fix(deps): update all-dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
io.github.panpf.zoomimage:zoomimage-compose-coil3	1.5.0 → 1.6.0
com.github.skydoves.compose.hotswan.compiler	2.0.0-beta02 → 2.0.0-beta03
io.sentry.android.gradle	6.13.0 → 6.15.0
io.sentry:sentry-bom	8.47.0 → 8.49.0
io.kotzilla.kotzilla-plugin (source)	2.2.4 → 2.3.0
io.kotzilla:kotzilla-sdk-compose (source)	2.2.4 → 2.3.0
com.google.firebase:firebase-bom	34.15.0 → 34.16.0
androidx.compose.material3:material3-adaptive-navigation-suite (source)	1.5.0-alpha18 → 1.5.0-alpha24
androidx.compose.material3:material3 (source)	1.5.0-alpha18 → 1.5.0-alpha24
org.jetbrains.androidx.lifecycle:lifecycle-viewmodel-navigation3	2.10.0 → 2.11.0
org.jetbrains.androidx.lifecycle:lifecycle-viewmodel-compose	2.10.0 → 2.11.0
org.jetbrains.androidx.lifecycle:lifecycle-runtime-compose	2.10.0 → 2.11.0
org.jetbrains.androidx.lifecycle:lifecycle-common	2.10.0 → 2.11.0
org.jetbrains.kotlinx:kotlinx-collections-immutable	0.5.0 → 0.5.1
org.jetbrains.kotlinx:kotlinx-datetime	0.8.0 → 0.8.0-0.6.x-compat
com.google.devtools.ksp:com.google.devtools.ksp.gradle.plugin (source)	2.3.9 → 2.3.10
org.jetbrains.kotlin.native.cocoapods (source)	2.4.0 → 2.4.10
org.jetbrains.kotlin.multiplatform (source)	2.4.0 → 2.4.10
org.jetbrains.kotlin.plugin.parcelize (source)	2.4.0 → 2.4.10
org.jetbrains.kotlin.plugin.compose (source)	2.4.0 → 2.4.10
org.jetbrains.kotlin.plugin.serialization (source)	2.4.0 → 2.4.10
org.jetbrains.kotlin.android (source)	2.4.0 → 2.4.10
org.jetbrains.kotlin:compose-compiler-gradle-plugin (source)	2.4.0 → 2.4.10
org.jetbrains.kotlin:kotlin-gradle-plugin (source)	2.4.0 → 2.4.10
org.jetbrains.kotlin:kotlin-reflect (source)	2.4.0 → 2.4.10
com.android.kotlin.multiplatform.library (source)	9.2.1 → 9.3.0
com.android.test (source)	9.2.1 → 9.3.0
com.android.library (source)	9.2.1 → 9.3.0
com.android.application (source)	9.2.1 → 9.3.0
com.android.tools.build:gradle (source)	9.2.1 → 9.3.0

---

Release Notes

panpf/zoomimage (io.github.panpf.zoomimage:zoomimage-compose-coil3)

v1.6.0

Compare Source

Changes since 1.6.0-beta01:

• depend: Upgrade to sketch 4.6.0

Dependencies

• depend: Upgrade to kotlin 2.4.0
• depend: Upgrade to jetbrains compose 1.11.1
• depend: Upgrade to jetbrains lifecycle 2.11.0-beta01
• depend: Upgrade to coil 3.5.0
• depend: Upgrade to sketch 4.6.0
• depend: Upgrade to skiko 0.144.6

getsentry/sentry-android-gradle-plugin (io.sentry.android.gradle)

v6.15.0

Compare Source

Features

• Mark the sizeAnalysis extension as stable by removing its @Experimental annotation (#​1361)
• Fail the build when OpenTelemetry is downgraded below the version the Sentry OpenTelemetry integration requires (#​1350)
  • The sentry-opentelemetry-* artifacts are built against specific OpenTelemetry versions. When another dependency management mechanism (most commonly Spring Boot io.spring.dependency-management) forces OpenTelemetry below the version a Sentry integration requires, running against those downgraded versions can cause ClassNotFoundException / NoSuchMethodError at runtime. The new verifySentryOpenTelemetryVersions task detects this downgrade and fails the build early with guidance on how to fix it.
  • You may disable this check by setting sentry.verifyOpenTelemetryVersions = false

Fixes

• Use Sentry BOM versions for auto-installed SDK dependencies (#​1349)

Dependencies

• Bump Android SDK from v8.47.0 to v8.49.0 (#​1359, #​1362)
  • changelog
  • diff
• Bump ComposablePreviewScanner from v0.9.0 to v0.9.1 (#​1357)
  • changelog
  • diff

v6.14.0

Compare Source

Dependencies

• Bump Android SDK from v8.45.0 to v8.47.0 (#​1343, #​1353)
  • changelog
  • diff
• Bump CLI from v3.5.1 to v3.6.0 (#​1344)
  • changelog
  • diff

getsentry/sentry-java (io.sentry:sentry-bom)

v8.49.0

Compare Source

Features

• Session Replay: Record segment names (transaction names) (#​5763)

• Add io.sentry:sentry-opentelemetry-bom to align Sentry OpenTelemetry modules with tested OpenTelemetry dependencies (#​5629)

  • Spring Boot Gradle plugin: add the Sentry BOM to dependencyManagement; explicit imports are applied after Spring Boot's implicit BOM

    dependencyManagement {
      imports {
        mavenBom("io.sentry:sentry-opentelemetry-bom:<sentry-version>")
      }
    }

  • Gradle: import it as a platform and omit versions from Sentry OpenTelemetry and OpenTelemetry dependencies

    implementation(platform("io.sentry:sentry-opentelemetry-bom:<sentry-version>"))

  • Maven: import it before Spring Boot's BOM in the same <dependencyManagement> block, or in the child POM when using spring-boot-starter-parent

    <dependency>
      <groupId>io.sentry</groupId>
      <artifactId>sentry-opentelemetry-bom</artifactId>
      <version>${sentry.version}</version>
      <type>pom</type>
      <scope>import</scope>
    </dependency>

Fixes

• Session Replay: Fix first recording segment missing for replays in buffer mode (#​5753)
• Session Replay: Fix error-to-replay linkage in buffer mode (#​5754)
• Prevent logs and metrics from remaining queued after a flush scheduling race (#​5756)
• Fix main thread identification for tombstone (native crash) events (#​5742)
• Prevent malformed JDBC URLs, which may contain credentials, from being printed to stdout (#​5656)
• Restrict JVM-global proxy authentication credentials to challenges from the configured proxy host (#​5656)
• Sanitize Spring 7 and Spring Jakarta WebClient span descriptions to prevent embedded URL credentials from being sent to Sentry (#​5656)
• Respect tracePropagationTargets when injecting Sentry tracing headers through the OpenTelemetry OTLP propagator (#​5656)

Performance

• Schedule transaction idle/deadline timeouts on a shared, dedicated executor instead of spawning a Timer thread per transaction (#​5670)

Dependencies

• Bump OpenTelemetry to support Spring Boot 4.1 (#​5573)
  • If this causes issues for you because you are also using Spring Boot Dependency Management Plugin (io.spring.dependency-management),
    which may downgrade the OpenTelemetry SDK, please have a look at the changelog entry above that explains how to use sentry-opentelemetry-bom.
  • OpenTelemetry to 1.63.0 (was 1.60.1)
  • OpenTelemetry Instrumentation to 2.29.0 (was 2.26.0)
  • OpenTelemetry Instrumentation Alpha to 2.29.0-alpha (was 2.26.0-alpha)
  • OpenTelemetry Semantic Conventions to 1.42.0 (was 1.40.0)
  • OpenTelemetry Semantic Conventions Alpha to 1.42.0-alpha (was 1.40.0-alpha)
• Bump Native SDK from v0.15.2 to v0.15.3 (#​5728)
  • changelog
  • diff

v8.48.0

Compare Source

Features

• Add Sentry.extendAppStart(), Sentry.finishExtendedAppStart(), and Sentry.getExtendedAppStartSpan() to extend the app start measurement past the first frame for extra launch-time work on Android (#​5604)

  • Requires standalone app start tracing (options.isEnableStandaloneAppStartTracing). Call extendAppStart() in Application.onCreate after SDK init and finishExtendedAppStart() when done:

  Sentry.extendAppStart()
  
  // Optionally, retrieve the extended app start span to attach your own child spans
  val child = Sentry.getExtendedAppStartSpan()?.startChild("preload", "Preload resources")
  // ... extra launch-time work ...
  child?.finish()
  
  Sentry.finishExtendedAppStart()

• Add trace_metric_byte data category and record byte-level client reports when trace metrics are discarded (#​5626)

• Expose sentry-native's heartbeat-based app-hang detection through SentryAndroidOptions (#​5623)

  • Enable via setEnableNdkAppHangTracking(true) (disabled by default) and tune the timeout with setNdkAppHangTimeoutIntervalMillis(...) (default 5000 ms), or the io.sentry.ndk.app-hang.enable / io.sentry.ndk.app-hang.timeout-interval-millis manifest entries
  • Intended for hybrid SDKs: emit the heartbeat by calling the native sentry_app_hang_heartbeat() from the thread you want monitored. Independent of the JVM-based ANR detection (setAnrEnabled)

• Support the io.sentry.tombstone.report-historical manifest option to enable historical tombstone reporting via AndroidManifest.xml <meta-data> (#​5683)

Fixes

• Fix NoSuchMethodError from using Math.floorDiv/Math.floorMod overloads that are unavailable on Java 8 (#​5743)
• Fix main thread identification parsing for ApplicationExitInfo ANRs (#​5733)
• Do not send threads without stacktraces for ApplicationExitInfo ANRs (#​5733)
• Record byte-level client reports when event processors discard logs or trace metrics (#​5718)
• Name the device-info caching thread SentryDeviceInfoCache so all threads spawned by the SDK are identifiable (#​5684)
• Apply byte-category rate limits to log and trace metric envelope items (#​5716)

Performance

• Skip Hint allocation in Scope.addBreadcrumb when no beforeBreadcrumb callback is set (#​5689)
• Speed up scope persistence by detecting the Sentry executor thread via a marker instead of a Thread.getName() name scan on every scope mutation (#​5691)
• Remove executor prewarm during SDK init (#​5681)
  • The single-threaded SentryExecutorService queued the prewarm work ahead of the first useful task, so it could only delay init work, never speed it up; the thread and class loading it warmed are paid identically by the first real task submitted right after.

Dependencies

• Bump Native SDK from v0.15.2 to v0.15.3 (#​5623)
  • changelog
  • diff

Kotlin/kotlinx.collections.immutable (org.jetbrains.kotlinx:kotlinx-collections-immutable)

v0.5.1

• Fixed PersistentOrderedMapBuilder returning a previously built map from build() after updating an entry value through MutableMap.MutableEntry.setValue #​253, #​274
• Fixed an assertion failure in PersistentOrderedSetBuilder.build() after interleaved build and remove/removeAll calls #​251
• Provided a JPMS module descriptor for the JVM artifact — module kotlinx.collections.immutable compiled into META-INF/versions/9, the artifact stays Java 8-compatible #​268

google/ksp (com.google.devtools.ksp:com.google.devtools.ksp.gradle.plugin)

v2.3.10

Compare Source

What's Changed

• Fix OOMs caused by unstopped coroutine Dispatcher threads by moving KSP task cache to a gradle build service (#​2817)
• Sanitize ':' in internal-name module suffix so KSP works with Kotlin 2.4.0 default module names (#​2964)
• Filter source file trees in KspAATask to restore NO-SOURCE skipping behaviour (#​2947)
• Fix R-class resolution in KSP when AGP 9 built-in Kotlin is enabled (#​2857)
• Fix KSP2 incremental cache path normalization mismatch (#​2854)
• Normalize line endings for KspAATask source roots to prevent cross-platform remote build cache misses (#​2849)
• Fix bug where KSP incremental compilation does not consider library class references in annotations (#​3011)
• Consume all Kotlin sources in KSP to support other code generators (#​3001)
• Fix configuration cache invalidation in klib cross-compilation check (#​3014)
• Memoized hash code for KSTypeImpl to speed up processing (#​2896)
• Fix incorrect name generation for data classes annotated with @JvmRecord (#​2813)
• Include kotlinx.coroutines in the distributed uber jar symbol-processing-aa-embeddable (#​2938)
• New debugging features for incremental compilation, including additional logging and dependency graph visualization (#​3015)
• Deprecate the ksp(...) Gradle configuration in Kotlin Multiplatform (KMP) projects in favor of target-specific configurations (#​2956). Note: Non-KMP projects are also affected. For migration details, see the documentation.

Contributors

• Thanks to @​mvanhorn, @​Yong-yuan-X, @​MariusVolkhart, @​shmuelr and everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.9...2.3.10

JetBrains/kotlin (org.jetbrains.kotlin.native.cocoapods)

v2.4.10: Kotlin 2.4.10

Changelog

Backend. Wasm

• KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

Compiler

• KT-86939 JVM: IllegalStateException "No value for annotation parameter" when using const val in nested Java annotation array argument
• KT-83766 K2: Wrong sourcePsi is set for SymbolPsiLiteral in SLC for annotation arguments referencing a const val
• KT-86728 Reified type inference: expected type not propagated into inline call inside lambda with elvis operator

Compose Compiler

• b/522127447 Compose Compiler 2.4: classes previously inferred stable now reported runtime/Uncertain

Klibs

• KT-86501 Native: IrTypeAliasSymbolImpl is already bound. Signature: kotlinx.datetime/Instant|null[0] on iosSimulatorArm64

Tools. CLI

• KT-86930 Introduce kotlinr in the Kotlin distribution

Tools. Gradle. BCV

• KT-87223 Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of 2.4.0

Tools. Gradle. JS

• KT-87304 jsBrowserTest fails with "exited with errors (exit code: 1)"
• KT-86057 kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall is up-to-date, causing kotlinStoreYarnLock to fail

Tools. Gradle. Multiplatform

• KT-87084 False positive warning for JS and Wasm compilations when CRI is enabled

Tools. Scripts

• KT-87076 @file:CompilerOptions("-jvm-target", ...) ignored in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target 1.8
• KT-86352 K2 scripting: FirResolvedTypeRef exception when resolving extension functions from imported scripts

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.