fix: [SDK-4160] exclude OkHttp 5.x from OneSignal transitive dependencies

[fadi-george]

Description

One Line Summary

Exclude OkHttp 5.x from OneSignal Android SDK's transitive dependencies to prevent runtime crashes in React Native apps.

Details

Motivation

OneSignal Android SDK 5.7.x introduced an otel module that transitively pulls in OkHttp 5.x (okhttp-jvm:5.2.1) via opentelemetry-exporter-sender-okhttp. OkHttp 5.x is binary-incompatible with React Native's networking stack, which references okhttp3.internal.Util (removed in 5.x). Gradle's conflict resolution upgrades the entire app to OkHttp 5.x, causing a NoClassDefFoundError crash at runtime on the first network request.

Dependency chain causing the crash:

com.onesignal:OneSignal:5.7.x
  → com.onesignal:core:5.7.x
    → com.onesignal:otel:5.7.x
      → opentelemetry-exporter-otlp:1.55.0
        → opentelemetry-exporter-sender-okhttp:1.55.0
          → com.squareup.okhttp3:okhttp-jvm:5.2.1

An upstream fix is also being applied to the Android SDK's otel module (OneSignal-Android-SDK#2577). This wrapper-side exclude provides additional protection for React Native users.

Scope

• Excludes com.squareup.okhttp3:okhttp from the OneSignal dependency's transitive graph
• React Native already provides OkHttp 4.x, so no additional dependency is needed
• No public API or behavioral changes

Fixes OneSignal/OneSignal-Android-SDK#2575

Testing

Manual testing

Verified via Gradle dependency insight that OkHttp 5.x no longer appears in the resolved classpath when this exclude is applied.

Affected code checklist

• Notifications
• Outcomes
• Sessions
• In-App Messaging
• REST API requests
• Public API changes

Checklist

Overview

• I have filled out all REQUIRED sections above
• PR does one thing
• Any Public API changes are explained in the PR details and conform to existing APIs

Testing

• I have included test coverage for these changes, or explained why they are not needed
• All automated tests pass, or I explained why that is not possible
• I have personally tested this on my device, or explained why that is not possible

Final pass

• Code is as readable as possible.
• I have reviewed this PR myself, ensuring it meets each checklist item

Made with Cursor

---

This change is