chore(deps): bump the android-deps group across 1 directory with 26 updates

[dependabot]

Bumps the android-deps group with 19 updates in the /apps/android directory:

Package	From	To
com.android.application	9.0.1	9.3.0
com.android.test	9.0.1	9.3.0
org.jlleitschuh.gradle.ktlint	14.0.1	14.2.0
org.jetbrains.kotlin.plugin.compose	2.2.21	2.4.10
org.jetbrains.kotlin.plugin.serialization	2.2.21	2.4.10
androidx.compose:compose-bom	2026.02.00	2026.06.01
androidx.core:core-ktx	1.17.0	1.19.0
androidx.lifecycle:lifecycle-runtime-ktx	2.10.0	2.11.0
androidx.activity:activity-compose	1.12.2	1.13.0
com.google.android.material:material	1.13.0	1.14.0
org.jetbrains.kotlinx:kotlinx-coroutines-android	1.10.2	1.11.0
org.jetbrains.kotlinx:kotlinx-serialization-json	1.10.0	1.11.0
com.squareup.okhttp3:okhttp	5.3.2	5.4.0
org.bouncycastle:bcprov-jdk18on	1.83	1.85
org.commonmark:commonmark	0.27.1	0.29.0
dnsjava:dnsjava	3.6.4	3.6.5
io.kotest:kotest-runner-junit5-jvm	6.1.3	6.2.2
org.junit.vintage:junit-vintage-engine	6.0.2	6.1.2
gradle-wrapper	9.2.1	9.6.1

Updates com.android.application from 9.0.1 to 9.3.0

Updates com.android.test from 9.0.1 to 9.3.0

Updates org.jlleitschuh.gradle.ktlint from 14.0.1 to 14.2.0

Updates org.jetbrains.kotlin.plugin.compose from 2.2.21 to 2.4.10

Release notes

Sourced from org.jetbrains.kotlin.plugin.compose's releases.

Kotlin 2.4.10

Changelog

Backend. Wasm

• KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

Compiler

• KT-86939 JVM: IllegalStateException "No value for annotation parameter" when using const val in nested Java annotation array argument
• KT-83766 K2: Wrong sourcePsi is set for SymbolPsiLiteral in SLC for annotation arguments referencing a const val
• KT-86728 Reified type inference: expected type not propagated into inline call inside lambda with elvis operator

Compose Compiler

• b/522127447 Compose Compiler 2.4: classes previously inferred stable now reported runtime/Uncertain

Klibs

• KT-86501 Native: IrTypeAliasSymbolImpl is already bound. Signature: kotlinx.datetime/Instant|null[0] on iosSimulatorArm64

Tools. CLI

• KT-86930 Introduce kotlinr in the Kotlin distribution

Tools. Gradle. BCV

• KT-87223 Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of 2.4.0

Tools. Gradle. JS

• KT-87304 jsBrowserTest fails with "exited with errors (exit code: 1)"
• KT-86057 kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall is up-to-date, causing kotlinStoreYarnLock to fail

Tools. Gradle. Multiplatform

• KT-87084 False positive warning for JS and Wasm compilations when CRI is enabled

Tools. Scripts

• KT-87076 @file:CompilerOptions("-jvm-target", ...) ignored in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target 1.8
• KT-86352 K2 scripting: FirResolvedTypeRef exception when resolving extension functions from imported scripts

Kotlin 2.4.10-RC2

Changelog

Backend. Wasm

• KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin.plugin.compose's changelog.

2.4.10

Backend. Wasm

• KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

Compiler

• KT-86939 JVM: IllegalStateException "No value for annotation parameter" when using const val in nested Java annotation array argument
• KT-83766 K2: Wrong sourcePsi is set for SymbolPsiLiteral in SLC for annotation arguments referencing a const val
• KT-86728 Reified type inference: expected type not propagated into inline call inside lambda with elvis operator

Compose Compiler

• b/522127447 Compose Compiler 2.4: classes previously inferred stable now reported runtime/Uncertain

Klibs

• KT-86501 Native: IrTypeAliasSymbolImpl is already bound. Signature: kotlinx.datetime/Instant|null[0] on iosSimulatorArm64

Tools. CLI

• KT-86930 Introduce kotlinr in the Kotlin distribution

Tools. Gradle. BCV

• KT-87223 Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of 2.4.0

Tools. Gradle. JS

• KT-87304 jsBrowserTest fails with "exited with errors (exit code: 1)"
• KT-86057 kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall is up-to-date, causing kotlinStoreYarnLock to fail

Tools. Gradle. Multiplatform

• KT-87084 False positive warning for JS and Wasm compilations when CRI is enabled

Tools. Scripts

• KT-87076 @file:CompilerOptions("-jvm-target", ...) ignored in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target 1.8
• KT-86352 K2 scripting: FirResolvedTypeRef exception when resolving extension functions from imported scripts

2.4.0

Analysis API

• KT-83867 OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ repo
• KT-83723 [Analysis API] Enable experimental KDoc resolver by default
• KT-83388 Analysis API: properly support KMP in KotlinPackageProvider

... (truncated)

Commits

• 5687445 Add Changelog for 2.4.10-RC2
• ba30392 [Wasm] Support regenerate unchanged modules flag on KGP
• 6307e73 [Wasm] Implement Xwasm-IC-generate-unchanged-modules flag
• 39d7aee Add ChangeLog for 2.4.10-RC2
• a2956be [Gradle] Update karma.conf.js to use 'require(...)' instead plain strings
• 9b1361c [Gradle] KT-87223: Updated regression test
• a4c153a [Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat config
• bc04b90 Add ChangeLog for 2.4.10-RC
• bbcb94b [CRI] explicitly disable CRI generation for non-JVM targets to avoid false-po...
• 6c2c458 Scripting: fix jvmTarget processing from script annotations
• Additional commits viewable in compare view

Updates org.jetbrains.kotlin.plugin.serialization from 2.2.21 to 2.4.10

Release notes

Sourced from org.jetbrains.kotlin.plugin.serialization's releases.

Kotlin 2.4.10

Changelog

Backend. Wasm

• KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

Compiler

• KT-86939 JVM: IllegalStateException "No value for annotation parameter" when using const val in nested Java annotation array argument
• KT-83766 K2: Wrong sourcePsi is set for SymbolPsiLiteral in SLC for annotation arguments referencing a const val
• KT-86728 Reified type inference: expected type not propagated into inline call inside lambda with elvis operator

Compose Compiler

• b/522127447 Compose Compiler 2.4: classes previously inferred stable now reported runtime/Uncertain

Klibs

• KT-86501 Native: IrTypeAliasSymbolImpl is already bound. Signature: kotlinx.datetime/Instant|null[0] on iosSimulatorArm64

Tools. CLI

• KT-86930 Introduce kotlinr in the Kotlin distribution

Tools. Gradle. BCV

• KT-87223 Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of 2.4.0

Tools. Gradle. JS

• KT-87304 jsBrowserTest fails with "exited with errors (exit code: 1)"
• KT-86057 kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall is up-to-date, causing kotlinStoreYarnLock to fail

Tools. Gradle. Multiplatform

• KT-87084 False positive warning for JS and Wasm compilations when CRI is enabled

Tools. Scripts

• KT-87076 @file:CompilerOptions("-jvm-target", ...) ignored in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target 1.8
• KT-86352 K2 scripting: FirResolvedTypeRef exception when resolving extension functions from imported scripts

Kotlin 2.4.10-RC2

Changelog

Backend. Wasm

• KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin.plugin.serialization's changelog.

2.4.10

Backend. Wasm

• KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

Compiler

• KT-86939 JVM: IllegalStateException "No value for annotation parameter" when using const val in nested Java annotation array argument
• KT-83766 K2: Wrong sourcePsi is set for SymbolPsiLiteral in SLC for annotation arguments referencing a const val
• KT-86728 Reified type inference: expected type not propagated into inline call inside lambda with elvis operator

Compose Compiler

• b/522127447 Compose Compiler 2.4: classes previously inferred stable now reported runtime/Uncertain

Klibs

• KT-86501 Native: IrTypeAliasSymbolImpl is already bound. Signature: kotlinx.datetime/Instant|null[0] on iosSimulatorArm64

Tools. CLI

• KT-86930 Introduce kotlinr in the Kotlin distribution

Tools. Gradle. BCV

• KT-87223 Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of 2.4.0

Tools. Gradle. JS

• KT-87304 jsBrowserTest fails with "exited with errors (exit code: 1)"
• KT-86057 kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall is up-to-date, causing kotlinStoreYarnLock to fail

Tools. Gradle. Multiplatform

• KT-87084 False positive warning for JS and Wasm compilations when CRI is enabled

Tools. Scripts

• KT-87076 @file:CompilerOptions("-jvm-target", ...) ignored in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target 1.8
• KT-86352 K2 scripting: FirResolvedTypeRef exception when resolving extension functions from imported scripts

2.4.0

Analysis API

• KT-83867 OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ repo
• KT-83723 [Analysis API] Enable experimental KDoc resolver by default
• KT-83388 Analysis API: properly support KMP in KotlinPackageProvider

... (truncated)

Commits

• 5687445 Add Changelog for 2.4.10-RC2
• ba30392 [Wasm] Support regenerate unchanged modules flag on KGP
• 6307e73 [Wasm] Implement Xwasm-IC-generate-unchanged-modules flag
• 39d7aee Add ChangeLog for 2.4.10-RC2
• a2956be [Gradle] Update karma.conf.js to use 'require(...)' instead plain strings
• 9b1361c [Gradle] KT-87223: Updated regression test
• a4c153a [Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat config
• bc04b90 Add ChangeLog for 2.4.10-RC
• bbcb94b [CRI] explicitly disable CRI generation for non-JVM targets to avoid false-po...
• 6c2c458 Scripting: fix jvmTarget processing from script annotations
• Additional commits viewable in compare view

Updates androidx.compose:compose-bom from 2026.02.00 to 2026.06.01

Updates androidx.core:core-ktx from 1.17.0 to 1.19.0

Updates androidx.lifecycle:lifecycle-runtime-ktx from 2.10.0 to 2.11.0

Updates androidx.activity:activity-compose from 1.12.2 to 1.13.0

Updates com.google.android.material:material from 1.13.0 to 1.14.0

Release notes

Sourced from com.google.android.material:material's releases.

1.14.0

New in 1.14.0!

• Expressive Themes (doc)
• Expressive Lists (doc)
• Expressive Button Styles (doc)
• Expressive Icon Button Styles (doc)
• Expressive Button Group Styles (doc)
• Expressive FAB Styles (doc)
• Expressive Top App Bar Styles (doc)
• Expressive Navigation Bar (BottomNavigationView) Styles (doc)
• Expressive Navigation Rail Styles (doc)
• Expressive Search Styles (doc)
• Expressive Progress Indicator Styles (doc)
• Expressive Slider Styles (doc)
• Emphasized Typescale (doc)

Important

• Required minSdkVersion is now 23 or higher, for Material and AndroidX.
• Library is now built with Android Gradle Plugin (AGP) 8.11.1 and Gradle 8.13.

Dependency Updates

Dependency	Previous version	New version
androidx.constraintlayout:constraintlayout	2.1.0	2.2.1
androidx.core:core	1.6.0	1.16.0
androidx.customview:customview	N/A	1.2.0
com.android.tools.build:gradle	8.7.3	8.11.1

Library Updates

• AppBar
  • Fixed the bug that setBackground will reset the internal MaterialShapeDrawable for lift-on-scroll feature. (1adc50110ed6491661f89aa535355b1480fac73a)
  • Add support for navigation button with circle background (015e0534e1a6205224097f258102f913832f99ed)
  • Improve keyboard navigation in TopAppBar catalog demos (98a73a61d272d3e38ee87dd4b322f7787c374a9c)
  • Removed special key shortcut and keyboard navigation cluster for top app bar for correct keyboard navigation a11y. (ee52adbf051f744f2345ec5b7f4ab4df3b101d4d)
  • Updated ripple color on actions in M3 toolbar. (3b971c9fe9d6ae9a175d96a448a2e740fa97996f)
• BottomAppBar
  • Remove special key shortcut and keyboard navigation cluster for bottom app bar for correct keyboard navigation a11y. (5c73d7a9284fb8e8409452bb95751bf70912acfd)
• BottomNavigationView
  • Fix navigation item layout in non-compact windows (78189012dada1fae4516eaccab7b8f75c481aa73)
• BottomSheet
  • Deprecated enableEdgeToEdge for bottom sheet dialogs on API 35+. (603f1ef9d5223fc06fa432c4175473eda2138330)
  • Prevent ACTION_DOWN events on the BottomSheetHandleDragView from setting touchingScrollChild to true. (af7f254bf660704368d46e630d34a81c479fa1c7)
  • Fixed keyboard animation on Android 14 (a0b4dfa8769f98851efe97569c900f75eb0d5ef2)
  • Fixed crash when protections are set before setContentView is called (d2119098489f6f6b55d77f2c7966b8ddf16c90ed)
  • Added half-expanded state description for accessibility (95e7b452088d88005982a3f29ec212ef7ee8696d)
  • Added support for androidx.core ProtectionLayout API and update dependency to 1.16 (e7f9f639d2f4a3b9f619ce704df82cbb14e49222)
  • Make handle respond to keyboard input (1ee07687af2c4c84f515e45c1b809d65aeecbbf4)
  • Delete duplicate "Handling insets and fullscreen" section (5e7e8238f7be448af6b4db4b2ad6128737c0bc50)
  • Added support for Nested Scrolling with multiple nested scroll children. (4e4e8f3388beb7e82a87cb67142aa34444a79740)
  • Make behavior_draggableOnNestedScroll public (a67afdff0d207239d0f427a37e44074936db3166)

... (truncated)

Commits

• 66c334b [Release] Update library version to 1.14.0 stable
• 12e57b5 [Focus Rings] Add setters and getters for stroke widths and inner inset
• f4652d6 [NavigationView] Improve focus saving when opening NavigationView
• 14b9ac9 [Focus Rings] Add setters for outer and inner stroke colors and for refreshin...
• d6de1da [A11y][BottomSheet] Auto-expand when a focused view is off-screen in non-touc...
• 41cfb65 [A11y][NavigationView] Request and restore focus when opened and closed in Dr...
• 8f63e94 [Catalog] Fix lift on scroll glitchiness in All Components demo
• 80aa0cc [Release] Update library version to 1.14.0-rc01
• fd44c9d [Button] [SplitButton] Fix inset and optical centering issue for SplitButton ...
• e6ae416 [SearchView] Make sure IME is hidden when EditText loses focus
• Additional commits viewable in compare view

Updates org.jetbrains.kotlinx:kotlinx-coroutines-android from 1.10.2 to 1.11.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-coroutines-android's releases.

1.11.0

Various

• Kotlin was updated to 2.2.20 (#4545).
• Improved the published jar files (#3842, #4599).
• Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

Breaking changes and deprecations

• Moved Promise-related functions from JS and Wasm/JS to the new web target. On Wasm/JS, this is a breaking change. Before the change, Promise on Wasm/JS could work with arbitrary Kotlin types, but now, only JsAny subtypes are accepted (#4563).
• Changed handling of coroutine exceptions that can't be propagated on JS and Wasm/JS. B efore, exceptions were logged, but now, they are reported to the JS runtime (#4451, #4631).
• Deprecated using CoroutineDispatcher as the coroutine context key; now, ContinuationInterceptor has to be used instead (#4333).
• Advanced the deprecation levels on kotlinx-coroutines-test APIs (#4604).
• Added lint functions that mark passing a Job to coroutine builders as deprecated (#4435).

Bug fixes and improvements

• Added a callsInPlace(EXACTLY_ONCE) contract to runBlocking in code shared between JVM and Native (#4368).
• Added a callsInPlace(EXACTLY_ONCE) contract to suspendCancellableCoroutine (#4574).
• Fixed flowOn incorrectly handling ThreadContextElement updates (#4403).
• Fixed exceptions in user-supplied Thread.UncaughtExceptionHandler instances causing the internal coroutines machinery to fail (#4516).
• Fixed CoroutineDispatcher.asScheduler in the RxJava integration not cancelling outstanding work when a Worker gets cancelled, which led to memory leaks in some scenarios (#4615).
• Fixed SharedFlow entering an invalid state when a subscriber and an emitter are cancelled simultaneously (#4583).
• Fixed an R8 optimization leading to shareIn/stateIn coroutines getting garbage-collected (#4646). Thanks, @​solevic!

Small additions

• Added CompletableDeferred.asDeferred for obtaining a read-only Deferred view (#4408).
• Added SharedFlow.asFlow for obtaining a Flow view with hidden hot flow semantics (#4530). Thanks, @​g000sha256!
• Added a StateFlow.collectLatest overload returning Nothing to assist with finding unreachable code (#4454).
• Added ReceiveChannel.consumeTo for consuming a ReceiveChannel into a MutableCollection (#4520).
• Added a StateFlow<T>.onSubscription overload returning a StateFlow<T>, similar to SharedFlow<T>.onSubscription returning SharedFlow<T> (#4275). Thanks, @​xit0c!
• Added terminal Flow operators for collecting a Flow to a Map (#1541).

Changelog relative to version 1.11.0

No changes, only the version is increased.

1.11.0-rc02

Restored binary compatibility with 1.10.2 and older versions on Wasm/JS for usages of Promise-related functions (#4661).

1.11.0-rc01

Various

• Kotlin was updated to 2.2.20 (#4545).
• Improved the published jar files (#3842, #4599).
• Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

Breaking changes and deprecations

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-coroutines-android's changelog.

Version 1.11.0

Various

• Kotlin was updated to 2.2.20 (#4545).
• Improved the published jar files (#3842, #4599).
• Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

Breaking changes and deprecations

• Moved Promise-related functions from JS and Wasm/JS to the new web target. On Wasm/JS, this is a breaking change. Before the change, Promise on Wasm/JS could work with arbitrary Kotlin types, but now, only JsAny subtypes are accepted (#4563).
• Changed handling of coroutine exceptions that can't be propagated on JS and Wasm/JS. Before, exceptions were logged, but now, they are reported to the JS runtime (#4451, #4631).
• Deprecated using CoroutineDispatcher as the coroutine context key; now, ContinuationInterceptor has to be used instead (#4333).
• Advanced the deprecation levels on kotlinx-coroutines-test APIs (#4604).
• Added lint functions that mark passing a Job to coroutine builders as deprecated (#4435).

Bug fixes and improvements

• Added a callsInPlace(EXACTLY_ONCE) contract to runBlocking in code shared between JVM and Native (#4368).
• Added a callsInPlace(EXACTLY_ONCE) contract to suspendCancellableCoroutine (#4574).
• Fixed flowOn incorrectly handling ThreadContextElement updates (#4403).
• Fixed exceptions in user-supplied Thread.UncaughtExceptionHandler instances causing the internal coroutines machinery to fail (#4516).
• Fixed CoroutineDispatcher.asScheduler in the RxJava integration not cancelling outstanding work when a Worker gets cancelled, which led to memory leaks in some scenarios (#4615).
• Fixed SharedFlow entering an invalid state when a subscriber and an emitter are cancelled simultaneously (#4583).
• Fixed an R8 optimization leading to shareIn/stateIn coroutines getting garbage-collected (#4646). Thanks, @​solevic!

Small additions

• Added CompletableDeferred.asDeferred for obtaining a read-only Deferred view (#4408).
• Added SharedFlow.asFlow for obtaining a Flow view with hidden hot flow semantics (#4530). Thanks, @​g000sha256!
• Added a StateFlow.collectLatest overload returning Nothing to assist with finding unreachable code (#4454).
• Added ReceiveChannel.consumeTo for consuming a ReceiveChannel into a MutableCollection (#4520).
• Added a StateFlow<T>.onSubscription overload returning a StateFlow<T>, similar to SharedFlow<T>.onSubscription returning SharedFlow<T> (#4275). Thanks, @​xit0c!
• Added terminal Flow operators for collecting a Flow to a Map (#1541).

Changelog relative to version 1.11.0

No changes, only the version is increased.

Version 1.11.0-rc02

Restored binary compatibility with 1.10.2 and older versions on Wasm/JS for usages of Promise-related functions (#4661).

Version 1.11.0-rc01

Various

• Kotlin was updated to 2.2.20 (#4545).
• Improved the published jar files (#3842, #4599).
• Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

... (truncated)

Commits

• 8564f65 Version 1.11.0
• a4c6af9 Merge remote-tracking branch 'origin/master' into develop
• ef917b4 KT-84955: mark apple x64 tagets as deprecated error (#4645)
• 5ebc421 Update the release procedure description (#4670)
• 95f46a0 Remove old maven repository settings (#4672)
• b4f4f0a Fix package name of ToMapCollectionSamplesTest. (#4674)
• 86738dc Added templates to the issue creation wizard (#4654)
• 330fcc2 Version 1.11.0-rc02
• e31cef6 Merge remote-tracking branch 'origin/master' into develop
• dc6e9f6 Restore Promise-related functions on Wasm/JS as HIDDEN (#4661)
• Additional commits viewable in compare view

Updates org.jetbrains.kotlinx:kotlinx-serialization-json from 1.10.0 to 1.11.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's releases.

1.11.0

This release is based on Kotlin 2.3.20 and provides a new Json exceptions API and some bugfixes and improvements.

Expose Json exceptions structure

To make working with exceptions easier and providing proper error codes in e.g., REST APIs, classes JsonException, JsonDecodingException, and JsonEncodingException are now public. They have relevant public properties, such as shortMessage, path, offset, and others. This API is currently experimental, and we're going to improve it further in the subsequent releases. See the linked issues for the details: #1930, #1877.

Ability to hide user input from exception messages for security/privacy reasons.

Historically, exception messages in kotlinx.serialization often included the input Json itself for debuggability reason. Such behavior may pose additional challenges for logging, analytics, and other systems, since a system is not always allowed to store user data due to privacy/security reasons, which imposes additional sanitation logic. To address this issue, a new property exceptionsWithDebugInfo is added to JsonConfiguration. Disable it to hide user input from exception messages. IMPORTANT: This behavior will be enabled by default when this property becomes stable. See #2590 for more details.

Bugfixes and improvements

• CBOR: Relax value range check when decoding numbers (#3167)
• Use a specialized writeDecimalLong method for IO stream integrations in Json (#3152)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's changelog.

1.11.0 / 2026-04-10

This release is based on Kotlin 2.3.20 and provides new Json exceptions API and some bugfixes and improvements.

Expose Json exceptions structure

To make working with exceptions easier and providing proper error codes in e.g., REST APIs, classes JsonException, JsonDecodingException, and JsonEncodingException are now public. They have relevant public properties, such as shortMessage, path, offset, and others. This API is currently experimental, and we're going to improve it further in the subsequent releases. See the linked issues for the details: #1930, #1877.

Ability to hide user input from exception messages for security/privacy reasons.

Historically, exception messages in kotlinx.serialization often included the input Json itself for debuggability reason. Such behavior may pose additional challenges for logging, analytics, and other systems, since a system is not always allowed to store user data due to privacy/security reasons, which imposes additional sanitation logic. To address this issue, a new property exceptionsWithDebugInfo is added to JsonConfiguration. Disable it to hide user input from exception messages. IMPORTANT: This behavior will be enabled by default when this property becomes stable. See #2590 for more details.

Bugfixes and improvements

• CBOR: Relax value range check when decoding numbers (#3167)
• Use a specialized writeDecimalLong method for IO stream integrations in Json (#3152)

Commits

• 6956af2 Prepare 1.11 release
• 390d84c Merge remote-tracking branch 'origin/master' into dev
• 431fe2d Use local repo for publishing (#3171)
• 05c12b6 Add usage attribute to "testRepositories" configuration
• a4e1f08 Bump Kover version to 0.9.8 release (#3174)
• 304e858 Expose Json exceptions structure (#3145)
• 4a0338e Included G Play SDK verification file for core-jvm (#3169)
• 421f64c CBOR: Relax value range check when decoding numbers (#3167)
• 85a4f12 KT-84955: mark apple x64 tagets as deprecated error
• bd38b0e Remove dead code
• Additional commits viewable in compare view

Updates com.squareup.okhttp3:okhttp from 5.3.2 to 5.4.0

Changelog

Sourced from com.squareup.okhttp3:okhttp's changelog.

Version 5.4.0

2026-06-08

• New: Add superpowers to interceptors. Interceptors can now override anything settable on OkHttpClient.Builder, such as the cache, connection pool, socket factory, and DNS. We expect this will allow most users to use interceptors everywhere, insted of mixing and matching interceptors with custom Call.Factory wrappers.
• Fix: Limit each HTTP/2 response to 256 KiB of total headers.
• Upgrade: [kotlinx.coroutines 1.11.0][coroutines_1_11_0]. This is used by the optional okhttp-coroutines artifact.
• Upgrade: [GraalVM 25.0.3][graalvm_25].
• Upgrade: [Okio 3.17.0][okio_3_17_0].

Commits

• 61423f4 Prepare for release 5.4.0.
• d7e6eff Update eclipse.osgi to v3.24.200 (#9480)
• 7a35098 Update bnd to v7.3.0 (#9475)
• 0c5a45b Update dependency com.puppycrawl.tools:checkstyle to v13.5.0 (#9468)
• 113ad17 Update dependency macos to v26 (#9457)
• 84f601a Update shadow.plugin to v9.4.2 (#9466)
• 7d463f4 Update spotless.plugin to v8.6.0 (#9464)
• 3bf00f5 Update plugin com.diffplug.spotless to v8.6.0 (#9463)
• cfc45a3 Update spotless.plugin to v8.5.1 (#9456)
• 81c5006 Apply gradle lint correctly (#9459)
• Additional commits viewable in compare view

Updates org.bouncycastle:bcprov-jdk18on from 1.83 to 1.85

Changelog

Sourced from org.bouncycastle:bcprov-jdk18on's changelog.

2.2.1 Version Release: 1.85, 1.85.1 Date:      2026, July 12th

... (truncated)

Commits

• See full diff in compare view

Updates org.commonmark:commonmark from 0.27.1 to 0.29.0

Release notes

Sourced from org.commonmark:commonmark's releases.

commonmark-java 0.29.0

Added

• Support rendering GFM task list items to Markdown (#433)
• Support rendering YAML front matter to Markdown (#434)
• Alerts
  • Allow customizing HTML attributes for alert title <p> tag via AttributeProvider (#427)
  • New configuration for AlertsExtension to allow authors to provide custom titles per alert. See the custom titles section of the alerts README for more information. (#430)
  • New configuration for AlertsExtension to allow alerts to be nested within other blocks (including other alerts). See this section of the alerts README for more information. (#430)
  • New configuration for AlertsExtension to allow the set of alert types (including standard GFM types) to be completely overwritten. (#435)

    var extension = AlertsExtension.builder()
            .setAllowedTypes(Map.ofEntries(
                    Map.entry("IMPORTANT", "Important"),
                    Map.entry("WARNING", "Warning")
                    Map.entry("BUG", "Known Bug")
            ))
            .build();

  • Support rendering alerts to text (#437)

commonmark-java 0.28.0

Added

• New extension for alerts (aka callouts/admonitions)
  • Syntax:

    > [!NOTE]
    > The text of the note.
    

  • As types you can use NOTE, TIP, IMPORTANT, WARNING, CAUTION; or configure the extension to add additional ones.
  • Use class AlertsExtension in artifact commonmark-ext-gfm-alerts (#420)
• New option maxOpenBlockParsers for Parser.Builder to set an overall limit for the depth of block parsing. If set, any nesting beyond the limit will be parsed as paragraph text instead. The default remains unlimited.

Changelog

Sourced from org.commonmark:commonmark's changelog.

[0.29.0] - 2026-06-20

Added

• Support rendering GFM task list items to Markdown (#433)
• Support rendering YAML front matter to Markdown (#434)
• Alerts
  • Allow customizing HTML attributes for alert title <p> tag via AttributeProvider (#427)
  • New configuration for AlertsExtension to allow authors to provide custom titles per alert. See the custom titles section of the alerts README for more information. (#430)
  • New configuration for AlertsExtension to allow alerts to be nested within other blocks (including other alerts). See this section of the alerts README for more information. (#430)
  • New configuration for AlertsExtension to allow the set of alert types (including standard GFM types) to be completely overwritten. (#435)

    var extension = AlertsExtension.builder()
            .setAllowedTypes(Map.ofEntries(
                    Map.entry("IMPORTANT", "Important"),
                    Map.entry("WARNING", "Warning")
                    Map.entry("BUG", "Known Bug")
            ))
            .build();

  • Support rendering alerts to text (#437)

[0.28.0] - 2026-03-31

Added

• New extension for alerts (aka callouts/admonitions)
  • Syntax:

    > [!NOTE]
    > The text of the note.

  • As types you can use NOTE, TIP, IMPORTANT, WARNING, CAUTION; or configure the extension to add additional ones.
  • Use class AlertsExtension in artifact commonmark-ext-gfm-alerts (#420)
• New option maxOpenBlockParsers for Parser.Builder to set an overall limit for the depth of block parsing. If set, any nesting beyond the limit will be parsed as paragraph text instead. The default remains unlimited.

Commits

• 57cf9fd [maven-release-plugin] prepare release commonmark-parent-0.29.0
• 4f6b66e Merge pull request #438 from commonmark/release-0.29.0
• b0f4dbc mvn versions:set -DnewVersion=0.29.0-SNAPSHOT
• c5f6bc9 Prepare CHANGELOG for version 0.29.0
• 952ce9d Merge pull request #437 from rdestefa/issue-436-alerts-text-rendering
• efc90bd Update CHANGELOG.md
• 0117b82 Update AlertHtmlNodeRenderer.java
• ffa682e Update AlertTextContentNodeRenderer.java
• 717dedd Add Text Content Rendering Support for Alerts
• b146e55 Merge pull request #435 from rdestefa/issue-431-disallow-github-alert-types
• Additional commits viewable in compare view

Updates org.commonmark:commonmark-ext-autolink from 0.27.1 to 0.29.0

Release notes

...

Description has been truncated