From 2c9f70e9e82eb0285148957417f8a2005a20ba66 Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 22 Aug 2026 14:30:17 +0000 Subject: [PATCH] chore(deps): update dependencies and the Gradle wrapper MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Sweep every dependency coordinate in the version catalog, the hardcoded ones in the module build scripts, the Gradle wrapper and the GitHub Actions against their upstream metadata, and take the newest release that keeps each pin on the same stability channel it was already on. Version catalog: firebaseBom 34.17.0 -> 34.18.0 jacksonModuleKotlin 2.22.1 -> 2.22.2 okhttp 5.4.0 -> 5.5.0 sonarqubeGradlePlugin 7.3.1.8318 -> 7.4.0.8496 spotless 8.9.0 -> 8.10.0 vico-charts-compose 3.2.3 -> 3.3.0 vico had been held back at 3.2.3 because the only newer builds were the 3.3.0-next prereleases; 3.3.0 has since shipped stable, so the pin moves without leaving the stable channel. sonarqube-gradle-plugin is published on the Gradle plugin portal, not Maven Central — the `3.3` that Central still serves for that coordinate is a stale line unrelated to the current 7.x releases. It stays LGPL-3.0 and build-time only, gated behind the local.properties sonar opt-in in the root build script, so nothing new enters a shipped artifact. Gradle wrapper 9.7.0 -> 9.7.1, with distributionSha256Sum updated to the checksum published for 9.7.1. Already current, so untouched: every other catalog ref (AGP, Kotlin, compose-multiplatform, the compose BOM, media3, coil, ktor, secp256k1, camera, sqlite, ...), the hardcoded coordinates in the module build scripts (tink-android 1.23.0, tracing-perfetto 1.0.1, opus-java 1.1.1, jna 5.19.1, nucleus.notification-* 1.15.7, kotlinx-crypto-* 0.0.4), and every GitHub Action — the floating major tags are all on their newest major and setup-java is already pinned at v5.7.0, the newest release. Left alone on purpose: - appfunctions stays at 1.0.0-alpha09: `appfunctions` and `appfunctions-compiler` publish alpha10 but `appfunctions-service` still stops at alpha09, and all three share the ref. - composeRuntimeAnnotation stays at 1.12.0 because it has to track whatever the compose BOM pins, and 2026.08.00 is still the newest. - The org.jetbrains.compose.material3 pin stays at 1.9.0 — everything above it is a 1.10/1.11/1.12 alpha. - The @moq/* npm pins in nestsClient/tests/browser-interop, which the directory's REV file ties to the moq-relay git rev in hang-interop/REV; bumping the 0.2.x (moq-lite-03) line is a wire-protocol change that has to move with the Rust relay pin. - quartz/tools/tsmls-vector-gen stays on ts-mls 2.0.0-rc.10. That generator emits the committed MLS KAT vector with fresh randomness each run, so moving it means regenerating and re-verifying the fixture, not a routine version bump. Its @noble/* deps already float on caret ranges. - The Docker base images (eclipse-temurin:21, rustc 1.95.0) are toolchain pins tied to the JDK target and the moq-relay pin. No new dependencies are introduced, so no new licenses enter the build. Verified: :amethyst:compilePlayDebugKotlin, :desktopApp/:cli/:geode/ :relayBench compileKotlin and spotlessCheck all pass on Gradle 9.7.1. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01RnezWP7LpA6amBCVxtGQ5b --- gradle/libs.versions.toml | 12 ++++++------ gradle/wrapper/gradle-wrapper.properties | 4 ++-- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index 73ddab6fc4..2e528ee187 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -25,11 +25,11 @@ coreKtx = "1.19.0" datastore = "1.2.1" devWhyolegCryptography = "0.6.0" espressoCore = "3.7.0" -firebaseBom = "34.17.0" +firebaseBom = "34.18.0" fragmentKtx = "1.9.0" gms = "4.5.0" healthConnect = "1.1.0" -jacksonModuleKotlin = "2.22.1" +jacksonModuleKotlin = "2.22.2" javaKeyring = "1.0.4" kmpTorRuntime = "2.6.0" kmpTorResource = "409.5.0" @@ -57,21 +57,21 @@ kotlinx-coroutines-test = "1.11.0" negentropyKmp = "v1.2.0" netUrlencoderLibVersion = "1.6.0" navigationCompose = "2.9.8" -okhttp = "5.4.0" +okhttp = "5.5.0" osmdroid = "6.1.20" runner = "1.7.0" secp256k1KmpJniAndroid = "0.24.0" schnorr256k1Kmp = "1.0.5" securityCryptoKtx = "1.1.0" slf4j = "2.0.18" -sonarqubeGradlePlugin = "7.3.1.8318" -spotless = "8.9.0" +sonarqubeGradlePlugin = "7.4.0.8496" +spotless = "8.10.0" streamWebrtcAndroid = "1.3.10" translate = "17.0.3" jetbrainsCompose = "1.11.1" unifiedpush = "3.0.10" playServicesCast = "22.3.1" -vico-charts-compose = "3.2.3" +vico-charts-compose = "3.3.0" zelory = "3.0.1" zoomable = "2.13.0" composemediaplayer = "0.11.4" diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties index 7f30039730..7058e46691 100644 --- a/gradle/wrapper/gradle-wrapper.properties +++ b/gradle/wrapper/gradle-wrapper.properties @@ -1,7 +1,7 @@ #Wed Jan 04 09:23:50 EST 2023 distributionBase=GRADLE_USER_HOME -distributionUrl=https\://services.gradle.org/distributions/gradle-9.7.0-bin.zip -distributionSha256Sum=84fbba45c7f4c64abc77460e1c00f541e9f960e3c7ed2538f1ede19eacd873ae +distributionUrl=https\://services.gradle.org/distributions/gradle-9.7.1-bin.zip +distributionSha256Sum=acd53f1edaf02f1a8ff99879f8a34b302661a057d9b063ae9e35b552f804d20a distributionPath=wrapper/dists zipStorePath=wrapper/dists zipStoreBase=GRADLE_USER_HOME