chore(deps): bump the gradle-dependencies group with 18 updates

[dependabot]

Bumps the gradle-dependencies group with 18 updates:

Package	From	To
com.bytedance.android:shadowhook	2.0.0	2.0.1
gradle-wrapper	9.3.1	9.6.1
org.jetbrains.kotlin:kotlin-stdlib	2.3.10	2.4.10
org.jetbrains.kotlin.android	2.3.10	2.4.10
io.github.libxposed:api	101.0.0	102.0.0
io.github.libxposed:service	101.0.0	102.0.0
io.github.libxposed:interface	101.0.0	102.0.0
org.luckypray:dexkit	2.0.7	2.2.0
androidx.constraintlayout:constraintlayout	2.2.1	2.2.2
androidx.swiperefreshlayout:swiperefreshlayout	1.1.0	1.2.0
androidx.lifecycle:lifecycle-livedata-ktx	2.10.0	2.11.0
com.google.android.material:material	1.13.0	1.14.0
com.google.code.gson:gson	2.13.2	2.14.0
com.google.guava:guava	33.5.0-jre	33.6.0-jre
org.jetbrains.kotlinx:kotlinx-serialization-json	1.10.0	1.11.0
com.android.application	8.13.2	9.3.1
com.google.devtools.ksp	2.3.5	2.3.10
org.jetbrains.kotlin.plugin.serialization	2.3.10	2.4.10

Updates com.bytedance.android:shadowhook from 2.0.0 to 2.0.1

Release notes

Sourced from com.bytedance.android:shadowhook's releases.

shadowhook v2.0.1

Announcement

1. Added compatibility with Android 17.

• Supported Android OS versions: Android 4.1 - 17 QPR1 Beta 4.

New Features

1. Added debugging information for hook/intercept operations.

• A "trace" data item has been added to the existing "operation records." This is a compact plain-text string recording debug info related to the current operation: such as the original and replacement instructions for inline hooks, as well as the addresses and instructions of various trampolines.
• Added the tools/record_parser.py script to parse "operation records" (including the new trace data); it supports parsing one or multiple records at a time.

Bug Fixes

1. Fixed an intermittent ANR bug.

• This bug was introduced in version 2.0.0.
• An ANR could occur if one thread was executing dlclose() while another was executing shadowhook_hook_sym_name() within the same process.

2. Fixed a bug where threads could not enter the shared-mode proxy function after executing pthread_key_clean_all().

• In the bionic pthread implementation, pthread_exit() is called during thread termination; this invokes pthread_key_clean_all(), which performs four rounds of TLS cleanup. After pthread_key_clean_all() returns, pthread_exit() proceeds to call functions like munmap().
• Shared-mode proxy functions rely on TLS to store context information, but Shadowhook's own TLS data was being cleared during the first round of pthread_key_clean_all(). If the proxy function was entered after this point, the original shared-mode logic could no longer function correctly. To minimize potential side effects, the previous approach was to skip the "proxy function" and call the "original function" directly.
• Scope of impact: In addition to the munmap() call within pthread_exit(), this also covers functions called by any TLS destructor functions executed during the final three rounds of TLS cleanup.

3. Fixed a bug where the target ELF might not be found on Android 6.0.

• On Android 6.0, if an APK has android:extractNativeLibs=false set, the ELF pathname returned by dl_iterate_phdr() does not include the !/lib/<ABI>/<lib_name> suffix. This caused the target ELF to be missed when using dl_iterate_phdr(). We fixed this issue by dynamically parsing the ELF .dynamic section in memory.

4. Fixed a bug in shared mode where proxy functions could not be entered after the stack exceeded 16 frames.

• This bug was introduced in version 2.0.0.
• In shared mode, to prevent recursive calls, each thread uses a stack structure to track proxy functions that have been entered but have not yet returned. In version 2.0.0, the stack size constant SH_HUB_STACK_FRAME_MAX was reduced from 127 to 16 for memory optimization; this violated an implicit API contract, preventing entry into proxy functions in certain scenarios. In the current version, SH_HUB_STACK_FRAME_MAX has been reverted to 127.

5. Fixed an intermittent memory corruption bug.

• This bug was introduced in version 2.0.0.
• When the gap size of the final memory page of an arm64 ELF executable segment fell within the range of [4, 16) bytes, the hooking process would overwrite the subsequent memory area, leading to subtle issues or crashes.

Improvements

1. Improved the execution speed of shadowhook_dlopen().

• We have implemented caching for frequently accessed system libraries such as libart.so. Subsequent calls to shadowhook_dlopen() for these libraries now retrieve information from the cache, eliminating the need to acquire the linker's global mutex lock.
• As a result of this optimization, APIs involving symbol lookup, such as shadowhook_hook_sym_name() also execute faster.

2. Improved concurrency for hook/intercept APIs.

... (truncated)

Commits

• 854c775 version 2.0.1
• 54e569c Upgrade gradle and cmake versions.
• 0aa7a93 changes for v2.0.1
• 325c024 do clang format
• 9e895ea Fix docs.
• 3d4046c Add caching to the information returned by xdl_open. This can speed up access...
• 407bee6 changes for v2.0.1
• 2348fd2 Define all clang format rules.
• 2acf775 improve docs
• 958ff32 improve docs
• Additional commits viewable in compare view

Updates gradle-wrapper from 9.3.1 to 9.6.1

Release notes

Sourced from gradle-wrapper's releases.

9.6.1

The Gradle team is excited to announce Gradle 9.6.1.

Here are the highlights of this release:

• Improved Configuration Cache hit rates
• Additional CLI rendering options
• Important project hierarchy lookup deprecations

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aharnish Solanki, Benedikt Johannes, Devendra Reddy Pennabadi, Dmytro Rodionov, Dreeam, Elías Hernández Rodríguez, Eng Zer Jun, FinlayRJW, Kamal Kansal, Marcono1234, Nelson Osacky, Philip Wedemann, Ravi, Roberto Perez Alcolea, Ryan Schmitt, Sebastian Schuberth, seunghun.ham, sk-reddy17, Suvrat Acharya, Vedant Madane.

Upgrade instructions

Switch your build to use Gradle 9.6.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.6.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.6.0

... (truncated)

Commits

• 309d128 Update fixed issues in release notes for 9.6.1 (#38328)
• 040a978 Update fixed issues in release notes for 9.6.1
• e0b8325 Restore --non-interactive flag instead of --interactive/--no-interactive (#38...
• 946f3e6 Limit explicit temp file permission setting to intended use case (#38300)
• 65f8224 Restore --non-interactive flag instead of --interactive/--no-interactive
• e346a5e Adjust CLI flag to configure non-interactive console (#38301)
• 9b53be9 Adjust CLI flag to configure non-interactive console
• 0dd3b53 Limit explicit temp file permission setting to intended use case
• 48e5ac2 Add reproducers
• 25598fd Prepare 9.6.1 patch release (#38293)
• Additional commits viewable in compare view

Updates org.jetbrains.kotlin:kotlin-stdlib from 2.3.10 to 2.4.10

Release notes

Sourced from org.jetbrains.kotlin:kotlin-stdlib's releases.

Kotlin 2.4.10

Changelog

Backend. Wasm

• KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

Compiler

• KT-86939 JVM: IllegalStateException "No value for annotation parameter" when using const val in nested Java annotation array argument
• KT-83766 K2: Wrong sourcePsi is set for SymbolPsiLiteral in SLC for annotation arguments referencing a const val
• KT-86728 Reified type inference: expected type not propagated into inline call inside lambda with elvis operator

Compose Compiler

• b/522127447 Compose Compiler 2.4: classes previously inferred stable now reported runtime/Uncertain

Klibs

• KT-86501 Native: IrTypeAliasSymbolImpl is already bound. Signature: kotlinx.datetime/Instant|null[0] on iosSimulatorArm64

Tools. CLI

• KT-86930 Introduce kotlinr in the Kotlin distribution

Tools. Gradle. BCV

• KT-87223 Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of 2.4.0

Tools. Gradle. JS

• KT-87304 jsBrowserTest fails with "exited with errors (exit code: 1)"
• KT-86057 kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall is up-to-date, causing kotlinStoreYarnLock to fail

Tools. Gradle. Multiplatform

• KT-87084 False positive warning for JS and Wasm compilations when CRI is enabled

Tools. Scripts

• KT-87076 @file:CompilerOptions("-jvm-target", ...) ignored in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target 1.8
• KT-86352 K2 scripting: FirResolvedTypeRef exception when resolving extension functions from imported scripts

Kotlin 2.4.10-RC2

Changelog

Backend. Wasm

• KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin:kotlin-stdlib's changelog.

2.4.10

Backend. Wasm

• KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

Compiler

• KT-86939 JVM: IllegalStateException "No value for annotation parameter" when using const val in nested Java annotation array argument
• KT-83766 K2: Wrong sourcePsi is set for SymbolPsiLiteral in SLC for annotation arguments referencing a const val
• KT-86728 Reified type inference: expected type not propagated into inline call inside lambda with elvis operator

Compose Compiler

• b/522127447 Compose Compiler 2.4: classes previously inferred stable now reported runtime/Uncertain

Klibs

• KT-86501 Native: IrTypeAliasSymbolImpl is already bound. Signature: kotlinx.datetime/Instant|null[0] on iosSimulatorArm64

Tools. CLI

• KT-86930 Introduce kotlinr in the Kotlin distribution

Tools. Gradle. BCV

• KT-87223 Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of 2.4.0

Tools. Gradle. JS

• KT-87304 jsBrowserTest fails with "exited with errors (exit code: 1)"
• KT-86057 kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall is up-to-date, causing kotlinStoreYarnLock to fail

Tools. Gradle. Multiplatform

• KT-87084 False positive warning for JS and Wasm compilations when CRI is enabled

Tools. Scripts

• KT-87076 @file:CompilerOptions("-jvm-target", ...) ignored in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target 1.8
• KT-86352 K2 scripting: FirResolvedTypeRef exception when resolving extension functions from imported scripts

2.4.0

Analysis API

• KT-83867 OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ repo
• KT-83723 [Analysis API] Enable experimental KDoc resolver by default
• KT-83388 Analysis API: properly support KMP in KotlinPackageProvider

... (truncated)

Commits

• 5687445 Add Changelog for 2.4.10-RC2
• ba30392 [Wasm] Support regenerate unchanged modules flag on KGP
• 6307e73 [Wasm] Implement Xwasm-IC-generate-unchanged-modules flag
• 39d7aee Add ChangeLog for 2.4.10-RC2
• a2956be [Gradle] Update karma.conf.js to use 'require(...)' instead plain strings
• 9b1361c [Gradle] KT-87223: Updated regression test
• a4c153a [Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat config
• bc04b90 Add ChangeLog for 2.4.10-RC
• bbcb94b [CRI] explicitly disable CRI generation for non-JVM targets to avoid false-po...
• 6c2c458 Scripting: fix jvmTarget processing from script annotations
• Additional commits viewable in compare view

Updates org.jetbrains.kotlin.android from 2.3.10 to 2.4.10

Release notes

Sourced from org.jetbrains.kotlin.android's releases.

Kotlin 2.4.10

Changelog

Backend. Wasm

• KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

Compiler

• KT-86939 JVM: IllegalStateException "No value for annotation parameter" when using const val in nested Java annotation array argument
• KT-83766 K2: Wrong sourcePsi is set for SymbolPsiLiteral in SLC for annotation arguments referencing a const val
• KT-86728 Reified type inference: expected type not propagated into inline call inside lambda with elvis operator

Compose Compiler

• b/522127447 Compose Compiler 2.4: classes previously inferred stable now reported runtime/Uncertain

Klibs

• KT-86501 Native: IrTypeAliasSymbolImpl is already bound. Signature: kotlinx.datetime/Instant|null[0] on iosSimulatorArm64

Tools. CLI

• KT-86930 Introduce kotlinr in the Kotlin distribution

Tools. Gradle. BCV

• KT-87223 Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of 2.4.0

Tools. Gradle. JS

• KT-87304 jsBrowserTest fails with "exited with errors (exit code: 1)"
• KT-86057 kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall is up-to-date, causing kotlinStoreYarnLock to fail

Tools. Gradle. Multiplatform

• KT-87084 False positive warning for JS and Wasm compilations when CRI is enabled

Tools. Scripts

• KT-87076 @file:CompilerOptions("-jvm-target", ...) ignored in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target 1.8
• KT-86352 K2 scripting: FirResolvedTypeRef exception when resolving extension functions from imported scripts

Kotlin 2.4.10-RC2

Changelog

Backend. Wasm

• KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin.android's changelog.

2.4.10

Backend. Wasm

• KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

Compiler

• KT-86939 JVM: IllegalStateException "No value for annotation parameter" when using const val in nested Java annotation array argument
• KT-83766 K2: Wrong sourcePsi is set for SymbolPsiLiteral in SLC for annotation arguments referencing a const val
• KT-86728 Reified type inference: expected type not propagated into inline call inside lambda with elvis operator

Compose Compiler

• b/522127447 Compose Compiler 2.4: classes previously inferred stable now reported runtime/Uncertain

Klibs

• KT-86501 Native: IrTypeAliasSymbolImpl is already bound. Signature: kotlinx.datetime/Instant|null[0] on iosSimulatorArm64

Tools. CLI

• KT-86930 Introduce kotlinr in the Kotlin distribution

Tools. Gradle. BCV

• KT-87223 Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of 2.4.0

Tools. Gradle. JS

• KT-87304 jsBrowserTest fails with "exited with errors (exit code: 1)"
• KT-86057 kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall is up-to-date, causing kotlinStoreYarnLock to fail

Tools. Gradle. Multiplatform

• KT-87084 False positive warning for JS and Wasm compilations when CRI is enabled

Tools. Scripts

• KT-87076 @file:CompilerOptions("-jvm-target", ...) ignored in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target 1.8
• KT-86352 K2 scripting: FirResolvedTypeRef exception when resolving extension functions from imported scripts

2.4.0

Analysis API

• KT-83867 OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ repo
• KT-83723 [Analysis API] Enable experimental KDoc resolver by default
• KT-83388 Analysis API: properly support KMP in KotlinPackageProvider

... (truncated)

Commits

• 5687445 Add Changelog for 2.4.10-RC2
• ba30392 [Wasm] Support regenerate unchanged modules flag on KGP
• 6307e73 [Wasm] Implement Xwasm-IC-generate-unchanged-modules flag
• 39d7aee Add ChangeLog for 2.4.10-RC2
• a2956be [Gradle] Update karma.conf.js to use 'require(...)' instead plain strings
• 9b1361c [Gradle] KT-87223: Updated regression test
• a4c153a [Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat config
• bc04b90 Add ChangeLog for 2.4.10-RC
• bbcb94b [CRI] explicitly disable CRI generation for non-JVM targets to avoid false-po...
• 6c2c458 Scripting: fix jvmTarget processing from script annotations
• Additional commits viewable in compare view

Updates io.github.libxposed:api from 101.0.0 to 102.0.0

Release notes

Sourced from io.github.libxposed:api's releases.

102.0.0

No release notes provided.

101.0.1

Update API specification and documents Remove kotlin-std dependency introduced by AGP

Commits

• 45e7c5c Update proguard-rules.pro
• c4acb6e RFC for API 102 (#62)
• edeb837 Bump to 101.0.1
• 532fa3b Add module scope doc
• 07bd715 Add more doc
• 7e5cae3 Add XposedInterface.API_101
• a8a8f9a Fix proguard rules
• b06aa86 Update javadoc for clarity on package loading callbacks
• eb63ec2 Disable built-in kotlin (#56)
• c2d7009 Integrate OSSRH upload command in deploy workflow
• Additional commits viewable in compare view

Updates io.github.libxposed:service from 101.0.0 to 102.0.0

Updates io.github.libxposed:interface from 101.0.0 to 102.0.0

Updates io.github.libxposed:service from 101.0.0 to 102.0.0

Updates io.github.libxposed:interface from 101.0.0 to 102.0.0

Updates org.luckypray:dexkit from 2.0.7 to 2.2.0

Release notes

Sourced from org.luckypray:dexkit's releases.

2.2.0

Changelog

Added

• Added composite matcher syntax for ClassMatcher, MethodMatcher, and FieldMatcher.
  • Supports allOf, anyOf, noneOf, and not for more expressive query composition.

Changed

• Improved overall query performance.
  • Optimized native query execution and matcher hot paths.
• Improved multi-threaded host-side usage.
  • Allows concurrent access to the same DexKitBridge.
  • Added shared scheduling and concurrency limiting for concurrent queries.
• Reduced native .so size.

Fixed

• Fixed incorrect findMethod behavior for methods without an actual dex definition.
  • findMethod now returns only methods that are actually defined in the loaded dex.
  • Previously, if method A invoked xxxView.setVisibility(I)V, findMethod { matcher { declaredClass = xxxView; name = "setVisibility" } } could incorrectly match that invoke target even though the method was not actually defined in xxxView or in the current dex.
  • Such invoke targets are no longer returned as regular findMethod results, but can still be used as addInvoke(...) conditions and may still appear in MethodData.invokes.

2.1.0

DexKit 2.1.0 发行说明

---

本版本新增了 DexKitCacheBridge，用于提供 DexKitBridge 的复用、查询结果缓存以及空闲释放能力，适合需要重复执行 DexKit 查询的场景。

重要信息

• 新增 DexKitCacheBridge
• 支持基于 appTag 的 bridge 复用
• 支持查询结果缓存与监听回调
• 支持空闲自动释放底层 DexKitBridge
• 当前 DexKitCacheBridge 被标记为 @DexKitExperimentalApi
• 后续版本中其 API 形态或行为仍可能调整

文档

• 中文文档：https://luckypray.org/DexKit/zh-cn/guide/cache-bridge.html

DexKit 2.1.0 Release Notes

---

This release introduces DexKitCacheBridge, which provides bridge reuse, query-result caching, and idle release on top of DexKitBridge. It is designed for scenarios where DexKit queries are executed repeatedly.

Important Information

• Added DexKitCacheBridge

... (truncated)

Commits

• ffa6c51 bump version to 2.2.0
• cd3898b docs(design): add composite matcher design draft
• 9d9a5fe refactor(query): remove composite support from StringMatcher
• 849fc16 test(dexkit-dev): update metrics assertions
• 4634fa8 feat(ci): package source jars
• 5764e36 feat(query): implement composite matcher
• 5226b73 feat(query): introduce native query scheduler and shared-pool execution
• 47a728f docs: fix inaccurate KDoc comments
• 1af187e fix(DexField): Missing @​JvmOverloads
• 7fb6739 [Core] Restore slicer size optimizations lost during upstream sync
• Additional commits viewable in compare view

Updates androidx.constraintlayout:constraintlayout from 2.2.1 to 2.2.2

Updates androidx.swiperefreshlayout:swiperefreshlayout from 1.1.0 to 1.2.0

Updates androidx.lifecycle:lifecycle-livedata-ktx from 2.10.0 to 2.11.0

Updates com.google.android.material:material from 1.13.0 to 1.14.0

Release notes

Sourced from com.google.android.material:material's releases.

1.14.0

New in 1.14.0!

• Expressive Themes (doc)
• Expressive Lists (doc)
• Expressive Button Styles (doc)
• Expressive Icon Button Styles (doc)
• Expressive Button Group Styles (doc)
• Expressive FAB Styles (doc)
• Expressive Top App Bar Styles (doc)
• Expressive Navigation Bar (BottomNavigationView) Styles (doc)
• Expressive Navigation Rail Styles (doc)
• Expressive Search Styles (doc)
• Expressive Progress Indicator Styles (doc)
• Expressive Slider Styles (doc)
• Emphasized Typescale (doc)

Important

• Required minSdkVersion is now 23 or higher, for Material and AndroidX.
• Library is now built with Android Gradle Plugin (AGP) 8.11.1 and Gradle 8.13.

Dependency Updates

Dependency	Previous version	New version
androidx.constraintlayout:constraintlayout	2.1.0	2.2.1
androidx.core:core	1.6.0	1.16.0
androidx.customview:customview	N/A	1.2.0
com.android.tools.build:gradle	8.7.3	8.11.1

Library Updates

• AppBar
  • Fixed the bug that setBackground will reset the internal MaterialShapeDrawable for lift-on-scroll feature. (1adc50110ed6491661f89aa535355b1480fac73a)
  • Add support for navigation button with circle background (015e0534e1a6205224097f258102f913832f99ed)
  • Improve keyboard navigation in TopAppBar catalog demos (98a73a61d272d3e38ee87dd4b322f7787c374a9c)
  • Removed special key shortcut and keyboard navigation cluster for top app bar for correct keyboard navigation a11y. (ee52adbf051f744f2345ec5b7f4ab4df3b101d4d)
  • Updated ripple color on actions in M3 toolbar. (3b971c9fe9d6ae9a175d96a448a2e740fa97996f)
• BottomAppBar
  • Remove special key shortcut and keyboard navigation cluster for bottom app bar for correct keyboard navigation a11y. (5c73d7a9284fb8e8409452bb95751bf70912acfd)
• BottomNavigationView
  • Fix navigation item layout in non-compact windows (78189012dada1fae4516eaccab7b8f75c481aa73)
• BottomSheet
  • Deprecated enableEdgeToEdge for bottom sheet dialogs on API 35+. (603f1ef9d5223fc06fa432c4175473eda2138330)
  • Prevent ACTION_DOWN events on the BottomSheetHandleDragView from setting touchingScrollChild to true. (af7f254bf660704368d46e630d34a81c479fa1c7)
  • Fixed keyboard animation on Android 14 (a0b4dfa8769f98851efe97569c900f75eb0d5ef2)
  • Fixed crash when protections are set before setContentView is called (d2119098489f6f6b55d77f2c7966b8ddf16c90ed)
  • Added half-expanded state description for accessibility (95e7b452088d88005982a3f29ec212ef7ee8696d)
  • Added support for androidx.core ProtectionLayout API and update dependency to 1.16 (e7f9f639d2f4a3b9f619ce704df82cbb14e49222)
  • Make handle respond to keyboard input (1ee07687af2c4c84f515e45c1b809d65aeecbbf4)
  • Delete duplicate "Handling insets and fullscreen" section (5e7e8238f7be448af6b4db4b2ad6128737c0bc50)
  • Added support for Nested Scrolling with multiple nested scroll children. (4e4e8f3388beb7e82a87cb67142aa34444a79740)
  • Make behavior_draggableOnNestedScroll public (a67afdff0d207239d0f427a37e44074936db3166)

... (truncated)

Commits

• 66c334b [Release] Update library version to 1.14.0 stable
• 12e57b5 [Focus Rings] Add setters and getters for stroke widths and inner inset
• f4652d6 [NavigationView] Improve focus saving when opening NavigationView
• 14b9ac9 [Focus Rings] Add setters for outer and inner stroke colors and for refreshin...
• d6de1da [A11y][BottomSheet] Auto-expand when a focused view is off-screen in non-touc...
• 41cfb65 [A11y][NavigationView] Request and restore focus when opened and closed in Dr...
• 8f63e94 [Catalog] Fix lift on scroll glitchiness in All Components demo
• 80aa0cc [Release] Update library version to 1.14.0-rc01
• fd44c9d [Button] [SplitButton] Fix inset and optical centering issue for SplitButton ...
• e6ae416 [SearchView] Make sure IME is hidden when EditText loses focus
• Additional commits viewable in compare view

Updates com.google.code.gson:gson from 2.13.2 to 2.14.0

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.14.0

What's Changed

• Add type adapters for java.time classes by @​eamonnmcmanus in google/gson#2948

  When the java.time API is available, Gson automatically can read and write instances of classes like Instant and Duration. The format it uses essentially freezes the JSON representation that ReflectiveTypeAdapterFactory established by default, based on the private fields of java.time classes. That's not a great representation, but it is understandable. Changing it to anything else would break compatibility with systems that are expecting the current format.

  With this change, Gson no longer tries to access private fields of these classes using reflection. So it is no longer necessary to run with --add-opens for these classes on recent JDKs.

• Remove com.google.gson.graph by @​eamonnmcmanus in google/gson#2990.

  This package was not part of any released artifact and depended on Gson internals in potentially problematic ways.

• Validate that strings being parsed as integers consist of ASCII characters by @​eamonnmcmanus in google/gson#2995

  Previously, strings could contain non-ASCII Unicode digits and still be parsed as integers. That's inconsistent with how JSON numbers are treated.

• Fix duplicate key detection when first value is null by @​andrewstellman in google/gson#3006

  This could potentially break code that was relying on the incorrect behaviour. For example, this JSON string was previously accepted but will no longer be: {"foo": null, "foo": bar}.

• Remove Serializable from internal Type implementation classes. by @​eamonnmcmanus in google/gson#3011

  The nested classes ParameterizedTypeImpl, GenericArrayTypeImpl, and WildcardTypeImpl in GsonTypes are implementations of the corresponding types (without Impl) in java.lang.reflect. For some reason, they were serializable, even though the java.lang.reflect implementations are not. Having unnecessarily serializable classes could conceivably have been a security problem if they were part of a larger exploit using serialization. (We do not consider this a likely scenario and do not suggest that you need to update Gson just to get this change.)

• Add LegacyProtoTypeAdapterFactory. by @​eamonnmcmanus in google/gson#3014

  This is not part of any released artifact, but may be of use when trying to fix code that is currently accessing the internals of protobuf classes via reflection.

• Make AppendableWriter do flush and close if delegation object supports by @​MukjepScarlet in google/gson#2925

Other less visible changes

• Add default capacity to EnumTypeAdapter maps by @​MukjepScarlet in google/gson#2959
• refactor: move derived adapters from Gson to TypeAdapters by @​MukjepScarlet in google/gson#2951
• Optimize new Gson() by @​MukjepScarlet in google/gson#2864

New Contributors

• @​ThirdGoddess made their first contribution in google/gson#2944
• @​lmj798 made their first contribution in google/gson#2988
• @​Eng-YasminKotb made their first contribution in google/gson#3005
• @​andrewstellman made their first contribution in google/gson#3006

Full Changelog: google/gson@gson-parent-2.13.2...gson-parent-2.14.0

Commits

• 3ff35d6 [maven-release-plugin] prepare release gson-parent-2.14.0
• a3024fd Bump the maven group with 13 updates (#3002)
• 5689ffe Bump the github-actions group across 1 directory with 3 updates (#3018)
• 48db33c Add LegacyProtoTypeAdapterFactory. (#3014)
• 53d703e Update outdated comment regarding serializable types (#3012)
• 0189b72 Remove Serializable from internal Type implementation classes. (#3011)
• f4d371d Fix duplicate key detection when first value is null (#3006)
• 27d9ba1 Fix typo in README (JPMS dependencies section) (#3005)
• 1fa9b7a Validate that strings being parsed as integers consist of ASCII characters (#...
• b7d5954 Add iterator fail-fast tests for LinkedTreeMap.clear() (#2992)
• Additional commits viewable in compare view

Updates com.google.guava:guava from 33.5.0-jre to 33.6.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.6.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.6.0-jre</version>
  <!-- or, for Android: -->
  <version>33.6.0-android</version>
</dependency>

Jar files

• 33.6.0-jre.jar
• 33.6.0-android.jar

Guava requires one runtime dependency, which you can download here:

• failureaccess-1.0.3.jar

Javadoc

• 33.6.0-jre
• 33.6.0-android

JDiff

• 33.6.0-jre vs. 33.5.0-jre
• 33.6.0-android vs. 33.5.0-android
• 33.6.0-android vs. 33.6.0-jre

Changelog

• Migrated some classes from finalize() to PhantomReference in preparation for the removal of finalization. (786b619dd6, 7c6b17c, aeef90988d)
• cache: Deprecated CacheBuilder APIs that use TimeUnit in favor of those that use Duration. (73f8b0bb84)
• collect: Added toImmutableSortedMap collectors that use the natural comparator. (64d70b9f94)
• collect: Changed ConcurrentHashMultiset, ImmutableMultimap, and TreeMultiset deserialization to avoid mutating final fields. In extremely unlikely scenarios in which an instance of that type contains an object that refers back to that instance, this could lead to a broken instance that throws NullPointerException when used. (8240c7e596, 046468055f)
• graph: Removed @Beta from all APIs in the package. (dae9566b73)
• graph: Added support to Graphs.transitiveClosure() for different strategies for adding self-loops. (2e13df25b2)
• graph: Added an asNetwork() view to Graph and ValueGraph. (909c593c61)
• hash: Added BloomFilter.serializedSize(). (df9bcc251a)
• net: Added HttpHeaders.CDN_CACHE_CONTROL. (75331b5030)

Commits

• See full diff in compare view

Updates org.jetbrains.kotlinx:kotlinx-serialization-json from 1.10.0 to 1.11.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's releases.

1.11.0

This release is based on Kotlin 2.3.20 and provides a new Json exceptions API and some bugfixes and improvements.

Expose Json exceptions structure

To make working with exceptions easier and providing proper error codes in e.g., REST APIs, classes JsonException, JsonDecodingException, and JsonEncodingException are now public. They have relevant public properties, such as shortMessage, path, offset, and others. This API is currently experimental, and we're going to improve it further in the subsequent releases. See the linked issues for the details: #1930, #1877.

Ability to hide user input from exception messages for security/privacy reasons.

Historically, exception messages in kotlinx.serialization often included the input Json itself for debuggability reason. Such behavior may pose additional challenges for logging, analytics, and other systems, since a system is not always allowed to store user data due to privacy/security reasons, which imposes additional sanitation logic. To address this issue, a new property exceptionsWithDebugInfo is added to JsonConfiguration. Disable it to hide user input from exception messages. IMPORTANT: This behavior will be enabled by default when this property becomes stable. See #2590 for more details.

Bugfixes and improvements

• CBOR: Relax value range check when decoding numbers (#3167)
• Use a specialized writeDecimalLong method for IO stream integrations in Json (#3152)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's changelog.

1.11.0 / 2026-04-10

This release is based on Kotlin 2.3.20 and provides new Json exceptions API and some bugfixes and improvements.

Expose Json exceptions structure

To make working with exceptions easier and providing proper error codes in e.g., REST APIs, classes JsonException, JsonDecodingException, and JsonEncodingException are now public. They have relevant public properties, such as shortMessage, path, offset, and others. This API is currently experimental, and we're going to improve it further in the subsequent releases. See the linked issues for the details: #1930, #1877.

Ability to hide user input from exception messages for security/privacy reasons.

Historically, exception messages in kotlinx.serialization often included the input Json itself for debuggability reason. Such behavior may pose additional challenges for logging, analytics, and other systems, since a system is not always allowed to store user data due to privacy/security reasons, which imposes additional sanitation logic. To address this issue, a new property exceptionsWithDebugInfo is added to JsonConfiguration. Disable it to hide user input from exception messages. IMPORTANT: This behavior will be enabled by default when this property becomes stable. See #2590 for more details.

Bugfixes and improvements

• CBOR: Relax value range check when decoding numbers (#3167)
• Use a specialized writeDecimalLong method for IO stream integrations in Json (#3152)

Commits

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.