Update all dependencies by renovate[bot] · Pull Request #840 · android/snippets

renovate · 2026-03-17T01:02:02Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	`v6` → `v7`
actions/setup-java	action	major	`v5` → `v6`
gradle (source)		minor	`9.5.0` → `9.7.1`
androidx.webkit:webkit (source)	dependencies	minor	`1.16.0` → `1.17.0`
com.google.protobuf:protoc (source)	dependencies	minor	`4.34.0` → `4.36.0`
androidx.tracing:tracing (source)	dependencies	major	`1.3.0` → `2.0.1`
com.diffplug.spotless	plugin	minor	`8.9.0` → `8.10.1`
androidx.room3 (source)	plugin	patch	`3.0.1` → `3.0.2`
androidx.room3:room3-testing (source)	dependencies	patch	`3.0.1` → `3.0.2`
androidx.room3:room3-sqlite-wrapper (source)	dependencies	patch	`3.0.1` → `3.0.2`
androidx.room3:room3-rxjava3 (source)	dependencies	patch	`3.0.1` → `3.0.2`
androidx.room3:room3-runtime (source)	dependencies	patch	`3.0.1` → `3.0.2`
androidx.room3:room3-paging (source)	dependencies	patch	`3.0.1` → `3.0.2`
androidx.room3:room3-livedata (source)	dependencies	patch	`3.0.1` → `3.0.2`
androidx.room3:room3-guava (source)	dependencies	patch	`3.0.1` → `3.0.2`
androidx.room3:room3-compiler (source)	dependencies	patch	`3.0.1` → `3.0.2`
androidx.room3:room3-common (source)	dependencies	patch	`3.0.1` → `3.0.2`
io.github.takahirom.roborazzi	plugin	minor	`1.70.0` → `1.73.0`
io.github.takahirom.roborazzi:roborazzi-junit-rule	dependencies	minor	`1.70.0` → `1.73.0`
io.github.takahirom.roborazzi:roborazzi-compose	dependencies	minor	`1.70.0` → `1.73.0`
io.github.takahirom.roborazzi:roborazzi	dependencies	minor	`1.70.0` → `1.73.0`
androidx.wear.compose.remote:remote-material3 (source)	dependencies	patch	`1.0.0-alpha09` → `1.0.0-alpha10`
com.google.protobuf:protobuf-kotlin-lite (source)	dependencies	minor	`4.35.1` → `4.36.0`
com.squareup.okhttp3:okhttp (source)	dependencies	minor	`5.4.0` → `5.5.0`
org.mockito.kotlin:mockito-kotlin	dependencies	major	`5.3.1` → `6.3.0`
androidx.media3:media3-ui-compose-material3	dependencies	minor	`1.10.1` → `1.11.0`
androidx.media3:media3-ui-compose	dependencies	minor	`1.10.1` → `1.11.0`
androidx.media3:media3-ui	dependencies	minor	`1.10.1` → `1.11.0`
androidx.media3:media3-session	dependencies	minor	`1.10.1` → `1.11.0`
androidx.media3:media3-exoplayer	dependencies	minor	`1.10.1` → `1.11.0`
androidx.media3:media3-effect	dependencies	minor	`1.10.1` → `1.11.0`
androidx.media3:media3-common	dependencies	minor	`1.10.1` → `1.11.0`
com.google.maps.android:maps-compose	dependencies	minor	`8.4.0` → `8.5.0`
com.google.devtools.ksp (source)	plugin	patch	`2.3.10` → `2.3.11`
androidx.health.connect:connect-client (source)	dependencies	patch	`1.2.0-alpha04` → `1.2.0-alpha06`
com.google.guava:guava	dependencies	minor	`33.6.0-jre` → `33.7.1-jre`
io.github.ben-manes.versions	plugin	minor	`0.59.0` → `0.61.0`
com.google.ar:core	dependencies	minor	`1.54.0` → `1.56.0`
androidx.glance.wear:wear-tooling-preview (source)	dependencies	patch	`1.0.0-alpha14` → `1.0.0-alpha17`
androidx.glance.wear:wear-core (source)	dependencies	patch	`1.0.0-alpha14` → `1.0.0-alpha17`
androidx.glance.wear:wear (source)	dependencies	patch	`1.0.0-alpha14` → `1.0.0-alpha17`
com.google.firebase:firebase-ai-ondevice	dependencies	patch	`16.0.0-beta03` → `16.0.0-beta05`
com.google.firebase:firebase-bom	dependencies	minor	`34.17.0` → `34.18.0`
com.google.firebase:firebase-ai	dependencies	minor	`17.15.0` → `17.16.0`
androidx.compose.remote:remote-tooling-preview (source)	dependencies	patch	`1.0.0-alpha17` → `1.0.0-alpha18`
androidx.compose.remote:remote-creation-compose (source)	dependencies	patch	`1.0.0-alpha17` → `1.0.0-alpha18`
androidx.compose.remote:remote-core (source)	dependencies	patch	`1.0.0-alpha17` → `1.0.0-alpha18`
androidx.camera:camera-camera2 (source)	dependencies	patch	`1.6.1` → `1.6.2`
androidx.paging:paging-compose (source)	dependencies	patch	`3.5.0` → `3.5.1`
androidx.paging:paging-common (source)	dependencies	patch	`3.5.0` → `3.5.1`
androidx.navigation3:navigation3-ui (source)	dependencies	patch	`1.1.5` → `1.1.7`
androidx.navigation3:navigation3-runtime (source)	dependencies	patch	`1.1.5` → `1.1.7`
androidx.navigation:navigation-compose (source)	dependencies	minor	`2.9.8` → `2.10.0`
androidx.fragment:fragment-ktx (source)	dependencies	minor	`1.8.9` → `1.9.0`
androidx.fragment:fragment-compose (source)	dependencies	minor	`1.8.9` → `1.9.0`
androidx.core:core-pip (source)	dependencies	patch	`1.0.0-alpha02` → `1.0.0-alpha04`
androidx.core:core-telecom (source)	dependencies	patch	`1.1.0-alpha06` → `1.1.0-beta01`
androidx.xr.projected:projected-testing (source)	dependencies	patch	`1.0.0-alpha10` → `1.0.0-alpha11`
androidx.xr.projected:projected (source)	dependencies	patch	`1.0.0-alpha10` → `1.0.0-alpha11`
androidx.camera.viewfinder:viewfinder-compose (source)	dependencies	patch	`1.6.1` → `1.6.2`
androidx.camera:camera-view (source)	dependencies	patch	`1.6.1` → `1.6.2`
androidx.camera:camera-video (source)	dependencies	patch	`1.6.1` → `1.6.2`
androidx.camera:camera-lifecycle (source)	dependencies	patch	`1.6.1` → `1.6.2`
androidx.camera:camera-extensions (source)	dependencies	patch	`1.6.1` → `1.6.2`
androidx.camera:camera-effects (source)	dependencies	patch	`1.6.1` → `1.6.2`
androidx.camera:camera-core (source)	dependencies	patch	`1.6.1` → `1.6.2`
androidx.camera:camera-compose (source)	dependencies	patch	`1.6.1` → `1.6.2`
androidx.appfunctions:appfunctions-compiler (source)	dependencies	patch	`1.0.0-alpha10` → `1.0.0-alpha11`
androidx.appfunctions:appfunctions (source)	dependencies	patch	`1.0.0-alpha10` → `1.0.0-alpha11`
androidx.appcompat:appcompat (source)	dependencies	minor	`1.7.1` → `1.8.0`
com.android.lint (source)	plugin	patch	`9.3.1` → `9.3.2`
com.android.library (source)	plugin	patch	`9.3.1` → `9.3.2`
com.android.kotlin.multiplatform.library (source)	plugin	patch	`9.3.1` → `9.3.2`
com.android.application (source)	plugin	patch	`9.3.1` → `9.3.2`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2475
Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #2477
Bump docker/build-push-action from 6.5.0 to 7.2.0 by @dependabot[bot] in #2478
Bump docker/login-action from 3.3.0 to 4.2.0 by @dependabot[bot] in #2479
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2488
Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #2476
eslint 9 by @dependabot[bot] in #2474
Bump the minor-actions-dependencies group with 2 updates by @dependabot[bot] in #2499
skip running unsafe pr check if input is default by @aiqiaoy in #2518
trim only ascii whitespace for branch by @aiqiaoy in #2521
escape values passed to --unset by @aiqiaoy in #2530

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

actions/setup-java (actions/setup-java)

`v6.0.0`

Compare Source

gradle/gradle (gradle)

The Gradle team is excited to announce Gradle 9.5.1.

Here are the highlights of this release:

Task provenance in reports and failure messages
Type-safe accessors for precompiled Kotlin Settings plugins

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
atm1020,
mataha,
Adam,
Attila Kelemen,
Benedikt Ritter,
Björn Kautler,
Caro Silva Rode,
CHANHAN,
Dmitry Nezavitin,
Eng Zer Jun,
KugelLibelle,
Madalin Valceleanu,
Markus Gaisbauer,
Oliver Kopp,
Philip Wedemann,
ploober,
Roberto Perez Alcolea,
Rohit Anand,
Suvrat Acharya,
Ujwal Suresh Vanjare,
Victor Merkulov

Upgrade instructions

Switch your build to use Gradle 9.5.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.5.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

takahirom/roborazzi (io.github.takahirom.roborazzi)

`v1.73.0`

Compare Source

Performance

Identical screenshots skip the per-pixel comparison. A passing test compares an image identical to its golden, which is the common case — the backing rasters are now compared with bulk integer comparisons, falling back to the ImageComparator only when they differ. Results are unchanged. An identical 1080x2340 comparison drops from 15.3ms to 0.37ms (#917). Thank you @AlexanderGH for the optimization and the thorough tests!

Fixes

Build cache relocatability with generateComposePreviewRobolectricTests. The generated tests were registered as an unnamed, absolute-path input, so cache entries were never reused across checkouts (e.g. CI → local). The input is now relative-path normalized; a second checkout at a different path resolves FROM-CACHE (#919, fixes #918). Thank you @technoir42 for the precise report and suggested fix!

What's Changed

Skip the pixel comparison when images are already identical by @AlexanderGH in #917
Register generated preview tests input with relative path sensitivity by @takahirom in #919

New Contributors

@AlexanderGH made their first contribution in #917

Full Changelog: takahirom/roborazzi@1.72.0...1.73.0

`v1.72.0`

Compare Source

New: Subdirectory naming strategies for screenshot paths

Two new roborazzi.record.namingStrategy options organize screenshots into directories instead of one flat folder of fully-qualified file names (#909, fixes #801):

# com.example.myapp.ui/SomeClass.method.png — the package as a single directory level
roborazzi.record.namingStrategy=testPackageDirAndClassAndMethod

# com/example/myapp/ui/SomeClass.method.png — the package as nested directories
roborazzi.record.namingStrategy=testNestedPackageDirAndClassAndMethod

Why: with generateComposePreviewRobolectricTests, projects with hundreds of previews end up with a single flat directory that is hard to navigate. Both directory styles requested in the issue discussion are supported.

_compare / _actual images mirror the golden's subdirectory. This matters because the package no longer appears in the leaf file name with the *Dir strategies — without mirroring, two classes with the same simple name in different packages would collapse onto a single flat comparison image. The mirroring also works when the compare output directory is a separate directory, and when the output directory is overridden via RoborazziRule. The three existing strategies produce byte-for-byte identical paths as before, so nothing changes unless you opt in.

Fixes

Wrong screenshot path on Windows. With roborazzi.record.filePathStrategy=relativePathFromRoborazziContextOutputDirectory, the output directory was prepended twice on Windows (D:\...\screenshots\D:\...\screenshots\Test.png), because the absolute-path guard only recognized Unix-style paths — D:\... fell through and was joined to the output directory again. Windows drive-absolute and UNC paths are now detected as absolute; on Unix, : and \ remain valid file name characters, so nothing changes there (#916, fixes #915). Thank you @MGaetan89 for the report with a minimal reproducer while re-enabling the Roborazzi integration tests on Robolectric!

What's Changed

Add subdirectory-based naming strategies for screenshot paths by @takahirom in #909
Fix doubled screenshot path for Windows absolute paths by @takahirom in #916

Full Changelog: takahirom/roborazzi@1.71.0...1.72.0

`v1.71.0`

Compare Source

🎉 1,000 stars

Roborazzi just passed 1,000 stars. Thank you to everyone who has filed an issue, sent a PR, shared a workaround, or just tried it on a project and told us what broke — this release is two bug reports and their fixes, which is a pretty good picture of how the library actually gets better.

Fixes

Both fixes are in the UI tree dump shipped in 1.69.0.

The dump was empty for captureRoboImage { content() }. The sidecar held only the root view shell, with no Compose semantics nodes at all — on every composable, and on the Compose Preview scanner path too, which delegates to the same overload. RoboComponent.defaultChildVisitor only descended into semantics for an AbstractComposeView, but this path passes the AndroidComposeView as the capture root: not an AbstractComposeView, just a ViewGroup that itself implements ViewRootForTest. Traversal fell through to the plain ViewGroup branch and stopped. It now descends for a ViewRootForTest as well, which also restores the Compose boxes in captureType = Dump images on this path (#914, fixes #913). Thank you @danielkatfavor for the clear report with the exact sidecar output!
CustomActions serialization was non-deterministic. A CustomAccessibilityAction's action lambda is serialized via toString(), which carries JVM runtime identity, so the value changed on every run and re-recording produced golden churn with no UI change behind it. Custom actions now serialize as CustomAccessibilityAction(label=...), and collection values are serialized element-wise before sorting so ordering is stable too (#911, fixes #910). Thank you @hellohj for reporting this!

What's Changed

Track roborazzi-annotations and desktop preview scanner support in dependency diff by @takahirom in #908
Fix non-deterministic CustomActions serialization in UI tree dump by @takahirom in #911
Fix empty UI tree dump on the compose content capture path by @takahirom in #914

Full Changelog: takahirom/roborazzi@1.70.0...1.71.0

lysine-dev/okhttp (com.squareup.okhttp3:okhttp)

`v5.5.0`

2026-08-16

This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature
improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s
Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re
looking at. With ECH, the router observes only the IP address. This additional privacy is most
effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.

This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37,
released June 2026). When other TLS stacks add ECH support, we'll integrate them.

ECH took a lot of work to implement because the encryption keys are published over DNS in the
[HTTPS resource record], and we needed to write new code to fetch these records. This release
includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not
just IP addresses!), asynchronous streaming results, and in-memory caching.

To opt in, you can use DnsOverHttps:

// DnsOverHttps itself uses OkHttpClient. Build both clients upon the
// same bootstrap client so they share a connection pool and dispatcher.
val bootstrapClient = OkHttpClient()

// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.
val client = bootstrapClient.newBuilder()
  .dns(DnsOverHttps.Builder()
    .client(bootstrapClient)
    .url("https://1.1.1.1/dns-query".toHttpUrl())
    .build())
  .build()

You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are
deficient because its DNS queries are not encrypted by default.

// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.
val client = OkHttpClient.Builder()
  .dns(AndroidDns())
  .build()

New: OkHttp artifacts is now signed with our [new signing key]. This project and three sibling
projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
Fix: Closing a multipart part's sink no longer closes the entire request body.
Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts
weren’t applied correctly.
Fix: Follow [RFC 1008]'s requirements for HTTP QUERY redirects.
Fix: Fall back to no proxy when the system proxy selector throws. Previously this would cause
the HTTP call to crash.
Upgrade: [Okio 3.18.1][okio_3_18_1].

mockito/mockito-kotlin (org.mockito.kotlin:mockito-kotlin)

`v6.3.0`

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

6.3.0

2026-03-19 - 2 commit(s) by Joshua Selbo
Add first-class support for mocking object singletons (#587)
Add helper to mock module-level extension functions (#586)

`v6.2.3`

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

6.2.3

2026-01-26 - 2 commit(s) by Joshua Selbo, Mark Koops
Update exception message now that onGeneric is deprecated (#583)
Improve Result support in matchers and captors (#582)

`v6.2.2`

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

6.2.2

2026-01-21 - 2 commit(s) by Mark Koops
Fix eq() matcher NPE with nullable value class and null value (#579)
Improve support for stubbing Result return values for synchronous and suspendable functions (#576)

`v6.2.1`

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

6.2.1

2026-01-17 - 2 commit(s) by Joshua Selbo, Mark Koops
Solve 6.2.0 regression due to runblocking being unavailable (#575)
Use jvmToolchain API to configure builds (#572)

`v6.2.0`

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

6.2.0

2026-01-14 - 27 commit(s) by Joshua Selbo, Mark Koops, Tim van der Lippe
Improving stubbing support for suspend functions and value classes (#569)
Update PR template to run formatting (#568)
Ignore ktfmt formatting revision in git blame (#567)
Enable Spotless formatting check in CI (#566)
Apply ktfmt formatting (#565)
Add tooling for Spotless + ktfmt (#562)
Follow-up on primitive value classes (#561)
Update MockSettings usage (#560)
Fix anyOrNull matcher with value class wrapping primitive type (#557)
Enhance/unify and document stubbing API, more groundwork towards implementing improved suspend function support (#556)
Add wrappers for mockStatic, mockConstruction (#551)
Add MockedStatic.verify extension fun with lambda last (#549)
Extending/organizing MatchersTest.kt (#548)
Adding value class support to KArgumentCaptor. (#547)
Fix the output directory for the dokka Javadoc plugin (#546)
#544 Adding value

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM (* 0-3 * * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

pflammertsma · 2026-06-18T14:41:07Z

We need to bump this to 37.

yrezgui · 2026-06-30T06:15:52Z

@android/devrel-xr There's an issue with the XR unit tests, can you look into it?

renovate Bot enabled auto-merge (squash) March 17, 2026 01:02

renovate Bot requested review from kkuan2011 and yrezgui as code owners March 17, 2026 01:02

renovate Bot force-pushed the renovate/all branch 3 times, most recently from 6d63750 to e0cffe1 Compare March 18, 2026 21:58

dturner approved these changes Mar 19, 2026

View reviewed changes

renovate Bot force-pushed the renovate/all branch 11 times, most recently from 3642b22 to 58cf231 Compare March 25, 2026 22:26

renovate Bot force-pushed the renovate/all branch 8 times, most recently from 3129112 to e078b5d Compare April 2, 2026 07:14

renovate Bot force-pushed the renovate/all branch 2 times, most recently from b626af9 to d4a6f2e Compare April 7, 2026 13:30

renovate Bot changed the title ~~Update all dependencies~~ fix(deps): update all dependencies Apr 7, 2026

renovate Bot changed the title ~~fix(deps): update all dependencies~~ Update all dependencies Apr 8, 2026

renovate Bot force-pushed the renovate/all branch 15 times, most recently from 7628abc to 1d66b16 Compare April 24, 2026 17:34

renovate Bot force-pushed the renovate/all branch 11 times, most recently from 083fdfb to 0f41ddd Compare May 5, 2026 01:56

renovate Bot force-pushed the renovate/all branch from 0f41ddd to 8f02c3d Compare May 5, 2026 20:44

pflammertsma requested changes Jun 18, 2026

View reviewed changes

Comment thread datastore/build.gradle.kts Outdated

pflammertsma Jun 18, 2026

Copy link
Copy Markdown

Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We need to bump this to 37.

Update all dependencies

0fff5c2

Navigation Menu

Uh oh!

Update all dependencies - #840

Update all dependencies#840
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all

renovate Bot commented Mar 17, 2026 •

edited

Loading

Uh oh!

pflammertsma Jun 18, 2026

Uh oh!

yrezgui commented Jun 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

renovate Bot commented Mar 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v9.5.1: 9.5.1

Upgrade instructions

Reporting problems

Performance

Fixes

What's Changed

New Contributors

New: Subdirectory naming strategies for screenshot paths

Fixes

What's Changed

🎉 1,000 stars

Fixes

What's Changed

6.3.0

6.2.3

6.2.2

6.2.1

6.2.0

Configuration

Uh oh!

Choose a reason for hiding this comment

Uh oh!

yrezgui commented Jun 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

renovate Bot commented Mar 17, 2026 •

edited

Loading

`v9.5.1`: 9.5.1