Update all dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
fastlane (source, changelog)	2.236.1 → 2.237.0
com.google.android.gms.oss-licenses-plugin	0.12.0 → 0.13.0
com.google.dagger.hilt.android	2.60 → 2.60.1
com.google.dagger:hilt-android-compiler	2.60 → 2.60.1
com.google.dagger:hilt-android	2.60 → 2.60.1
com.google.firebase:firebase-bom	34.15.0 → 34.16.0
com.google.devtools.ksp (source)	2.3.9 → 2.3.10

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

fastlane/fastlane (fastlane)

v2.237.0: Improvements

Compare Source

• [ci] drop CircleCI for GHA (#​30108) via Connor Tumbleson (@​iBotPeaches)
• [fastlane_core] Restore altool -f flag, keep -assetFile only for iTMSTransporter (#​30106) via Roman Gardukevich (@​OdNairy)
• [gym] handle xcpretty errors cleaner & promote xcbeautify (#​30099) via Connor Tumbleson (@​iBotPeaches)
• [docs] Reflect specification changes regarding iPad Pro 12.9-inch screenshots in deliver (#​30103) via 417-72KI (@​417-72KI)
• [core] Reduce duplication on output and noise during failure. (#​30097) via Connor Tumbleson (@​iBotPeaches)
• Bump actions/checkout from 6 to 7 (#​30100) via dependabot[bot] (@​dependabot[bot])
• [match] Restore renew expired certs (opt in) (#​30096) via Roman Gardukevich (@​OdNairy)
• [match] fail fast for SSH authentication prompts in non-interactive shell (#​30078) via Pratik Patil (@​PratikPatil131)
• [gem] move to faraday 1.10.6 (#​30095) via Connor Tumbleson (@​iBotPeaches)
• [core] Skip repeating the output again when an sh command fails (#​19545) via Peter Tutervai (@​tutipeti)
• [scan] Forward force_legacy_xcresulttool to trainer (#​30092) via Eyüp Can Akman (@​eyupcanakman)
• [trainer] Fix output_remove_retry_attempts not stripping failures for skipped-on-retry tests (modern xcresult parser) (#​30081) via Oliver Fox (@​foxware00)
• [scan] Handle array destination in xcodebuild_destination_parameter (#​30069) via Ricardo Sawir (@​sawirricardo)
• [action][swiftlint] Fix path option for SwiftLint 0.48.0 and above (#​30080) via Augusto Xavier (@​augustocbx)
• [ci] move more workflows from CircleCI -> GHA (#​30090) via Connor Tumbleson (@​iBotPeaches)
• [core] remove upper bound on excon (#​30085) via Connor Tumbleson (@​iBotPeaches)
• Bump actions/checkout from 6 to 7 (#​30091) via dependabot[bot] (@​dependabot[bot])
• [spaceship] Fix appInfoLocalizations create/delete on the Tunes API (#​30084) via Marcel Hoppe (@​hoppsen)
• [match] Fix keychain import path escaping (#​30072) via Ricardo Sawir (@​sawirricardo)
• [precheck] Fix copyright year check to allow past years (#​30076) via Augusto Xavier (@​augustocbx)
• [supply] Fix version_codes_to_retain causing promote-only flow to use… (#​30073) via Pratik Patil (@​PratikPatil131)
• Bump rubygems/configure-rubygems-credentials from 2.0.0 to 2.1.0 (#​30074) via dependabot[bot] (@​dependabot[bot])
• [fastlane_core] Fix deprecated Transporter -f flag, use -assetFile fo… (#​30061) via Pratik Patil (@​PratikPatil131)
• [core] fix: update addressable to 2.9.0 min for CVE-2026-35611 (#​30060) via OrbisAI Security (@​orbisai0security)

google/ksp (com.google.devtools.ksp)

v2.3.10

Compare Source

What's Changed

• Fix OOMs caused by unstopped coroutine Dispatcher threads by moving KSP task cache to a gradle build service (#​2817)
• Sanitize ':' in internal-name module suffix so KSP works with Kotlin 2.4.0 default module names (#​2964)
• Filter source file trees in KspAATask to restore NO-SOURCE skipping behaviour (#​2947)
• Fix R-class resolution in KSP when AGP 9 built-in Kotlin is enabled (#​2857)
• Fix KSP2 incremental cache path normalization mismatch (#​2854)
• Normalize line endings for KspAATask source roots to prevent cross-platform remote build cache misses (#​2849)
• Fix bug where KSP incremental compilation does not consider library class references in annotations (#​3011)
• Consume all Kotlin sources in KSP to support other code generators (#​3001)
• Fix configuration cache invalidation in klib cross-compilation check (#​3014)

Contributors

• Thanks to @​mvanhorn and everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.9...2.3.10

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.