fix(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/upload-artifact	action	major	v6 → v7
dawidd6/action-download-artifact	action	major	v15 → v16
gradle (source)		minor	9.3.1 → 9.4.0
io.ktor:ktor-serialization-kotlinx-json	dependencies	patch	3.4.0 → 3.4.1
io.ktor:ktor-client-mock	dependencies	patch	3.4.0 → 3.4.1
io.ktor:ktor-client-darwin	dependencies	patch	3.4.0 → 3.4.1
io.ktor:ktor-client-okhttp	dependencies	patch	3.4.0 → 3.4.1
io.ktor:ktor-client-logging	dependencies	patch	3.4.0 → 3.4.1
io.ktor:ktor-client-content-negotiation	dependencies	patch	3.4.0 → 3.4.1
io.ktor:ktor-client-auth	dependencies	patch	3.4.0 → 3.4.1
io.kotest	plugin	patch	6.1.3 → 6.1.5
io.kotest:kotest-extensions-junitxml	dependencies	patch	6.1.3 → 6.1.5
io.kotest:kotest-extensions-htmlreporter	dependencies	patch	6.1.3 → 6.1.5
io.kotest:kotest-runner-junit5	dependencies	patch	6.1.3 → 6.1.5
io.kotest:kotest-framework-engine	dependencies	patch	6.1.3 → 6.1.5
io.kotest:kotest-assertions-core	dependencies	patch	6.1.3 → 6.1.5
com.android.settings (source)	plugin	minor	9.0.1 → 9.1.0
io.coil-kt.coil3:coil-compose	dependencies	minor	3.3.0 → 3.4.0
org.jetbrains.compose	plugin	patch	1.10.1 → 1.10.2
org.jetbrains.compose.runtime:runtime	dependencies	patch	1.10.1 → 1.10.2
org.jetbrains.compose.ui:ui-tooling-preview	dependencies	patch	1.10.1 → 1.10.2
org.jetbrains.compose.ui:ui-tooling	dependencies	patch	1.10.1 → 1.10.2
org.jetbrains.compose.ui:ui-test	dependencies	patch	1.10.1 → 1.10.2
org.jetbrains.compose.ui:ui-backhandler	dependencies	patch	1.10.1 → 1.10.2
org.jetbrains.compose.ui:ui	dependencies	patch	1.10.1 → 1.10.2
org.jetbrains.compose.components:components-resources	dependencies	patch	1.10.1 → 1.10.2
org.jetbrains.compose.foundation:foundation	dependencies	patch	1.10.1 → 1.10.2
org.jetbrains.compose:org.jetbrains.compose.gradle.plugin	dependencies	patch	1.10.1 → 1.10.2
com.autonomousapps.dependency-analysis	plugin	minor	3.5.1 → 3.6.1
com.android.tools:common (source)	dependencies	minor	32.0.1 → 32.1.0
com.android.kotlin.multiplatform.library (source)	plugin	minor	9.0.1 → 9.1.0
com.android.application (source)	plugin	minor	9.0.1 → 9.1.0
com.android.tools.build:gradle (source)	dependencies	minor	9.0.1 → 9.1.0

---

Release Notes

actions/upload-artifact (actions/upload-artifact)

v7

Compare Source

dawidd6/action-download-artifact (dawidd6/action-download-artifact)

v16

Compare Source

What's Changed

• build(deps): bump minimatch by @​dependabot[bot] in #​374
• node_modules: update by @​dawidd6 in #​375

Full Changelog: dawidd6/action-download-artifact@v15...v16

gradle/gradle (gradle)

v9.4.0

Compare Source

ktorio/ktor (io.ktor:ktor-serialization-kotlinx-json)

v3.4.1

Compare Source

Published 3 March 2026

Improvements

• KTOR-9382 HttpProtocolVersion.parse: fast path for common versions
• KTOR-9381 GMTDate: reduce allocations
• KTOR-8971 Support "operationId" in Kdoc for OpenAPI spec. gen.
• KTOR-9333 WebSockets: Infinite spin and potential OOM vulnerabilities in the Inflater.inflateFully method
• KTOR-5616 Ktor always adds by default an Accept-Charset header
• KTOR-9291 OpenAPI: handle atypical route functions
• KTOR-9293 OpenAPI describe needs defaults
• KTOR-9304 OpenAPI: Order of path parameters is not preserved in the spec
• KTOR-9353 Routing: TailcardSelector missing toString(), which clutters the logs

Bugfixes

• KTOR-9281 OpenApi code inference misses lambda argument bodies
• KTOR-9273 OpenAPI static content path appears in resulting model
• KTOR-9004 OpenAPI: No respective formats detected for serializable types like UUID or Instant
• KTOR-9305 OpenAPI: "No mapping for symbol: VAR FOR_LOOP_VARIABLE" error with codeInferenceEnabled=true
• KTOR-9279 OpenAPI: UnsupportedOperationException for a function with a reified type parameter codeInferenceEnabled = true
• KTOR-9289 OpenAPI: Resource routes are missing inferred and comment-based documentation
• KTOR-9330 OpenAPI: Cannot override kotlinx.serialization module
• KTOR-9320 OpenAPI: jsonSchema() does not unwrap Kotlin value classes (inline classes)
• KTOR-9352 Authentication: Creating JWT verifier fails for JWK with kty=EC and alg=null
• KTOR-9344 Flow invariant error happens after update to Ktor 3.4.0
• KTOR-9362 testApplication: Race condition in timeout coroutine when response is streaming
• KTOR-9274 Curl: Undefined symbol errors when linking on Linux since 3.4.0
• KTOR-8782 NodeJS CIO: "Module 'os' could not be imported" error on resolving WORKING_DIRECTORY_PATH with es2015 target
• KTOR-9348 String.decodeBase64String fails to decode when the input has no padding since 3.4.0
• KTOR-9318 CIO engine rejects valid certificates with unsupported signature algorithms
• KTOR-9331 Curl: Segfaults when working with WebSockets
• KTOR-9334 Coroutines in route handlers are dispatched with Dispatchers.Unconfined since 3.2.0
• KTOR-9339 StreamResetException is not propagated to the caller of StreamRequestBody.writeTo since 3.4.0
• KTOR-9329 HTMX: "on" attributes extension not working
• KTOR-9316 WasmJS bad get and set implementations for Uint8Array and ArrayLike
• KTOR-9272 JSON schema inference does not recognize unsigned types
• KTOR-9211 SendCountExceedException when request is sent twice with maxRetries = 0 since 3.3.2
• KTOR-9285 RateLimit: Milliseconds in the Retry-After header are truncated
• KTOR-7512 JWT: Docs for validate method claim that it's optional, but it isn't
• KTOR-9269 Incorrect dependency declaration in swagger / openapi

kotest/kotest (io.kotest:kotest-extensions-junitxml)

v6.1.5

Compare Source

What's Changed

• Add withError builder to MatcherResultBuilder to rethrow a supplied Throwable by @​sksamuel in #​5713
• Update dependency io.kotest:io.kotest.gradle.plugin to v6.1.4 by @​renovate[bot] in #​5730
• Update dependency io.qameta.allure to v3.0.2 by @​renovate[bot] in #​5731
• Fix misleading docs on shrinking with custom generators (#​5084) by @​sksamuel in #​5724
• Fix hard dependency on Android plugin by @​sksamuel in #​5734
• Update kotlin-compile-testing to version 0.12.1 to support Kotlin 2.3 by @​sksamuel in #​5736
• add new modules to kotest examples pipeline by @​alfonsoristorato in #​5739
• Avoid afterEvaluate in KotestPlugin by @​sksamuel in #​5735
• move powerSetIndexes to common (#​5740) by @​AlexCue987 in #​5741
• Allow running daily tests with latest kotest version for project kotest-maven too by @​alfonsoristorato in #​5742
• re-enable location hints for TeamCity by @​alfonsoristorato in #​5743

Full Changelog: kotest/kotest@v6.1.4...v6.1.5

v6.1.4

Compare Source

coil-kt/coil (io.coil-kt.coil3:coil-compose)

v3.4.0

Compare Source

• New: Add ConcurrentRequestStrategy to support combining in-flight network requests for the same key. (#​2995, #​3326)
  • DeDupeConcurrentRequestStrategy enables this behavior and lets waiters wait for the results of an in-flight network request.
    • This behavior is experimental and is currently disabled by default.
    • Currently, requests are always combined based on their diskCacheKey.
  • OkHttpNetworkFetcherFactory, KtorNetworkFetcherFactory, and NetworkFetcher.Factory now accept concurrentRequestStrategy.
• New: Decode images on JS/WASM using a web worker to avoid blocking the browser main thread. (#​3305)
• New: Add support for Linux native targets (linuxX64 and linuxArm64) for non-Compose multiplatform artifacts. (#​3054)
• New: Add Compose-only APIs to improve transitions between subsequent requests. (#​3141, #​3175)
  • ImageRequest.Builder.useExistingImageAsPlaceholder enables crossfading from the previous image when no placeholder is set.
  • ImageRequest.Builder.preferEndFirstIntrinsicSize lets CrossfadePainter prefer the end painter's intrinsic size.
• New: Add ImageLoader.Builder.repeatCount(Int) in coil-gif to set a global animated image repeat count. (#​3143)
• New: Add support for preferring embedded video thumbnails in coil-video. (#​3107)
• New: Publish coil-lint with coil-core and add a lint check to catch accidental kotlin.error() calls in ImageRequest.Builder blocks. (#​3304)
• Set Kotlin language version to 2.1. (#​3302)
• Make BitmapFetcher available in common code. (#​3286)
• Use applicationContext when creating the singleton ImageLoader on Android. (#​3246)
• Cache eligible non-2xx HTTP responses by default (e.g. 404) and stop caching non-cacheable responses (e.g. 500). (#​3137, #​3139)
• Fix potential race condition when consuming OkHttp response bodies. (#​3186)
• Fix maxBitmapSize edge case to prevent oversized bitmap crashes on Android. (#​3259)
• Update Kotlin to 2.3.10.
• Update Compose to 1.9.3.
• Update Okio to 3.16.4.
• Update Skiko to 0.9.22.2.
• Update kotlinx-io-okio to 0.9.0.
• Update androidx.core to 1.16.0.
• Update androidx.lifecycle to 2.9.4.
• Update androidx.exifinterface to 1.4.2.

JetBrains/compose-jb (org.jetbrains.compose)

v1.10.2

Changes since 1.10.1

No Compose Multiplatform specific changes

Components

Gradle plugin

org.jetbrains.compose version 1.10.2

Libraries

Library group	Coordinates	Based on Jetpack
Runtime	org.jetbrains.compose.runtime:runtime*:1.10.2	Runtime 1.10.4
UI	org.jetbrains.compose.ui:ui*:1.10.2	UI 1.10.4
Foundation	org.jetbrains.compose.foundation:foundation*:1.10.2	Foundation 1.10.4
Material	org.jetbrains.compose.material:material*:1.10.2	Material 1.10.4
Material3	org.jetbrains.compose.material3:material3*:1.10.0-alpha05	Material3 1.5.0-alpha08
Material3 Adaptive	org.jetbrains.compose.material3.adaptive:adaptive*:1.3.0-alpha02	Material3 Adaptive 1.3.0-alpha03
Lifecycle	org.jetbrains.androidx.lifecycle:lifecycle-*:2.10.0-beta01	Lifecycle 2.10.0
Navigation	org.jetbrains.androidx.navigation:navigation-*:2.9.2	Navigation 2.9.7
Navigation3	org.jetbrains.androidx.navigation3:navigation3-*:1.0.0-alpha06	Navigation3 1.0.0
Navigation Event	org.jetbrains.androidx.navigationevent:navigationevent-compose:1.0.1	Navigation Event 1.0.2
Savedstate	org.jetbrains.androidx.savedstate:savedstate*:1.4.0	Savedstate 1.4.0
WindowManager Core	org.jetbrains.androidx.window:window-core:1.5.1	WindowManager 1.5.1

---

autonomousapps/dependency-analysis-android-gradle-plugin (com.autonomousapps.dependency-analysis)

v3.6.1

• [Fix]: use compilation.disambiguatedName for crafting the task suffix.

v3.6.0

• [Breaking]: min version of Android Gradle Plugin (AGP) is now 8.10.0.
• [Feat]: support KMP projects with JVM targets.
• [Feat]: support KMP projects with Android targets.
• [Feat]: update console report to be more idiomatic for KMP.
• [Feat]: implement ABI inclusions filter.
• [Feat]: add lifecycle resolveExternalDependencies task.
• [Fix]: improve Class.forName handling.
• [Fix]: remove dependency to javax.inject.
• [Fix]: potential resource leak in JarExploder.
• [Fix]: duplicate class detection for annotations.
• [Fix]: use latest-kotlin editor.
• [Refactor]: move two public types to an internal package to exclude from published api, and exclude the
  com.autonomousapps.model.internal package from the published api.
• [Refactor]: moved a lot of task-registration code into AbstractDependencyAnalyzer.
• [Docs]: add link to maven-hijack blog post.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.