Skip to content

FAIR-58 deps: Bump the all-dependencies group across 1 directory with 15 updates - #25

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/all-dependencies-502f023b99
Open

FAIR-58 deps: Bump the all-dependencies group across 1 directory with 15 updates#25
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/all-dependencies-502f023b99

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown

Bumps the all-dependencies group with 15 updates in the / directory:

Package From To
gradle-wrapper 9.6.1 9.8.1
androidx.core:core-ktx 1.15.0 1.19.1
androidx.appcompat:appcompat 1.7.0 1.8.0
androidx.compose:compose-bom 2026.06.00 2026.09.00
androidx.navigation:navigation-compose 2.8.5 2.10.2
androidx.hilt:hilt-navigation-compose 1.2.0 1.4.0
androidx.room:room-runtime 2.8.4 2.8.5
androidx.room:room-ktx 2.8.4 2.8.5
androidx.room:room-compiler 2.8.4 2.8.5
androidx.room:room-ktx 2.8.4 2.8.5
androidx.room:room-compiler 2.8.4 2.8.5
com.squareup.retrofit2:retrofit 2.11.0 2.12.0
com.squareup.retrofit2:converter-kotlinx-serialization 2.11.0 2.12.0
com.squareup.retrofit2:converter-kotlinx-serialization 2.11.0 2.12.0
org.jetbrains.kotlinx:kotlinx-serialization-json 1.7.3 1.11.0
androidx.work:work-runtime-ktx 2.10.0 2.12.0
androidx.test.ext:junit 1.2.1 1.3.0
androidx.test.espresso:espresso-core 3.6.1 3.7.0

Updates gradle-wrapper from 9.6.1 to 9.8.1

Release notes

Sourced from gradle-wrapper's releases.

9.8.1

This is a patch release for Gradle 9.8.0. We recommend using 9.8.1 instead of 9.8.0.

This release addresses three high rated vulnerabilities:

The following issues were resolved:

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aman Gautam, Björn Kautler, Eng Zer Jun, Hashim Khan, Julian Krannich, KBS, Labh R Jethe, Mark Dodgson, Maxim, monkey, nataphon-ktsystems, Paul King, Qiu Tian, rg_sandesh, Roberto Perez Alcolea, Sean, Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

... (truncated)

Commits
  • 39daf39 Release notes for Gradle 9.8.1 (#39409)
  • 4fc92e5 Release notes for Gradle 9.8.1
  • bfbd14a Make repository disabling stricter (#39403)
  • 95e0bf9 Check daemon & worker preamble earlier (#39402)
  • 7aa9a5b Improve display for distribution url in wrapper (#39401)
  • 74a7720 Wrap GCP & S3 resolution errors into HTTP to reuse repository disabling mecha...
  • 651110a Check worker token before any serialization similarly to daemon
  • 8a6b9d9 Harden repository disabling: disable them by default on failure unless there'...
  • f28e514 Check the daemon token before any serialization
  • 86ab273 Replace credentials for distribution url with *** and avoid showing the plain...
  • Additional commits viewable in compare view

Updates androidx.core:core-ktx from 1.15.0 to 1.19.1

Updates androidx.appcompat:appcompat from 1.7.0 to 1.8.0

Updates androidx.compose:compose-bom from 2026.06.00 to 2026.09.00

Updates androidx.navigation:navigation-compose from 2.8.5 to 2.10.2

Updates androidx.hilt:hilt-navigation-compose from 1.2.0 to 1.4.0

Updates androidx.room:room-runtime from 2.8.4 to 2.8.5

Updates androidx.room:room-ktx from 2.8.4 to 2.8.5

Updates androidx.room:room-compiler from 2.8.4 to 2.8.5

Updates androidx.room:room-ktx from 2.8.4 to 2.8.5

Updates androidx.room:room-compiler from 2.8.4 to 2.8.5

Updates com.squareup.retrofit2:retrofit from 2.11.0 to 2.12.0

Release notes

Sourced from com.squareup.retrofit2:retrofit's releases.

2.12.0

New

  • First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

    The following converters support this feature through a new withStreaming() factory method:

    • Gson
    • Jackson
    • Moshi
    • Protobuf
    • Wire

Fixed

  • Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.
Changelog

Sourced from com.squareup.retrofit2:retrofit's changelog.

2.12.0 - 2025-05-15

New

  • First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

    The following converters support this feature through a new withStreaming() factory method:

    • Gson
    • Jackson
    • Moshi
    • Protobuf
    • Wire

Fixed

  • Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.
Commits

Updates com.squareup.retrofit2:converter-kotlinx-serialization from 2.11.0 to 2.12.0

Release notes

Sourced from com.squareup.retrofit2:converter-kotlinx-serialization's releases.

2.12.0

New

  • First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

    The following converters support this feature through a new withStreaming() factory method:

    • Gson
    • Jackson
    • Moshi
    • Protobuf
    • Wire

Fixed

  • Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.
Changelog

Sourced from com.squareup.retrofit2:converter-kotlinx-serialization's changelog.

2.12.0 - 2025-05-15

New

  • First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

    The following converters support this feature through a new withStreaming() factory method:

    • Gson
    • Jackson
    • Moshi
    • Protobuf
    • Wire

Fixed

  • Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.
Commits

Updates com.squareup.retrofit2:converter-kotlinx-serialization from 2.11.0 to 2.12.0

Release notes

Sourced from com.squareup.retrofit2:converter-kotlinx-serialization's releases.

2.12.0

New

  • First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

    The following converters support this feature through a new withStreaming() factory method:

    • Gson
    • Jackson
    • Moshi
    • Protobuf
    • Wire

Fixed

  • Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.
Changelog

Sourced from com.squareup.retrofit2:converter-kotlinx-serialization's changelog.

2.12.0 - 2025-05-15

New

  • First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

    The following converters support this feature through a new withStreaming() factory method:

    • Gson
    • Jackson
    • Moshi
    • Protobuf
    • Wire

Fixed

  • Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.
Commits

Updates org.jetbrains.kotlinx:kotlinx-serialization-json from 1.7.3 to 1.11.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's releases.

1.11.0

This release is based on Kotlin 2.3.20 and provides a new Json exceptions API and some bugfixes and improvements.

Expose Json exceptions structure

To make working with exceptions easier and providing proper error codes in e.g., REST APIs, classes JsonException, JsonDecodingException, and JsonEncodingException are now public. They have relevant public properties, such as shortMessage, path, offset, and others. This API is currently experimental, and we're going to improve it further in the subsequent releases. See the linked issues for the details: #1930, #1877.

Ability to hide user input from exception messages for security/privacy reasons.

Historically, exception messages in kotlinx.serialization often included the input Json itself for debuggability reason. Such behavior may pose additional challenges for logging, analytics, and other systems, since a system is not always allowed to store user data due to privacy/security reasons, which imposes additional sanitation logic. To address this issue, a new property exceptionsWithDebugInfo is added to JsonConfiguration. Disable it to hide user input from exception messages. IMPORTANT: This behavior will be enabled by default when this property becomes stable. See #2590 for more details.

Bugfixes and improvements

  • CBOR: Relax value range check when decoding numbers (#3167)
  • Use a specialized writeDecimalLong method for IO stream integrations in Json (#3152)

1.10.0

This release is based on Kotlin 2.3.0 and contains all of the changes from 1.10.0-RC. The only additional change is a fix for ProtoBuf packing of Kotlin unsigned types (#3079). Big thanks to KosmX for contributing the fix.

For your convenience, the changelog for 1.10.0-RC is duplicated below:

Stabilization of APIs

kotlinx-serialization 1.10 and subsequent releases will be focused on stabilization of existing APIs. The following APIs and configuration options are no longer experimental because they're widely used without any known major issues:

  • Json configuration options: decodeEnumsCaseInsensitive, allowTrailingComma, allowComments, and prettyPrintIndent. (#3100)
  • @EncodeDefault annotation and its modes. (#3106)
  • JsonUnquotedLiteral constructor function (#2900)
  • JsonPrimitive constructor function overloads that accept unsigned types. (#3117)
  • JSON DSL functions on JsonElement with Nothing? overloads. (#3117)

Readiness for return value checker

Kotlin 2.3.0 introduces a new feature aimed at helping you to catch bugs related to the accidentally ignored return value of the function. kotlinx-serialization 1.10.0-RC code is fully marked for this feature, meaning that you can get warnings for unused function calls like Json.encodeToString(...). To get the warnings, the feature has to be enabled in your project as described here.

Polymorphism improvements

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's changelog.

1.11.0 / 2026-04-10

This release is based on Kotlin 2.3.20 and provides new Json exceptions API and some bugfixes and improvements.

Expose Json exceptions structure

To make working with exceptions easier and providing proper error codes in e.g., REST APIs, classes JsonException, JsonDecodingException, and JsonEncodingException are now public. They have relevant public properties, such as shortMessage, path, offset, and others. This API is currently experimental, and we're going to improve it further in the subsequent releases. See the linked issues for the details: #1930, #1877.

Ability to hide user input from exception messages for security/privacy reasons.

Historically, exception messages in kotlinx.serialization often included the input Json itself for debuggability reason. Such behavior may pose additional challenges for logging, analytics, and other systems, since a system is not always allowed to store user data due to privacy/security reasons, which imposes additional sanitation logic. To address this issue, a new property exceptionsWithDebugInfo is added to JsonConfiguration. Disable it to hide user input from exception messages. IMPORTANT: This behavior will be enabled by default when this property becomes stable. See #2590 for more details.

Bugfixes and improvements

  • CBOR: Relax value range check when decoding numbers (#3167)
  • Use a specialized writeDecimalLong method for IO stream integrations in Json (#3152)

1.10.0 / 2026-01-21

This release is based on Kotlin 2.3.0 and contains all of the changes from 1.10.0-RC. The only additional change is a fix for ProtoBuf packing of Kotlin unsigned types (#3079). Big thanks to KosmX for contributing the fix.

For your convenience, the changelog for 1.10.0-RC is duplicated below:

Stabilization of APIs

kotlinx-serialization 1.10 and subsequent releases will be focused on stabilization of existing APIs. The following APIs and configuration options are no longer experimental because they're widely used without any known major issues:

  • Json configuration options: decodeEnumsCaseInsensitive, allowTrailingComma, allowComments, and prettyPrintIndent. (#3100)
  • @EncodeDefault annotation and its modes. (#3106)
  • JsonUnquotedLiteral constructor function (#2900)
  • JsonPrimitive constructor function overloads that accept unsigned types. (#3117)
  • JSON DSL functions on JsonElement with Nothing? overloads. (#3117)

Readiness for return value checker

... (truncated)

Commits
  • 6956af2 Prepare 1.11 release
  • 390d84c Merge remote-tracking branch 'origin/master' into dev
  • 431fe2d Use local repo for publishing (#3171)
  • 05c12b6 Add usage attribute to "testRepositories" configuration
  • a4e1f08 Bump Kover version to 0.9.8 release (#3174)
  • 304e858 Expose Json exceptions structure (#3145)
  • 4a0338e Included G Play SDK verification file for core-jvm (#3169)
  • 421f64c CBOR: Relax value range check when decoding numbers (#3167)
  • 85a4f12 KT-84955: mark apple x64 tagets as deprecated error
  • bd38b0e Remove dead code
  • Additional commits viewable in compare view

Updates androidx.work:work-runtime-ktx from 2.10.0 to 2.12.0

Updates androidx.test.ext:junit from 1.2.1 to 1.3.0

Updates androidx.test.espresso:espresso-core from 3.6.1 to 3.7.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
FAIR-58 deps: Bump the all-dependencies group across 1 directory with…
5278853 
… 15 updates

Bumps the all-dependencies group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [gradle-wrapper](https://github.com/gradle/gradle) | `9.6.1` | `9.8.1` |
| androidx.core:core-ktx | `1.15.0` | `1.19.1` |
| androidx.appcompat:appcompat | `1.7.0` | `1.8.0` |
| androidx.compose:compose-bom | `2026.06.00` | `2026.09.00` |
| androidx.navigation:navigation-compose | `2.8.5` | `2.10.2` |
| androidx.hilt:hilt-navigation-compose | `1.2.0` | `1.4.0` |
| androidx.room:room-runtime | `2.8.4` | `2.8.5` |
| androidx.room:room-ktx | `2.8.4` | `2.8.5` |
| androidx.room:room-compiler | `2.8.4` | `2.8.5` |
| androidx.room:room-ktx | `2.8.4` | `2.8.5` |
| androidx.room:room-compiler | `2.8.4` | `2.8.5` |
| [com.squareup.retrofit2:retrofit](https://github.com/square/retrofit) | `2.11.0` | `2.12.0` |
| [com.squareup.retrofit2:converter-kotlinx-serialization](https://github.com/square/retrofit) | `2.11.0` | `2.12.0` |
| [com.squareup.retrofit2:converter-kotlinx-serialization](https://github.com/square/retrofit) | `2.11.0` | `2.12.0` |
| [org.jetbrains.kotlinx:kotlinx-serialization-json](https://github.com/Kotlin/kotlinx.serialization) | `1.7.3` | `1.11.0` |
| androidx.work:work-runtime-ktx | `2.10.0` | `2.12.0` |
| androidx.test.ext:junit | `1.2.1` | `1.3.0` |
| androidx.test.espresso:espresso-core | `3.6.1` | `3.7.0` |



Updates `gradle-wrapper` from 9.6.1 to 9.8.1
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.6.1...v9.8.1)

Updates `androidx.core:core-ktx` from 1.15.0 to 1.19.1

Updates `androidx.appcompat:appcompat` from 1.7.0 to 1.8.0

Updates `androidx.compose:compose-bom` from 2026.06.00 to 2026.09.00

Updates `androidx.navigation:navigation-compose` from 2.8.5 to 2.10.2

Updates `androidx.hilt:hilt-navigation-compose` from 1.2.0 to 1.4.0

Updates `androidx.room:room-runtime` from 2.8.4 to 2.8.5

Updates `androidx.room:room-ktx` from 2.8.4 to 2.8.5

Updates `androidx.room:room-compiler` from 2.8.4 to 2.8.5

Updates `androidx.room:room-ktx` from 2.8.4 to 2.8.5

Updates `androidx.room:room-compiler` from 2.8.4 to 2.8.5

Updates `com.squareup.retrofit2:retrofit` from 2.11.0 to 2.12.0
- [Release notes](https://github.com/square/retrofit/releases)
- [Changelog](https://github.com/lysine-dev/retrofit/blob/trunk/CHANGELOG.md)
- [Commits](lysine-dev/retrofit@2.11.0...2.12.0)

Updates `com.squareup.retrofit2:converter-kotlinx-serialization` from 2.11.0 to 2.12.0
- [Release notes](https://github.com/square/retrofit/releases)
- [Changelog](https://github.com/lysine-dev/retrofit/blob/trunk/CHANGELOG.md)
- [Commits](lysine-dev/retrofit@2.11.0...2.12.0)

Updates `com.squareup.retrofit2:converter-kotlinx-serialization` from 2.11.0 to 2.12.0
- [Release notes](https://github.com/square/retrofit/releases)
- [Changelog](https://github.com/lysine-dev/retrofit/blob/trunk/CHANGELOG.md)
- [Commits](lysine-dev/retrofit@2.11.0...2.12.0)

Updates `org.jetbrains.kotlinx:kotlinx-serialization-json` from 1.7.3 to 1.11.0
- [Release notes](https://github.com/Kotlin/kotlinx.serialization/releases)
- [Changelog](https://github.com/Kotlin/kotlinx.serialization/blob/master/CHANGELOG.md)
- [Commits](Kotlin/kotlinx.serialization@v1.7.3...v1.11.0)

Updates `androidx.work:work-runtime-ktx` from 2.10.0 to 2.12.0

Updates `androidx.test.ext:junit` from 1.2.1 to 1.3.0

Updates `androidx.test.espresso:espresso-core` from 3.6.1 to 3.7.0

---
updated-dependencies:
- dependency-name: gradle-wrapper
  dependency-version: 9.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: androidx.core:core-ktx
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: androidx.appcompat:appcompat
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: androidx.compose:compose-bom
  dependency-version: 2026.09.00
  dependency-type: direct:production
  dependency-group: all-dependencies
- dependency-name: androidx.navigation:navigation-compose
  dependency-version: 2.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: androidx.hilt:hilt-navigation-compose
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: androidx.room:room-runtime
  dependency-version: 2.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: androidx.room:room-ktx
  dependency-version: 2.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: androidx.room:room-compiler
  dependency-version: 2.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: androidx.room:room-ktx
  dependency-version: 2.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: androidx.room:room-compiler
  dependency-version: 2.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: com.squareup.retrofit2:retrofit
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: com.squareup.retrofit2:converter-kotlinx-serialization
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: com.squareup.retrofit2:converter-kotlinx-serialization
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.jetbrains.kotlinx:kotlinx-serialization-json
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: androidx.work:work-runtime-ktx
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: androidx.test.ext:junit
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: androidx.test.espresso:espresso-core
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants