fix(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
gradle (source)		minor	9.2.1 → 9.3.1
io.github.takahirom.roborazzi	plugin	minor	1.56.0 → 1.59.0
io.github.takahirom.roborazzi:roborazzi-junit-rule	dependencies	minor	1.56.0 → 1.59.0
io.github.takahirom.roborazzi:roborazzi-compose	dependencies	minor	1.56.0 → 1.59.0
io.github.takahirom.roborazzi:roborazzi	dependencies	minor	1.56.0 → 1.59.0
org.robolectric:robolectric (source)	dependencies	patch	4.16 → 4.16.1
org.jetbrains.kotlin.plugin.compose (source)	plugin	patch	2.3.0 → 2.3.10
org.mockito.kotlin:mockito-kotlin	dependencies	minor	6.1.0 → 6.2.3
org.mockito:mockito-android	dependencies	minor	5.21.0 → 5.22.0
org.mockito:mockito-core	dependencies	minor	5.21.0 → 5.22.0
com.google.devtools.ksp (source)	plugin	patch	2.3.4 → 2.3.6
androidx.navigation:navigation-compose (source)	dependencies	patch	2.9.6 → 2.9.7
androidx.navigation:navigation-runtime-ktx (source)	dependencies	patch	2.9.6 → 2.9.7
com.google.dagger.hilt.android	plugin	minor	2.57.2 → 2.59.2
org.jetbrains.kotlin.plugin.serialization (source)	plugin	patch	2.3.0 → 2.3.10
androidx.compose:compose-bom	dependencies	major	2025.12.01 → 2026.02.01
androidx.activity:activity-compose (source)	dependencies	patch	1.12.2 → 1.12.4
org.jetbrains.kotlinx:kotlinx-serialization-json	dependencies	minor	1.9.0 → 1.10.0
org.jetbrains.kotlin.android (source)	plugin	patch	2.3.0 → 2.3.10
com.google.dagger:hilt-android-testing	dependencies	minor	2.57.2 → 2.59.2
com.google.dagger:hilt-android-compiler	dependencies	minor	2.57.2 → 2.59.2
com.google.dagger:hilt-android	dependencies	minor	2.57.2 → 2.59.2
androidx.compose.foundation:foundation (source)	dependencies	patch	1.10.0 → 1.10.4
io.coil-kt.coil3:coil-network-okhttp	dependencies	minor	3.3.0 → 3.4.0
io.coil-kt.coil3:coil-compose	dependencies	minor	3.3.0 → 3.4.0
com.android.library (source)	plugin	major	8.13.2 → 9.0.1
com.android.application (source)	plugin	major	8.13.2 → 9.0.1

---

Release Notes

gradle/gradle (gradle)

v9.3.1: 9.3.1

Compare Source

This is a patch release for 9.3.0. We recommend using 9.3.1 instead of 9.3.0.

The following issues were resolved:

• Cannot find testcases from Android Screenshot Test plugin since Gradle 9.3.0
• Excluding dependencies from included builds doesn't work in Gradle 9.3.0
• ExternalDependency and DependencyConstraint cannot be passed to DependencyResolveDetails#useTarget
• Gradle 9.3.0 generate JUnit test result files with wrong name
• Build cache cannot handle outputs with non-BMP characters in the filename
• Emojis in test names should not break build caching
• Non utf-8 c code is no longer buildable
• Breaking change in 9.3.0 regarding cross-project dependency manipulation
• JUnit3 tests cannot be run with Gradle 9.3.0
• Test.setScanForTestClasses(false) causes all junit4 tests to be skipped

Read the Release Notes

Upgrade instructions

Switch your build to use Gradle 9.3.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.3.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.3.0

Compare Source

takahirom/roborazzi (io.github.takahirom.roborazzi)

v1.59.0

Compare Source

ROBORAZZI_DEBUG can now be passed as a command-line parameter

We already have the ROBORAZZI_DEBUG variable to control debug-log output, and it can be set in tests. From this release, you can also enable ROBORAZZI_DEBUG by adding -Proborazzi.debug=true to the command line.

What's Changed

• Support ROBORAZZI_DEBUG via Gradle property by @​takahirom in #​798
• Add debug log for preview tester file path by @​takahirom in #​799

Full Changelog: takahirom/roborazzi@1.58.0...1.59.0

v1.58.0

Compare Source

Bugfix: Fixed NoClassDefFoundError in RoborazziPlugin when the Android Plugin is not applied

Previously, we never touched the Android Plugin class when it wasn’t in use; nevertheless, a NoClassDefFoundError was raised because the plugin contained a method that referenced the Android Plugin class. I therefore extracted Android-related code into a separate class to resolve the issue. Thank you, @​rnett, for reporting this.

Update: Device qualifiers

You can now specify device qualifiers via RobolectricDeviceQualifiers. The list has been expanded with new devices such as Pixel9, XRGlasses, and even AIGlasses!
Thank you, @​joergmis, for your contribution.

What's Changed

• Ensure StoreScreenshot records Android host tests by @​takahirom in #​790
• Use debug unit test for roborazzi-core by @​takahirom in #​792
• Update device qualifiers by @​joergmis in #​793
• Isolate Android-specific code to support non-Android KMP projects by @​takahirom in #​795

New Contributors

• @​joergmis made their first contribution in #​793

Full Changelog: takahirom/roborazzi@1.57.0...1.58.0

v1.57.0

Compare Source

Fix AGP 9.0 KMP preview screenshots

We had been using unitTestSources?.**java**?.addGeneratedSourceDirectory, but this approach proved ineffective when we adopted com.android.kotlin.multiplatform.library. Consequently, we migrated to unitTestSources?.**kotlin**?.addGeneratedSourceDirectory for the KMP plugin. Unfortunately, when applying com.android.library, unitTestSources?.kotlin remains non-functional, so we must toggle between the two depending on the plugin.
Thank you for reporting this @​HLCaptain !

(This is our plugin code, you don't have to write this.)

  val isKmpLibrary = project.plugins.hasPlugin("com.android.kotlin.multiplatform.library")
  if (isKmpLibrary) {
    unitTestSources?.kotlin?.addGeneratedSourceDirectory(
      generateTestsTask,
      GenerateComposePreviewRobolectricTestsTask::outputDir
    )
  } else {
    unitTestSources?.java?.addGeneratedSourceDirectory(
      generateTestsTask,
      GenerateComposePreviewRobolectricTestsTask::outputDir
    )
  }

Bugfix: Compose Preview’s onSizeChanged{} wasn’t called when multiple windows exist.

There is a bug in which Compose Preview’s onSizeChanged{} fails to fire when multiple windows are present. This issue arises because we neglected to invoke

      composeTestRule.mainClock.advanceTimeByFrame()
      composeTestRule.waitForIdle()

Reproducing screenshots

What's Changed

• [CI] Migrate from gradle-build-action to gradle/actions/setup-gradle by @​takahirom in #​788
• Add PreviewPopupWithMeasure for reproduction by @​takahirom in #​787
• Fix doBeforeCapture not called with multiple windows by @​takahirom in #​786
• Use sources.kotlin for KMP library generated test sources by @​takahirom in #​789

Full Changelog: takahirom/roborazzi@1.56.0...1.57.0

JetBrains/kotlin (org.jetbrains.kotlin.plugin.compose)

v2.3.10

Compiler

• KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
• KT-83317 ClassCastException: with cast kotlin.UInt to java.lang.Number when defining constant
• KT-83031 K2: unstable resolution of EnhancedNullability from type-use NotNull in presence of unused code
• KT-81700 flaky overload resolution behaviors (false-positive errors, different final candidates, compile-time failures)
• KT-83983 Revert of KT-83081
• KT-83314 JSpecify @NullMarked changes Java equals(Object) to equals(Any?) causing override conflict in Kotlin 2.3
• KT-82863 @NoInfer regression since 2.2.20
• KT-82841 "kotlin.NoWhenBranchMatchedException" in when with !is check & non-sealed class in the middle of hierarchy

JVM. Reflection

• KT-83608 Kotlin-reflect: "Unknown origin of public abstract operator fun invoke(p1: P1, p2: P2): R"
• KT-83361 "KotlinReflectionInternalError: Type parameter not found: 0" on super types with Kotlin 2.3.0
• KT-42199 "KotlinReflectionInternalError: Unknown origin of public abstract operator fun invoke" on function reference to FunctionN.invoke
• KT-81024 Reflection: New KType implementation fails on arguments comparison for a Nothing type parameter

Tools. Compiler Plugins

• KT-83266 "Unsupported class file major version 69" for "produceReleaseComposeMapping" task with Kotlin 2.3
• KT-83099 Compose compiler does not generate stack trace mappings for project files

Tools. Gradle

• KT-83070 The KGP api reference is missing a description
• KT-82459 Improve iOS simulator boot implementation

Tools. Gradle. JS

• KT-82946 Js, Wasm: Upgrade NPM dependencies

Tools. Gradle. Multiplatform

• KT-83687 Revert deprecation of 'androidTarget' for AGP lower than 9

mockito/mockito-kotlin (org.mockito.kotlin:mockito-kotlin)

v6.2.3

^{Changelog generated by Shipkit Changelog Gradle Plugin}

6.2.3

• 2026-01-26 - 2 commit(s) by Joshua Selbo, Mark Koops
• Update exception message now that onGeneric is deprecated (#​583)
• Improve Result support in matchers and captors (#​582)

v6.2.2

^{Changelog generated by Shipkit Changelog Gradle Plugin}

6.2.2

• 2026-01-21 - 2 commit(s) by Mark Koops
• Fix eq() matcher NPE with nullable value class and null value (#​579)
• Improve support for stubbing Result return values for synchronous and suspendable functions (#​576)

v6.2.1

^{Changelog generated by Shipkit Changelog Gradle Plugin}

6.2.1

• 2026-01-17 - 2 commit(s) by Joshua Selbo, Mark Koops
• Solve 6.2.0 regression due to runblocking being unavailable (#​575)
• Use jvmToolchain API to configure builds (#​572)

v6.2.0

^{Changelog generated by Shipkit Changelog Gradle Plugin}

6.2.0

• 2026-01-14 - 27 commit(s) by Joshua Selbo, Mark Koops, Tim van der Lippe
• Improving stubbing support for suspend functions and value classes (#​569)
• Update PR template to run formatting (#​568)
• Ignore ktfmt formatting revision in git blame (#​567)
• Enable Spotless formatting check in CI (#​566)
• Apply ktfmt formatting (#​565)
• Add tooling for Spotless + ktfmt (#​562)
• Follow-up on primitive value classes (#​561)
• Update MockSettings usage (#​560)
• Fix anyOrNull matcher with value class wrapping primitive type (#​557)
• Enhance/unify and document stubbing API, more groundwork towards implementing improved suspend function support (#​556)
• Add wrappers for mockStatic, mockConstruction (#​551)
• Add MockedStatic.verify extension fun with lambda last (#​549)
• Extending/organizing MatchersTest.kt (#​548)
• Adding value class support to KArgumentCaptor. (#​547)
• Fix the output directory for the dokka Javadoc plugin (#​546)
• #​544 Adding value class support to the eq() argument matcher. (#​545)
• eq() argument matcher does not support for value class type arguments (#​544)
• Add note about releasing tags via GitHub UI (#​543)

mockito/mockito (org.mockito:mockito-android)

v5.22.0

google/ksp (com.google.devtools.ksp)

v2.3.6

Compare Source

What's Changed

• Fixed an issue where module recompilation would fail on Windows environments when KSP2 was enabled (#​2774)
• Resolved an issue where generated Java sources were ignored when using Android Kotlin Multiplatform with IP-compatible paths (#​2744)
• Fixed a KSP version 2.3.5 CI error exception that does not break build checks (#​2763)
• Added symbol-processing-api and common-deps to compile dependencies (#​2789)
• Improved the detection of built-in Kotlin by removing the reliance on KotlinBaseApiPlugin (#​2772)
• A back-port of a performance optimization in the Intellij / Analysis API (2785 )
• Added support for nested typealias Kotlin language feature #​2588
• Exclude jdbc package from log4j to prevent vulnerability issue #​2651

Contributors

• Thanks to @​salmanmkc, @​jaschdoc, @​gurusai-voleti and everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.5...2.3.6

v2.3.5

Compare Source

What's Changed

• KSPCoreEnvironment.instance_prop leaks memory when used programmatically #​2742
• Missing first annotation argument when toByte is used #​2672
• Fix circular dependency between KSP and KAPT in AGP 9.0 #​2743

Contributors

• Thanks to everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.4...2.3.5

Kotlin/kotlinx.serialization (org.jetbrains.kotlinx:kotlinx-serialization-json)

v1.10.0

==================

This release is based on Kotlin 2.3.0 and contains all of the changes from 1.10.0-RC.
The only additional change is a fix for ProtoBuf packing of Kotlin unsigned types (#​3079).
Big thanks to KosmX for contributing the fix.

For your convenience, the changelog for 1.10.0-RC is duplicated below:

Stabilization of APIs

kotlinx-serialization 1.10 and subsequent releases will be focused on stabilization of existing APIs.
The following APIs and configuration options are no longer experimental because they're widely used without any known major issues:

• Json configuration options: decodeEnumsCaseInsensitive, allowTrailingComma, allowComments, and prettyPrintIndent. (#​3100)
• @EncodeDefault annotation and its modes. (#​3106)
• JsonUnquotedLiteral constructor function (#​2900)
• JsonPrimitive constructor function overloads that accept unsigned types. (#​3117)
• JSON DSL functions on JsonElement with Nothing? overloads. (#​3117)

Readiness for return value checker

Kotlin 2.3.0 introduces a new feature aimed
at helping you to catch bugs related to the accidentally ignored return value of the function.
kotlinx-serialization 1.10.0-RC code is fully marked for this feature, meaning that you
can get warnings for unused function calls like Json.encodeToString(...).
To get the warnings, the feature has to be enabled in your project as described here.

Polymorphism improvements

Polymorphic serialization received a couple of improvements in this release:

New subclassesOfSealed utility to automatically register sealed subclasses serializers in polymorphic modules (#​2201).
Use it in your SerializersModule when configuring a polymorphic hierarchy which contains both abstract and sealed classes.
For example, when root of your hierarchy is an interface, but most of your inheritors are sealed classes.
The new function will register all known sealed subclasses for you, so you don’t need to list them one by one.
This makes writing your SerializerModules much faster and simpler.
Big thanks to Paul de Vrieze for contributing this feature.

Class discriminator conflict check rework (#​3105).
If a payload already contains a property with the same name as the configured discriminator (for example, type),
it is called a class discriminator conflict.
To produce a correct output and allow more inputs to be deserialized at the same time, the following changes were made:

• Conflicts introduced by JsonNamingStrategy transformations are now detected during serialization as well and will cause SerializationException.
  It also affects non-polymorphic classes.
• Conflicts from ClassDisciminatorMode.ALL_JSON_OBJECTS and SerializersModuleBuilder.polymorphicDefaultSerializer are also detected.
• It is allowed to deserialize such a conflicting key for both sealed and open polymorphic hierarchies.
  Previously, it was possible in the sealed hierarchies alone due to missing assertion. See #​1664 for details.

General improvements

• Add .serialName to MissingFieldException for clearer diagnostics. (#​3114)
• Generate unique Automatic-Module-Name entries for metadata JARs. (#​3109)
• Revised ProGuard rules and added R8 tests. (#​3041)
• CBOR: Improved error message when a byte string/array type mismatch is encountered. (#​3052)

Bugfixes

• Fix the type in the BIGNUM_NEGATIVE tag name. (#​3090)
• CBOR: Fix various bugs in the decoder implementation to be more strict and consistent with the specification.

coil-kt/coil (io.coil-kt.coil3:coil-network-okhttp)

v3.4.0

Compare Source

• New: Add ConcurrentRequestStrategy to support combining in-flight network requests for the same key. (#​2995, #​3326)
  • DeDupeConcurrentRequestStrategy enables this behavior and lets waiters wait for the results of an in-flight network request.
    • This behavior is experimental and is currently disabled by default.
    • Currently, requests are always combined based on their diskCacheKey.
  • OkHttpNetworkFetcherFactory, KtorNetworkFetcherFactory, and NetworkFetcher.Factory now accept concurrentRequestStrategy.
• New: Decode images on JS/WASM using a web worker to avoid blocking the browser main thread. (#​3305)
• New: Add support for Linux native targets (linuxX64 and linuxArm64) for non-Compose multiplatform artifacts. (#​3054)
• New: Add Compose-only APIs to improve transitions between subsequent requests. (#​3141, #​3175)
  • ImageRequest.Builder.useExistingImageAsPlaceholder enables crossfading from the previous image when no placeholder is set.
  • ImageRequest.Builder.preferEndFirstIntrinsicSize lets CrossfadePainter prefer the end painter's intrinsic size.
• New: Add ImageLoader.Builder.repeatCount(Int) in coil-gif to set a global animated image repeat count. (#​3143)
• New: Add support for preferring embedded video thumbnails in coil-video. (#​3107)
• New: Publish coil-lint with coil-core and add a lint check to catch accidental kotlin.error() calls in ImageRequest.Builder blocks. (#​3304)
• Set Kotlin language version to 2.1. (#​3302)
• Make BitmapFetcher available in common code. (#​3286)
• Use applicationContext when creating the singleton ImageLoader on Android. (#​3246)
• Cache eligible non-2xx HTTP responses by default (e.g. 404) and stop caching non-cacheable responses (e.g. 500). (#​3137, #​3139)
• Fix potential race condition when consuming OkHttp response bodies. (#​3186)
• Fix maxBitmapSize edge case to prevent oversized bitmap crashes on Android. (#​3259)
• Update Kotlin to 2.3.10.
• Update Compose to 1.9.3.
• Update Okio to 3.16.4.
• Update Skiko to 0.9.22.2.
• Update kotlinx-io-okio to 0.9.0.
• Update androidx.core to 1.16.0.
• Update androidx.lifecycle to 2.9.4.
• Update androidx.exifinterface to 1.4.2.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.