Update dependency com.autonomousapps.dependency-analysis to v2.19.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
com.autonomousapps.dependency-analysis	2.6.1 -> 2.19.0

---

Release Notes

autonomousapps/dependency-analysis-android-gradle-plugin (com.autonomousapps.dependency-analysis)

v2.19.0

• [Feat]: support advices for Android test fixtures source sets
• [Feat]: support typesafe project accessors in IssueHandler
• [Fix]: bump kotlin-metadata-jvm to 2.1.21 to support K2.2 projects.
• [Chore]: move publishing to new central.sonatype.com repo.

v2.18.0

• [Breaking]: update min support AGP version to 8.3.
• [Feat]: Allow excluding violations by regex patterns.
• [Feat]: add ProviderConvertible support.
• [Feat]: add support for Activity theme in AndroidManifest.xml
• [Feat]: Android merged manifests are now treated as runtime (not compile-time) requirements.
• [Feat]: detect code source files that live outside of src/main as an AGP feature being used.
• [Fix]: detect class references in the base package.
• [Fix]: detect constants defined in Kotlin companion objects.
• [Fix]: detect androidTest source set as a test source-set.
• [Fix]: set android dependencies weight to 100.
• [Fix]: also check for com.android.test.
• [Chore]: use Gradle 8.14.
• [Chore]: kotlin.metadata.jvm no longer needs to be non-transitive, since bumping to K2 for this project.
• [Chore]: fix snapshot publishing by making task dependency more lazy.
• [Chore]: update badge to point to actual workflow.

v2.17.0

• [Fix]: duplicate class warning doesn't warn about multiple dependencies with same GAV.
• [Fix]: ensure all capabilities are internally sorted; also synthesized dependencies.
• [Fix]: ensure all dependencies are internally sorted.
• [Fix]: ensure output of GraphViewTask is fully sorted (therefore deterministic).
• [Fix]: intermediate android res classes must have meaningful hashCode() functions.
• [Fix]: improve sorting of various build outputs to ensure determinism.

v2.16.0

• [Feat]: support com.android.test projects.
• [Feat]: support typesafe project accessors with opt-in.

dependencyAnalysis {
  useTypesafeProjectAccessors(true) // false by default
}

v2.15.0

• [Feat]: superclass analysis is now opt-in. This is a breaking change since 2.7.0, when that feature was introduced.

dependencyAnalysis {
  usage {
    analysis {
      checkSuperClasses(true) // false by default 
    }
  }
}

v2.14.0

• [Feat]: add temporary flag to test opting-out of superclass analysis.
• [Fix]: @InputFiles is redundant next to @Classpath.

v2.13.3

• [Fix]: check java/main in addition to kotlin/main to find correct artifact folder
• [Fix]: use projectPath, not identityPath, for included build coordinates.

v2.13.2

• [Fix]: detect usages of SAM interfaces.
• [Fix]: binaryClassAccesses uses sorted keys.

v2.13.1

• [Fix]: differentiate between main and other variants when rewriting dependencies with Kotlin DSL.

v2.13.0

• [Feat]: computeResolvedDependencies to also generate a version catalog file
• [Feat]: experimenting with compressing intermediates, starting with exploded-jars.json.
• [Chore]: remove unused moshi functions.

v2.12.0

• [Feat]: detect dependencies that provide dylibs for use on macOS.
• [Test]: incorrect attribution of so files to Android deps.

v2.11.0

• [Feat]: new task (:computeAllDependencies) for producing a version catalog file containing all dependencies.
• [Fix]: kotlin-reflect must be on the compile classpath.
• [Test]: Update AGP 8.9.0 stable.
• [Test]: conditional signing.

v2.10.1

• [Fix]: BuildHealthException extends VerificationException.
• [Fix]: module advice must be 'actionable' to be 'not empty'.

v2.10.0

• [Feat]: new dependencyAnalysis.reporting.printBuildHealth DSL option.
• [Fix]: support colorizing multiline strings.

v2.9.0

• [Feat]: if buildHealth contains only warnings, adjust message to be less severe.
• [Feat]: provide way to opt-out of printing postscript if it only contains warnings.
• [Feat]: improve console output with colors and smarter vertical spacing.
• [Fix]: improve comparability of Declaration.
• [Fix]: dependency model classes are now fully Comparable.
• [Fix]: Source is fully Comparable.
• [Fix]: ExplodingBytecode is fully Comparable.
• [Perf]: improve performance of isForMissingSuperclass (again).
• [Chore]: update to Kotlin 2.0.21.
• [Chore]: test against AGP 8.9 and 8.10

dependencyAnalysis {
  reporting {
    onlyOnFailure(false) // when true, only prints postscript when there are failure-level issues.
    postscript(/* Some text to help out end users who may not be build engineers. */)
  }
}

v2.8.2

• [Fix]: generate supergraph just once per variant (source set).

v2.8.1

• [Fix]: cache SuperClassGraph. No need to recompute for each dependency.
• [Fix]: use less heap by using empty singleton collections.
• [Fix]: trade metaspace for heap by interning strings.

v2.8.0

• [Feat]: support reasoning about multiple pieces of advice.
• [Fix]: compute/printDuplicateDependencies works even when not all projects apply this plugin.
• [Fix]: do not filter out advice to add to testImplementation if there is conflicting advice to downgrade from implementation.
• [Fix]: compileOnly dependencies are not visible to the test compile classpath.
• [Build]: use Gradle 8.12.1
• [Chore]: update to AGP 8.8.0
• [Refactor]: use DependencyHandler.project() instead of Project.project().
• [Test]: only run functionalTest against latest combination of AGP and Gradle.
• [Test]: don't forward stdout on CI.

v2.7.0

• [Feat]: can set severity and filter duplicate class warnings.
• [Feat]: don't recommend removing implementation dependency on necessary superclass.
• [Chore]: use non-deprecated method when available.
• [Chore]: update various dependencies, including antlr.

New DSL option for configuring duplicate class warnings:

// root build.gradle[.kts]
dependencyAnalysis {
  issues {
    all {
      onDuplicateClassWarnings {
        severity(<"fail"|"warn"|"ignore">)
        // Fully-qualified class reference to exclude, slash- or dot-delimited
        exclude("org/jetbrains/annotations/NotNull", "org.jetbrains.annotations.Nullable")
      }
    }
  }
}

---

Configuration

📅 Schedule: Branch creation - Between 01:00 AM and 05:59 AM ( * 1-5 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.