Update all non-major dependencies

[infinum-renovate-github-app]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
gradle (source)		minor	9.6.1 → 9.8.0
org.apache.commons:commons-compress (source)	dependencies	minor	1.27.1 → 1.28.0
org.apache.commons:commons-lang3 (source)	dependencies	minor	3.18.0 → 3.21.0
com.vanniktech:gradle-maven-publish-plugin	dependencies	minor	0.34.0 → 0.37.0
com.android.tools.build:gradle (source)	dependencies	minor	9.3.1 → 9.4.1
org.jetbrains.kotlin.jvm (source)	plugin	minor	2.3.21 → 2.4.20
io.github.takahirom.roborazzi:roborazzi-gradle-plugin	dependencies	minor	1.72.0 → 1.76.0
androidx.constraintlayout:constraintlayout (source)	dependencies	patch	2.2.1 → 2.2.2
app.cash.paparazzi:paparazzi-gradle-plugin	dependencies	patch	2.0.0-alpha05 → 2.0.0-alpha05.1
androidx.compose:compose-bom	dependencies	minor	2025.06.01 → 2025.12.01
androidx.appcompat:appcompat (source)	dependencies	minor	1.7.1 → 1.8.0
com.squareup:kotlinpoet-ksp	dependencies	minor	2.0.0 → 2.4.0
androidx.compose:compose-bom	dependencies	minor	2026.06.01 → 2026.09.00
com.google.devtools.ksp:symbol-processing-api (source)	dependencies	patch	2.3.11 → 2.3.12
org.jetbrains.kotlinx:kotlinx-serialization-json	dependencies	minor	1.8.1 → 1.11.0
org.jetbrains.compose	plugin	minor	1.11.1 → 1.12.1
org.jetbrains.kotlin.plugin.serialization (source)	plugin	minor	2.3.21 → 2.4.20
org.jetbrains.kotlin.plugin.compose (source)	plugin	minor	2.3.21 → 2.4.20
org.jetbrains.kotlin:kotlin-gradle-plugin (source)	dependencies	minor	2.3.21 → 2.4.20
org.jetbrains.kotlin:kotlin-stdlib (source)	dependencies	minor	2.3.21 → 2.4.20
com.google.devtools.ksp (source)	plugin	patch	2.3.11 → 2.3.12
com.android.kotlin.multiplatform.library (source)	plugin	minor	9.2.1 → 9.4.1
com.android.application (source)	plugin	minor	9.2.1 → 9.4.1
org.jetbrains.kotlin.plugin.compose (source)	plugin	patch	2.4.0 → 2.4.20
org.jetbrains.kotlin.multiplatform (source)	plugin	patch	2.4.0 → 2.4.20
org.jetbrains.kotlin.android (source)	plugin	patch	2.4.0 → 2.4.20

---

JetBrains Kotlin: Unsafe Deserialization in Kotlin Build Cache Enables Code Execution

CVE-2026-53914 / GHSA-r937-wjx7-w2jp

More information

Details

In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata

Severity

• CVSS Score: 6.7 / 10 (Medium)
• Vector String: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L

References

• https://nvd.nist.gov/vuln/detail/CVE-2026-53914
• https://github.com/JetBrains/kotlin/commit/bf51df665b458fda7c3eaf436c4d88dc119d7ec6
• https://github.com/JetBrains/kotlin
• https://github.com/JetBrains/kotlin/releases/tag/v2.4.20-Beta1
• https://www.jetbrains.com/privacy-security/issues-fixed

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

---

Release Notes

gradle/gradle (gradle)

v9.8.0: 9.8.0

Compare Source

The Gradle team is excited to announce Gradle 9.8.0.

Here are the highlights of this release:

• Java 27 support
• Maven mirror settings reuse
• Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aman Gautam,
Björn Kautler,
Eng Zer Jun,
Hashim Khan,
Julian Krannich,
KBS,
Labh R Jethe,
Mark Dodgson,
Maxim,
monkey,
nataphon-ktsystems,
Paul King,
Qiu Tian,
rg_sandesh,
Roberto Perez Alcolea,
Sean,
Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.0 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.0 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.7.1: 9.7.1

Compare Source

The Gradle team is excited to announce Gradle 9.7.1.

This is a patch release for 9.7.0. We recommend using 9.7.1 instead of 9.7.0.

Here are the highlights of 9.7.0 release:

• Isolated Projects graduates to incubating
• Broader Configuration Cache compatibility
• Resilient Sync helps you fix broken builds
• More source locations in problem reports

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
Aman Gautam,
Aman Kumar,
Anton Dubrouski,
Aurimas,
gbhavya07,
Josh Friend,
nicklauslittle-gov,
Pragati,
project516,
Qin Mi,
Ravi,
sk-reddy17,
Suvrat Acharya,
Yongshun Ye.

Upgrade instructions

Switch your build to use Gradle 9.7.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.7.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.7.0: 9.7.0

Compare Source

The Gradle team is excited to announce Gradle 9.7.0.

Here are the highlights of this release:

• Isolated Projects graduates to incubating
• Broader Configuration Cache compatibility
• More source locations in problem reports

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
Aman Gautam,
Aman Kumar,
Anton Dubrouski,
Aurimas,
gbhavya07,
Josh Friend,
nicklauslittle-gov,
Pragati,
project516,
Qin Mi,
Ravi,
sk-reddy17,
Suvrat Acharya,
Yongshun Ye.

Upgrade instructions

Switch your build to use Gradle 9.7.0 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.7.0 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

vanniktech/gradle-maven-publish-plugin (com.vanniktech:gradle-maven-publish-plugin)

v0.37.0

Compare Source

• When publishing to Maven Central, redundant checksum files are now excluded by default: checksums of .asc
  signature files (gradle/gradle#20232) and the sha256/sha512
  checksums, which are never read by Gradle or Maven Central. The published checksums can be configured through
  checksums(...) in the DSL or the mavenCentralChecksums Gradle property (default md5,sha1). Signature checksum
  exclusion can be controlled through excludeSignatureChecksums() or the mavenCentralExcludeSignatureChecksums
  Gradle property.
• Maven Central deployment id is being logged after upload.

Minimum supported versions

• JDK 17
• Gradle 9.0.0
• Android Gradle Plugin 8.13.0
• Kotlin Gradle Plugin 2.2.0

Compatibility tested up to

• JDK 26
• Gradle 9.6.0
• Gradle 9.7.0-milestone-1
• Android Gradle Plugin 9.2.1
• Android Gradle Plugin 9.3.0-rc01
• Android Gradle Plugin 9.4.0-alpha01
• Kotlin Gradle Plugin 2.4.0

v0.36.0

Compare Source

BREAKING

• Updated minimum supported JDK, Gradle, Android Gradle Plugin and Kotlin versions.
• Removed support for Dokka v1, it's now required to use Dokka in v2 mode.
• Mark DirectorySignatureType internal.

Behavior changes

• validateDeployment now has the DeploymentValidation enum as type instead of being a boolean. The default
  is now to just wait for the VALIDATED state. The previous behavior can be achieved by setting it to PUBLISHED.
  NONE can be used for disabling the validation completely.
• When calling configure(...) manually to configure what to publish and not passing javadocJar explicity,
  the plugin now defaults to publishing an empty javadoc jar.

Features

• Android projects now support using Dokka for javadoc creation, this will happen automatically
  when using the default options and the Dokka plugin is applied to the project.
• Added consistent JavadocJar and SourcesJar options to configureBasedOnAppliedPlugins and to all
  applicable project types that can be passed to configure. The previous Boolean based versions have
  been deprecated.
• When enabling Maven Central publishing through the DSL, the mavenCentralDeploymentValidation and
  mavenCentralAutomaticPublishing are used for the default values of the 2 parameters when they are not passed
  explicitly. This allows to more easily override them in certain environments.
• When isolated projects is enabled the module/project specific gradle.properties files are now considered in
  the same way they are when isolated projects is disabled.

Improvements

• Better error message when Maven Central credentials are missing.

Minimum supported versions

• JDK 17
• Gradle 9.0.0
• Android Gradle Plugin 8.13.0
• Kotlin Gradle Plugin 2.2.0

Compatibility tested up to

• JDK 25
• Gradle 9.3.0
• Gradle 9.4.0-milestone-4
• Android Gradle Plugin 8.13.2
• Android Gradle Plugin 9.0.0
• Android Gradle Plugin 9.1.0-alpha05
• Kotlin Gradle Plugin 2.3.0
• Kotlin Gradle Plugin 2.3.20-Beta1

v0.35.0

Compare Source

• Add support for publishing Kotlin Multiplatform libraries that use com.android.kotlin.multiplatform.library.
• Add support for validating deployments to Central Portal
• Raise minimum Gradle version to 8.13
• Raise minimum Android Gradle Plugin version to 8.2.2
• Do not unconditionally disable DocLint
• Fail publishing if SONATYPE_HOST is not set to CENTRAL_PORTAL.
• Fix misleading error message when Android library variant is not found.
• Downgrade transitive OkHttp version.
• Don't check project heirarchy for POM properties when Isolated proejcts is enabled.

Thanks to @​joshfriend, @​Flowdalic and @​Goooler for their contributions to this release.

Minimum supported versions

• JDK 11
• Gradle 8.13
• Android Gradle Plugin 8.2.2
• Kotlin Gradle Plugin 1.9.20

Compatibility tested up to

• JDK 24
• Gradle 9.2.0
• Gradle 9.3.0-milestone-1
• Android Gradle Plugin 8.13.1
• Android Gradle Plugin 9.0.0-alpha14
• Kotlin Gradle Plugin 2.2.21
• Kotlin Gradle Plugin 2.3.0-Beta2

JetBrains/kotlin (org.jetbrains.kotlin.jvm)

v2.4.20

Analysis API

• KT-86546 Check suspicious when over ConeKotlinType in ConeTypeCompatibilityChecker
• KT-85418 Implement an API for accessing deserialized file annotations in Analysis API
• KT-74448 K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt, kotlinx.coroutines
• KT-85856 containingSymbol of constructor property differs for local and non-local classes
• KT-65417 K2 IDE: KTOR false positive expect-actual matching error on enum class because of implicit clone() in non-JVM source sets

Analysis API. Code Compilation

• KT-76457 K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a JVM counterpart” on evaluating inline fun from common module inside jvm

Analysis API. FIR

• KT-70552 No expects for actual
• KT-69727 K2 IDE. Wrong error in the editor on calling clone function of actual enum instance in non-jvm platform
• KT-69726 FP errors on declaring fun clone() in actual enum in not-jvm source-set
• KT-86014 Types are broken after remove parameter through change signature
• KT-86363 KotlinIllegalArgumentExceptionWithAttachments: No dangling modifier found on companion blocks
• KT-86147 Drop kotlin.parallel.resolve.under.global.lock registry key
• KT-85543 Avoid lazy resolve for the contracts phase if no constracts might be resolved

Analysis API. Infrastructure

• KT-84914 Do not publish analysis-api-test-framework
• KT-86986 kotlin-compiler-common-for-ide bundles unrelated Analysis API modules
• KT-86186 Analysis API: Codebase tests run twice in some analysis modules — pick a single JUnit runner and migrate
• KT-85360 Drop kotlin-compiler-testdata-for-ide artifact
• KT-85585 Simplify the dependencies graph for the Analysis API modules
• KT-85381 Remove tests for the FE10 implementation

Analysis API. Light Classes

New Features

• KT-84645 Support resolving to companion block members & extensions from Java (light classes)
• KT-80775 Support PsiClass#getRecordComponents in light classes

Fixes

• KT-57537 SLC: propagate default parameter value from (@JvmOverloads) expect declarations to actual declarations
• KT-85040 [Analysis API] Improve Java / Kotlin interop in KMP projects
• KT-87301 SymbolLightAccessorMethod#isValid returns false for delegated properties
• KT-87171 SLC: non-mapped Kotlin collection supertype is dropped from supertype list
• KT-87250 JvmExposeBoxed: light classes shouldn't be autogenerated for private declarations
• KT-70428 AA: good code is red when a Java class extends a Kotlin class implementing MutableList by delegation
• KT-63568 Symbol Light Classes: KtAnnotationApplicationWithArgumentsInfo.normalizedArguments() may work incorrectly when psi is not set
• KT-36740 MPP: False-positive incompatible types in .java when using expect-class returned by non-expect member from common when actual is actual typealias
• KT-67749 Analysis API: Symbol Light classes should be available only to pure JVM sources
• KT-68169 K2 IDE. KMP. False positive type mismatch in java file of jvm source-set when using common declaration which expects String
• KT-37783 KMP Java Interop: JVM-only methods on actual superclass not resolved in Java for common subclass
• KT-40059 Provide type correction for expect/actual types used from Java-code
• KT-71429 MPP: False positive "Function1 is not a functional interface" when calling code from Common in Java
• KT-70426 SLC: kotlin.Collection#size is not exposed by default
• KT-60480 Symbol Light Classes: Classes implementing kotlin.collections.* interfaces don't implement all methods from the corresponding java.util.* interfaces
• KT-36991 IDE: "both methods have same erasure" for Java classes directly or indirectly extending Kotlin collections
• KT-22594 KotlinCollection.getSize is not highlighted as an error in Java

Analysis API. PSI

• KT-84925 Move KtReference to the Kotlin IntelliJ plugin
• KT-85052 Move mutation methods out of the Kotlin PSI
• KT-85427 Use factory-like pattern instead of reflection in KtNodeType
• KT-84789 Ensure all KtClassBody.parent usages are correct
• KT-85154 PSI: "AE: parent is ERROR_ELEMENT" with top-level destructuring declaration

Analysis API. Providers and Caches

• KT-82220 Analysis API: Support platform-specific session components and checkers in metadata sessions
• KT-76526 Incorrect built-in module is provided for non-JVM sources in Standalone

Analysis API. Standalone

• KT-83191 Analysis API: JvmDependenciesIndexImpl performs very poorly for large classpaths
• KT-61404 Analysis API: implement proper library publishing structure
• KT-85112 AA does not see packages from unpacked klibs
• KT-86417 Support parameters in 'getExpectsForActual()'
• KT-84916 Metadata stub deserializers aren't properly set up for Analysis API Standalone

Analysis API. Stubs and Decompilation

• KT-86250 KotlinIllegalArgumentExceptionWithAttachments: No fir element was found for KtDestructuringDeclaration on destructuring declaration typing
• KT-86520 KotlinDeclarationInCompiledFileSearcher doesn't support visibility-mangled declarations
• KT-64901 Inconsistency between AST and Stub tree in the case of non-local destructuring declarations
• KT-84444 Support stubs for companion blocks & extensions

Analysis API. Surface

New Features

• KT-73214 Add KaScope#declarations with name filter
• KT-69085 Provide API to retrieve label/name from KtFunctionLikeSymbol
• KT-70771 KaLocalVariableSymbol: support isDelegatedProperty
• KT-85037 Add API for KaFunctionType's returnType modification
• KT-80460 AA: Introduce KtExpression.isStableForSmartCasting API
• KT-66566 AA: api to create functional types
• KT-65912 Analysis API: Implement type building API for all KtType

Performance Improvements

• KT-70021 Analysis API: optimize KaFirExpressionTypeProvider.expressionType for simple cases

Fixes

• KT-66039 K2: Analysis API: redesign resolution API
• KT-86394 Resolve from KDoc reference is inconsistent with source code
• KT-87337 Integrate KaContextParameterOwnerSymbol into KaCallableSymbol
• KT-78234 Analysis API: Context parameters for accessors
• KT-86786 Investigate suspicious when over ConeKotlinType in ConeKotlinType.getDirectSupertypes
• KT-72902 Shouldn't KaSymbolProvider#findClass return KaNamedClassSymbol?
• KT-87237 No expected type inside arrayOf in annotation entries
• KT-87143 findKDoc returns parent property KDoc for accessors of an overriding property
• KT-83224 Support "Compile-time functions" in the Analysis API
• KT-87174 Expected class KaFirSymbol instead of class KaFirPackageSymbol exception
• KT-87199 [Analysis API] Remove KaEnumEntryInitializerSymbol
• KT-85382 Remove the FE10 implementation
• KT-70774 Unary operators on literals are not resolvable
• KT-85206 Provide information about potentially removable context-sensitive resolution qualifiers via Analysis API
• KT-86872 KtOperationReferenceExpression should be KtResolvableCall
• KT-85800 Analysis API: The internal utility PrettyPrinter is used in the public API surface
• KT-73796 Consider "KaAnnotation#useSiteTarget" removal
• KT-70794 K2 IDE: Reference to object does not resolve as LHS in "plusAssign" assignment expression
• KT-86757 Flaky annotations result for @all annotation on a backing field
• KT-86681 [Analysis API] Move isDelegated to KaVariableSymbol
• KT-86685 collectCallCandidates works incorrectly for a constructor vs. a companion invoke
• KT-86514 No expected type within collection literal in annotation entry using array rather than varargs
• KT-76076 K2 AA: safe call expression navigates to parent array index access expression
• KT-86418 Support property accessors in 'getExpectsForActual()'
• KT-71312 KaFirPsiJavaClassSymbol.{hasAnnotations, annotationSimpleNames} is inconsistent with FirJavaClass implementation
• KT-86248 isUsedAsExpression true for typealias lhs in ::
• KT-85778 Analysis API: Ensure that all public endpoints in implementation modules are internal or opt-in
• KT-78285 resolveToCallCandidates inconsistent behaviour with invoke operator and constructor
• KT-85852 CCE in buildClassType
• KT-85989 Super type references should be aware of type alias constructors
• KT-84184 [Analysis API] Provide a unification substitutor API
• KT-84584 Support companion extensions and blocks in the Analysis API
• KT-84932 Deprecate utilities exposed through analysis-internal-utils
• KT-73059 Consider dropping of KaOriginalPsiProvider
• KT-73050 KaFirSymbolRelationProvider#expectsForActual: suspicius logic for KaReceiverParameterSymbol
• KT-71101 [AA] Consider getting rid of KaTypeNullability

Backend. J2KLIB

• KT-88165 Add Support for -XheaderModeType=compilation to improve header compilation performance
• KT-86239 [JKLIB] Investigate which type system context is needed in JklibIrLinker
• KT-88306 [JKLIB] Unbound symbols for kotlin.coroutines.SuspendFunctionN
• KT-88120 [JKLIB] Add -jvm-target to K2JKlibCompilerArguments
• KT-88176 [JKLIB] DeserializationStrategy.WITH_INLINE_BODIES when deserializaing dependencies
• KT-88163 Allow to disable firAggressivePrunner for Jklib

Backend. Native. Debug

• KT-85264 [Native] Stepping trace starts with // test.kt:1 box in some debug stepping tests
• KT-81740 Native: importing konan_lldb.py to lldb prints a warning

Backend. Wasm

Fixes

• KT-73452 K/Wasm: turning on range checks by default
• KT-83171 K/Wasm: Investigate import.meta usage in mjs files
• KT-83159 K/Wasm: generate one common base class fun interfaces (including Function*)
• KT-82843 K/Wasm: pass a lambda call helpers to convert funs as an argument instead of exporting them
• KT-86123 [Wasm] Callable reference refactoring (KT-83159) broke klib binary compatibility with libraries compiled by Kotlin 2.0.x
• KT-83356 K/Wasm: Difference in behavior on nested class initialization (for enums?)
• KT-87639 [Wasm] Multimodule wasm fails on Pointer usages
• KT-87583 Wasm IC cache is not invalidated when kotlin.wasm.compilationMode changes causing IndexOutOfBoundsException in WasmDeserializer
• KT-84267 K/Wasm: init order of companion objects is different from JVM
• KT-86192 K/Wasm: Raise a warning on usage of top-level require in JsFun
• KT-86242 K/Wasm: deprecate and prohibit using wasmExports
• KT-86245 K/Wasm: provide an API to get a reference to wasm memory
• KT-84610 [Wasm] Failed to compile klibs in IC mode
• KT-87078 Wasm/JS: OutOfMemoryError (or BufferUnderflowException) during incremental compilation of multiple files with @JsExport
• KT-76207 K/Wasm: prototype generating suspend functions with stack-switching proposal
• KT-86166 [Wasm] Make possible to have passing test in multimodule but having it fail in monolith
• KT-71039 [Wasm, IC] Investigate synthetic function types loading
• KT-71505 [Wasm, IC] Incremental step can produce wrong main function call
• KT-86822 K/Wasm: don't cast the result of calling callable references with Unit return type
• KT-86180 [Wasm] backward compatibility is broken in 2.1->2.2 by changed order of type parameters
• KT-86640 [wasm]: Single-module test failures with companion object initializers
• KT-66105 Wasm: SyntaxError: Identifier 'box' has already been declared
• KT-83245 K/Wasm: Run stepping tests with local variables with K/Wasm
• KT-86478 K/Wasm JS: StringBuilder.setLength crashes when growing with js-string builtins
• KT-84667 wasm: Add general support for custom sections/annotations
• KT-85506 [Wasm/WASI] Stdlib readLn and readlnOrNull implementation
• KT-85270 K/Wasm: incremental compilation fails with NoSuchElementException when a stdlib call is removed

Compiler

New Features

• KT-73431 Unresolved reference errors should state the type they're acting on
• KT-80373 Add initial support for release compiler caches
• KT-84618 Emit a warning when an undesrcore variable is assigned to a Unit expression
• KT-86409 [KMP] Create JVM IC metadata output
• KT-84295 Support Companion Block of Operator for Collection Literals
• KT-84956 Resolve of references to static & companion object members of generic class
• KT-85925 Native: rework virtual trampolines machinery
• KT-86657 Native: turn on incremental compilation by default
• KT-86018 Short-form of name-based destructuring for multi-field value classes
• KT-86406 Swift Export: support supercalls for cross-language inheritance
• KT-77616 Native: consider adding an annotation that enforces thread state switching for a @SymbolName external fun`
• KT-86410 [KMP] Implement acceptance of JVM IC metadata from previous compilation
• KT-85593 ELA: Support multiple lambda arguments
• KT-83040 Collection literals: ensure normal interaction with CFG
• KT-84333 Collection literals: type inference in delegate expression
• KT-84289 Resolution to Companion Block & Extension Invoke Operator
• KT-82961 Type inference from upper type for type parameters designed for tracking of checked exceptions
• KT-81444 False positive: "Overload resolution ambiguity" with @OverloadResolutionByLambdaReturnType and multiple lambda parameters
• KT-75736 Enable reading/writing annotations in metadata on JVM by default

Performance Improvements

• KT-85621 Native: fix optimization in CastsOptimization
• KT-69758 FastJarFS - avoid copying data on inflating (JDK 16+)
• KT-85647 Compilation performance regression in AbstractFirDeserializedSymbolProvider since 2.3.20
• KT-86104 [JVM] use static methods/fields of KTypeProjection in typeOf generated bytecode
• KT-86084 IDEA freezes when a lot of properties are modified to lazy delegates
• KT-83068 Investigate long compilation times with many generics & overloads
• KT-66469 Long compilation with mockk import
• KT-79677 Remove meaningless LVT records

Fixes

• KT-88953 CCE caused by suspend conversion of nullable argument to nullable expected type
• KT-85842 Collection literals (and CSR): internal failure when lambda is analyzed during inference of outer call
• KT-86751 IntroducedAt: Do not generate @IntroducedAt overloads as synthetic
• KT-81708 K/N incremental compilation: No module deserializer for FUN name:writeObject
• KT-82510 K/N, IC: "Undefined symbols for architecture arm64" for iosSimulatorArm64 with kotlin.incremental.native=true
• KT-88316 K/N: StackOverflowError in CastsOptimization when two nullable local variables are assigned to each other across nested loops
• KT-80841 Confusing positioning of NO_VALUE_FOR_PARAMETER
• KT-85300 Improve message for UNRESOLVED_REFERENCE_WRONG_RECEIVER
• KT-87983 CCE on member extension property delegated to bound property reference
• KT-85403 kotlin.NoWhenBranchMatchedException on Kotlin Native with sealed interface
• KT-87922 K1FakeDescriptorsForReferencesKt classes duplicated between kotlin-scripting-compiler-embeddable and kotlin-build-tools-impl
• KT-87499 ClassCastException "Float cannot be cast to Unit" when a suspend function's result is discarded in a when-branch
• KT-85656 [NO_ACTUAL_CLASS_MEMBER_FOR_EXPECTED_CLASS] False negative for nested type alias
• KT-85641 Nullable-marked object qualifiers in LHSs of callable references
• KT-86957 Warning on the underscore variable is not reported for java.lang.Void call
• KT-87261 K/N debug: 'is' check miscompilation — local variable reports wrong type when two smart-cast extractions precede an inline loop
• KT-87577 Compiler crash on red code with ambiguous type parameter used as expression
• KT-80867 [Native] Stack allocation is blocked after cross-module inlining of stdlib
• KT-86949 Native: ComputeTypesPass handles type checks across loop iterations wrong
• KT-86959 Native: OptimizeCasts gets confused by "complex" terms leaking between different loop iterations
• KT-78079 Enable generation of when using invokedynamic by default for JVM targets 21+
• KT-86525 JvmExposeBoxed: Inconsistent number of parameters during reflection
• KT-72999 K/N: Do not consider IrTypeOperatorCall as a tail call expression
• KT-84802 Add new synthetic class flag to JVM metadata
• KT-87606 Compiler crash on red code with redeclaration of type parameter which is used as expression
• KT-85888 Native: incremental compilation blows up when a method changes from open to final
• KT-87335 Context parameters: wrong LINENUMBER emitted for context argument loads in JVM bytecode
• KT-84344 Disambiguate fake source elements for source-based symbol IDs
• KT-86618 Collection literals: internal PCLA failure with reassignment
• KT-85703 Drop pre-2.0 language features from K2 & common compiler code
• KT-87245 Report UnsupportedFeature on ExplicitContextArgument
• KT-80227 Support unnamed context parameters in evaluation
• KT-72706 Confusing "INVISIBLE_REFERENCE" when calling private constructor
• KT-86110 K/N Incremental compilation: stale cache is reused after enum entry reorder
• KT-86133 K/N IC: stale cache is reused after reified inline body change
• KT-30728 "VerifyError: Operand stack underflow" on crossinline lambda usage inside inline function in anonymous object
• KT-87507 False-positive ABSTRACT_CLASS_MEMBER_NOT_IMPLEMENTED on fake-override with value parameter of type missing in dependencies
• KT-87439 Postpone UnitConversionsOnArbitraryExpressions indefinetely
• KT-87434 JAVA_CLASS_ON_COMPANION not reported when companion accessed through typealias
• KT-64622 [K/N] ar utility fails with symbol @ in module/klib name on Linux with static cache
• KT-84037 Native: rework ar invocations in the compiler
• KT-87339 JVM: Support recursive type provided as an argument of typeOf
• KT-86551 Check suspicious when over ConeKotlinType in FirExposedVisibilityDeclarationChecker#findVisibilityExposure
• KT-87395 StackOverflowError in return value checker when a Java class member is annotated with the class's own nested annotation
• KT-87290 Investigate possible bug in value class deserialization
• KT-61141 K/N: irText tests failed with K/N irText first run
• KT-85764 Native: Prohibit compiling sources in 'kotlin' package by default
• KT-86469 Check 'when's over 'ConeKotlinType' which could miss some branches in DFA
• KT-87253 Missed ConeCapturedType check in processing of equals contracts
• KT-84522 Refactor FirResolvedQualifier
• KT-84299 resolvedToCompanionObject is not set in some situations
• KT-87327 JVM IR: NullPointerException in JvmInlineClassLowering when using == between value of generic value class and another value class
• KT-86948 Native: CastsOptimization merges results of type checks across loop iterations wrong
• KT-86947 Native: CastsOptimization drops side effects of always-null safe casts
• KT-87276 Drop or move ConeTypeCompatibilityChecker
• KT-78623 No-arg constructor should be generated if all parameters are optional, even when one of the parameters is inline type
• KT-86886 Kotlin Lombok: compiler crash with IllegalArgumentException on builder with a single type parameter
• KT-83880 Consider making OPERATOR_RENAMED_ON_IMPORT a warning (instead of error)
• KT-70461 K2: "Inline class types should have the same representation" caused by value class and smart check
• KT-87140 K/N: Test generation leaks BaseClassSuite's INSTANCE type parameter
• KT-87291 Enable ProhibitScriptTopLevelInnerClasses in 2.5
• KT-87226 CompanionBlocksAndExtensions: COMPANION_EXTENSION_RECEIVER_IS_OBJECT diagnostic is absent when object used via typealias
• KT-87058 Investigate abandoned language features
• KT-86655 mismatched mutability annotations in overriding lead to misaligned behavior in warn-mode and strict-mode
• KT-85169 Return value checker: RETURN_VALUE_NOT_USED: object expression highlighted entirely instead of just the keyword
• [KT-86464](ht

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.