Skip to content

chore(deps): bump the version-updates group in /android with 10 updates - #392

Merged
spacesarmat merged 2 commits into
mainfrom
dependabot/gradle/android/version-updates-d90cfad172
Nov 12, 2026
Merged

chore(deps): bump the version-updates group in /android with 10 updates#392
spacesarmat merged 2 commits into
mainfrom
dependabot/gradle/android/version-updates-d90cfad172

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the version-updates group in /android with 10 updates:

Package From To
org.jetbrains.kotlin:kotlin-gradle-plugin 2.4.20 2.4.21
commons-io:commons-io 2.18.0 2.22.0
org.apache.commons:commons-lang3 3.18.0 3.21.0
com.squareup.okhttp3:okhttp 4.12.0 4.12.1
androidx.work:work-runtime-ktx 2.10.3 2.12.0
com.github.mwiede:jsch 2.28.7 2.28.8
com.squareup.okhttp3:mockwebserver 4.12.0 4.12.1
org.robolectric:robolectric 4.16.1 4.17
androidx.work:work-testing 2.10.3 2.12.0
gradle-wrapper 9.6.0 9.9.0

Updates org.jetbrains.kotlin:kotlin-gradle-plugin from 2.4.20 to 2.4.21

Release notes

Sourced from org.jetbrains.kotlin:kotlin-gradle-plugin's releases.

Kotlin 2.4.21

Changelog

Backend. Wasm

  • KT-89267 K/Wasm: calling a (T) -> R lambda with an argument that isn't a T traps instead of throwing ClassCastException

JVM. Reflection

  • KT-89280 NoSuchElementException in argumentsMakeSenseOnlyForMutableContainer for Java non-static inner class of generic outer class
  • KT-80710 Reflection: change KCallable representation to avoid dependency on K1

JavaScript

  • KT-89449 Kotlin/JS: Member names no longer minified in production
  • KT-89363 KJS. Regular class with companion can't extend external class

Tools. Compiler plugins. Serialization

  • KT-89275 Kotlin/Wasm: Invalid Wasm is emitted for a @Serializable generic class with a class upper bound

Tools. Gradle. Native

  • KT-89285 SwiftPM import results in flooded log
  • KT-86251 K/N: Flaky linkDebugTestLinuxX64 failure with "truncated or malformed archive" on libstdlib-cache.a

Tools. Scripts

  • KT-89247 Kotlin Script: NoClassDefFoundError on 2nd execution with transitive dependency from imported script
  • KT-89220 JSR-223: generic Java bindings break all subsequent eval() calls
  • KT-88458 Audit closeable resource usage
  • KT-88453 VirtualFileScriptSource.text leaks an unclosed file stream — script source file handle held until GC, blocks file deletion on Windows

Kotlin 2.4.21-RC

Changelog

Backend. Wasm

  • KT-89267 K/Wasm: calling a (T) -> R lambda with an argument that isn't a T traps instead of throwing ClassCastException

JVM. Reflection

  • KT-89280 NoSuchElementException in argumentsMakeSenseOnlyForMutableContainer for Java non-static inner class of generic outer class
  • KT-80710 Reflection: change KCallable representation to avoid dependency on K1

JavaScript

  • KT-89449 Kotlin/JS: Member names no longer minified in production
  • KT-89363 KJS. Regular class with companion can't extend external class

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin:kotlin-gradle-plugin's changelog.

2.4.21

Backend. Wasm

  • KT-89267 K/Wasm: calling a (T) -> R lambda with an argument that isn't a T traps instead of throwing ClassCastException

JVM. Reflection

  • KT-89280 NoSuchElementException in argumentsMakeSenseOnlyForMutableContainer for Java non-static inner class of generic outer class
  • KT-80710 Reflection: change KCallable representation to avoid dependency on K1

JavaScript

  • KT-89449 Kotlin/JS: Member names no longer minified in production
  • KT-89363 KJS. Regular class with companion can't extend external class

Tools. Compiler plugins. Serialization

  • KT-89275 Kotlin/Wasm: Invalid Wasm is emitted for a @Serializable generic class with a class upper bound

Tools. Gradle. Native

  • KT-89285 SwiftPM import results in flooded log
  • KT-86251 K/N: Flaky linkDebugTestLinuxX64 failure with "truncated or malformed archive" on libstdlib-cache.a

Tools. Scripts

  • KT-89247 Kotlin Script: NoClassDefFoundError on 2nd execution with transitive dependency from imported script
  • KT-89220 JSR-223: generic Java bindings break all subsequent eval() calls
  • KT-88458 Audit closeable resource usage
  • KT-88453 VirtualFileScriptSource.text leaks an unclosed file stream — script source file handle held until GC, blocks file deletion on Windows
Commits
  • 9180ce6 Add changelog for 2.4.21-RC
  • 851077b [Serialization] Copy type parameter bounds onto generated serializers (#8421)
  • 1b6b624 [Wasm]: Generate a Kotlin-level cast for bridged lambda functions. (#8404)
  • 3c223c2 Rrr/2.4.20/core docs (#8322)
  • c681c2e [2.4.20] [KT-89285] Stop the xcodebuild logs being output by default (#8277)
  • f0645d1 [2.4.20] [JS] Reorder CompilerConfiguration properties initialization (#8282)
  • f507ecd [JS] Don't try to initialize an external class's companion object
  • c60d7d8 Reflection: fix NoSuchElementException in ConvertFromJava.kt
  • 05d1cde REPL: render correct reflected binding type
  • 5acec47 Scripting: store collected dependencies recursively
  • Additional commits viewable in compare view

Updates commons-io:commons-io from 2.18.0 to 2.22.0

Updates org.apache.commons:commons-lang3 from 3.18.0 to 3.21.0

Updates com.squareup.okhttp3:okhttp from 4.12.0 to 4.12.1

Commits

Updates androidx.work:work-runtime-ktx from 2.10.3 to 2.12.0

Updates com.github.mwiede:jsch from 2.28.7 to 2.28.8

Release notes

Sourced from com.github.mwiede:jsch's releases.

jsch-2.28.8

What's Changed

  • 2.28.8 changes by @​norrisjeremy in mwiede/jsch#1134
    • #1133: bounds check incoming SSH_FXP_DATA responses.
    • #1133: cap length of incoming HTTP status response lines.
    • #1127: expand on previous SftpATTRS bounds checks to properly close SSH_FX_READDIR handles.
    • #1139: add bounds checks when parsing prompts from SSH_MSG_USERAUTH_INFO_REQUEST messages.
    • #1127 & #1139: expand upon previous bounds checks to account for arithmetic overflow.
  • Support wildcard host certificate principals by @​tc-tlv in mwiede/jsch#1108
  • Expose local SFTP window/packet size setters as public by @​courville in mwiede/jsch#1145

Dependency Updates

New Contributors

Full Changelog: mwiede/jsch@jsch-2.28.7...jsch-2.28.8

Commits
  • 36c4d26 [maven-release-plugin] prepare release jsch-2.28.8
  • cd4e924 chore: downgrade maven version after publishing problems
  • 53f016a Expose local SFTP window/packet size setters as public (#1145)
  • 898c6c2 Run tests on Java 27.
  • cc7e534 Update to Maven 3.10.0.
  • 660f42d Follow OpenSSH behavior and restrict maximum number of KDF rounds.
  • 9b13e61 Follow OpenSSH behavior and use Huffman coding for zlib compression.
  • 780e57e #1127 & #1139: expand upon previous bounds checks to account for arithmetic o...
  • f94e745 #1139: add bounds checks when parsing prompts from SSH_MSG_USERAUTH_INFO_REQU...
  • d2a3658 #1127: expand on previous SftpATTRS bounds checks to properly close SSH_FX_RE...
  • Additional commits viewable in compare view

Updates com.squareup.okhttp3:mockwebserver from 4.12.0 to 4.12.1

Commits

Updates org.robolectric:robolectric from 4.16.1 to 4.17

Release notes

Sourced from org.robolectric:robolectric's releases.

Robolectric 4.17 supports SDK 37 and contains many other features and enhancements.

Please note you may need to add jvmFlags configuration when using JDKs >= 17 at https://robolectric.org/getting-started/

If you have any issues, please file them here.

Breaking Changes

AndroidVersions has been removed in favor of using android.os.Build constants ShadowCameraCharacteristics.set(Key, Object) has been changed to set(Key, T), in order to correctly reflect type enforcement in the framework

What's Changed

... (truncated)

Commits
  • 0706415 Bump version to 4.17.
  • f3c17bd Bump version to 4.17-beta-4.
  • 04b84f6 "fixed ResTable_package.SIZEOF value
  • f4ee543 Apply suggestion from @​gemini-code-assist[bot]
  • fb99bfb Expose BouncyCastle BoM as api dependency
  • a453192 Fix Javadoc for VersionCalculator
  • 6f26892 Bump version to 4.17-beta-3
  • ceffe96 Only adjust frameinfo timestamp values (including vsync).
  • ea5879f Add opt-in fix for stale screenshots on SDK 37.
  • 8bea421 Fix jank log spam on SDK 37+ by translating FrameInfo timestamps.
  • Additional commits viewable in compare view

Updates androidx.work:work-testing from 2.10.3 to 2.12.0

Updates gradle-wrapper from 9.6.0 to 9.9.0

Release notes

Sourced from gradle-wrapper's releases.

9.9.0

The Gradle team is excited to announce Gradle 9.9.0.

Here are the highlights of this release:

  • Performance improvements for Kotlin DSL compilation
  • Test filtering for non-method JUnit Platform tests
  • Wrapper settings preserved on upgrade
  • Predefined groups in the Problems API

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aurimas, devareddy05, DragonFSKY, fru1tworld, Ivan Khanas, Jeremy Schoemaker, John Burns, Labh R Jethe, Marcin Mycek, monkey, Nelson Osacky, Roberto Perez Alcolea, Róbert Papp, SeungTaek Lim, Stefan Oehme, 万彬宇, 한의준.

Upgrade instructions

Switch your build to use Gradle 9.9.0 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.9.0 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.9.0 RC1

The Gradle team is excited to announce Gradle 9.9.0 RC1.

... (truncated)

Commits
  • dabfe84 Document Groovy 6.0.0 as tested upper bound (#39723)
  • 122555d Document Groovy 6.0.0 as tested upper bound
  • 74ee0c8 Update Documentation: Link Build Scan and Develocity from docs pages (#39646)
  • 62c24fb Address review feedback on troubleshooting page
  • 8ecd0d6 Stop closing linked issues for PRs merged into release7x (#39703)
  • f2cb6ca Address review feedback on troubleshooting page
  • 6c04b55 Upgrade Documentation: Mention the Security Subscription on dependency, wrapp...
  • cb7f22d Stop closing linked issues for PRs merged into release7x
  • 8630de3 Use a task-not-found failure on troubleshooting
  • 1ae7701 Restore Extended Security Support section title
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the version-updates group in /android with 10 updates
2b113c8 
Bumps the version-updates group in /android with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [org.jetbrains.kotlin:kotlin-gradle-plugin](https://github.com/JetBrains/kotlin) | `2.4.20` | `2.4.21` |
| commons-io:commons-io | `2.18.0` | `2.22.0` |
| org.apache.commons:commons-lang3 | `3.18.0` | `3.21.0` |
| [com.squareup.okhttp3:okhttp](https://github.com/square/okhttp) | `4.12.0` | `4.12.1` |
| androidx.work:work-runtime-ktx | `2.10.3` | `2.12.0` |
| [com.github.mwiede:jsch](https://github.com/mwiede/jsch) | `2.28.7` | `2.28.8` |
| [com.squareup.okhttp3:mockwebserver](https://github.com/square/okhttp) | `4.12.0` | `4.12.1` |
| [org.robolectric:robolectric](https://github.com/robolectric/robolectric) | `4.16.1` | `4.17` |
| androidx.work:work-testing | `2.10.3` | `2.12.0` |
| [gradle-wrapper](https://github.com/gradle/gradle) | `9.6.0` | `9.9.0` |


Updates `org.jetbrains.kotlin:kotlin-gradle-plugin` from 2.4.20 to 2.4.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.4.20...v2.4.21)

Updates `commons-io:commons-io` from 2.18.0 to 2.22.0

Updates `org.apache.commons:commons-lang3` from 3.18.0 to 3.21.0

Updates `com.squareup.okhttp3:okhttp` from 4.12.0 to 4.12.1
- [Changelog](https://github.com/lysine-dev/okhttp/blob/main/CHANGELOG.md)
- [Commits](lysine-dev/okhttp@parent-4.12.0...parent-4.12.1)

Updates `androidx.work:work-runtime-ktx` from 2.10.3 to 2.12.0

Updates `com.github.mwiede:jsch` from 2.28.7 to 2.28.8
- [Release notes](https://github.com/mwiede/jsch/releases)
- [Changelog](https://github.com/mwiede/jsch/blob/master/ChangeLog)
- [Commits](mwiede/jsch@jsch-2.28.7...jsch-2.28.8)

Updates `com.squareup.okhttp3:mockwebserver` from 4.12.0 to 4.12.1
- [Changelog](https://github.com/lysine-dev/okhttp/blob/main/CHANGELOG.md)
- [Commits](lysine-dev/okhttp@parent-4.12.0...parent-4.12.1)

Updates `org.robolectric:robolectric` from 4.16.1 to 4.17
- [Release notes](https://github.com/robolectric/robolectric/releases)
- [Commits](robolectric/robolectric@robolectric-4.16.1...robolectric-4.17)

Updates `androidx.work:work-testing` from 2.10.3 to 2.12.0

Updates `gradle-wrapper` from 9.6.0 to 9.9.0
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.6.0...v9.9.0)

---
updated-dependencies:
- dependency-name: org.jetbrains.kotlin:kotlin-gradle-plugin
  dependency-version: 2.4.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-updates
- dependency-name: commons-io:commons-io
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-updates
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-updates
- dependency-name: com.squareup.okhttp3:okhttp
  dependency-version: 4.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-updates
- dependency-name: androidx.work:work-runtime-ktx
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-updates
- dependency-name: com.github.mwiede:jsch
  dependency-version: 2.28.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-updates
- dependency-name: com.squareup.okhttp3:mockwebserver
  dependency-version: 4.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: version-updates
- dependency-name: org.robolectric:robolectric
  dependency-version: '4.17'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-updates
- dependency-name: androidx.work:work-testing
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-updates
- dependency-name: gradle-wrapper
  dependency-version: 9.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 12, 2026
@spacesarmat
spacesarmat merged commit c731e5d into main Nov 12, 2026
11 checks passed
@dependabot
dependabot Bot deleted the dependabot/gradle/android/version-updates-d90cfad172 branch November 12, 2026 11:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@spacesarmat