Update all dependencies by renovate[bot] · Pull Request #195 · android/androidify

renovate · 2026-01-30T03:49:02Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	`v4` → `v7`
actions/setup-java	action	major	`v4` → `v5`
actions/upload-artifact	action	major	`v4` → `v7`
android_logger	dependencies	minor	`0.13` → `0.15`
gradle (source)		minor	`9.5.1` → `9.6.1`
gradle/actions	action	major	`v4` → `v6`
jni	dependencies	minor	`0.21.1` → `0.22.0`
log	dependencies	patch	`0.4.27` → `0.4.33`
stefanzweifel/git-auto-commit-action	action	major	`v5` → `v7`
androidx.xr.compose:compose (source)	dependencies	patch	`1.0.0-alpha14` → `1.0.0-alpha15`
androidx.lifecycle:lifecycle-process (source)	dependencies	minor	`2.10.0` → `2.11.0`
androidx.compose.ui:ui-tooling (source)	dependencies	patch	`1.11.2` → `1.11.3`
androidx.test.uiautomator:uiautomator (source)	dependencies	patch	`2.4.0-beta02` → `2.4.0-rc01`
androidx.compose.ui:ui-text-google-fonts (source)	dependencies	patch	`1.11.2` → `1.11.3`
com.diffplug.spotless	plugin	minor	`8.6.0` → `8.7.0`
com.squareup.okhttp3:okhttp (source)	dependencies	minor	`5.3.2` → `5.4.0`
androidx.navigation3:navigation3-ui (source)	dependencies	patch	`1.1.2` → `1.1.3`
androidx.navigation3:navigation3-runtime (source)	dependencies	patch	`1.1.2` → `1.1.3`
androidx.compose.material3:material3 (source)	dependencies	patch	`1.5.0-alpha20` → `1.5.0-alpha22`
com.squareup.okhttp3:logging-interceptor (source)	dependencies	minor	`5.3.2` → `5.4.0`
androidx.lifecycle:lifecycle-viewmodel-navigation3 (source)	dependencies	patch	`2.11.0-beta02` → `2.11.0`
androidx.lifecycle:lifecycle-viewmodel-compose (source)	dependencies	minor	`2.10.0` → `2.11.0`
androidx.lifecycle:lifecycle-viewmodel-ktx (source)	dependencies	minor	`2.10.0` → `2.11.0`
androidx.lifecycle:lifecycle-runtime-compose (source)	dependencies	minor	`2.10.0` → `2.11.0`
androidx.lifecycle:lifecycle-runtime-ktx (source)	dependencies	minor	`2.10.0` → `2.11.0`
org.spdx.sbom	plugin	minor	`0.9.0` → `0.11.0`
org.jetbrains.kotlin.plugin.serialization (source)	plugin	minor	`2.3.21` → `2.4.0`
com.google.devtools.ksp (source)	plugin	patch	`2.3.6` → `2.3.9`
org.jetbrains.kotlin.plugin.compose (source)	plugin	minor	`2.3.21` → `2.4.0`
org.jetbrains.kotlin.android (source)	plugin	minor	`2.3.21` → `2.4.0`
org.jetbrains.kotlin:kotlin-gradle-plugin (source)	dependencies	minor	`2.3.21` → `2.4.0`
org.jetbrains.kotlin:kotlin-test-junit (source)	dependencies	minor	`2.3.21` → `2.4.0`
com.google.dagger.hilt.android	plugin	minor	`2.59.2` → `2.60`
com.google.dagger:hilt-compiler	dependencies	minor	`2.59.2` → `2.60`
com.google.dagger:hilt-android-testing	dependencies	minor	`2.59.2` → `2.60`
com.google.dagger:hilt-android	dependencies	minor	`2.59.2` → `2.60`
com.google.guava:guava	dependencies	patch	`33.6.0-android` → `33.6.0-jre`
com.google.gms.google-services	plugin	minor	`4.4.4` → `4.5.0`
com.google.firebase:firebase-bom	dependencies	minor	`34.14.0` → `34.15.0`
androidx.core:core-ktx (source)	dependencies	minor	`1.18.0` → `1.19.0`
androidx.compose:compose-bom	dependencies	minor	`2026.05.01` → `2026.06.00`
io.coil-kt.coil3:coil-gif	dependencies	minor	`3.4.0` → `3.5.0`
io.coil-kt.coil3:coil-network-okhttp	dependencies	minor	`3.4.0` → `3.5.0`
io.coil-kt.coil3:coil-compose	dependencies	minor	`3.4.0` → `3.5.0`
com.diffplug.spotless:spotless-plugin-gradle	dependencies	major	`7.0.2` → `8.7.0`

Release Notes

actions/checkout (actions/checkout)

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v7`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

Add worktree support for persist-credentials includeIf by @ericsciple in #2327

`v6.0.0`

Compare Source

Persist creds to a separate file by @ericsciple in #2286
Update README to include Node.js 24 support details and requirements by @salmanmkc in #2248

`v6`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

`v5.0.1`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

`v5.0.0`

Compare Source

Update actions checkout to use node 24 by @salmanmkc in #2226

`v5`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

actions/setup-java (actions/setup-java)

`v5.4.0`

Compare Source

What's Changed

Bump @typescript-eslint/parser from 8.48.0 to 8.61.1 by @dependabot[bot] in #1021
Fix codeql workflow permissions by @jsoref in #993
fix CodeQL permissions by @gdams in #1025
fix: reject non-semver candidate versions in isVersionSatisfies by @sproctor in #1009
Bump @actions/cache to 5.1.0, handle cache write denied by @jasongin in #1026
Add Maven Wrapper cache feature by @mahabaleshwars in #1027
Spelling by @jsoref in #713
add link to advanced configuration for JetBrains by @robstoll in #850
docs(action): fix missing required or default fields by @kranthipoturaju in #1007
feat: add microsoft openjdk 17.0.18 by @al-kau in #1002
Update README.md - use "alert syntax for Markdown" for notes by @mhoffrog in #924
Bump undici from 6.24.1 to 6.27.0 by @dependabot[bot] in #1033
Update contributor guide with emoji for clarity by @brunoborges in #1028
add javac problem matcher by @Trass3r in #562
Clarify README version syntax and migration guidance by @brunoborges with @Copilot in #1038
Update undici artifacts to 6.27.0 (license cache + dist) by @brunoborges in #1040
docs: enhance custom jdk file installation by @stephanabel in #996
Templates for new Java distributions by @panticmilos in #429
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #1032
Bump @types/node from 25.9.3 to 26.0.0 by @dependabot[bot] in #1031
docs: replace non-existent HelloWorldApp references with java --version by @brunoborges with @Copilot in #1043
docs: add JavaFX Maven project configuration instructions by @brunoborges with @Copilot in #1044
docs: self-signed certificate / internal CA handling for GitHub Enterprise by @brunoborges in #1050
docs: document importing an internal CA into the installed JDK (cacerts) by @brunoborges in #1051
chore: Harden workflows: least-privilege permissions + zizmor integration by @brunoborges in #1039
dist: Add GraalVM Community distribution support by @brunoborges with @Copilot in #1042
docs: note jdkfile approach for Early Access / unreleased JDK builds by @brunoborges in #1058
dist: Apply Copilot review suggestions from PR #1042 (GraalVM Community) by @brunoborges in #1059

New Contributors

@jsoref made their first contribution in #993
@sproctor made their first contribution in #1009
@jasongin made their first contribution in #1026
@robstoll made their first contribution in #850
@kranthipoturaju made their first contribution in #1007
@al-kau made their first contribution in #1002
@mhoffrog made their first contribution in #924
@brunoborges made their first contribution in #1028
@Trass3r made their first contribution in #562
@stephanabel made their first contribution in #996

Full Changelog: actions/setup-java@v5...v5.4.0

`v5.3.0`

Compare Source

What's Changed

chore: update Java version to 25 in setup examples by @alaahong in #969
Bump minimatch from 3.1.2 to 3.1.5 by @dependabot[bot] in #984
Refactor error handling and improve test logging for installers by @chiranjib-swain in #989
chore: upgrade dependencies (@actions/core, cache, glob, http-client, tool-cache, xmlbuilder2) by @Copilot in #999
Add Oracle JDK 17 licensing limitation note by @mahabaleshwars in #1001
Update readme for ubuntu sudo java_home behavior by @mahabaleshwars in #1013
temurin: add support for Alpine Linux by @gdams in #674
fix: resolve npm audit vulnerabilities in fast-xml-builder and fast-xml-parser by @gdams in #1015
Bump @typescript-eslint/eslint-plugin from 8.35.1 to 8.48.0 by @dependabot[bot] in #952
Bump eslint-config-prettier from 8.10.0 to 10.1.8 by @dependabot[bot] in #881
Bump picomatch, @types/jest, jest, jest-circus and ts-jest by @dependabot[bot] in #1016
Bump @types/node from 24.1.0 to 25.9.3 by @dependabot[bot] in #950
Implement pagination with link headers for Adoptium based apis by @johnoliver in #1014
Make the Adoptopenjdk package type look at the Temurin repo first for latest assets by @johnoliver in #522
Bump @vercel/ncc from 0.38.1 to 0.44.0 by @dependabot[bot] in #1018

New Contributors

@alaahong made their first contribution in #969
@Copilot made their first contribution in #999
@johnoliver made their first contribution in #1014

Full Changelog: actions/setup-java@v5...v5.3.0

`v5.2.0`

Compare Source

What's Changed

Enhancement

Retry on HTTP 522 Connection timed out by @findepi in #964

Documentation Changes

Update gradle caching by @priya-kinthali in #972
Update checkout to v6 by @mahabaleshwars in #973

Dependency Updates

Upgrade @actions/cache to v5 by @salmanmkc in #968
Upgrade actions/checkout from 5 to 6 by @dependabot in #961

New Contributors

@findepi made their first contribution in #964

Full Changelog: actions/setup-java@v5...v5.2.0

`v5.1.0`

Compare Source

What's Changed

New Features

Add support for .sdkmanrc file in java-version-file parameter by @guicamest in #736
Add support for Microsoft OpenJDK 25 builds by @the-mod in #927

Bug Fixes & Improvements

Update Regex to Support All ASDF Versions for the supported distributions in tool-versions File by @aparnajyothi-y in #767
Enhance error logging for network failures to include endpoint/IP details, add retry mechanism and update workflows to use macos-15-intel by @priya-kinthali in #946
Update SapMachine URLs by @RealCLanger in #955
Add GitHub Token Support for GraalVM and Refactor Code by @mahabaleshwars in #849

Documentation changes

Update documentation to use checkout and Java v5 by @lmvysakh in #903
Clarify JAVA_HOME and PATH setup in README by @chiranjib-swain in #841

Dependency updates

Upgrade prettier from 2.8.8 to 3.6.2 and document breaking changes in v5 by @dependabot in #873
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in #912

New Contributors

@lmvysakh made their first contribution in #903
@chiranjib-swain made their first contribution in #841
@the-mod made their first contribution in #927
@priya-kinthali made their first contribution in #946
@guicamest made their first contribution in #736

Full Changelog: actions/setup-java@v5...v5.1.0

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Upgrade to node 24 by @salmanmkc in #888

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency Upgrades

Upgrade Publish Immutable Action by @HarithaVattikuti in #798
Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @dependabot[bot] in #730
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #833
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #887
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #896

Bug Fixes

Prevent default installation of JetBrains pre-releases by @priyagupta108 in #859
Improve Error Handling for Setup-Java Action to Help Debug Intermittent Failures by @gowridurgad in #848

New Contributors

@gowridurgad made their first contribution in #848
@salmanmkc made their first contribution in #888

Full Changelog: actions/setup-java@v4...v5.0.0

`v5`

Compare Source

actions/upload-artifact (actions/upload-artifact)

`v7.0.1`

Compare Source

What's Changed

Update the readme with direct upload details by @danwkennedy in #795
Readme: bump all the example versions to v7 by @danwkennedy in #796
Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in #797

Full Changelog: actions/upload-artifact@v7...v7.0.1

`v7.0.0`

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Add proxy integration test by @Link- in #754
Upgrade the module to ESM and bump dependencies by @danwkennedy in #762
Support direct file uploads by @danwkennedy in #764

New Contributors

@Link- made their first contribution in #754

Full Changelog: actions/upload-artifact@v6...v7.0.0

`v7`

Compare Source

`v6.0.0`

Compare Source

v6 - What's new

[!IMPORTANT]
actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Upload Artifact Node 24 support by @salmanmkc in #719
fix: update @actions/artifact for Node.js 24 punycode deprecation by @salmanmkc in #744
prepare release v6.0.0 for Node.js 24 support by @salmanmkc in #745

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

`v6`

Compare Source

`v5.0.0`

Compare Source

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

Update README.md by @GhadimiR in #681
Update README.md by @nebuk89 in #712
Readme: spell out the first use of GHES by @danwkennedy in #727
Update GHES guidance to include reference to Node 20 version by @patrikpolyak in #725
Bump @actions/artifact to v4.0.0
Prepare v5.0.0 by @danwkennedy in #734

New Contributors

@GhadimiR made their first contribution in #681
@nebuk89 made their first contribution in #712
@danwkennedy made their first contribution in #727
@patrikpolyak made their first contribution in #725

Full Changelog: actions/upload-artifact@v4...v5.0.0

`v5`

Compare Source

gradle/gradle (gradle)

`v9.6.1`

Compare Source

`v9.6.0`

Compare Source

gradle/actions (gradle/actions)

`v6.2.0`

Compare Source

Highlights

This release brings significant behaviour improvements to Enhanced caching, improvements to the generated Job Summary, and a number of correctness and security fixes.

Improved cache-cleanup mechanism. Cleanup of stale files from the Gradle User Home is now faster, and no longer depends on Gradle or a JVM. It works by inspecting the local file state directly, removing the Gradle invocation from the post-build step.
More granular, more stable caching. The local build cache is stored as a separate cache entry, so it can be restored and invalidated independently of the main Gradle User Home entry. Transient Gradle housekeeping files are excluded from the cache, reducing its size and improving stability.
Hide obsolete Job summaries in PR commments: When a new Job summary comment is added to a PR, previous outdated Job summaries are now hidden.
Improved caching report in the job summary. The cache report now uses a single, consistent layout across all cache states and providers. Provider information is integrated directly into the report, and per-entry details are available in an expandable section. (#985)
Correctness and security fixes. A unique cache key is now used per run attempt, so re-runs no longer collide; the job summary shows the cache key string rather than an internal id; and bundled dependencies have been updated, including a ReDoS fix and a fast-xml CVE fix.

What's Changed

Remove unnecessary dependency overrides by @bigdaz in #981
Scope CI-integ-test concurrency groups per-branch by @bigdaz in #983
Improve typings by @Vampire in #938
Hide obsolete Job summaries by @SimonMarquis in #902
CI: add requireable aggregate/no-op checks for branch protection by @bigdaz in #984
Redesign the caching Job Summary by @bigdaz in #985

New Contributors

@Vampire made their first contribution in #938

Full Changelog: gradle/actions@v6.1.1...v6.2.0

`v6.1.1`

Compare Source

This release updates various dependency versions, resolving several reported security vulnerabilities.
No functional changes are included

What's Changed

Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /sources/test/init-scripts by @bot-githubaction in #961
Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /.github/workflow-samples/gradle-plugin by @bot-githubaction in #962
Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /.github/workflow-samples/groovy-dsl by @bot-githubaction in #963
Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /.github/workflow-samples/java-toolchain by @bot-githubaction in #964
Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /.github/workflow-samples/kotlin-dsl by @bot-githubaction in #965
Update known wrapper checksums by @github-actions[bot] in #937
Bump the github-actions group across 2 directories with 8 updates by @dependabot[bot] in #976
Bump the npm-dependencies group across 1 directory with 14 updates by @dependabot[bot] in [#&

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM (* 0-3 * * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot requested review from riggaroo and tiwiz as code owners January 30, 2026 03:49

renovate Bot force-pushed the renovate/all branch 4 times, most recently from 405ca78 to 415103b Compare February 6, 2026 11:26

renovate Bot force-pushed the renovate/all branch 3 times, most recently from b93b3eb to 16f170c Compare February 18, 2026 08:15

DannysBabygirl approved these changes Feb 18, 2026

View reviewed changes

renovate Bot force-pushed the renovate/all branch from 16f170c to d5a5bac Compare February 21, 2026 07:07

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 3e9ac82 to 178ce21 Compare March 2, 2026 05:06

wintezz mentioned this pull request Mar 4, 2026

Fixes build after androidx.xr.compose:compose update to 1.0.0-alpha11 #203

Merged

renovate Bot force-pushed the renovate/all branch from 178ce21 to 1e1cdcf Compare March 5, 2026 13:47

renovate Bot force-pushed the renovate/all branch from 1e1cdcf to b0abcac Compare March 14, 2026 11:51

renovate Bot force-pushed the renovate/all branch from b0abcac to 1feb7d9 Compare March 31, 2026 07:51

renovate Bot force-pushed the renovate/all branch from 1feb7d9 to e75d23b Compare April 15, 2026 13:56

renovate Bot force-pushed the renovate/all branch 3 times, most recently from f65a094 to 61276ab Compare May 6, 2026 19:54

renovate Bot force-pushed the renovate/all branch 4 times, most recently from c2a849c to d711623 Compare May 14, 2026 12:03

renovate Bot force-pushed the renovate/all branch 2 times, most recently from a97c2c5 to 9497f9f Compare May 22, 2026 07:55

renovate Bot force-pushed the renovate/all branch 2 times, most recently from af6d0d2 to 56e61e3 Compare May 26, 2026 20:12

renovate Bot force-pushed the renovate/all branch 5 times, most recently from efd9cde to cf6aff2 Compare June 2, 2026 17:08

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 004d686 to 96b1b2c Compare June 12, 2026 15:51

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 6756fb4 to 8b9ef05 Compare June 21, 2026 19:37

Update all dependencies

39f48d0

renovate Bot force-pushed the renovate/all branch from 8b9ef05 to 39f48d0 Compare June 27, 2026 15:59

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update all dependencies#195

Update all dependencies#195
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all

renovate Bot commented Jan 30, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

renovate Bot commented Jan 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Enhancement

Documentation Changes

Dependency Updates

New Contributors

What's Changed

New Features

Bug Fixes & Improvements

Documentation changes

Dependency updates

New Contributors

What's Changed

Breaking Changes

Dependency Upgrades

Bug Fixes

New Contributors

What's Changed

v7 What's new

Direct Uploads

ESM

What's Changed

New Contributors

v6 - What's new

Node.js 24

What's Changed

What's Changed

New Contributors

Highlights

What's Changed

New Contributors

What's Changed

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Jan 30, 2026 •

edited

Loading