Skip to content

fix(deps): update all non-major dependencies#239

Merged
magisk317 merged 2 commits into
betafrom
renovate/all-minor-patch
May 31, 2026
Merged

fix(deps): update all non-major dependencies#239
magisk317 merged 2 commits into
betafrom
renovate/all-minor-patch

Conversation

@magisk317
Copy link
Copy Markdown
Owner

@magisk317 magisk317 commented May 31, 2026

This PR contains the following updates:

Package Type Update Change Age Confidence
gradle (source) patch 9.5.09.5.1 age confidence
renovatebot/github-action action patch v46.1.13v46.1.14 age confidence
ruby (source) uses-with patch 4.0.34.0.5 age confidence
com.google.devtools.ksp (source) plugin patch 2.3.72.3.9 age confidence
org.junit.jupiter:junit-jupiter (source) dependencies minor 6.0.36.1.0 age confidence
org.junit.platform:junit-platform-launcher (source) dependencies minor 6.0.36.1.0 age confidence
org.jetbrains.kotlinx:kotlinx-coroutines-core dependencies minor 1.10.21.11.0 age confidence
org.jetbrains.kotlinx:kotlinx-coroutines-android dependencies minor 1.10.21.11.0 age confidence
androidx.compose:compose-bom-alpha dependencies minor 2026.04.012026.05.01 age confidence
androidx.compose.material3:material3-window-size-class (source) dependencies patch 1.5.0-alpha181.5.0-alpha20 age confidence
androidx.compose.material3:material3 (source) dependencies patch 1.5.0-alpha181.5.0-alpha20 age confidence

Release Notes

gradle/gradle (gradle)

v9.5.1: 9.5.1

Compare Source

The Gradle team is excited to announce Gradle 9.5.1.

Here are the highlights of this release:

  • Task provenance in reports and failure messages
  • Type-safe accessors for precompiled Kotlin Settings plugins

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
atm1020,
mataha,
Adam,
Attila Kelemen,
Benedikt Ritter,
Björn Kautler,
Caro Silva Rode,
CHANHAN,
Dmitry Nezavitin,
Eng Zer Jun,
KugelLibelle,
Madalin Valceleanu,
Markus Gaisbauer,
Oliver Kopp,
Philip Wedemann,
ploober,
Roberto Perez Alcolea,
Rohit Anand,
Suvrat Acharya,
Ujwal Suresh Vanjare,
Victor Merkulov

Upgrade instructions

Switch your build to use Gradle 9.5.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.5.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

renovatebot/github-action (renovatebot/github-action)

v46.1.14

Compare Source

Documentation
  • Revise Fine-grained Personal Access Tokens section (#​1030) (fef7882)
  • set RENOVATE_PLATFORM_COMMIT to enabled (#​1029) (9d07dfa)
  • update references to renovatebot/github-action to v46.1.13 (9a41b99)
Miscellaneous Chores
  • cleanup (8abcd0e)
  • deps: update commitlint monorepo to v20.5.3 (a4e124d)
  • deps: update dependency globals to v17.6.0 (d5ca6d4)
  • deps: update dependency typescript-eslint to v8.59.1 (1dd2319)
  • enable pnpm minimumReleaseAge (00a8327)
Build System
  • deps: lock file maintenance (f6821a2)
Continuous Integration
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.160.7 (1189f69)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.162.0 (43d0a48)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.163.0 (61a1654)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.163.1 (4226876)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.163.2 (b3318e0)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.163.4 (09fe3e9)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.164.0 (5736585)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.164.1 (8b164cc)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.164.2 (44728cc)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.165.0 (bde1da1)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.166.0 (#​1031) (4b957d1)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.166.2 (499cfeb)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.166.3 (fe8a943)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.167.0 (f8ca6db)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.168.4 (2e15d66)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.168.5 (a87ee3d)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.168.6 (683e7dd)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.169.0 (f6166e7)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.169.4 (f1f81f9)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.170.0 (5473f54)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.170.12 (b47aa13)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.170.13 (7e8834d)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.170.14 (9b5f9e6)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.170.15 (98631e8)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.170.16 (ab997a9)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.170.17 (24a51e0)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.170.18 (f82d2cd)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.170.19 (3d684f2)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.170.20 (d7afc6b)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.170.3 (306f0c9)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.170.8 (f0eea19)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.170.9 (f3af74e)
ruby/ruby (ruby)

v4.0.5: 4.0.5

Compare Source

What's Changed

Note: This list is automatically generated by tool/gen-github-release.rb. Because of this, some commits may be missing.

Full Changelog

v4.0.4: 4.0.4

Compare Source

What's Changed

Note: This list is automatically generated by tool/gen-github-release.rb. Because of this, some commits may be missing.

Full Changelog

google/ksp (com.google.devtools.ksp)

v2.3.9

Compare Source

What's Changed

  • Cleaned up native cross-compilation support checks to prevent Gradle Configuration Cache invalidation (#​2953)
  • Fixed a compilation performance regression in in PsiResolutionStrategy introduced in 2.3.8 (#​2948)

Contributors

  • Thanks to everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.8...2.3.9

v2.3.8

Compare Source

What's Changed

  • Enabled new default annotation use-site rules in Kotlin's Analysis API (see KEEP 402) for more information. Note: KSP was already mostly compatible with KEEP 402, so there shouldn't be any visible changes for users. (#​2888)
  • Enabled ksp.project.isolation by default when Gradle isolated projects are enabled (#​2866)
  • Improved getSymbolsWithAnnotation performance by implementing a new PSI-based resolution strategy (#​2816)

Contributors

  • Thanks to @​hugoncosta and everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.7...2.3.8

Kotlin/kotlinx.coroutines (org.jetbrains.kotlinx:kotlinx-coroutines-core)

v1.11.0

Compare Source

Various
  • Kotlin was updated to 2.2.20 (#​4545).
  • Improved the published jar files (#​3842, #​4599).
  • Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#​4433, #​4596).
Breaking changes and deprecations
  • Moved Promise-related functions from JS and Wasm/JS to the new web target. On Wasm/JS, this is a breaking change. Before the change, Promise on Wasm/JS could work with arbitrary Kotlin types, but now, only JsAny subtypes are accepted (#​4563).
  • Changed handling of coroutine exceptions that can't be propagated on JS and Wasm/JS. Before, exceptions were logged, but now, they are reported to the JS runtime (#​4451, #​4631).
  • Deprecated using CoroutineDispatcher as the coroutine context key; now, ContinuationInterceptor has to be used instead (#​4333).
  • Advanced the deprecation levels on kotlinx-coroutines-test APIs (#​4604).
  • Added lint functions that mark passing a Job to coroutine builders as deprecated (#​4435).
Bug fixes and improvements
  • Added a callsInPlace(EXACTLY_ONCE) contract to runBlocking in code shared between JVM and Native (#​4368).
  • Added a callsInPlace(EXACTLY_ONCE) contract to suspendCancellableCoroutine (#​4574).
  • Fixed flowOn incorrectly handling ThreadContextElement updates (#​4403).
  • Fixed exceptions in user-supplied Thread.UncaughtExceptionHandler instances causing the internal coroutines machinery to fail (#​4516).
  • Fixed CoroutineDispatcher.asScheduler in the RxJava integration not cancelling outstanding work when a Worker gets cancelled, which led to memory leaks in some scenarios (#​4615).
  • Fixed SharedFlow entering an invalid state when a subscriber and an emitter are cancelled simultaneously (#​4583).
  • Fixed an R8 optimization leading to shareIn/stateIn coroutines getting garbage-collected (#​4646). Thanks, @​solevic!
Small additions
  • Added CompletableDeferred.asDeferred for obtaining a read-only Deferred view (#​4408).
  • Added SharedFlow.asFlow for obtaining a Flow view with hidden hot flow semantics (#​4530). Thanks, @​g000sha256!
  • Added a StateFlow.collectLatest overload returning Nothing to assist with finding unreachable code (#​4454).
  • Added ReceiveChannel.consumeTo for consuming a ReceiveChannel into a MutableCollection (#​4520).
  • Added a StateFlow<T>.onSubscription overload returning a StateFlow<T>, similar to SharedFlow<T>.onSubscription returning SharedFlow<T> (#​4275). Thanks, @​xit0c!
  • Added terminal Flow operators for collecting a Flow to a Map (#​1541).
Changelog relative to version 1.11.0

No changes, only the version is increased.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

Summary by Sourcery

在整个项目中更新构建工具和依赖到最新的补丁和小版本。

Build(构建):

  • 将 Gradle wrapper 升级到 9.5.1,并在版本目录中刷新 Compose BOM、coroutines、JUnit、KSP 和 Material3 的依赖版本。

CI:

  • 更新 GitHub Actions 工作流,在发布构建中使用 Ruby 4.0.5,并在自托管的 Renovate 运行中使用 renovatebot/github-action v46.1.14。

Documentation(文档):

  • 刷新 README 中的徽章,以反映更新后的 Jetpack Compose BOM 版本。
Original summary in English

Summary by Sourcery

Update build tooling and dependencies to current patch and minor versions across the project.

Build:

  • Bump Gradle wrapper to 9.5.1 and refresh dependency versions for Compose BOM, coroutines, JUnit, KSP, and Material3 in the version catalog.

CI:

  • Update GitHub Actions workflows to use Ruby 4.0.5 for release builds and renovatebot/github-action v46.1.14 for self-hosted Renovate runs.

Documentation:

  • Refresh README badges to reflect the updated Jetpack Compose BOM version.

@magisk317 magisk317 added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code java Pull requests that update java code labels May 31, 2026
@magisk317 magisk317 merged commit 229dfe5 into beta May 31, 2026
1 check passed
@magisk317 magisk317 deleted the renovate/all-minor-patch branch May 31, 2026 10:44
@sourcery-ai
Copy link
Copy Markdown

sourcery-ai Bot commented May 31, 2026

审阅者指南(在小型 PR 上折叠显示)

审阅者指南

此 PR 将多个开发期与运行期依赖(Gradle wrapper、Kotlin coroutines、JUnit、KSP、Compose BOM/Material3、Renovate GitHub Action 以及 CI 中使用的 Ruby)升级到了最新的非主版本,并更新 README 徽章以反映这些新版本。

文件级改动

变更 详情 文件
将核心 Gradle 构建工具和插件更新到最新的补丁/小版本。
  • 将 Gradle wrapper 分发 URL 从 9.5.0 更新到 9.5.1
  • 在共享版本 catalog 中,将 KSP 插件版本从 2.3.7 更新到 2.3.9
gradle/wrapper/gradle-wrapper.properties
gradle/libs.versions.toml
通过版本 catalog 更新 Kotlin coroutines 与测试栈版本。
  • 将 kotlinx-coroutines 依赖从 1.10.2 升级到 1.11.0
  • 将 JUnit 5(junit-jupiter)和 JUnit Platform 版本从 6.0.3 更新到 6.1.0
gradle/libs.versions.toml
刷新 Jetpack Compose BOM 和 Material3 依赖版本,并保持文档中的徽章同步。
  • 通过版本 catalog,将 Compose BOM 从 2026.04.01 升级到 2026.05.01,将 Material3 构件从 1.5.0-alpha18 升级到 1.5.0-alpha20
  • 更新 README 徽章以显示新的 Compose BOM 版本
gradle/libs.versions.toml
README-EN.md
README.md
更新与 CI 相关的工具依赖(Ruby 和 Renovate GitHub Action)。
  • 在 build-apk workflow 中,将使用的 Ruby 版本从 4.0.3 提升到 4.0.5,以获取安全性/错误修复
  • 在 Renovate workflow 中,将 renovatebot/github-action 从 v46.1.13 升级到 v46.1.14
.github/workflows/build-apk.yml
.github/workflows/renovate.yml

可能关联的问题

  • #Dependency Dashboard:此 PR 应用了 Renovate dashboard issue 中列出的特定非主版本依赖更新。

技巧与命令

与 Sourcery 交互

  • 触发新的审阅: 在 pull request 中评论 @sourcery-ai review
  • 继续讨论: 直接回复 Sourcery 的审阅评论。
  • 从审阅评论生成 GitHub issue: 通过回复某条审阅评论,请求 Sourcery 从该评论创建一个 issue。你也可以回复该审阅评论 @sourcery-ai issue 来从中创建一个 issue。
  • 生成 pull request 标题: 在 pull request 标题的任意位置写上 @sourcery-ai 即可随时生成标题。你也可以在 pull request 中评论 @sourcery-ai title 来(重新)生成标题。
  • 生成 pull request 摘要: 在 pull request 正文任意位置写 @sourcery-ai summary,即可在你想要的位置随时生成 PR 摘要。你也可以在 pull request 中评论 @sourcery-ai summary 来(重新)生成摘要。
  • 生成审阅者指南: 在 pull request 中评论 @sourcery-ai guide,即可随时(重新)生成审阅者指南。
  • 解决所有 Sourcery 评论: 在 pull request 中评论 @sourcery-ai resolve,以标记所有 Sourcery 评论为已解决。如果你已经处理完所有评论且不再希望看到它们,这会很有用。
  • 撤销所有 Sourcery 审阅: 在 pull request 中评论 @sourcery-ai dismiss,以撤销所有现有的 Sourcery 审阅。尤其适用于你想通过新的审阅重新开始的情况——别忘了再评论 @sourcery-ai review 来触发新的审阅!

自定义你的体验

前往你的 dashboard 以:

  • 启用或禁用审阅特性,例如 Sourcery 自动生成的 pull request 摘要、审阅者指南等。
  • 更改审阅语言。
  • 添加、移除或编辑自定义审阅指令。
  • 调整其他审阅设置。

获取帮助

Original review guide in English
Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

This PR updates several development and runtime dependencies (Gradle wrapper, Kotlin coroutines, JUnit, KSP, Compose BOM/Material3, Renovate GitHub Action, and Ruby used in CI) to their latest non-major versions and refreshes the README badges to reflect the new versions.

File-Level Changes

Change Details Files
Bump core Gradle build tooling and plugins to latest patch/minor versions.
  • Update Gradle wrapper distribution URL from 9.5.0 to 9.5.1
  • Update KSP plugin version from 2.3.7 to 2.3.9 in the shared versions catalog
gradle/wrapper/gradle-wrapper.properties
gradle/libs.versions.toml
Update Kotlin coroutines and testing stack versions via the versions catalog.
  • Bump kotlinx-coroutines dependencies from 1.10.2 to 1.11.0
  • Update JUnit 5 (junit-jupiter) and JUnit Platform versions from 6.0.3 to 6.1.0
gradle/libs.versions.toml
Refresh Jetpack Compose BOM and Material3 dependency versions and keep documentation badges in sync.
  • Bump Compose BOM from 2026.04.01 to 2026.05.01 and Material3 artifacts from 1.5.0-alpha18 to 1.5.0-alpha20 via the versions catalog
  • Update README badges to display the new Compose BOM version
gradle/libs.versions.toml
README-EN.md
README.md
Update CI-related tooling dependencies (Ruby and Renovate GitHub Action).
  • Increase Ruby version used in the build-apk workflow from 4.0.3 to 4.0.5 to pick up security/bug fixes
  • Bump renovatebot/github-action from v46.1.13 to v46.1.14 in the Renovate workflow
.github/workflows/build-apk.yml
.github/workflows/renovate.yml

Possibly linked issues

  • #Dependency Dashboard: This PR applies the specific non-major dependency updates that are listed in the Renovate dashboard issue.

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

Copy link
Copy Markdown

@sourcery-ai sourcery-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey - 我发现了 1 个问题

面向 AI 代理的提示
Please address the comments from this code review:

## Individual Comments

### Comment 1
<location path="gradle/wrapper/gradle-wrapper.properties" line_range="3-4" />
<code_context>
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
 distributionSha256Sum=553c78f50dafcd54d65b9a444649057857469edf836431389695608536d6b746
-distributionUrl=https\://services.gradle.org/distributions/gradle-9.5.0-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-9.5.1-bin.zip
 networkTimeout=10000
 validateDistributionUrl=true
</code_context>
<issue_to_address>
**issue (bug_risk):** 请更新 Gradle wrapper 的校验和,以匹配新的分发 URL。

`distributionSha256Sum` 仍然对应 9.5.0,因此在 `validateDistributionUrl=true` 的情况下,wrapper 会在 9.5.1 上验证失败。请将其替换为来自 Gradle 下载页面、针对 9.5.1 二进制包的官方 SHA-256 值。
</issue_to_address>

Sourcery 对开源项目免费 —— 如果你觉得我们的评审有帮助,欢迎分享 ✨
帮我变得更有用!请在每条评论上点击 👍 或 👎,我会根据这些反馈改进后续的评审。
Original comment in English

Hey - I've found 1 issue

Prompt for AI Agents
Please address the comments from this code review:

## Individual Comments

### Comment 1
<location path="gradle/wrapper/gradle-wrapper.properties" line_range="3-4" />
<code_context>
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
 distributionSha256Sum=553c78f50dafcd54d65b9a444649057857469edf836431389695608536d6b746
-distributionUrl=https\://services.gradle.org/distributions/gradle-9.5.0-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-9.5.1-bin.zip
 networkTimeout=10000
 validateDistributionUrl=true
</code_context>
<issue_to_address>
**issue (bug_risk):** Update the Gradle wrapper checksum to match the new distribution URL.

`distributionSha256Sum` still matches 9.5.0, so with `validateDistributionUrl=true` the wrapper will fail validation for 9.5.1. Please replace it with the official SHA-256 for the 9.5.1 binary from the Gradle downloads page.
</issue_to_address>

Sourcery is free for open source - if you like our reviews please consider sharing them ✨
Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.

Comment on lines 3 to +4
distributionSha256Sum=553c78f50dafcd54d65b9a444649057857469edf836431389695608536d6b746
distributionUrl=https\://services.gradle.org/distributions/gradle-9.5.0-bin.zip
distributionUrl=https\://services.gradle.org/distributions/gradle-9.5.1-bin.zip
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

issue (bug_risk): 请更新 Gradle wrapper 的校验和,以匹配新的分发 URL。

distributionSha256Sum 仍然对应 9.5.0,因此在 validateDistributionUrl=true 的情况下,wrapper 会在 9.5.1 上验证失败。请将其替换为来自 Gradle 下载页面、针对 9.5.1 二进制包的官方 SHA-256 值。

Original comment in English

issue (bug_risk): Update the Gradle wrapper checksum to match the new distribution URL.

distributionSha256Sum still matches 9.5.0, so with validateDistributionUrl=true the wrapper will fail validation for 9.5.1. Please replace it with the official SHA-256 for the 9.5.1 binary from the Gradle downloads page.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants