.7.1→v1.7.2v5→v71.9.0-rc01→1.10.11.2.0→1.2.11.4.4→1.4.52.8.3→2.8.42.8.3→2.8.42.8.3→2.8.42.8.3→2.8.42.8.3→2.8.41.56.0→1.57.01.56.0→1.57.01.56.0→1.57.04.16→4.16.12.11.0→3.0.02.11.0→3.0.00.9.5→0.9.64.29.2→4.33.44.29.2→4.33.44.12.0→5.3.21.8.0→1.10.00.6.1→0.7.1-0.6.x-compat1.10.1→1.10.21.10.1→1.10.21.10.1→1.10.21.10.1→1.10.21.2.0→1.3.01.2.0→1.3.00.10.9→0.10.1017.1.0→17.3.033.7.0→34.8.02.10.0→2.11.02.10.0→2.11.01.3.0→1.5.11.3.0-alpha02→1.3.01.7.0-rc01→1.7.01.7.0-rc01→1.7.01.3.0-rc01→1.3.01.7.0-rc01→1.7.01.3.1→1.4.02.8.5→2.9.61.0.0-beta01→1.0.06.25.0→8.2.01.0.0-alpha03→1.0.0-alpha051.3.0-alpha02→1.3.03.6.1→3.7.01.0.1→1.2.01.15.0→1.17.01.7.6→1.10.11.3.0-alpha04→1.3.0-alpha061.1.0-rc01→1.2.01.1.0-rc01→1.2.01.1.0-rc01→1.2.01.8.0-alpha07→1.10.12025.09.01→2026.01.001.8.0→1.9.01.7.0→1.7.11.9.3→1.12.22.1.4→2.1.50.37.0→0.37.3Release Notes
actions/checkout (actions/checkout)
v6Compare Source
v5Compare Source
actions/upload-artifact (actions/upload-artifact)
v6Compare Source
v5Compare Source
github/codeql-action (github/codeql-action)
v4Compare Source
gradle/actions (gradle/actions)
v5Compare Source
madrapps/jacoco-report (madrapps/jacoco-report)
v1.7.2Compare Source
What's Changed
Full Changelog: Madrapps/jacoco-report@v1.7.1...v1.7.2
stefanzweifel/git-auto-commit-action (stefanzweifel/git-auto-commit-action)
v7Compare Source
Added
Changes
Dependency Updates
v6Compare Source
Fixed
cashapp/turbine (app.cash.turbine:turbine)
v1.2.1Compare Source
Changed
Fixed
testInwith aCoroutineScopethat does not contain aJobno longer throwsIllegalStateException.google/truth (com.google.truth:truth)
v1.4.5: 1.4.5Compare Source
assertThat(nullMap).isEmpty()to fail with a useful failure message instead of throwingNullPointerException(and similarly for other "bogus" values, such as negative sizes). (da5d6e9)isInstanceOf(Int::class.java)(and Java'sisInstanceOf(int.class)) a valid way to check forInt/Integerinstances. (974ef19)isWithinto pretty-print numbers in its failure messages. (de78553,07318c2)Integerinstead ofjava.lang.Integer). (0ba72d6)ExpectFailureto never generate "value of" lines based on bytecode. This slightly simplifies writing new tests withExpectFailureand prevents future behavior changes in someExpectFailuretests that already exist. However, it may also require changes to other existingExpectFailuretests to remove or change any assertions about the "value of" line. (3caa0e8)minSdkVersionis now 23 (Marshmallow). This follows the minimum of Google's foundational Android libraries, and we expect it to have no practical impact on users. (c85c75c)@NullMarked. This was making all our types non-null in those environments, since we don't yet use@Nullablein the GWT/J2CL artifact. (6392d37)takahirom/roborazzi (io.github.takahirom.roborazzi)
v1.57.0Compare Source
Fix AGP 9.0 KMP preview screenshots
We had been using
unitTestSources?.**java**?.addGeneratedSourceDirectory, but this approach proved ineffective when we adoptedcom.android.kotlin.multiplatform.library. Consequently, we migrated tounitTestSources?.**kotlin**?.addGeneratedSourceDirectoryfor the KMP plugin. Unfortunately, when applyingcom.android.library,unitTestSources?.kotlinremains non-functional, so we must toggle between the two depending on the plugin.Thank you for reporting this @HLCaptain !
(This is our plugin code, you don't have to write this.)
Bugfix: Compose Preview’s
onSizeChanged{}wasn’t called when multiple windows exist.There is a bug in which Compose Preview’s
onSizeChanged{}fails to fire when multiple windows are present. This issue arises because we neglected to invokecomposeTestRule.mainClock.advanceTimeByFrame() composeTestRule.waitForIdle()Reproducing screenshots
What's Changed
Full Changelog: takahirom/roborazzi@1.56.0...1.57.0
square/retrofit (com.squareup.retrofit2:converter-kotlinx-serialization)
v3.0.0Compare Source
Changed
Upgrade to OkHttp 4.12 (from 3.14).
This is the version of OkHttp that is written in Kotlin, and as a result Retrofit now has a transitive Kotlin dependency. However, this is also the supported version of OkHttp whereas the previous version was out of support for nearly 4 years.
Note: The 3.x versions of Retrofit maintain forward binary-compatibility with the 2.x versions.
This means libraries compiled against 2.x can still be used with the 3.x versions.
v2.12.0Compare Source
New
First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using
Call.enqueuedirectly.The following converters support this feature through a new
withStreaming()factory method:Fixed
@Tagnow work by storing the value boxed with the boxed class as the key.protocolbuffers/protobuf (com.google.protobuf:protoc)
v4.31.1v4.31.0v4.30.2v4.30.1square/okhttp (com.squareup.okhttp3:logging-interceptor)
v5.3.22025-11-18
Fix: Don't delay triggering timeouts. In Okio 3.16.0 we introduced a regression that caused
timeouts to fire later than they were supposed to.
Upgrade: [Okio 3.16.4][okio_3_16_4].
v5.3.12025-11-16
This release is the same as 5.3.0. Okio 3.16.3 didn't have a necessary fix!
v5.3.02025-10-30
New: Add tags to
Call, including computable tags. Use this to attach application-specificmetadata to a
Callin anEventListenerorInterceptor. The tag can be read in any otherEventListenerorInterceptor.New: Support request bodies on HTTP/1.1 connection upgrades.
New:
EventListener.plus()makes it easier to observe events in multiple listeners.Fix: Don't spam logs with ‘Method isLoggable in android.util.Log not mocked.’ when using
OkHttp in Robolectric and Paparazzi tests.
Upgrade: [Kotlin 2.2.21][kotlin_2_2_21].
Upgrade: [Okio 3.16.2][okio_3_16_2].
Upgrade: [ZSTD-KMP 0.4.0][zstd_kmp_0_4_0]. This update fixes a bug that caused APKs to fail
[16 KB ELF alignment checks][elf_alignment].
v5.2.32025-11-18
Fix: Don't delay triggering timeouts. In Okio 3.16.0 we introduced a regression that caused
timeouts to fire later than they were supposed to.
Upgrade: [Okio 3.16.4][okio_3_16_4].
v5.2.22025-11-16
This release is the same as 5.2.1. Okio 3.16.3 didn't have a necessary fix!
v5.2.12025-10-09
Fix: Don't crash when calling
Socket.shutdownOutput()orshutdownInput()on anSSLSocketon Android API 21 through 23. This method throws an
UnsupportedOperationException, so we nowcatch that and close the underlying stream instead.
Upgrade: [Okio 3.16.1][okio_3_16_1].
v5.2.02025-10-07
New: Support [HTTP 101] responses with
Response.socket. This mechanism is only supported onHTTP/1.1. We also reimplemented our websocket client to use this new mechanism.
New: The
okhttp-zstdmodule negotiates [Zstandard (zstd)][zstd] compression with servers thatsupport it. It integrates a new (unstable) [ZSTD-KMP] library, also from Square. Enable it like
this:
New: Support the
QUERYHTTP method. You will need to set theRequest.cacheUrlOverrideproperty to cache calls made with this method. The
RequestBody.sha256()may be helpful here;use it to compose a cache URL from the query body.
New: Publish events when calls must wait to execute.
EventListener.dispatcherQueueStart()is invoked when a call starts waiting, and
dispatcherQueueEnd()is invoked when it's done.New:
Request.toCurl()returns a copy-pasteable [curl] command consistent with Chrome’s andFirefox’s ‘copy as cURL’ features.
New: Support [JPMS]. We replaced our
Automatic-Module-Namemetadata with propermodule-info.javafiles.Fix: Recover gracefully when worker threads are interrupted. When we introduced fast fallback in
OkHttp 5.0, we started using background threads while connecting. Sadly that code didn't handle
interruptions well. This is now fixed.
Upgrade: [Kotlin 2.2.20][kotlin_2_2_20].
Upgrade: [Okio 3.16.0][okio_3_16_0].
v5.1.02025-07-07
New:
Response.peekTrailers(). When we changedResponse.trailers()to block instead ofthrowing in 5.0.0, we inadvertently removed the ability for callers to peek the trailers
(by catching the
IllegalStateExceptionif they weren't available). This new API restores thatcapability.
Fix: Don't crash on
trailers()if the response doesn't have a body. We broke [Retrofit] userswho read the trailers on the
raw()OkHttp response, after its body was decoded.v5.0.02025-07-02
This is our first stable release of OkHttp since 2023. Here's the highlights if you're upgrading
from OkHttp 4.x:
OkHttp is now packaged as separate JVM and Android artifacts. This allows us to offer
platform-specific features and optimizations. If your build system handles [Gradle module metadata],
this change should be automatic.
MockWebServer has a new coordinate and package name. We didn’t like that our old artifact
depends on JUnit 4 so the new one doesn’t. It also has a better API built on immutable values. (We
intend to continue publishing the old
okhttp3.mockwebserverartifact so there’s no urgency tomigrate.)
OkHttp now supports Happy Eyeballs ([RFC 8305][rfc_8305]) for IPv4+IPv6 networks. It attempts
both IPv6 and IPv4 connections concurrently, keeping whichever connects first.
We’ve improved our Kotlin APIs. You can skip the builder:
OkHttp now supports [GraalVM].
Here’s what has changed since 5.0.0-alpha.17:
NoSuchMethodErrorwhen using OkHttp with the Sentry SDK.okhttp3.mockwebserver.RecordedRequest.pathproperty. Weinadvertently changed this behavior when we introduced the
mockwebserver3API.Kotlin/kotlinx.serialization (org.jetbrains.kotlinx:kotlinx-serialization-json)
v1.10.0==================
This is a release candidate for 1.10.0 based on Kotlin 2.3.0. It stabilizes a set of frequently used JSON APIs and builder options,
adopts a new 'Return Value Checker' Kotlin feature, and provides a lot of improvements and bug fixes.
Stabilization of APIs
kotlinx-serialization 1.10 and subsequent releases will be focused on stabilization of existing APIs.
The following APIs and configuration options are no longer experimental because they're widely used without any known major issues:
Jsonconfiguration options:decodeEnumsCaseInsensitive,allowTrailingComma,allowComments, andprettyPrintIndent. (#3100)@EncodeDefaultannotation and its modes. (#3106)JsonUnquotedLiteralconstructor function (#2900)JsonPrimitiveconstructor function overloads that accept unsigned types. (#3117)JsonElementwithNothing?overloads. (#3117)Readiness for return value checker
Kotlin 2.3.0 introduces a new feature aimed
at helping you to catch bugs related to the accidentally ignored return value of the function.
kotlinx-serialization 1.10.0-RC code is fully marked for this feature, meaning that you
can get warnings for unused function calls like
Json.encodeToString(...).To get the warnings, the feature has to be enabled in your project as described here.
Polymorphism improvements
Polymorphic serialization received a couple of improvements in this release:
New
subclassesOfSealedutility to automatically register sealed subclasses serializers in polymorphic modules (#2201).Use it in your
SerializersModulewhen configuring a polymorphic hierarchy which contains both abstract and sealed classes.For example, when root of your hierarchy is an
inteface, but most of your inheritors aresealedclasses.The new function will register all known sealed subclasses for you, so you don’t need to list them one by one.
This makes writing your
SerializerModules much faster and simpler.Big thanks to Paul de Vrieze for contributing this feature.
Class discriminator conflict check rework (#3105).
If a payload already contains a property with the same name as the configured discriminator (for example,
type),it is called a class discriminator conflict.
To produce a correct output and allow more inputs to be deserialized at the same time, the following changes were made:
JsonNamingStrategytransformations are now detected during serialization as well and will causeSerializationException.It also affects non-polymorphic classes.
ClassDisciminatorMode.ALL_JSON_OBJECTSandSerializersModuleBuilder.polymorphicDefaultSerializerare also detected.Previously, it was possible in the sealed hierarchies alone due to missing assertion. See #1664 for details.
General improvements
.serialNametoMissingFieldExceptionfor clearer diagnostics. (#3114)Automatic-Module-Nameentries for metadata JARs. (#3109)Bugfixes
BIGNUM_NEGATIVEtag name. (#3090)v1.9.0==================
This release updates Kotlin version to 2.2.0, includes several bugfixes and provides serializers for kotlin.time.Instant.
Add kotlin.time.Instant serializers
Instant class was moved from kotlinx-datetime library to Kotlin standard library.
As a result, kotlinx-datetime 0.7.0 no longer has serializers for the Instant class.
To use new kotlin.time.Instant class in your @Serializable classes,
you can use this 1.9.0 kotlinx-serialization version (Kotlin 2.2 is required).
You can choose between default
InstantSerializerConfiguration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.