chore(deps): update all dependencies (major) by renovate[bot] · Pull Request #303 · Kotlin-Android-Open-Source/MVI-Coroutines-Flow

renovate · 2026-01-15T22:02:36Z

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	major	`v5` → `v6`
actions/checkout	action	major	`v6` → `v7`
actions/upload-artifact	action	major	`v6` → `v7`
codecov/codecov-action	action	major	`v5.5.2` → `v7.0.0`
gradle/actions	action	major	`v5` → `v6`
com.android.library (source)	plugin	major	`8.13.2` → `9.3.0`
com.android.application (source)	plugin	major	`8.13.2` → `9.3.0`

Release Notes

actions/cache (actions/cache)

`v6.1.0`

Compare Source

What's Changed

Bump @actions/cache to v6.1.0 - handle read-only cache access by @jasongin in #1768

Full Changelog: actions/cache@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Update packages, migrate to ESM by @Samirat in #1760

Full Changelog: actions/cache@v5...v6.0.0

`v6`

Compare Source

actions/checkout (actions/checkout)

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v7`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

actions/upload-artifact (actions/upload-artifact)

`v7.0.1`

Compare Source

What's Changed

Update the readme with direct upload details by @danwkennedy in #795
Readme: bump all the example versions to v7 by @danwkennedy in #796
Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in #797

Full Changelog: actions/upload-artifact@v7...v7.0.1

`v7.0.0`

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Add proxy integration test by @Link- in #754
Upgrade the module to ESM and bump dependencies by @danwkennedy in #762
Support direct file uploads by @danwkennedy in #764

New Contributors

@Link- made their first contribution in #754

Full Changelog: actions/upload-artifact@v6...v7.0.0

`v7`

Compare Source

codecov/codecov-action (codecov/codecov-action)

`v7.0.0`

Compare Source

⚠️ Due to migration issues with keybase, we are unable to update our keys under the codecovsecurity account. We have deleted the account and are using codecovsecops with the original gpg key

What's Changed

ci: remove Enforce License Compliance workflow by @thomasrockhu-codecov in #1950
chore(release): 7.0.0 by @thomasrockhu-codecov in #1957

Full Changelog: codecov/codecov-action@v6.0.1...v7.0.0

`v7`

Compare Source

`v6.0.2`

Compare Source

This is a copy of the v7.0.0 release to make updates easier

What's Changed

ci: remove Enforce License Compliance workflow by @thomasrockhu-codecov in #1950
chore(release): 7.0.0 by @thomasrockhu-codecov in #1957

Full Changelog: codecov/codecov-action@v6.0.1...v6.0.2

`v6.0.1`

Compare Source

What's Changed

fix: prevent template injection in run: steps (VULN-1652) by @thomasrockhu-codecov in #1947
chore(release): 6.0.1 by @thomasrockhu-codecov in #1949

Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1

`v6.0.0`

Compare Source

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

Revert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0"" by @thomasrockhu-codecov in #1929
Th/6.0.0 by @thomasrockhu-codecov in #1928

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

`v6`

Compare Source

`v5.5.5`

Compare Source

This release only contains the keybase.io change as described here.

Full Changelog: codecov/codecov-action@v5.5.4...v5.5.5

`v5.5.4`

Compare Source

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0" by @thomasrockhu-codecov in #1926
chore(release): 5.5.4 by @thomasrockhu-codecov in #1927

Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4

`v5.5.3`

Compare Source

What's Changed

build(deps): bump actions/github-script from 7.0.1 to 8.0.0 by @dependabot[bot] in #1874
chore(release): bump to 5.5.3 by @thomasrockhu-codecov in #1922

Full Changelog: codecov/codecov-action@v5.5.2...v5.5.3

gradle/actions (gradle/actions)

`v6.2.0`

Compare Source

Highlights

This release brings significant behaviour improvements to Enhanced caching, improvements to the generated Job Summary, and a number of correctness and security fixes.

Improved cache-cleanup mechanism. Cleanup of stale files from the Gradle User Home is now faster, and no longer depends on Gradle or a JVM. It works by inspecting the local file state directly, removing the Gradle invocation from the post-build step.
More granular, more stable caching. The local build cache is stored as a separate cache entry, so it can be restored and invalidated independently of the main Gradle User Home entry. Transient Gradle housekeeping files are excluded from the cache, reducing its size and improving stability.
Hide obsolete Job summaries in PR commments: When a new Job summary comment is added to a PR, previous outdated Job summaries are now hidden.
Improved caching report in the job summary. The cache report now uses a single, consistent layout across all cache states and providers. Provider information is integrated directly into the report, and per-entry details are available in an expandable section. (#985)
Correctness and security fixes. A unique cache key is now used per run attempt, so re-runs no longer collide; the job summary shows the cache key string rather than an internal id; and bundled dependencies have been updated, including a ReDoS fix and a fast-xml CVE fix.

What's Changed

Remove unnecessary dependency overrides by @bigdaz in #981
Scope CI-integ-test concurrency groups per-branch by @bigdaz in #983
Improve typings by @Vampire in #938
Hide obsolete Job summaries by @SimonMarquis in #902
CI: add requireable aggregate/no-op checks for branch protection by @bigdaz in #984
Redesign the caching Job Summary by @bigdaz in #985

New Contributors

@Vampire made their first contribution in #938

Full Changelog: gradle/actions@v6.1.1...v6.2.0

`v6.1.1`

Compare Source

This release updates various dependency versions, resolving several reported security vulnerabilities.
No functional changes are included

What's Changed

Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /sources/test/init-scripts by @bot-githubaction in #961
Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /.github/workflow-samples/gradle-plugin by @bot-githubaction in #962
Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /.github/workflow-samples/groovy-dsl by @bot-githubaction in #963
Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /.github/workflow-samples/java-toolchain by @bot-githubaction in #964
Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /.github/workflow-samples/kotlin-dsl by @bot-githubaction in #965
Update known wrapper checksums by @github-actions[bot] in #937
Bump the github-actions group across 2 directories with 8 updates by @dependabot[bot] in #976
Bump the npm-dependencies group across 1 directory with 14 updates by @dependabot[bot] in #970
Bump references to Develocity Gradle plugin from 4.4.0 to 4.4.2 by @bot-githubaction in #973
Bump the npm-dependencies group in /sources with 5 updates by @dependabot[bot] in #977
Update @actions/cache and @actions/artifact, stop ignoring them in Dependabot by @bigdaz in #978
Resolve npm security vulnerabilities via dependency overrides by @bigdaz in #980

Full Changelog: gradle/actions@v6.1.0...v6.1.1

`v6.1.0`

Compare Source

New: Basic Cache Provider

A new MIT-licensed Basic Caching provider is now available as an alternative to the proprietary Enhanced Caching provided by gradle-actions-caching. Choose Basic Caching by setting cache-provider: basic on setup-gradle or dependency-submission actions.

Built on @actions/cache -- fully open source
Caches ~/.gradle/caches and ~/.gradle/wrapper directories
Cache key derived from build files (*.gradle*, gradle-wrapper.properties, etc.)
Clean cache on build file changes (no restore keys, preventing stale entry accumulation)

Limitations vs Enhanced Caching: No cache cleanup, no deduplication of cached content, cached content is fixed unless build files change.

Revamped Licensing & Distribution Documentation

New DISTRIBUTION.md documents the licensing of each component (particularly Basic Caching vs Enhanced Caching)
Simplified licensing notices in README, docs, and runtime log output
Clear usage tiers: Enhanced Caching is free for public repos and in Free Preview for private repos

What's Changed

Use a unique cache entry for wrapper-validation test by @bigdaz in #921
Update Dependencies by @bigdaz in #922
Update dependencies and resolve npm vulnerabilities by @bigdaz in #933
Add open-source 'basic' cache provider and revamp licensing documentation by @bigdaz in #930
Restructure caching documentation for basic and enhanced providers by @bigdaz in #934

Full Changelog: gradle/actions@v6.0.1...v6.1.0

`v6.0.1`

Compare Source

[!IMPORTANT]
The release of gradle/actions@v6 contains important changes to the license terms. More details in this blog post.
TL;DR: By upgrading to v6, you accept the Terms of Use for the gradle-actions-caching component.

Summary

The license changes in v6 introduced a gradle-actions-caching license notice that is printed in logs and in each job summary.

With this release, the license notice will be muted if build-scan terms have been accepted, or if a Develocity access key is provided.

What's Changed

Bump actions used in docs by @Goooler in #792
Add typing information for use by typesafegithub by @bigdaz in #910
Mute license warning when terms are accepted by @bigdaz in #911
Mention explicit license acceptance in notice by @bigdaz in #912
Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.21.1 to 2.21.2 in /sources/test/init-scripts in the gradle group across 1 directory by @dependabot[bot] in #907

Full Changelog: gradle/actions@v6.0.0...v6.0.1

`v6.0.0`

Compare Source

[!IMPORTANT]
The release of gradle/actions@v6 contains important changes to the license terms. More details in this blog post.
TL;DR: By upgrading to v6, you accept the Terms of Use for the gradle-actions-caching component.

Summary

Caching functionality of 'gradle-actions' has been extracted into a separate gradle-actions-caching library, and is no longer open-source. See this blog post for more context.
Existing, rudimentary, configuration-cache support has been removed, pending a fully functional implementation in gradle-actions-caching.
Dependencies updated to address security vulnerabilities

[!IMPORTANT]

Licensing notice

The caching functionality in `gradle-actions` has been extracted into `gradle-actions-caching`, a proprietary commercial component that is not covered by the MIT License.
The bundled `gradle-actions-caching` component is licensed and governed by a separate license, available at https://gradle.com/legal/terms-of-use/.

The `gradle-actions-caching` component is used only when caching is enabled and is not loaded or used when caching is disabled.

Use of the `gradle-actions-caching` component is subject to a separate license, available at https://gradle.com/legal/terms-of-use/.
If you do not agree to these license terms, do not use the `gradle-actions-caching` component.

What's Changed

Bump the npm-dependencies group in /sources with 2 updates by @dependabot[bot] in #866
Update known wrapper checksums by @github-actions[bot] in #868
Dependency updates by @bigdaz in #876
Update known wrapper checksums by @github-actions[bot] in #878
Bump @types/node from 25.3.3 to 25.3.5 in /sources in the npm-dependencies group across 1 directory by @dependabot[bot] in #877
Bump the github-actions group across 3 directories with 3 updates by @dependabot[bot] in #867
Update known wrapper checksums by @github-actions[bot] in #881
Bump the npm-dependencies group in /sources with 6 updates by @dependabot[bot] in #879
Bump the github-actions group across 3 directories with 5 updates by @dependabot[bot] in #880
Remove configuration-cache support by @bigdaz in #884
Extract caching logic into a separate gradle-actions-caching component by @bigdaz in #885
Update gradle-actions-caching library to v0.3.0 by @bot-githubaction in #899
Avoid windows shutdown bug by @bigdaz in #900
Dependency updates by @bigdaz in #905
Fix critical and high npm vulnerabilities by @bigdaz in #904
Fix rendering of job-disabled message by @bigdaz in #909

Full Changelog: gradle/actions@v5.0.2...v6.0.0

`v6`

Compare Source

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

| datasource | package | from | to | | ----------- | ------------------------------------------------------------- | ------ | ------ | | github-tags | actions/cache | v5.1.0 | v6.1.0 | | github-tags | actions/checkout | v6.0.3 | v7.0.0 | | github-tags | actions/upload-artifact | v6.0.0 | v7.0.1 | | github-tags | codecov/codecov-action | v5.5.2 | v7.0.0 | | github-tags | gradle/actions | v5.0.2 | v6.2.0 | | maven | com.android.library:com.android.library.gradle.plugin | 8.13.2 | 9.3.0 | | maven | com.android.application:com.android.application.gradle.plugin | 8.13.2 | 9.3.0 |

renovate Bot added the dependencies Pull requests that update a dependency file label Jan 15, 2026

renovate Bot assigned hoc081098 Jan 15, 2026

renovate Bot added the dependencies Pull requests that update a dependency file label Jan 15, 2026

renovate Bot force-pushed the renovate/major-all-deps branch from 831bca5 to a1d645f Compare January 19, 2026 19:15

renovate Bot force-pushed the renovate/major-all-deps branch from a1d645f to dd274f7 Compare February 2, 2026 16:50

renovate Bot force-pushed the renovate/major-all-deps branch 2 times, most recently from 489e080 to 1920918 Compare February 13, 2026 18:33

renovate Bot changed the title ~~chore(deps): update all dependencies to v9 (major)~~ chore(deps): update all dependencies (major) Feb 26, 2026

renovate Bot force-pushed the renovate/major-all-deps branch 2 times, most recently from 00a7df8 to 69ffdbb Compare March 3, 2026 18:03

renovate Bot force-pushed the renovate/major-all-deps branch from 69ffdbb to c1b424b Compare March 13, 2026 18:53

renovate Bot force-pushed the renovate/major-all-deps branch 2 times, most recently from 4f016d0 to 640bf5d Compare March 26, 2026 18:43

renovate Bot force-pushed the renovate/major-all-deps branch from 640bf5d to 3962faa Compare April 13, 2026 16:41

renovate Bot force-pushed the renovate/major-all-deps branch 2 times, most recently from e966984 to ec95b9f Compare April 23, 2026 13:31

renovate Bot force-pushed the renovate/major-all-deps branch 2 times, most recently from 6f64571 to f0c1050 Compare May 13, 2026 07:43

renovate Bot force-pushed the renovate/major-all-deps branch from f0c1050 to 19de3c5 Compare May 22, 2026 07:53

renovate Bot force-pushed the renovate/major-all-deps branch from 19de3c5 to 39ff696 Compare June 7, 2026 06:09

renovate Bot force-pushed the renovate/major-all-deps branch 2 times, most recently from 0ad887f to 648dba9 Compare June 23, 2026 17:53

renovate Bot force-pushed the renovate/major-all-deps branch from 648dba9 to dd07327 Compare July 14, 2026 17:00

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): update all dependencies (major)#303

chore(deps): update all dependencies (major)#303
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/major-all-deps

renovate Bot commented Jan 15, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

renovate Bot commented Jan 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

v7 What's new

Direct Uploads

ESM

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

What's Changed

What's Changed

Highlights

What's Changed

New Contributors

What's Changed

New: Basic Cache Provider

Revamped Licensing & Distribution Documentation

What's Changed

Summary

What's Changed

Summary

Licensing notice

What's Changed

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Jan 15, 2026 •

edited

Loading