Update all dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/checkout	action	major	v4 → v6
actions/upload-artifact	action	major	v4 → v7
android-actions/setup-android	action	major	v3 → v4
github/codeql-action	action	major	v3 → v4
gradle (source)		minor	9.4.0 → 9.5.1
gradle/actions	action	major	v4 → v6
madrapps/jacoco-report	action	minor	v1.7.1 → v1.8.0
stefanzweifel/git-auto-commit-action	action	major	v5 → v7
androidx.compose.ui:ui-test-junit4 (source)	dependencies	minor	1.9.0-rc01 → 1.11.2
app.cash.turbine:turbine	dependencies	patch	1.2.0 → 1.2.1
com.google.truth:truth	dependencies	patch	1.4.4 → 1.4.5
com.diffplug.spotless	plugin	minor	8.3.0 → 8.6.0
com.diffplug.spotless:spotless-plugin-gradle	dependencies	minor	8.3.0 → 8.6.0
androidx.room (source)	plugin	patch	2.8.3 → 2.8.4
androidx.room:room-gradle-plugin (source)	dependencies	patch	2.8.3 → 2.8.4
androidx.room:room-runtime (source)	dependencies	patch	2.8.3 → 2.8.4
androidx.room:room-ktx (source)	dependencies	patch	2.8.3 → 2.8.4
androidx.room:room-compiler (source)	dependencies	patch	2.8.3 → 2.8.4
io.github.takahirom.roborazzi	plugin	minor	1.56.0 → 1.63.0
io.github.takahirom.roborazzi:roborazzi-accessibility-check	dependencies	minor	1.56.0 → 1.63.0
io.github.takahirom.roborazzi:roborazzi	dependencies	minor	1.56.0 → 1.63.0
org.robolectric:robolectric (source)	dependencies	patch	4.16 → 4.16.1
com.squareup.retrofit2:converter-kotlinx-serialization	dependencies	major	2.11.0 → 3.0.0
com.squareup.retrofit2:retrofit	dependencies	major	2.11.0 → 3.0.0
com.google.protobuf	plugin	minor	0.9.6 → 0.10.0
com.google.protobuf:protoc (source)	dependencies	minor	4.29.2 → 4.35.0
com.google.protobuf:protobuf-kotlin-lite (source)	dependencies	minor	4.29.2 → 4.35.0
com.squareup.okhttp3:logging-interceptor (source)	dependencies	major	4.12.0 → 5.4.0
com.google.devtools.ksp (source)	plugin	patch	2.3.4 → 2.3.9
org.jetbrains.kotlinx:kotlinx-serialization-json	dependencies	minor	1.8.0 → 1.11.0
org.jetbrains.kotlinx:kotlinx-datetime	dependencies	minor	0.6.1 → 0.8.0-0.6.x-compat
org.jetbrains.kotlinx:kotlinx-coroutines-test	dependencies	minor	1.10.1 → 1.11.0
org.jetbrains.kotlinx:kotlinx-coroutines-guava	dependencies	minor	1.10.1 → 1.11.0
org.jetbrains.kotlinx:kotlinx-coroutines-android	dependencies	minor	1.10.1 → 1.11.0
org.jetbrains.kotlinx:kotlinx-coroutines-core	dependencies	minor	1.10.1 → 1.11.0
org.jetbrains.kotlin.plugin.serialization (source)	plugin	minor	2.3.0 → 2.4.0
org.jetbrains.kotlin.jvm (source)	plugin	minor	2.3.0 → 2.4.0
org.jetbrains.kotlin.plugin.compose (source)	plugin	minor	2.3.0 → 2.4.0
org.jetbrains.kotlin:kotlin-gradle-plugin (source)	dependencies	minor	2.3.0 → 2.4.0
org.jetbrains.kotlin:compose-compiler-gradle-plugin (source)	dependencies	minor	2.3.0 → 2.4.0
org.jetbrains.kotlin:kotlin-test (source)	dependencies	minor	2.3.0 → 2.4.0
org.jetbrains.kotlin:kotlin-stdlib-jdk8 (source)	dependencies	minor	2.3.0 → 2.4.0
org.jetbrains.kotlin:kotlin-metadata-jvm (source)	dependencies	minor	2.3.0 → 2.4.0
androidx.hilt:hilt-work (source)	dependencies	minor	1.2.0 → 1.3.0
androidx.hilt:hilt-compiler (source)	dependencies	minor	1.2.0 → 1.3.0
com.google.dagger.hilt.android	plugin	patch	2.59 → 2.59.2
com.google.dagger:hilt-core	dependencies	patch	2.59 → 2.59.2
com.google.dagger:hilt-compiler	dependencies	patch	2.59 → 2.59.2
com.google.dagger:hilt-android-testing	dependencies	patch	2.59 → 2.59.2
com.google.dagger:hilt-android	dependencies	patch	2.59 → 2.59.2
com.google.android.gms.oss-licenses-plugin	plugin	minor	0.10.9 → 0.12.0
com.google.android.gms:play-services-oss-licenses	dependencies	minor	17.1.0 → 17.5.1
com.google.firebase.crashlytics	plugin	patch	3.0.6 → 3.0.7
com.google.firebase:firebase-crashlytics-gradle	dependencies	patch	3.0.6 → 3.0.7
com.google.firebase:firebase-bom	dependencies	major	33.7.0 → 34.14.1
androidx.work:work-testing (source)	dependencies	minor	2.10.0 → 2.11.2
androidx.work:work-runtime-ktx (source)	dependencies	minor	2.10.0 → 2.11.2
androidx.window:window-core (source)	dependencies	minor	1.3.0 → 1.5.1
androidx.tracing:tracing-ktx (source)	dependencies	patch	1.3.0-alpha02 → 1.3.0
androidx.test:runner	dependencies	patch	1.7.0-rc01 → 1.7.0
androidx.test:rules	dependencies	patch	1.7.0-rc01 → 1.7.0
androidx.test.ext:junit-ktx	dependencies	patch	1.3.0-rc01 → 1.3.0
androidx.test:core	dependencies	patch	1.7.0-rc01 → 1.7.0
androidx.savedstate:savedstate-compose (source)	dependencies	minor	1.3.1 → 1.5.0
androidx.navigation3:navigation3-ui (source)	dependencies	minor	1.0.0 → 1.1.2
androidx.navigation3:navigation3-runtime (source)	dependencies	minor	1.0.0 → 1.1.2
androidx.navigation:navigation-testing (source)	dependencies	minor	2.8.5 → 2.9.8
androidx.metrics:metrics-performance (source)	dependencies	patch	1.0.0-beta01 → 1.0.0
androidx.baselineprofile (source)	plugin	patch	1.5.0-alpha01 → 1.5.0-alpha06
androidx.benchmark:benchmark-macro-junit4 (source)	dependencies	patch	1.5.0-alpha01 → 1.5.0-alpha06
androidx.lint:lint-gradle (source)	dependencies	patch	1.0.0-alpha03 → 1.0.0-rc01
androidx.hilt:hilt-lifecycle-viewmodel-compose (source)	dependencies	patch	1.3.0-alpha02 → 1.3.0
androidx.test.espresso:espresso-core	dependencies	minor	3.6.1 → 3.7.0
androidx.datastore:datastore-core (source)	dependencies	patch	1.2.0 → 1.2.1
androidx.datastore:datastore (source)	dependencies	patch	1.2.0 → 1.2.1
androidx.core:core-splashscreen (source)	dependencies	minor	1.0.1 → 1.2.0
androidx.core:core-ktx (source)	dependencies	minor	1.15.0 → 1.19.0
androidx.compose.runtime:runtime-tracing (source)	dependencies	minor	1.7.6 → 1.11.2
androidx.compose.material3.adaptive:adaptive-navigation3 (source)	dependencies	patch	1.3.0-alpha04 → 1.3.0-beta02
androidx.compose.material3.adaptive:adaptive-navigation (source)	dependencies	minor	1.1.0-rc01 → 1.2.0
androidx.compose.material3.adaptive:adaptive-layout (source)	dependencies	minor	1.1.0-rc01 → 1.2.0
androidx.compose.material3.adaptive:adaptive (source)	dependencies	minor	1.1.0-rc01 → 1.2.0
androidx.compose.foundation:foundation (source)	dependencies	minor	1.8.0-alpha07 → 1.11.2
androidx.compose:compose-bom-alpha	dependencies	major	2025.09.01 → 2026.05.02
androidx.browser:browser (source)	dependencies	minor	1.8.0 → 1.10.0
androidx.appcompat:appcompat (source)	dependencies	patch	1.7.0 → 1.7.1
androidx.activity:activity-compose (source)	dependencies	minor	1.9.3 → 1.13.0
com.android.tools:common (source)	dependencies	minor	32.0.0 → 32.2.1
com.android.tools.lint:lint-tests (source)	dependencies	minor	32.0.0 → 32.2.1
com.android.tools.lint:lint-checks (source)	dependencies	minor	32.0.0 → 32.2.1
com.android.tools.lint:lint-api (source)	dependencies	minor	32.0.0 → 32.2.1
com.android.test (source)	plugin	minor	9.0.0 → 9.2.1
com.android.lint (source)	plugin	minor	9.0.0 → 9.2.1
com.android.library (source)	plugin	minor	9.0.0 → 9.2.1
com.android.application (source)	plugin	minor	9.0.0 → 9.2.1
com.android.tools.build:gradle-api (source)	dependencies	minor	9.0.0 → 9.2.1
com.android.tools:desugar_jdk_libs	dependencies	patch	2.1.4 → 2.1.5
com.google.accompanist:accompanist-permissions	dependencies	patch	0.37.0 → 0.37.3

---

Release Notes

actions/checkout (actions/checkout)

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

v6.0.1

Compare Source

v6.0.0

Compare Source

v6

Compare Source

v5.0.1

Compare Source

What's Changed

• Port v6 cleanup to v5 by @​ericsciple in #​2301

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

Compare Source

What's Changed

• Update actions checkout to use node 24 by @​salmanmkc in #​2226
• Prepare v5.0.0 release by @​salmanmkc in #​2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v5

Compare Source

actions/upload-artifact (actions/upload-artifact)

v7.0.1

Compare Source

What's Changed

• Update the readme with direct upload details by @​danwkennedy in #​795
• Readme: bump all the example versions to v7 by @​danwkennedy in #​796
• Include changes in typespec/ts-http-runtime 0.3.5 by @​yacaovsnc in #​797

Full Changelog: actions/upload-artifact@v7...v7.0.1

v7.0.0

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

• Add proxy integration test by @​Link- in #​754
• Upgrade the module to ESM and bump dependencies by @​danwkennedy in #​762
• Support direct file uploads by @​danwkennedy in #​764

New Contributors

• @​Link- made their first contribution in #​754

Full Changelog: actions/upload-artifact@v6...v7.0.0

v7

Compare Source

v6.0.0

Compare Source

v6

Compare Source

v5.0.0

Compare Source

v5

Compare Source

android-actions/setup-android (android-actions/setup-android)

v4.0.1

Compare Source

Update npm dependencies

v4.0.0

Compare Source

Hello,

The long awaited update of setup-android.

• Migrate action to Node24 (by @​TWiStErRob)
• Add and default to cmdline-tools version 20.0 ( 1474292 )
• Update CI runners (by @​TWiStErRob)
• Update README.md (by @​vil02)
• Update npm dependencies to solve CVE's

Incrementing major version to safeguard incase node upgrade or default cmdline-tools upgrade breaks something downstream.

v4

Compare Source

github/codeql-action (github/codeql-action)

v4.36.2

Compare Source

v4.36.1

Compare Source

v4.36.0

Compare Source

• Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #​3894
• Add support for SHA-256 Git object IDs. #​3893
• Update default CodeQL bundle version to 2.25.5. #​3926

v4.35.5

Compare Source

• We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #​3899
• For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #​3791
• If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #​3892
• Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #​3880

v4.35.4

Compare Source

• Update default CodeQL bundle version to 2.25.4. #​3881

v4.35.3

Compare Source

• Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #​3837
• Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #​3850
• Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #​3853
• Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #​3852
• Update default CodeQL bundle version to 2.25.3. #​3865

v4.35.2

Compare Source

• The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #​3795
• The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #​3789
• Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #​3794
• Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #​3807
• Update default CodeQL bundle version to 2.25.2. #​3823

v4.35.1

Compare Source

• Fix incorrect minimum required Git version for improved incremental analysis: it should have been 2.36.0, not 2.11.0. #​3781

v4.35.0

Compare Source

• Reduced the minimum Git version required for improved incremental analysis from 2.38.0 to 2.11.0. #​3767
• Update default CodeQL bundle version to 2.25.1. [#​3773](https://redirect.

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[SimonMarquis]

Beware, the badging check job in CI failed, but the PR mentions all checks have passed.

• [Bug]: CI allows merging PRs with failing checks #1045

[Qingcaj]

hello word

[Qingcaj]

@Qingcaj