Merge remote-tracking branch 'origin/main' into claude/podcast-event-kinds-merge-vv24gd

gradle/libs.versions.toml

@@ -19,7 +19,7 @@ benchmark = "1.5.0-alpha06"
 biometricKtx = "1.2.0-alpha05"
 coil = "3.5.0"
 composeBom = "2026.06.00"
-composeRuntimeAnnotation = "1.11.2"
+composeRuntimeAnnotation = "1.11.3"
 coreKtx = "1.19.0"
 datastore = "1.2.1"
 devWhyolegCryptography = "0.6.0"
@@ -62,13 +62,13 @@ secp256k1KmpJniAndroid = "0.23.0"
 schnorr256k1Kmp = "1.0.5"
 securityCryptoKtx = "1.1.0"
 slf4j = "2.0.18"
-spotless = "8.7.0"
+spotless = "8.8.0"
 streamWebrtcAndroid = "1.3.10"
 translate = "17.0.3"
 jetbrainsCompose = "1.11.1"
 unifiedpush = "3.0.10"
 playServicesCast = "22.3.1"
-vico-charts-compose = "3.2.2"
+vico-charts-compose = "3.2.3"
 zelory = "3.0.1"
 zoomable = "2.12.0"
 composemediaplayer = "0.10.0"
@@ -77,7 +77,7 @@ commonsImaging = "1.0.0-alpha6"
 thumbnailator = "0.4.21"
 zxing = "3.5.4"
 zxingAndroidEmbedded = "4.3.0"
-webkit = "1.12.1"
+webkit = "1.16.0"
 # Cross-process UI embedding (SurfaceControlViewHost wrapper) for the in-app browser surface. Apache-2.0.
 privacysandboxUi = "1.0.0-alpha17"
 windowCoreAndroid = "1.5.1"
@@ -87,9 +87,9 @@ androidxCollection = "1.6.0"
 androidxExifinterface = "1.4.2"
 kotlinTest = "2.4.0"
 core = "1.7.0"
-mavenPublish = "0.36.0"
+mavenPublish = "0.37.0"
 sqlite = "2.6.2"
-ktor = "3.5.0"
+ktor = "3.5.1"
 fourkoma = "1.2.0"
 
 # Phase 2 (Gemini App Functions) — both still pre-stable as of May 2026.