fix(deps): update all dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/checkout	action	major	v4 → v6
actions/upload-artifact	action	major	v4 → v6
github/codeql-action	action	major	v3 → v4
gradle (source)		patch	9.3.0 → 9.3.1
gradle/actions	action	major	v4 → v5
madrapps/jacoco-report	action	patch	v1.7.1 → v1.7.2
stefanzweifel/git-auto-commit-action	action	major	v5 → v7
androidx.compose.ui:ui-test-junit4 (source)	dependencies	minor	1.9.0-rc01 → 1.10.2
app.cash.turbine:turbine	dependencies	patch	1.2.0 → 1.2.1
com.google.truth:truth	dependencies	patch	1.4.4 → 1.4.5
androidx.room (source)	plugin	patch	2.8.3 → 2.8.4
androidx.room:room-gradle-plugin (source)	dependencies	patch	2.8.3 → 2.8.4
androidx.room:room-runtime (source)	dependencies	patch	2.8.3 → 2.8.4
androidx.room:room-ktx (source)	dependencies	patch	2.8.3 → 2.8.4
androidx.room:room-compiler (source)	dependencies	patch	2.8.3 → 2.8.4
io.github.takahirom.roborazzi	plugin	minor	1.56.0 → 1.58.0
io.github.takahirom.roborazzi:roborazzi-accessibility-check	dependencies	minor	1.56.0 → 1.58.0
io.github.takahirom.roborazzi:roborazzi	dependencies	minor	1.56.0 → 1.58.0
org.robolectric:robolectric (source)	dependencies	patch	4.16 → 4.16.1
com.squareup.retrofit2:converter-kotlinx-serialization	dependencies	major	2.11.0 → 3.0.0
com.squareup.retrofit2:retrofit	dependencies	major	2.11.0 → 3.0.0
com.google.protobuf:protoc (source)	dependencies	minor	4.29.2 → 4.33.5
com.google.protobuf:protobuf-kotlin-lite (source)	dependencies	minor	4.29.2 → 4.33.5
com.squareup.okhttp3:logging-interceptor (source)	dependencies	major	4.12.0 → 5.3.2
com.google.devtools.ksp (source)	plugin	patch	2.3.4 → 2.3.5
com.google.devtools.ksp:com.google.devtools.ksp.gradle.plugin (source)	dependencies	patch	2.3.4 → 2.3.5
org.jetbrains.kotlinx:kotlinx-serialization-json	dependencies	minor	1.8.0 → 1.10.0
org.jetbrains.kotlinx:kotlinx-datetime	dependencies	minor	0.6.1 → 0.7.1-0.6.x-compat
org.jetbrains.kotlinx:kotlinx-coroutines-test	dependencies	patch	1.10.1 → 1.10.2
org.jetbrains.kotlinx:kotlinx-coroutines-guava	dependencies	patch	1.10.1 → 1.10.2
org.jetbrains.kotlinx:kotlinx-coroutines-android	dependencies	patch	1.10.1 → 1.10.2
org.jetbrains.kotlinx:kotlinx-coroutines-core	dependencies	patch	1.10.1 → 1.10.2
org.jetbrains.kotlin.plugin.serialization (source)	plugin	patch	2.3.0 → 2.3.10
org.jetbrains.kotlin.jvm (source)	plugin	patch	2.3.0 → 2.3.10
org.jetbrains.kotlin.plugin.compose (source)	plugin	patch	2.3.0 → 2.3.10
org.jetbrains.kotlin:kotlin-gradle-plugin (source)	dependencies	patch	2.3.0 → 2.3.10
org.jetbrains.kotlin:compose-compiler-gradle-plugin (source)	dependencies	patch	2.3.0 → 2.3.10
org.jetbrains.kotlin:kotlin-test (source)	dependencies	patch	2.3.0 → 2.3.10
org.jetbrains.kotlin:kotlin-stdlib-jdk8 (source)	dependencies	patch	2.3.0 → 2.3.10
org.jetbrains.kotlin:kotlin-metadata-jvm (source)	dependencies	patch	2.3.0 → 2.3.10
androidx.hilt:hilt-work (source)	dependencies	minor	1.2.0 → 1.3.0
androidx.hilt:hilt-compiler (source)	dependencies	minor	1.2.0 → 1.3.0
com.google.dagger.hilt.android	plugin	patch	2.59 → 2.59.1
com.google.dagger:hilt-core	dependencies	patch	2.59 → 2.59.1
com.google.dagger:hilt-compiler	dependencies	patch	2.59 → 2.59.1
com.google.dagger:hilt-android-testing	dependencies	patch	2.59 → 2.59.1
com.google.dagger:hilt-android	dependencies	patch	2.59 → 2.59.1
com.google.android.gms.oss-licenses-plugin	plugin	patch	0.10.9 → 0.10.10
com.google.android.gms:play-services-oss-licenses	dependencies	minor	17.1.0 → 17.4.0
com.google.firebase:firebase-bom	dependencies	major	33.7.0 → 34.9.0
androidx.work:work-testing (source)	dependencies	minor	2.10.0 → 2.11.1
androidx.work:work-runtime-ktx (source)	dependencies	minor	2.10.0 → 2.11.1
androidx.window:window-core (source)	dependencies	minor	1.3.0 → 1.5.1
androidx.tracing:tracing-ktx (source)	dependencies	patch	1.3.0-alpha02 → 1.3.0
androidx.test:runner	dependencies	patch	1.7.0-rc01 → 1.7.0
androidx.test:rules	dependencies	patch	1.7.0-rc01 → 1.7.0
androidx.test.ext:junit-ktx	dependencies	patch	1.3.0-rc01 → 1.3.0
androidx.test:core	dependencies	patch	1.7.0-rc01 → 1.7.0
androidx.savedstate:savedstate-compose (source)	dependencies	minor	1.3.1 → 1.4.0
androidx.navigation:navigation-testing (source)	dependencies	minor	2.8.5 → 2.9.7
androidx.metrics:metrics-performance (source)	dependencies	patch	1.0.0-beta01 → 1.0.0
androidx.baselineprofile (source)	plugin	patch	1.5.0-alpha01 → 1.5.0-alpha02
androidx.benchmark:benchmark-macro-junit4 (source)	dependencies	patch	1.5.0-alpha01 → 1.5.0-alpha02
androidx.lint:lint-gradle (source)	dependencies	patch	1.0.0-alpha03 → 1.0.0-alpha05
androidx.hilt:hilt-lifecycle-viewmodel-compose (source)	dependencies	patch	1.3.0-alpha02 → 1.3.0
androidx.test.espresso:espresso-core	dependencies	minor	3.6.1 → 3.7.0
androidx.core:core-splashscreen (source)	dependencies	minor	1.0.1 → 1.2.0
androidx.core:core-ktx (source)	dependencies	minor	1.15.0 → 1.17.0
androidx.compose.runtime:runtime-tracing (source)	dependencies	minor	1.7.6 → 1.10.2
androidx.compose.material3.adaptive:adaptive-navigation3 (source)	dependencies	patch	1.3.0-alpha04 → 1.3.0-alpha07
androidx.compose.material3.adaptive:adaptive-navigation (source)	dependencies	minor	1.1.0-rc01 → 1.2.0
androidx.compose.material3.adaptive:adaptive-layout (source)	dependencies	minor	1.1.0-rc01 → 1.2.0
androidx.compose.material3.adaptive:adaptive (source)	dependencies	minor	1.1.0-rc01 → 1.2.0
androidx.compose.foundation:foundation (source)	dependencies	minor	1.8.0-alpha07 → 1.10.2
androidx.compose:compose-bom-alpha	dependencies	major	2025.09.01 → 2026.01.01
androidx.browser:browser (source)	dependencies	minor	1.8.0 → 1.9.0
androidx.appcompat:appcompat (source)	dependencies	patch	1.7.0 → 1.7.1
androidx.activity:activity-compose (source)	dependencies	minor	1.9.3 → 1.12.3
com.android.tools:desugar_jdk_libs	dependencies	patch	2.1.4 → 2.1.5
com.google.accompanist:accompanist-permissions	dependencies	patch	0.37.0 → 0.37.3

---

Release Notes

actions/checkout (actions/checkout)

v6

Compare Source

v5

Compare Source

actions/upload-artifact (actions/upload-artifact)

v6

Compare Source

v5

Compare Source

github/codeql-action (github/codeql-action)

v4

Compare Source

gradle/gradle (gradle)

v9.3.1: 9.3.1

Compare Source

This is a patch release for 9.3.0. We recommend using 9.3.1 instead of 9.3.0.

The following issues were resolved:

• Cannot find testcases from Android Screenshot Test plugin since Gradle 9.3.0
• Excluding dependencies from included builds doesn't work in Gradle 9.3.0
• ExternalDependency and DependencyConstraint cannot be passed to DependencyResolveDetails#useTarget
• Gradle 9.3.0 generate JUnit test result files with wrong name
• Build cache cannot handle outputs with non-BMP characters in the filename
• Emojis in test names should not break build caching
• Non utf-8 c code is no longer buildable
• Breaking change in 9.3.0 regarding cross-project dependency manipulation
• JUnit3 tests cannot be run with Gradle 9.3.0
• Test.setScanForTestClasses(false) causes all junit4 tests to be skipped

Read the Release Notes

Upgrade instructions

Switch your build to use Gradle 9.3.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.3.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

gradle/actions (gradle/actions)

v5

Compare Source

madrapps/jacoco-report (madrapps/jacoco-report)

v1.7.2

Compare Source

What's Changed

• Bump typescript from 5.5.4 to 5.6.2 by @​dependabot in Madrapps#134
• Bump @​types/jest from 29.5.12 to 29.5.13 by @​dependabot in Madrapps#135
• Bump @​typescript-eslint/parser from 8.4.0 to 8.5.0 by @​dependabot in Madrapps#136
• Bump @​types/node from 22.5.4 to 22.5.5 by @​dependabot in Madrapps#139
• Bump eslint-plugin-github from 5.0.1 to 5.0.2 by @​dependabot in Madrapps#140
• Bump typescript-eslint from 8.4.0 to 8.6.0 by @​dependabot in Madrapps#142
• Support for Workflow Summary by @​thsaravana in Madrapps#143
• Add coverage report to PR for push event by @​thsaravana in Madrapps#144
• Add support for more events - schedule, workflow_dispatch, workflow_run by @​thsaravana in Madrapps#145
• Bump eslint-plugin-n from 17.10.2 to 17.10.3 by @​dependabot in Madrapps#146
• Bump eslint from 8.57.0 to 8.57.1 by @​dependabot in Madrapps#148
• Bump @​types/node from 22.5.5 to 22.7.4 by @​dependabot in Madrapps#150
• Bump @​vercel/ncc from 0.38.1 to 0.38.2 by @​dependabot in Madrapps#154
• Bump webpack from 5.94.0 to 5.95.0 by @​dependabot in Madrapps#155
• Bump typescript-eslint from 8.6.0 to 8.8.0 by @​dependabot in Madrapps#157
• Bump @​eslint/js from 9.10.0 to 9.12.0 by @​dependabot in Madrapps#158
• Bump eslint-plugin-import from 2.30.0 to 2.31.0 by @​dependabot in Madrapps#160
• Bump @​actions/core from 1.10.1 to 1.11.1 by @​dependabot in Madrapps#162
• Bump typescript from 5.6.2 to 5.7.2 by @​dependabot in Madrapps#199
• Bump cross-spawn from 7.0.3 to 7.0.6 by @​dependabot in Madrapps#204
• Bump @​eslint/js from 9.12.0 to 9.17.0 by @​dependabot in Madrapps#216
• Bump @​types/node from 22.7.4 to 22.10.2 by @​dependabot in Madrapps#219
• Bump globals from 15.9.0 to 15.14.0 by @​dependabot in Madrapps#222
• Bump eslint-plugin-n from 17.10.3 to 17.15.1 by @​dependabot in Madrapps#224
• Bump @​typescript-eslint/parser from 8.8.0 to 8.18.2 by @​dependabot in Madrapps#225
• Bump typescript-eslint from 8.8.0 to 8.18.2 by @​dependabot in Madrapps#226
• Update README.md by @​thsaravana in Madrapps#230

Full Changelog: Madrapps/jacoco-report@v1.7.1...v1.7.2

stefanzweifel/git-auto-commit-action (stefanzweifel/git-auto-commit-action)

v7

Compare Source

Added

• Add skip_push input option (#​401) @​kvanzuijlen

Changes

• docs: fix typo in README.md (#​400) @​GideonBear

Dependency Updates

• Bump actions/checkout from 5 to 6 (#​399) [@​dependabot[bot]](https://github.com/@​[dependabot[bot]](https://github.com/apps/dependabot))
• Bump bats from 1.12.0 to 1.13.0 (#​398) [@​dependabot[bot]](https://github.com/@​[dependabot[bot]](https://github.com/apps/dependabot))

v6

Compare Source

Fixed

• Disable Check if Repo is in Detached State (#​379) @​stefanzweifel

cashapp/turbine (app.cash.turbine:turbine)

v1.2.1

Compare Source

Changed

• In-development snapshots are now published to the Central Portal Snapshots repository at https://central.sonatype.com/repository/maven-snapshots/.

Fixed

• Calling testIn with a CoroutineScope that does not contain a Job no longer throws IllegalStateException.

google/truth (com.google.truth:truth)

v1.4.5: 1.4.5

• Changed assertions like assertThat(nullMap).isEmpty() to fail with a useful failure message instead of throwing NullPointerException (and similarly for other "bogus" values, such as negative sizes). (da5d6e9)
• Made Kotlin's isInstanceOf(Int::class.java) (and Java's isInstanceOf(int.class)) a valid way to check for Int/Integer instances. (974ef19)
• Improved isWithin to pretty-print numbers in its failure messages. (de78553, 07318c2)
• Improved some assertions that print class names to print simpler names (e.g., Integer instead of java.lang.Integer). (0ba72d6)
• Changed ExpectFailure to never generate "value of" lines based on bytecode. This slightly simplifies writing new tests with ExpectFailure and prevents future behavior changes in some ExpectFailure tests that already exist. However, it may also require changes to other existing ExpectFailure tests to remove or change any assertions about the "value of" line. (3caa0e8)
• Our Android minSdkVersion is now 23 (Marshmallow). This follows the minimum of Google's foundational Android libraries, and we expect it to have no practical impact on users. (c85c75c)
• Changed our GWT/J2CL artifact to omit usages of @NullMarked. This was making all our types non-null in those environments, since we don't yet use @Nullable in the GWT/J2CL artifact. (6392d37)

takahirom/roborazzi (io.github.takahirom.roborazzi)

v1.58.0

Compare Source

Bugfix: Fixed NoClassDefFoundError in RoborazziPlugin when the Android Plugin is not applied

Previously, we never touched the Android Plugin class when it wasn’t in use; nevertheless, a NoClassDefFoundError was raised because the plugin contained a method that referenced the Android Plugin class. I therefore extracted Android-related code into a separate class to resolve the issue. Thank you, @​rnett, for reporting this.

Update: Device qualifiers

You can now specify device qualifiers via RobolectricDeviceQualifiers. The list has been expanded with new devices such as Pixel9, XRGlasses, and even AIGlasses!
Thank you, @​joergmis, for your contribution.

What's Changed

• Ensure StoreScreenshot records Android host tests by @​takahirom in #​790
• Use debug unit test for roborazzi-core by @​takahirom in #​792
• Update device qualifiers by @​joergmis in #​793
• Isolate Android-specific code to support non-Android KMP projects by @​takahirom in #​795

New Contributors

• @​joergmis made their first contribution in #​793

Full Changelog: takahirom/roborazzi@1.57.0...1.58.0

v1.57.0

Compare Source

Fix AGP 9.0 KMP preview screenshots

We had been using unitTestSources?.**java**?.addGeneratedSourceDirectory, but this approach proved ineffective when we adopted com.android.kotlin.multiplatform.library. Consequently, we migrated to unitTestSources?.**kotlin**?.addGeneratedSourceDirectory for the KMP plugin. Unfortunately, when applying com.android.library, unitTestSources?.kotlin remains non-functional, so we must toggle between the two depending on the plugin.
Thank you for reporting this @​HLCaptain !

(This is our plugin code, you don't have to write this.)

  val isKmpLibrary = project.plugins.hasPlugin("com.android.kotlin.multiplatform.library")
  if (isKmpLibrary) {
    unitTestSources?.kotlin?.addGeneratedSourceDirectory(
      generateTestsTask,
      GenerateComposePreviewRobolectricTestsTask::outputDir
    )
  } else {
    unitTestSources?.java?.addGeneratedSourceDirectory(
      generateTestsTask,
      GenerateComposePreviewRobolectricTestsTask::outputDir
    )
  }

Bugfix: Compose Preview’s onSizeChanged{} wasn’t called when multiple windows exist.

There is a bug in which Compose Preview’s onSizeChanged{} fails to fire when multiple windows are present. This issue arises because we neglected to invoke

      composeTestRule.mainClock.advanceTimeByFrame()
      composeTestRule.waitForIdle()

Reproducing screenshots

What's Changed

• [CI] Migrate from gradle-build-action to gradle/actions/setup-gradle by @​takahirom in #​788
• Add PreviewPopupWithMeasure for reproduction by @​takahirom in #​787
• Fix doBeforeCapture not called with multiple windows by @​takahirom in #​786
• Use sources.kotlin for KMP library generated test sources by @​takahirom in #​789

Full Changelog: takahirom/roborazzi@1.56.0...1.57.0

square/retrofit (com.squareup.retrofit2:converter-kotlinx-serialization)

v3.0.0

Compare Source

Changed

• Upgrade to OkHttp 4.12 (from 3.14).

  This is the version of OkHttp that is written in Kotlin, and as a result Retrofit now has a transitive Kotlin dependency. However, this is also the supported version of OkHttp whereas the previous version was out of support for nearly 4 years.

Note: The 3.x versions of Retrofit maintain forward binary-compatibility with the 2.x versions.
This means libraries compiled against 2.x can still be used with the 3.x versions.

v2.12.0

Compare Source

New

• First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

  The following converters support this feature through a new withStreaming() factory method:

  • Gson
  • Jackson
  • Moshi
  • Protobuf
  • Wire

Fixed

• Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.

protocolbuffers/protobuf (com.google.protobuf:protoc)

v4.31.1

v4.31.0

v4.30.2

v4.30.1

square/okhttp (com.squareup.okhttp3:logging-interceptor)

v5.3.2

2025-11-18

• Fix: Don't delay triggering timeouts. In Okio 3.16.0 we introduced a regression that caused
  timeouts to fire later than they were supposed to.

• Upgrade: [Okio 3.16.4][okio_3_16_4].

v5.3.1

2025-11-16

This release is the same as 5.3.0. Okio 3.16.3 didn't have a necessary fix!

• Upgrade: [Okio 3.16.3][okio_3_16_3].

v5.3.0

2025-10-30

• New: Add tags to Call, including computable tags. Use this to attach application-specific
  metadata to a Call in an EventListener or Interceptor. The tag can be read in any other
  EventListener or Interceptor.

    override fun intercept(chain: Interceptor.Chain): Response {
      chain.call().tag(MyAnalyticsTag::class) {
        MyAnalyticsTa
  

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[SimonMarquis]

Beware, the badging check job in CI failed, but the PR mentions all checks have passed.

• [Bug]: CI allows merging PRs with failing checks #1045