K2GO-358 fix(deps): raise transitive kotlin-stdlib to 2.1.0 (Snyk)

Constrain kotlin-stdlib to 2.1.0 in :app and :termux-core to clear Snyk
CVE-2020-29582. The stdlib is transitive via AndroidX; neither module has
Kotlin source. Version-only and forward-compatible, so no behavior change.

Author: luisguzman-adfa

controller/app/build.gradle

@@ -246,6 +246,9 @@ dependencies {
         implementation('com.squareup.okio:okio:1.17.6') {
             because 'Snyk CVE fix; transitive (was 1.17.5).'
         }
+        implementation('org.jetbrains.kotlin:kotlin-stdlib:2.1.0') {
+            because 'Snyk CVE-2020-29582 (removes deprecated kotlin.io temp-file helpers); transitive via AndroidX (was 1.9.24). No Kotlin source in this module.'
+        }
     }
 
     // ADFA-4533: GlitchTip (Sentry-compatible) crash reporting SDK.

controller/termux-core/build.gradle

@@ -114,6 +114,14 @@ if (System.getProperty("os.arch") == "aarch64"
 }
 
 dependencies {
+    // Security (Snyk): raise the transitive Kotlin stdlib. This module has no Kotlin
+    // source; the stdlib arrives through AndroidX. Version-only, no behavior change.
+    constraints {
+        implementation('org.jetbrains.kotlin:kotlin-stdlib:2.1.0') {
+            because 'Snyk CVE-2020-29582 (removes deprecated kotlin.io temp-file helpers); transitive via AndroidX (was 1.8.22).'
+        }
+    }
+
     implementation 'androidx.appcompat:appcompat:1.7.1'
     implementation 'com.google.android.material:material:1.13.0'