build(deps): bump the kotlin group across 1 directory with 3 updates

[dependabot]

Bumps the kotlin group with 3 updates in the / directory: org.jetbrains.kotlinx:kotlinx-serialization-json, org.jetbrains.kotlinx:kotlinx-io-core and org.jetbrains.kotlinx:kotlinx-coroutines-core.

Updates org.jetbrains.kotlinx:kotlinx-serialization-json from 1.8.1 to 1.11.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's releases.

1.11.0

This release is based on Kotlin 2.3.20 and provides a new Json exceptions API and some bugfixes and improvements.

Expose Json exceptions structure

To make working with exceptions easier and providing proper error codes in e.g., REST APIs, classes JsonException, JsonDecodingException, and JsonEncodingException are now public. They have relevant public properties, such as shortMessage, path, offset, and others. This API is currently experimental, and we're going to improve it further in the subsequent releases. See the linked issues for the details: #1930, #1877.

Ability to hide user input from exception messages for security/privacy reasons.

Historically, exception messages in kotlinx.serialization often included the input Json itself for debuggability reason. Such behavior may pose additional challenges for logging, analytics, and other systems, since a system is not always allowed to store user data due to privacy/security reasons, which imposes additional sanitation logic. To address this issue, a new property exceptionsWithDebugInfo is added to JsonConfiguration. Disable it to hide user input from exception messages. IMPORTANT: This behavior will be enabled by default when this property becomes stable. See #2590 for more details.

Bugfixes and improvements

• CBOR: Relax value range check when decoding numbers (#3167)
• Use a specialized writeDecimalLong method for IO stream integrations in Json (#3152)

1.10.0

This release is based on Kotlin 2.3.0 and contains all of the changes from 1.10.0-RC. The only additional change is a fix for ProtoBuf packing of Kotlin unsigned types (#3079). Big thanks to KosmX for contributing the fix.

For your convenience, the changelog for 1.10.0-RC is duplicated below:

Stabilization of APIs

kotlinx-serialization 1.10 and subsequent releases will be focused on stabilization of existing APIs. The following APIs and configuration options are no longer experimental because they're widely used without any known major issues:

• Json configuration options: decodeEnumsCaseInsensitive, allowTrailingComma, allowComments, and prettyPrintIndent. (#3100)
• @EncodeDefault annotation and its modes. (#3106)
• JsonUnquotedLiteral constructor function (#2900)
• JsonPrimitive constructor function overloads that accept unsigned types. (#3117)
• JSON DSL functions on JsonElement with Nothing? overloads. (#3117)

Readiness for return value checker

Kotlin 2.3.0 introduces a new feature aimed at helping you to catch bugs related to the accidentally ignored return value of the function. kotlinx-serialization 1.10.0-RC code is fully marked for this feature, meaning that you can get warnings for unused function calls like Json.encodeToString(...). To get the warnings, the feature has to be enabled in your project as described here.

Polymorphism improvements

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's changelog.

1.11.0 / 2026-04-10

This release is based on Kotlin 2.3.20 and provides new Json exceptions API and some bugfixes and improvements.

Expose Json exceptions structure

To make working with exceptions easier and providing proper error codes in e.g., REST APIs, classes JsonException, JsonDecodingException, and JsonEncodingException are now public. They have relevant public properties, such as shortMessage, path, offset, and others. This API is currently experimental, and we're going to improve it further in the subsequent releases. See the linked issues for the details: #1930, #1877.

Ability to hide user input from exception messages for security/privacy reasons.

Historically, exception messages in kotlinx.serialization often included the input Json itself for debuggability reason. Such behavior may pose additional challenges for logging, analytics, and other systems, since a system is not always allowed to store user data due to privacy/security reasons, which imposes additional sanitation logic. To address this issue, a new property exceptionsWithDebugInfo is added to JsonConfiguration. Disable it to hide user input from exception messages. IMPORTANT: This behavior will be enabled by default when this property becomes stable. See #2590 for more details.

Bugfixes and improvements

• CBOR: Relax value range check when decoding numbers (#3167)
• Use a specialized writeDecimalLong method for IO stream integrations in Json (#3152)

1.10.0 / 2026-01-21

This release is based on Kotlin 2.3.0 and contains all of the changes from 1.10.0-RC. The only additional change is a fix for ProtoBuf packing of Kotlin unsigned types (#3079). Big thanks to KosmX for contributing the fix.

For your convenience, the changelog for 1.10.0-RC is duplicated below:

Stabilization of APIs

kotlinx-serialization 1.10 and subsequent releases will be focused on stabilization of existing APIs. The following APIs and configuration options are no longer experimental because they're widely used without any known major issues:

• Json configuration options: decodeEnumsCaseInsensitive, allowTrailingComma, allowComments, and prettyPrintIndent. (#3100)
• @EncodeDefault annotation and its modes. (#3106)
• JsonUnquotedLiteral constructor function (#2900)
• JsonPrimitive constructor function overloads that accept unsigned types. (#3117)
• JSON DSL functions on JsonElement with Nothing? overloads. (#3117)

Readiness for return value checker

... (truncated)

Commits

• 6956af2 Prepare 1.11 release
• 390d84c Merge remote-tracking branch 'origin/master' into dev
• 431fe2d Use local repo for publishing (#3171)
• 05c12b6 Add usage attribute to "testRepositories" configuration
• a4e1f08 Bump Kover version to 0.9.8 release (#3174)
• 304e858 Expose Json exceptions structure (#3145)
• 4a0338e Included G Play SDK verification file for core-jvm (#3169)
• 421f64c CBOR: Relax value range check when decoding numbers (#3167)
• 85a4f12 KT-84955: mark apple x64 tagets as deprecated error
• bd38b0e Remove dead code
• Additional commits viewable in compare view

Updates org.jetbrains.kotlinx:kotlinx-io-core from 0.5.4 to 0.9.1

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-io-core's releases.

v0.9.1

Features

• Dropped an old workaround for unsupported Android version #508
• Reimplemented module loading for WasmJs #506

Thanks to @​ilgonmic and @​MohammedKHC for their contributions!

v0.9.0

Features

• Updated Kotlin version to 2.3 and enabled the unused return value checker
• Added SystemLineSeparator property which returns a line separator for the underlying platform #448
• Updated Dokka version (#449) and filled Implementaion-* attributes in the JAR file manifests (#489)

Bugfixes

• Reimplemented FileSystem implementation for Wasm-WASI to correctly work with recent NodeJS versions #484

Thanks to @​whyoleg for the contribution!

v0.8.2

Bugfixes

• Fixed the issue with Webpack not being able to process module import introduced in 0.8.1 #483

v0.8.1

[!CAUTION] This release causes an error when compiling some Wasm/JS projects: Kotlin/kotlinx-io#483 Consider updating to the 0.8.2 instead.

This release addresses an issue with Wasm/JS, where the require function will no longer be available starting from Kotlin 2.3.20 (and it was never guaranteed to be available in Wasm/JS).

The release also includes some infrastructure changes.

Bugfixes

• Fixed the issue with the require-function that Wasm/JS-projects migrating to future versions of Kotlin might face #481

Thanks to @​alex28sh, @​sargunv, and @​iseki0 for contributions!

v0.8.0

Features

• Updated Kotlin version to 2.2, Dokka to 2.0.0 and also updated few other dependencies #455, #432, #442, #456
• Increased deprecation level for kotlinx.io.files.Path.source and kotlinx.io.files.Path.sink to ERROR #457

Bugfixes

• Fixed ArrayIndexOutOfBoundsException thrown from okio.Sink.asKotlinxIoRawSink #453

Thanks to @​whyoleg and @​revonateB0T for their contributions!

v0.7.0

Features

• Implemented Okio adapters shipped in a kotlinx-io-okio module #178
• Bumped up the Kotlin version to 2.1, as well as versions of some dependencies #426

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-io-core's changelog.

0.9.1

Published 26 June 2026

Features

• Dropped an old workaround for unsupported Android version #508
• Reimplemented module loading for WasmJs #506

0.9.0

Published 20 February 2026

Features

• Updated Kotlin version to 2.3 and enabled the unused return value checker
• Added SystemLineSeparator property which returns a line separator for the underlying platform #448
• Updated Dokka version (#449) and filled Implementaion-* attributes in the JAR file manifests (#489)

Bugfixes

• Reimplemented FileSystem implementation for Wasm-WASI to correctly work with recent NodeJS versions #484

0.8.2

Published 24 November 2025

Bugfixes

• Fixed the issue with Webpack not being able to process module import introduced in 0.8.1 #483

0.8.1

Published 21 November 2025

This release addresses an issue with Wasm/JS, where the require function will no longer be available starting from Kotlin 2.3.20 (and it was never guaranteed to be available in Wasm/JS).

The release also includes some infrastructure changes.

Bugfixes

• Fixed the issue with the require-function that Wasm/JS-projects migrating to future versions of Kotlin might face #481

0.8.0

Published 24 June 2025

Features

• Updated Kotlin version to 2.2, Dokka to 2.0.0 and also updated few other dependencies #455, #432, #442, #456
• Increased deprecation level for kotlinx.io.files.Path.source and kotlinx.io.files.Path.sink to ERROR #457

Bugfixes

• Fixed ArrayIndexOutOfBoundsException thrown from okio.Sink.asKotlinxIoRawSink #453

0.7.0

Published 26 February 2025

Features

• Implemented Okio adapters shipped in a kotlinx-io-okio module #178

... (truncated)

Commits

• 362bdc3 Release 0.9.1
• e5ae2f0 Merge branch 'develop'
• 2997caf Drop workaround for Android 4.2.2 getsockname bug (#508)
• a1d6bd9 Use IIFE to asynchronously load a module instead of globalThis (#506)
• d53d449 Update feedback channels in contributing guidelines
• 34f1579 Merge branch 'develop'
• 82b77b1 Release 0.9.0
• b9a3d11 Update Dokka to 2.2.0-Beta and fix unresolved links (#499)
• a25c28e Expose a platform-specific line separator (#449)
• dd71bc1 Update Kotlin to 2.3 and enable RVC (#491)
• Additional commits viewable in compare view

Updates org.jetbrains.kotlinx:kotlinx-coroutines-core from 1.9.0 to 1.11.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-coroutines-core's releases.

1.11.0

Various

• Kotlin was updated to 2.2.20 (#4545).
• Improved the published jar files (#3842, #4599).
• Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

Breaking changes and deprecations

• Moved Promise-related functions from JS and Wasm/JS to the new web target. On Wasm/JS, this is a breaking change. Before the change, Promise on Wasm/JS could work with arbitrary Kotlin types, but now, only JsAny subtypes are accepted (#4563).
• Changed handling of coroutine exceptions that can't be propagated on JS and Wasm/JS. B efore, exceptions were logged, but now, they are reported to the JS runtime (#4451, #4631).
• Deprecated using CoroutineDispatcher as the coroutine context key; now, ContinuationInterceptor has to be used instead (#4333).
• Advanced the deprecation levels on kotlinx-coroutines-test APIs (#4604).
• Added lint functions that mark passing a Job to coroutine builders as deprecated (#4435).

Bug fixes and improvements

• Added a callsInPlace(EXACTLY_ONCE) contract to runBlocking in code shared between JVM and Native (#4368).
• Added a callsInPlace(EXACTLY_ONCE) contract to suspendCancellableCoroutine (#4574).
• Fixed flowOn incorrectly handling ThreadContextElement updates (#4403).
• Fixed exceptions in user-supplied Thread.UncaughtExceptionHandler instances causing the internal coroutines machinery to fail (#4516).
• Fixed CoroutineDispatcher.asScheduler in the RxJava integration not cancelling outstanding work when a Worker gets cancelled, which led to memory leaks in some scenarios (#4615).
• Fixed SharedFlow entering an invalid state when a subscriber and an emitter are cancelled simultaneously (#4583).
• Fixed an R8 optimization leading to shareIn/stateIn coroutines getting garbage-collected (#4646). Thanks, @​solevic!

Small additions

• Added CompletableDeferred.asDeferred for obtaining a read-only Deferred view (#4408).
• Added SharedFlow.asFlow for obtaining a Flow view with hidden hot flow semantics (#4530). Thanks, @​g000sha256!
• Added a StateFlow.collectLatest overload returning Nothing to assist with finding unreachable code (#4454).
• Added ReceiveChannel.consumeTo for consuming a ReceiveChannel into a MutableCollection (#4520).
• Added a StateFlow<T>.onSubscription overload returning a StateFlow<T>, similar to SharedFlow<T>.onSubscription returning SharedFlow<T> (#4275). Thanks, @​xit0c!
• Added terminal Flow operators for collecting a Flow to a Map (#1541).

Changelog relative to version 1.11.0

No changes, only the version is increased.

1.11.0-rc02

Restored binary compatibility with 1.10.2 and older versions on Wasm/JS for usages of Promise-related functions (#4661).

1.11.0-rc01

Various

• Kotlin was updated to 2.2.20 (#4545).
• Improved the published jar files (#3842, #4599).
• Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

Breaking changes and deprecations

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-coroutines-core's changelog.

Version 1.11.0

Various

• Kotlin was updated to 2.2.20 (#4545).
• Improved the published jar files (#3842, #4599).
• Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

Breaking changes and deprecations

• Moved Promise-related functions from JS and Wasm/JS to the new web target. On Wasm/JS, this is a breaking change. Before the change, Promise on Wasm/JS could work with arbitrary Kotlin types, but now, only JsAny subtypes are accepted (#4563).
• Changed handling of coroutine exceptions that can't be propagated on JS and Wasm/JS. Before, exceptions were logged, but now, they are reported to the JS runtime (#4451, #4631).
• Deprecated using CoroutineDispatcher as the coroutine context key; now, ContinuationInterceptor has to be used instead (#4333).
• Advanced the deprecation levels on kotlinx-coroutines-test APIs (#4604).
• Added lint functions that mark passing a Job to coroutine builders as deprecated (#4435).

Bug fixes and improvements

• Added a callsInPlace(EXACTLY_ONCE) contract to runBlocking in code shared between JVM and Native (#4368).
• Added a callsInPlace(EXACTLY_ONCE) contract to suspendCancellableCoroutine (#4574).
• Fixed flowOn incorrectly handling ThreadContextElement updates (#4403).
• Fixed exceptions in user-supplied Thread.UncaughtExceptionHandler instances causing the internal coroutines machinery to fail (#4516).
• Fixed CoroutineDispatcher.asScheduler in the RxJava integration not cancelling outstanding work when a Worker gets cancelled, which led to memory leaks in some scenarios (#4615).
• Fixed SharedFlow entering an invalid state when a subscriber and an emitter are cancelled simultaneously (#4583).
• Fixed an R8 optimization leading to shareIn/stateIn coroutines getting garbage-collected (#4646). Thanks, @​solevic!

Small additions

• Added CompletableDeferred.asDeferred for obtaining a read-only Deferred view (#4408).
• Added SharedFlow.asFlow for obtaining a Flow view with hidden hot flow semantics (#4530). Thanks, @​g000sha256!
• Added a StateFlow.collectLatest overload returning Nothing to assist with finding unreachable code (#4454).
• Added ReceiveChannel.consumeTo for consuming a ReceiveChannel into a MutableCollection (#4520).
• Added a StateFlow<T>.onSubscription overload returning a StateFlow<T>, similar to SharedFlow<T>.onSubscription returning SharedFlow<T> (#4275). Thanks, @​xit0c!
• Added terminal Flow operators for collecting a Flow to a Map (#1541).

Changelog relative to version 1.11.0

No changes, only the version is increased.

Version 1.11.0-rc02

Restored binary compatibility with 1.10.2 and older versions on Wasm/JS for usages of Promise-related functions (#4661).

Version 1.11.0-rc01

Various

• Kotlin was updated to 2.2.20 (#4545).
• Improved the published jar files (#3842, #4599).
• Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

... (truncated)

Commits

• 8564f65 Version 1.11.0
• a4c6af9 Merge remote-tracking branch 'origin/master' into develop
• ef917b4 KT-84955: mark apple x64 tagets as deprecated error (#4645)
• 5ebc421 Update the release procedure description (#4670)
• 95f46a0 Remove old maven repository settings (#4672)
• b4f4f0a Fix package name of ToMapCollectionSamplesTest. (#4674)
• 86738dc Added templates to the issue creation wizard (#4654)
• 330fcc2 Version 1.11.0-rc02
• e31cef6 Merge remote-tracking branch 'origin/master' into develop
• dc6e9f6 Restore Promise-related functions on Wasm/JS as HIDDEN (#4661)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.