Update all dependencies (starter)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/checkout	action	major	v4 → v6
actions/setup-java	action	major	v4 → v5
android-actions/setup-android	action	major	v3 → v4
gradle (source)		major	8.12 → 9.5.0
gradle/actions	action	major	v4 → v6
androidx.lifecycle:lifecycle-runtime-ktx (source)	dependencies	minor	2.8.7 → 2.10.0
androidx.core:core-ktx (source)	dependencies	minor	1.15.0 → 1.18.0
androidx.activity:activity-compose (source)	dependencies	minor	1.9.3 → 1.13.0
androidx.compose:compose-bom	dependencies	major	2024.12.01 → 2026.05.00
org.jetbrains.kotlin.plugin.compose (source)	plugin	minor	2.1.0 → 2.3.21
org.jetbrains.kotlin.android (source)	plugin	minor	2.1.0 → 2.3.21
com.android.library (source)	plugin	major	8.8.0 → 9.2.1
com.android.application (source)	plugin	major	8.8.0 → 9.2.1

---

Release Notes

actions/checkout (actions/checkout)

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

v6.0.1

Compare Source

v6.0.0

Compare Source

v6

Compare Source

v5.0.1

Compare Source

What's Changed

• Port v6 cleanup to v5 by @​ericsciple in #​2301

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

Compare Source

What's Changed

• Update actions checkout to use node 24 by @​salmanmkc in #​2226
• Prepare v5.0.0 release by @​salmanmkc in #​2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v5

Compare Source

v4.3.1

Compare Source

What's Changed

• Port v6 cleanup to v4 by @​ericsciple in #​2305

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

Compare Source

What's Changed

• docs: update README.md by @​motss in #​1971
• Add internal repos for checking out multiple repositories by @​mouismail in #​1977
• Documentation update - add recommended permissions to Readme by @​benwells in #​2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in #​2044
• Update README.md by @​nebuk89 in #​2194
• Update CODEOWNERS for actions by @​TingluoHuang in #​2224
• Update package dependencies by @​salmanmkc in #​2236
• Prepare release v4.3.0 by @​salmanmkc in #​2237

New Contributors

• @​motss made their first contribution in #​1971
• @​mouismail made their first contribution in #​1977
• @​benwells made their first contribution in #​2043
• @​nebuk89 made their first contribution in #​2194
• @​salmanmkc made their first contribution in #​2236

Full Changelog: actions/checkout@v4...v4.3.0

v4.2.2

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in #​1941
• Expand unit test coverage for isGhes by @​jww3 in #​1946

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in #​1924

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in #​1180
• Dependency updates by @​dependabot- #​1777, #​1872

v4.1.7

Compare Source

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in #​1739
• Bump actions/checkout from 3 to 4 by @​dependabot in #​1697
• Check out other refs/* by commit by @​orhantoy in #​1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in #​1776

v4.1.6

Compare Source

• Check platform to set archive extension appropriately by @​cory-miller in #​1732

v4.1.5

Compare Source

• Update NPM dependencies by @​cory-miller in #​1703
• Bump github/codeql-action from 2 to 3 by @​dependabot in #​1694
• Bump actions/setup-node from 1 to 4 by @​dependabot in #​1696
• Bump actions/upload-artifact from 2 to 4 by @​dependabot in #​1695
• README: Suggest user.email to be 41898282+github-actions[bot]@​users.noreply.github.com by @​cory-miller in #​1707

v4.1.4

Compare Source

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in #​1692
• Add dependabot config by @​cory-miller in #​1688
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in #​1693
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in #​1643

v4.1.3

Compare Source

• Check git version before attempting to disable sparse-checkout by @​jww3 in #​1656
• Add SSH user parameter by @​cory-miller in #​1685
• Update actions/checkout version in update-main-version.yml by @​jww3 in #​1650

v4.1.2

Compare Source

• Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in #​1598

v4.1.1

Compare Source

• Correct link to GitHub Docs by @​peterbe in #​1511
• Link to release page from what's new section by @​cory-miller in #​1514

v4.1.0

Compare Source

• Add support for partial checkout filters

actions/setup-java (actions/setup-java)

v5.2.0

Compare Source

What's Changed

Enhancement

• Retry on HTTP 522 Connection timed out by @​findepi in #​964

Documentation Changes

• Update gradle caching by @​priya-kinthali in #​972
• Update checkout to v6 by @​mahabaleshwars in #​973

Dependency Updates

• Upgrade @​actions/cache to v5 by @​salmanmkc in #​968
• Upgrade actions/checkout from 5 to 6 by @​dependabot in #​961

New Contributors

• @​findepi made their first contribution in #​964

Full Changelog: actions/setup-java@v5...v5.2.0

v5.1.0

Compare Source

What's Changed

New Features

• Add support for .sdkmanrc file in java-version-file parameter by @​guicamest in #​736
• Add support for Microsoft OpenJDK 25 builds by @​the-mod in #​927

Bug Fixes & Improvements

• Update Regex to Support All ASDF Versions for the supported distributions in tool-versions File by @​aparnajyothi-y in #​767
• Enhance error logging for network failures to include endpoint/IP details, add retry mechanism and update workflows to use macos-15-intel by @​priya-kinthali in #​946
• Update SapMachine URLs by @​RealCLanger in #​955
• Add GitHub Token Support for GraalVM and Refactor Code by @​mahabaleshwars in #​849

Documentation changes

• Update documentation to use checkout and Java v5 by @​lmvysakh in #​903
• Clarify JAVA_HOME and PATH setup in README by @​chiranjib-swain in #​841

Dependency updates

• Upgrade prettier from 2.8.8 to 3.6.2 and document breaking changes in v5 by @​dependabot in #​873
• Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @​dependabot in #​912

New Contributors

• @​lmvysakh made their first contribution in #​903
• @​chiranjib-swain made their first contribution in #​841
• @​the-mod made their first contribution in #​927
• @​priya-kinthali made their first contribution in #​946
• @​guicamest made their first contribution in #​736

Full Changelog: actions/setup-java@v5...v5.1.0

v5.0.0

Compare Source

What's Changed

Breaking Changes

• Upgrade to node 24 by @​salmanmkc in #​888

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency Upgrades

• Upgrade Publish Immutable Action by @​HarithaVattikuti in #​798
• Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @​dependabot[bot] in #​730
• Upgrade undici from 5.28.5 to 5.29.0 by @​dependabot[bot] in #​833
• Upgrade form-data to bring in fix for critical vulnerability by @​gowridurgad in #​887
• Upgrade actions/checkout from 4 to 5 by @​dependabot[bot] in #​896

Bug Fixes

• Prevent default installation of JetBrains pre-releases by @​priyagupta108 in #​859
• Improve Error Handling for Setup-Java Action to Help Debug Intermittent Failures by @​gowridurgad in #​848

New Contributors

• @​gowridurgad made their first contribution in #​848
• @​salmanmkc made their first contribution in #​888

Full Changelog: actions/setup-java@v4...v5.0.0

v5

Compare Source

v4.8.0

Compare Source

What's Changed

• License and Audit Fixes by @​HarithaVattikuti in #​960
• Update SapMachine URLs by @​RealCLanger in #​965

Full Changelog: actions/setup-java@v4...v4.8.0

v4.7.1

Compare Source

What's Changed

Documentation changes

• Add Documentation to Recommend Using GraalVM JDK 17 Version to 17.0.12 to Align with GFTC License Terms by @​aparnajyothi-y in #​704
• Remove duplicated GraalVM section in documentation by @​Marcono1234 in #​716

Dependency updates:

• Upgrade @​action/cache from 4.0.0 to 4.0.2 by @​aparnajyothi-y in #​766
• Upgrade @​actions/glob from 0.4.0 to 0.5.0 by @​dependabot in #​744
• Upgrade ts-jest from 29.1.2 to 29.2.5 by @​dependabot in #​743
• Upgrade @​action/cache to 4.0.3 by @​aparnajyothi-y in #​773

Full Changelog: actions/setup-java@v4...v4.7.1

v4.7.0

Compare Source

What's Changed

• Configure Dependabot settings by @​HarithaVattikuti in #​722
• README Update: Added a permissions section by @​benwells in #​723
• Upgrade cache from version 3.2.4 to 4.0.0 by @​aparnajyothi-y in #​724
• Upgrade @actions/http-client from 2.2.1 to 2.2.3 by @​dependabot in #​728
• Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot in #​727
• Upgrade @types/jest from 29.5.12 to 29.5.14 by @​dependabot in #​729

New Contributors

• @​benwells made their first contribution in #​723

Full Changelog: actions/setup-java@v4...v4.7.0

v4.6.0

Compare Source

What's Changed

Add-ons:

• Add Support for JetBrains Runtime by @​gmitch215 in #​637

 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: ‘jetbrains’
     java-version: '21'

Bug fixes:

• Fix Ubuntu-latest CI failures by @​mahabaleshwars in #​693

New Contributors

• @​gmitch215 made their first contribution in #​637

Full Changelog: actions/setup-java@v4...v4.6.0

v4.5.0

Compare Source

What's Changed

• Upgrade IA Publish by @​Jcambass in #​686

Bug fixes:

• Improve archive extraction on windows runners without powershell core and Update micromatch dependency by @​priyagupta108 in #​689
• Update workflows for GraalVM and Version Enhancements by @​mahabaleshwars in #​699
• Refine isGhes logic by @​jww3 in #​697

New Contributors:

• @​priyagupta108 made their first contribution in #​689
• @​jww3 made their first contribution in #​697

Full Changelog: actions/setup-java@v4...v4.5.0

v4.4.0

Compare Source

What's Changed

Add-ons :

• Add support for Oracle GraalVM by @​fniephaus in #​501

steps:
 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: 'graalvm'
     java-version: '21'

• Add workflow file for publishing releases to immutable action package by @​Jcambass in #​684

Bug fixes :

• Add architecture to cache key by @​Zxilly in #​664
  This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
  Note: This change may break previous cache keys as they will no longer be compatible with the new format.
• Resolve check failures by @​aparnajyothi-y in #​687

New Contributors

• @​Jcambass made their first contribution in #​684
• @​Zxilly made their first contribution in #​664

Full Changelog: actions/setup-java@v4...v4.4.0

v4.3.0

Compare Source

What's Changed

• Add support for SapMachine JDK/JRE by @​Shegox in #​614

steps:
 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: 'sapmachine'
     java-version: '21'

Bug fixes :

• Fix typos on Corretto by @​johnshajiang in #​666
• IBM Semeru Enhancement on arm64 by @​mahabaleshwars in #​677
• Resolve Basic Validation Check Failures by @​aparnajyothi-y
 in #​682

New Contributors :

• @​johnshajiang made their first contribution in #​666
• @​Shegox made their first contribution in #​614

Full Changelog: actions/setup-java@v4...v4.3.0

v4.2.2

Compare Source

What's Changed



Bug fixes:

• Fix macos latest check failures by @​HarithaVattikuti in #​634
• Fix dragonwell distribution parsing issues by @​Accelerator1996 in #​643

Documentation changes

• Update advanced documentation for java-version-file by @​mahabaleshwars in #​622

Dependency updates:

• Bump undici from 5.28.3 to 5.28.4 and other dependency updates by @​dependabot in #​616

Full Changelog: actions/setup-java@v4...v4.2.2

v4.2.1

Compare Source

What's Changed

• Patch for java version file to accept it from any path by @​mahabaleshwars in #​610

Full Changelog: actions/setup-java@v4...v4.2.1

v4.2.0

Compare Source

What's Changed

• Updated actions/httpclient version to 2.2.1 and other dependencies by @​HarithaVattikuti in #​607
• Added .tool-versions file support along with .java-version file by @​mahabaleshwars in #​606

New Contributors

• @​HarithaVattikuti made their first contribution in #​607
  Full Changelog: actions/setup-java@v4...v4.2.0

v4.1.0

Compare Source

What's Changed

• Added Windows Arm64 Support for Windows Arm64 Runners by @​mahabaleshwars in #​595
• feat: bump actions/checkout and actions/setup-java to v4 by @​kbdharun in #​533
• Handle authorization when the token is undefined by @​peter-murray in #​556
• Documentation update of Java 21 by @​Okeanos in #​566
• Documentation update about maven-gpg-plugin version note by @​IvanZosimov in #​570
• Oracle JDK 21 support by @​jdubois in #​538
• Fix typo in configuration example by @​Bananeweizen in #​572

New Contributors

• @​kbdharun made their first contribution in #​533
• @​peter-murray made their first contribution in #​556
• @​jdubois made their first contribution in #​538
• @​Bananeweizen made their first contribution in #​572
• @​mahabaleshwars made their first contribution in #​595

Full Changelog: actions/setup-java@v4...v4.1.0

android-actions/setup-android (android-actions/setup-android)

v4.0.1

Compare Source

Update npm dependencies

v4.0.0

Compare Source

Hello,

The long awaited update of setup-android.

• Migrate action to Node24 (by @​TWiStErRob)
• Add and default to cmdline-tools version 20.0 ( 1474292 )
• Update CI runners (by @​TWiStErRob)
• Update README.md (by @​vil02)
• Update npm dependencies to solve CVE's

Incrementing major version to safeguard incase node upgrade or default cmdline-tools upgrade breaks something downstream.

v4

Compare Source

v3.2.2

Compare Source

Add support for cmdline-tools versions 12, 13, and 16 by @​warting in #​493 .

Updated npm dependencies

v3.2.1

Compare Source

Updated dependencies

v3.2.0

Compare Source

Implement 'packages' input argument, which allows choosing which packages to install from Android SDK

v3.1.0

Compare Source

Allow installing different Android SDK versions.
Allow silent license agreement.

gradle/gradle (gradle)

v9.5.0

Compare Source

v9.4.1: 9.4.1

Compare Source

The Gradle team is excited to announce Gradle 9.4.1.

Here are the highlights of this release:

• Java 26 support
• Non-class-based JVM tests
• Enhanced console progress bar

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
akankshaa-00,
Attila Kelemen,
Björn Kautler,
dblood,
Dennis Rieks,
duvvuvenkataramana,
John Burns,
Julian,
kevinstembridge,
Niels Doucet,
Philip Wedemann,
ploober,
Richard Hernandez,
Roberto Perez Alcolea,
Sebastian Lövdahl,
stephan2405,
Stephane Landelle,
Ujwal Suresh Vanjare,
Victor Merkulov,
Vincent Potuček,
Vladimir Sitnikov.

Upgrade instructions

Switch your build to use Gradle 9.4.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.4.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.4.0: 9.4.0

Compare Source

The Gradle team is excited to announce Gradle 9.4.0.

Here are the highlights of this release:

• Java 26 support
• Non-class-based JVM tests
• Enhanced console progress bar

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
akankshaa-00,
Attila Kelemen,
Björn Kautler,
dblood,
Dennis Rieks,
duvvuvenkataramana,
John Burns,
Julian,
kevinstembridge,
Niels Doucet,
Philip Wedemann,
ploober,
Richard Hernandez,
Roberto Perez Alcolea,
Sebastian Lövdahl,
stephan2405,
Stephane Landelle,
Ujwal Suresh Vanjare,
Victor Merkulov,
Vincent Potuček,
Vladimir Sitnikov.

Upgrade instructions

Switch your build to use Gradle 9.4.0 by updating your wrapper:

./gradlew wrapper --gradle-version=9.4.0 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.3.1: 9.3.1

Compare Source

This is a patch release for 9.3.0. We recommend using 9.3.1 instead of 9.3.0.

The following issues were resolved:

• Cannot find testcases from Android Screenshot Test plugin since Gradle 9.3.0
• Excluding dependencies from included builds doesn't work in Gradle 9.3.0
• ExternalDependency and DependencyConstraint cannot be passed to DependencyResolveDetails#useTarget
• Gradle 9.3.0 generate JUnit test result files with wrong name
• Build cache cannot handle outputs with non-BMP characters in the filename
• Emojis in test names should not break build caching
• Non utf-8 c code is no longer buildable
• Breaking change in 9.3.0 regarding cross-project dependency manipulation
• JUnit3 tests cannot be run with Gradle 9.3.0
• Test.setScanForTestClasses(false) causes all junit4 tests to be skipped

Read the Release Notes

Upgrade instructions

Switch your build to use Gradle 9.3.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.3.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.3.0: 9.3.0

Compare Source

The Gradle team is excited to announce Gradle 9.3.0.

Here are the highlights of this release:

• Test reporting improvements
• Error and warning improvements
• Build authoring improvements

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
Adam,
Aharnish Solanki,
Andrzej Zabost,
Björn Kautler,
Boris Petrov,
Jendrik Johannes,
Kamil Krzywanski,
KANAKALA SAI KIRAN,
Megmeehey,
NurmukhametovAlexey,
Philip Wedemann,
Piotr Kubowicz,
Samay Kumar,
Shin Minjun,
Stefan Oehme,
Vincent Potuček,
Yongshun Ye.

Upgrade instructions

Switch your build to use Gradle 9.3.0 by updating your wrapper:

./gradlew wrapper --gradle-version=9.3.0 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.2.1: 9.2.1

Compare Source

The Gradle team is excited to announce Gradle 9.2.1.

Here are the highlights of this release:

• Windows ARM support
• Improved publishing APIs
• Better guidance for dependency verification failures

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
Björn Kautler,
hasunzo,
HYEON,
Hyunjoon Park,
HYUNJUN SON,
Jendrik Johannes,
Kirill Gavrilov,
Madalin Valceleanu,
Martin Bonnin,
Matthew Haughton,
Mikhail Polivakha,
Na Minhyeok,
Philip Wedemann,
Philipp Schneider,
Róbert Papp,
Simon Marquis,
TheGoesen,
Vincent Potucek,
Xin Wang.

Upgrade instructions

Switch your build to use Gradle 9.2.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.2.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.2.0: 9.2.0

Compare Source

The Gradle team is excited to announce Gradle 9.2.0.

Here are the highlights of this release:

• Windows ARM support
• Improved publishing APIs
• Better guidance for dependency verification failures

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
Björn Kautler,
hasunzo,
HYEON,
Hyunjoon Park,
HYUNJUN SON,
Jendrik Johannes,
Kirill Gavrilov,
Madalin Valceleanu,
Martin Bonnin,
Matthew Haughton,
Mikhail Polivakha,
Na Minhyeok,
Philip Wedemann,
Philipp Schneider,
Róbert Papp,
[Simon Marquis](https://redirect.github.com/S

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.