build(deps): Bump the minor-patch group with 14 updates

[dependabot]

Bumps the minor-patch group with 14 updates:

Package	From	To
gradle-wrapper	9.3.0	9.5.1
org.jetbrains.androidx.lifecycle:lifecycle-runtime-compose	2.9.6	2.10.0
org.jetbrains.androidx.lifecycle:lifecycle-viewmodel	2.9.6	2.10.0
org.jetbrains.kotlinx:kotlinx-coroutines-swing	1.10.2	1.11.0
io.ktor:ktor-network	3.4.0	3.5.0
org.jetbrains.kotlinx:kotlinx-serialization-json	1.10.0	1.11.0
com.google.protobuf:protobuf-java-util	4.33.4	4.35.1
org.jetbrains.kotlin.plugin.compose	2.3.0	2.4.0
org.jetbrains.kotlin.jvm	2.3.0	2.4.0
org.jetbrains.kotlin.multiplatform	2.3.0	2.4.0
org.jetbrains.kotlin.plugin.serialization	2.3.0	2.4.0
org.jetbrains.compose	1.10.0	1.11.1
com.google.protobuf	0.9.6	0.10.0
com.diffplug.spotless	8.2.0	8.7.0

Updates gradle-wrapper from 9.3.0 to 9.5.1

Release notes

Sourced from gradle-wrapper's releases.

9.5.1

The Gradle team is excited to announce Gradle 9.5.1.

Here are the highlights of this release:

• Task provenance in reports and failure messages
• Type-safe accessors for precompiled Kotlin Settings plugins

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: atm1020, mataha, Adam, Attila Kelemen, Benedikt Ritter, Björn Kautler, Caro Silva Rode, CHANHAN, Dmitry Nezavitin, Eng Zer Jun, KugelLibelle, Madalin Valceleanu, Markus Gaisbauer, Oliver Kopp, Philip Wedemann, ploober, Roberto Perez Alcolea, Rohit Anand, Suvrat Acharya, Ujwal Suresh Vanjare, Victor Merkulov

Upgrade instructions

Switch your build to use Gradle 9.5.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.5.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.5.0

... (truncated)

Commits

• fd78213 Update Documentation Infrastructure: Fix scrolling issue in user manual (#37861)
• 7758437 fix scroll
• 2fd605f Only try to run as worker thread in DefaultBuildOperationQueue (#37845)
• af69849 Release notes for Gradle 9.5.1 (#37853)
• f4d9d03 Release notes for Gradle 9.5.1
• 01eda3a Address review feedback on worker-lease retry changes
• 7024e15 Revert enrich file visitor with size info on release branch (#37848)
• d51476f Fix tryRunAsWorkerThread null-return test to match contract
• 090ebab Revert "Add getLength() to FilePropertyVisitor.VisitState"
• bceab24 Revert "Fix annotation"
• Additional commits viewable in compare view

Updates org.jetbrains.androidx.lifecycle:lifecycle-runtime-compose from 2.9.6 to 2.10.0

Changelog

Sourced from org.jetbrains.androidx.lifecycle:lifecycle-runtime-compose's changelog.

1.12.0-alpha02 (June 2026)

Changes since 1.12.0-alpha01

Migration Notes

Desktop

• If your ComposePanel, ComposeWindow or ComposeDialog content can not be measured in infinite constraints (e.g. Modifier.verticalScroll) on a certain axis, you should provide a fixed size for that axis by calling ComposePanel.setPreferredSize with a Dimension that has a fixed size (on that axis) #3055

Features

iOS

• Add the 'Select' item on the context menu for the text fields #3081
• Add NSLocale.toComposeLocale() API to create Locale from platform NSLocale #3103

Desktop

• It is now possible to control the way ComposePanel, ComposeWindow and ComposeDialog compute their minimum (only ComposePanel), preferred and maximum (only ComposePanel) sizes, by setting the corresponding property to a Dimension with a special UNSPECIFIED_DIMENSION_VALUE on the axis that should be determined by the content #3055
• The default ProGuard version is set to 7.8.0 #5613
• (prerelease fix) Bump Compose Hot Reload to 1.2.0-alpha01 #5613

Web

• Noto fonts is being loaded automatically for unresolved symbols on Web #3010

Fixes

Multiple Platforms

• Fix DatePickerDialog's confirmButton and dismissButton display order on iOS, Desktop, Kotlin/JS and Kotlin/Wasm not consistent with Material Design guidance #3048
• Fixed a deep bug in matrix computation which caused pointer hit-paths to not be computed correctly sometimes, leading to elements that could not be interacted with via the mouse or touch #3053
• Fixed a crash in RTL text cursor positioning when paragraphs contain newlines followed by emojis or combining marks #3056

iOS

• Fix application build when using old Xcode 16 SDK #3054
• Fix an issue where the Compose does not receive key events when initially created #3066
• Fix issue when BasicTextField does not show context menu after long press #3080
• Fix symbols duplication on keyboard paste hotkeys #3067
• Focusable nodes inside merged semantics remain focusable #3089
• Fix content jump at the beginning of a swipe back gesture #3101

Web

• Fix an unexected crash in A11Y: Node $id not found #3057
• Fixed pointer state remaining active when the browser cancels a pointer via pointercancel (system gestures, palm rejection, device disconnect, etc.) #3036

Resources

... (truncated)

Commits

• See full diff in compare view

Updates org.jetbrains.androidx.lifecycle:lifecycle-viewmodel from 2.9.6 to 2.10.0

Changelog

Sourced from org.jetbrains.androidx.lifecycle:lifecycle-viewmodel's changelog.

1.12.0-alpha02 (June 2026)

Changes since 1.12.0-alpha01

Migration Notes

Desktop

• If your ComposePanel, ComposeWindow or ComposeDialog content can not be measured in infinite constraints (e.g. Modifier.verticalScroll) on a certain axis, you should provide a fixed size for that axis by calling ComposePanel.setPreferredSize with a Dimension that has a fixed size (on that axis) #3055

Features

iOS

• Add the 'Select' item on the context menu for the text fields #3081
• Add NSLocale.toComposeLocale() API to create Locale from platform NSLocale #3103

Desktop

• It is now possible to control the way ComposePanel, ComposeWindow and ComposeDialog compute their minimum (only ComposePanel), preferred and maximum (only ComposePanel) sizes, by setting the corresponding property to a Dimension with a special UNSPECIFIED_DIMENSION_VALUE on the axis that should be determined by the content #3055
• The default ProGuard version is set to 7.8.0 #5613
• (prerelease fix) Bump Compose Hot Reload to 1.2.0-alpha01 #5613

Web

• Noto fonts is being loaded automatically for unresolved symbols on Web #3010

Fixes

Multiple Platforms

• Fix DatePickerDialog's confirmButton and dismissButton display order on iOS, Desktop, Kotlin/JS and Kotlin/Wasm not consistent with Material Design guidance #3048
• Fixed a deep bug in matrix computation which caused pointer hit-paths to not be computed correctly sometimes, leading to elements that could not be interacted with via the mouse or touch #3053
• Fixed a crash in RTL text cursor positioning when paragraphs contain newlines followed by emojis or combining marks #3056

iOS

• Fix application build when using old Xcode 16 SDK #3054
• Fix an issue where the Compose does not receive key events when initially created #3066
• Fix issue when BasicTextField does not show context menu after long press #3080
• Fix symbols duplication on keyboard paste hotkeys #3067
• Focusable nodes inside merged semantics remain focusable #3089
• Fix content jump at the beginning of a swipe back gesture #3101

Web

• Fix an unexected crash in A11Y: Node $id not found #3057
• Fixed pointer state remaining active when the browser cancels a pointer via pointercancel (system gestures, palm rejection, device disconnect, etc.) #3036

Resources

... (truncated)

Commits

• See full diff in compare view

Updates org.jetbrains.androidx.lifecycle:lifecycle-viewmodel from 2.9.6 to 2.10.0

Changelog

Sourced from org.jetbrains.androidx.lifecycle:lifecycle-viewmodel's changelog.

1.12.0-alpha02 (June 2026)

Changes since 1.12.0-alpha01

Migration Notes

Desktop

• If your ComposePanel, ComposeWindow or ComposeDialog content can not be measured in infinite constraints (e.g. Modifier.verticalScroll) on a certain axis, you should provide a fixed size for that axis by calling ComposePanel.setPreferredSize with a Dimension that has a fixed size (on that axis) #3055

Features

iOS

• Add the 'Select' item on the context menu for the text fields #3081
• Add NSLocale.toComposeLocale() API to create Locale from platform NSLocale #3103

Desktop

• It is now possible to control the way ComposePanel, ComposeWindow and ComposeDialog compute their minimum (only ComposePanel), preferred and maximum (only ComposePanel) sizes, by setting the corresponding property to a Dimension with a special UNSPECIFIED_DIMENSION_VALUE on the axis that should be determined by the content #3055
• The default ProGuard version is set to 7.8.0 #5613
• (prerelease fix) Bump Compose Hot Reload to 1.2.0-alpha01 #5613

Web

• Noto fonts is being loaded automatically for unresolved symbols on Web #3010

Fixes

Multiple Platforms

• Fix DatePickerDialog's confirmButton and dismissButton display order on iOS, Desktop, Kotlin/JS and Kotlin/Wasm not consistent with Material Design guidance #3048
• Fixed a deep bug in matrix computation which caused pointer hit-paths to not be computed correctly sometimes, leading to elements that could not be interacted with via the mouse or touch #3053
• Fixed a crash in RTL text cursor positioning when paragraphs contain newlines followed by emojis or combining marks #3056

iOS

• Fix application build when using old Xcode 16 SDK #3054
• Fix an issue where the Compose does not receive key events when initially created #3066
• Fix issue when BasicTextField does not show context menu after long press #3080
• Fix symbols duplication on keyboard paste hotkeys #3067
• Focusable nodes inside merged semantics remain focusable #3089
• Fix content jump at the beginning of a swipe back gesture #3101

Web

• Fix an unexected crash in A11Y: Node $id not found #3057
• Fixed pointer state remaining active when the browser cancels a pointer via pointercancel (system gestures, palm rejection, device disconnect, etc.) #3036

Resources

... (truncated)

Commits

• See full diff in compare view

Updates org.jetbrains.kotlinx:kotlinx-coroutines-swing from 1.10.2 to 1.11.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-coroutines-swing's releases.

1.11.0

Various

• Kotlin was updated to 2.2.20 (#4545).
• Improved the published jar files (#3842, #4599).
• Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

Breaking changes and deprecations

• Moved Promise-related functions from JS and Wasm/JS to the new web target. On Wasm/JS, this is a breaking change. Before the change, Promise on Wasm/JS could work with arbitrary Kotlin types, but now, only JsAny subtypes are accepted (#4563).
• Changed handling of coroutine exceptions that can't be propagated on JS and Wasm/JS. B efore, exceptions were logged, but now, they are reported to the JS runtime (#4451, #4631).
• Deprecated using CoroutineDispatcher as the coroutine context key; now, ContinuationInterceptor has to be used instead (#4333).
• Advanced the deprecation levels on kotlinx-coroutines-test APIs (#4604).
• Added lint functions that mark passing a Job to coroutine builders as deprecated (#4435).

Bug fixes and improvements

• Added a callsInPlace(EXACTLY_ONCE) contract to runBlocking in code shared between JVM and Native (#4368).
• Added a callsInPlace(EXACTLY_ONCE) contract to suspendCancellableCoroutine (#4574).
• Fixed flowOn incorrectly handling ThreadContextElement updates (#4403).
• Fixed exceptions in user-supplied Thread.UncaughtExceptionHandler instances causing the internal coroutines machinery to fail (#4516).
• Fixed CoroutineDispatcher.asScheduler in the RxJava integration not cancelling outstanding work when a Worker gets cancelled, which led to memory leaks in some scenarios (#4615).
• Fixed SharedFlow entering an invalid state when a subscriber and an emitter are cancelled simultaneously (#4583).
• Fixed an R8 optimization leading to shareIn/stateIn coroutines getting garbage-collected (#4646). Thanks, @​solevic!

Small additions

• Added CompletableDeferred.asDeferred for obtaining a read-only Deferred view (#4408).
• Added SharedFlow.asFlow for obtaining a Flow view with hidden hot flow semantics (#4530). Thanks, @​g000sha256!
• Added a StateFlow.collectLatest overload returning Nothing to assist with finding unreachable code (#4454).
• Added ReceiveChannel.consumeTo for consuming a ReceiveChannel into a MutableCollection (#4520).
• Added a StateFlow<T>.onSubscription overload returning a StateFlow<T>, similar to SharedFlow<T>.onSubscription returning SharedFlow<T> (#4275). Thanks, @​xit0c!
• Added terminal Flow operators for collecting a Flow to a Map (#1541).

Changelog relative to version 1.11.0

No changes, only the version is increased.

1.11.0-rc02

Restored binary compatibility with 1.10.2 and older versions on Wasm/JS for usages of Promise-related functions (#4661).

1.11.0-rc01

Various

• Kotlin was updated to 2.2.20 (#4545).
• Improved the published jar files (#3842, #4599).
• Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

Breaking changes and deprecations

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-coroutines-swing's changelog.

Version 1.11.0

Various

• Kotlin was updated to 2.2.20 (#4545).
• Improved the published jar files (#3842, #4599).
• Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

Breaking changes and deprecations

• Moved Promise-related functions from JS and Wasm/JS to the new web target. On Wasm/JS, this is a breaking change. Before the change, Promise on Wasm/JS could work with arbitrary Kotlin types, but now, only JsAny subtypes are accepted (#4563).
• Changed handling of coroutine exceptions that can't be propagated on JS and Wasm/JS. Before, exceptions were logged, but now, they are reported to the JS runtime (#4451, #4631).
• Deprecated using CoroutineDispatcher as the coroutine context key; now, ContinuationInterceptor has to be used instead (#4333).
• Advanced the deprecation levels on kotlinx-coroutines-test APIs (#4604).
• Added lint functions that mark passing a Job to coroutine builders as deprecated (#4435).

Bug fixes and improvements

• Added a callsInPlace(EXACTLY_ONCE) contract to runBlocking in code shared between JVM and Native (#4368).
• Added a callsInPlace(EXACTLY_ONCE) contract to suspendCancellableCoroutine (#4574).
• Fixed flowOn incorrectly handling ThreadContextElement updates (#4403).
• Fixed exceptions in user-supplied Thread.UncaughtExceptionHandler instances causing the internal coroutines machinery to fail (#4516).
• Fixed CoroutineDispatcher.asScheduler in the RxJava integration not cancelling outstanding work when a Worker gets cancelled, which led to memory leaks in some scenarios (#4615).
• Fixed SharedFlow entering an invalid state when a subscriber and an emitter are cancelled simultaneously (#4583).
• Fixed an R8 optimization leading to shareIn/stateIn coroutines getting garbage-collected (#4646). Thanks, @​solevic!

Small additions

• Added CompletableDeferred.asDeferred for obtaining a read-only Deferred view (#4408).
• Added SharedFlow.asFlow for obtaining a Flow view with hidden hot flow semantics (#4530). Thanks, @​g000sha256!
• Added a StateFlow.collectLatest overload returning Nothing to assist with finding unreachable code (#4454).
• Added ReceiveChannel.consumeTo for consuming a ReceiveChannel into a MutableCollection (#4520).
• Added a StateFlow<T>.onSubscription overload returning a StateFlow<T>, similar to SharedFlow<T>.onSubscription returning SharedFlow<T> (#4275). Thanks, @​xit0c!
• Added terminal Flow operators for collecting a Flow to a Map (#1541).

Changelog relative to version 1.11.0

No changes, only the version is increased.

Version 1.11.0-rc02

Restored binary compatibility with 1.10.2 and older versions on Wasm/JS for usages of Promise-related functions (#4661).

Version 1.11.0-rc01

Various

• Kotlin was updated to 2.2.20 (#4545).
• Improved the published jar files (#3842, #4599).
• Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

... (truncated)

Commits

• 8564f65 Version 1.11.0
• a4c6af9 Merge remote-tracking branch 'origin/master' into develop
• ef917b4 KT-84955: mark apple x64 tagets as deprecated error (#4645)
• 5ebc421 Update the release procedure description (#4670)
• 95f46a0 Remove old maven repository settings (#4672)
• b4f4f0a Fix package name of ToMapCollectionSamplesTest. (#4674)
• 86738dc Added templates to the issue creation wizard (#4654)
• 330fcc2 Version 1.11.0-rc02
• e31cef6 Merge remote-tracking branch 'origin/master' into develop
• dc6e9f6 Restore Promise-related functions on Wasm/JS as HIDDEN (#4661)
• Additional commits viewable in compare view

Updates io.ktor:ktor-network from 3.4.0 to 3.5.0

Release notes

Sourced from io.ktor:ktor-network's releases.

3.5.0

Published 14 May 2026

Features

• KTOR-8421 Route.contentType should support multiple ContentType
• KTOR-7961 Add known TDM headers to the HttpHeaders object
• KTOR-9418 Support getAs from the root ApplicationConfig
• KTOR-9559 DNS configuration for the Apache5 client
• KTOR-9554 DNS configuration for OkHttp client engine
• KTOR-9555 Custom SSE heartbeat function
• KTOR-8914 Dependency injection: read annotations in function references
• KTOR-8300 Sessions: Add a way to create a user session shared for all user devices or look up sessions of the same user
• KTOR-9521 Upgrade to Kotlin 2.3.21
• KTOR-9276 Make DynamicProviderConfig.authenticateFunction suspend
• KTOR-9491 Provide parameter validation convenience functions
• KTOR-9506 OpenAPI: Support prefixItems in JsonSchema for tuple type definitions
• KTOR-470 Add an option to not resend the session cookie if the session data wasn't changed.
• KTOR-9355 Deprecate HttpHeaders.AcceptCharset
• KTOR-7659 Make ktor-network compatible with ES modules for nodejs
• KTOR-9350 JS: Make ES2015 the default target for tests
• KTOR-7578 Update Digest authentication implementation according to RFC 7616

Improvements

• KTOR-9503 The JacksonConverter.streamRequestBody property name is confusing
• KTOR-9552 Deprecation notice for io.ktor.server.auth.Principal does not explain what to use instead
• KTOR-7458 Jetty Jakarta: Provide an easy way to disable SNI hostname validation
• KTOR-9354 Websockets: webSocket builder function should return a Route to be describable
• KTOR-9488 Nonce and hex function performance optimizations

Bugfixes

• KTOR-9524 Netty response hangs after connection lost
• KTOR-9542 Netty: The request handler runs on worker event loop instead of call event loop since 3.4.3
• KTOR-9531 Netty server intermittently drops requests after upgrading to 3.4.3
• KTOR-8151 MicrometerMetrics: "MeterFilters configured after a Meter has been registered" warning when a metric is registered before installing the plugin
• KTOR-9411 Darwin throws DarwinHttpRequestException instead of FrameTooBigException
• KTOR-8320 CallLogging: plugin usage in testApplication breaks console standard output
• KTOR-8906 Jackson, with request body streaming on, exhausts Dispatchers.IO
• KTOR-8709 Websockets: Unable to close session with a custom CloseReason
• KTOR-9567 Flaky UnixSockets on Windows: WSAEOPNOTSUPP from bind()
• KTOR-9183 A client call wrapped with withTimeout throws a generic CancellationException instead of TimeoutCancellationException
• KTOR-8199 Autoreloading: default watch patterns don't match anything when project path contain spaces
• KTOR-9549 Kotlin/JS: ktor-ktor-client-core.mjs is incompatible with Vite: toRaw naming conflict
• KTOR-9544 Apache: body channel not cancelled when caller scope is cancelled
• KTOR-9546 HttpClient: cancelling ByteReadChannel body does not propagate to engine
• KTOR-455 Content-Disposition additional parameters should be inside quotes
• KTOR-9500 RawSourceChannel returns false positive on awaitContent
• KTOR-646 Netty engine still print annoying exceptions
• KTOR-9527 Curl: Freeze when receiving large responses
• KTOR-9460 Curl: Can't build shared library with Ktor 3.4.2
• KTOR-9483 Curl: backpressure implementation is never used

... (truncated)

Changelog

Sourced from io.ktor:ktor-network's changelog.

3.5.0

Published 14 May 2026

Features

• KTOR-8421 Route.contentType should support multiple ContentType
• KTOR-7961 Add known TDM headers to the HttpHeaders object
• KTOR-9418 Support getAs from the root ApplicationConfig
• KTOR-9559 DNS configuration for the Apache5 client
• KTOR-9554 DNS configuration for OkHttp client engine
• KTOR-9555 Custom SSE heartbeat function
• KTOR-8914 Dependency injection: read annotations in function references
• KTOR-8300 Sessions: Add a way to create a user session shared for all user devices or look up sessions of the same user
• KTOR-9521 Upgrade to Kotlin 2.3.21
• KTOR-9276 Make DynamicProviderConfig.authenticateFunction suspend
• KTOR-9491 Provide parameter validation convenience functions
• KTOR-9506 OpenAPI: Support prefixItems in JsonSchema for tuple type definitions
• KTOR-470 Add an option to not resend the session cookie if the session data wasn't changed.
• KTOR-9355 Deprecate HttpHeaders.AcceptCharset
• KTOR-7659 Make ktor-network compatible with ES modules for nodejs
• KTOR-9350 JS: Make ES2015 the default target for tests
• KTOR-7578 Update Digest authentication implementation according to RFC 7616

Improvements

• KTOR-9503 The JacksonConverter.streamRequestBody property name is confusing
• KTOR-9552 Deprecation notice for io.ktor.server.auth.Principal does not explain what to use instead
• KTOR-7458 Jetty Jakarta: Provide an easy way to disable SNI hostname validation
• KTOR-9354 Websockets: webSocket builder function should return a Route to be describable
• KTOR-9488 Nonce and hex function performance optimizations

Bugfixes

• KTOR-9524 Netty response hangs after connection lost
• KTOR-9542 Netty: The request handler runs on worker event loop instead of call event loop since 3.4.3
• KTOR-9531 Netty server intermittently drops requests after upgrading to 3.4.3
• KTOR-8151 MicrometerMetrics: "MeterFilters configured after a Meter has been registered" warning when a metric is registered before installing the plugin
• KTOR-9411 Darwin throws DarwinHttpRequestException instead of FrameTooBigException
• KTOR-8320 CallLogging: plugin usage in testApplication breaks console standard output
• KTOR-8906 Jackson, with request body streaming on, exhausts Dispatchers.IO
• KTOR-8709 Websockets: Unable to close session with a custom CloseReason
• KTOR-9567 Flaky UnixSockets on Windows: WSAEOPNOTSUPP from bind()
• KTOR-9183 A client call wrapped with withTimeout throws a generic CancellationException instead of TimeoutCancellationException
• KTOR-8199 Autoreloading: default watch patterns don't match anything when project path contain spaces
• KTOR-9549 Kotlin/JS: ktor-ktor-client-core.mjs is incompatible with Vite: toRaw naming conflict
• KTOR-9544 Apache: body channel not cancelled when caller scope is cancelled
• KTOR-9546 HttpClient: cancelling ByteReadChannel body does not propagate to engine
• KTOR-455 Content-Disposition additional parameters should be inside quotes
• KTOR-9500 RawSourceChannel returns false positive on awaitContent
• KTOR-646 Netty engine still print annoying exceptions
• KTOR-9527 Curl: Freeze when receiving large responses
• KTOR-9460 Curl: Can't build shared library with Ktor 3.4.2
• KTOR-9483 Curl: backpressure implementation is never used

... (truncated)

Commits

• 3ccad96 Release 3.5.0 (#5612)
• decd09f Update report links (#5616)
• ba5bbc5 Rethrow cancellation in Digest.build (#5618)
• 1653559 Update kotlinx-serialization to v1.11.0
• eb593ac Update kotlinx-coroutines to v1.11.0
• 043d400 Update dependency org.jetbrains.kotlinx:kotlinx-io-core to v0.9.0
• 75a8324 Update dependency com.squareup.okio:okio to v3.17.0
• 757c3da Update dependency com.google.code.gson:gson to v2.14.0
• 4b79685 Update dependency com.auth0:jwks-rsa to v0.24.0
• 6fe542f Update tomcat.jakarta to v10.1.55
• Additional commits viewable in compare view

Updates org.jetbrains.kotlinx:kotlinx-serialization-json from 1.10.0 to 1.11.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's releases.

1.11.0

This release is based on Kotlin 2.3.20 and provides a new Json exceptions API and some bugfixes and improvements.

Expose Json exceptions structure

To make working with exceptions easier and providing proper error codes in e.g., REST APIs, classes JsonException, JsonDecodingException, and JsonEncodingException are now public. They have relevant public properties, such as shortMessage, path, offset, and others. This API is currently experimental, and we're going to improve it further in the subsequent releases. See the linked issues for the details: #1930, #1877.

Ability to hide user input from exception messages for security/privacy reasons.

Historically, exception messages in kotlinx.serialization often included the input Json itself for debuggability reason. Such behavior may pose additional challenges for logging, analytics, and other systems, since a system is not always allowed to store user data due to privacy/security reasons, which imposes additional sanitation logic. To address this issue, a new property exceptionsWithDebugInfo is added to JsonConfiguration. Disable it to hide user input from exception messages. IMPORTANT: This behavior will be enabled by default when this property becomes stable. See #2590 for more details.

Bugfixes and improvements

• CBOR: Relax value range check when decoding numbers (#3167)
• Use a specialized writeDecimalLong method for IO stream integrations in Json (#3152)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's changelog.

1.11.0 / 2026-04-10

This release is based on Kotlin 2.3.20 and provides new Json exceptions API and some bugfixes and improvements.

Expose Json exceptions structure

To make working with exceptions easier and providing proper error codes in e.g., REST APIs, classes JsonException, JsonDecodingException, and JsonEncodingException are now public. They have relevant public properties, such as shortMessage, path, offset, and others. This API is currently experimental, and we're going to improve it further in the subsequent releases. See the linked issues for the details: #1930, #1877.

Ability to hide user input from exception messages for security/privacy reasons.

Historically, exception messages in kotlinx.serialization often included the input Json itself for debuggability reason. Such behavior may pose additional challenges for logging, analytics, and other systems, since a system is not always allowed to store user data due to privacy/security reasons, which imposes additional sanitation logic. To address this issue, a new property exceptionsWithDebugInfo is added to JsonConfiguration. Disable it to hide user input from exception messages. IMPORTANT: This behavior will be enabled by default when this property becomes stable. See #2590 for more details.

Bugfixes and improvements

• CBOR: Relax value range check when decoding numbers (#3167)
• Use a specialized writeDecimalLong method for IO stream integrations in Json (#3152)

Commits

• 6956af2 Prepare 1.11 release
• 390d84c Merge remote-tracking branch 'origin/master' into dev
• 431fe2d Use local repo for publishing (#3171)
• 05c12b6 Add usage attribute to "testRepositories" configuration
• a4e1f08 Bump Kover version to 0.9.8 release (#3174)
• 304e858 Expose Json exceptions structure (#3145)
• 4a0338e Included G Play SDK verification file for core-jvm (#3169)
• 421f64c CBOR: Relax value range check when decoding numbers (#3167)
• 85a4f12 KT-84955: mark apple x64 tagets as deprecated error
• bd38b0e Remove dead code
• Additional commits viewable in compare view

Updates com.google.protobuf:protobuf-java-util from 4.33.4 to 4.35.1

Updates org.jetbrains.kotlin.plugin.compose from 2.3.0 to 2.4.0

Release notes

Sourced from org.jetbrains.kotlin.plugin.compose's releases.

Kotlin 2.4.0

Changelog

Analysis API

• KT-83867 OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ repo
• KT-83723 [Analysis API] Enable experimental KDoc resolver by default
• KT-83388 Analysis API: properly support KMP in KotlinPackageProvider
• KT-65683 Analysis API: Dangling file session creation causes a computeIfAbsent contract violation

Analysis API. Code Compilation

• KT-78946 Evaluation of variable with local class in type parameter leads to InventNamesForLocalClasses exception

Analysis API. FIR

• KT-68260 K2 AA: InvalidFirElementTypeException “For CALLABLE_REFERENCE_EXPRESSION with text ::lam1, unexpected element of type: no element found” with illegal callable reference call
• KT-70896 AA: False positive deprecation warning with override of built-in method in JDK mapped class
• KT-84711 K2 IDE sometimes loses FIR plugin-generated declarations after file changes
• KT-84625 Analysis API: collectDesignationPath fails for nested classes inside plugin-generated top-level classes
• KT-84596 Improve K2 Jooq completion performance
• KT-84525 KaValueParameterSymbol#getHasSynthesizedName returns false for FirDeclarationOrigin.SubstitutionOverride.DeclarationSite
• KT-83546 Kotlin analysis reach ClsCustomNavigationPolicy
• KT-84259 Move CommonDefaultImportsProvider to the frontend independent module
• KT-82945 Analysis API: KotlinIllegalArgumentExceptionWithAttachments: Expected FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl
• KT-71135 AA: exception from sealed inheritors checker when analyzeCopy

Analysis API. Infrastructure

Fixes

• KT-83905 Analysis API: Improve UX with test data
• KT-84913 Extract compiler classes used by the PSI & Analysis API to a separate module
• KT-64986 Analysis API: Implement Analysis API tests for different KMP Platforms
• KT-84776 The test data manager misses the redundancy check in the update mode
• KT-84962 The test data manager misses -ea flag
• KT-84388 Preserve the EOF status in the test data manager to avoid extra changes
• KT-84362 Analysis API tests produce many warnings due to "not yet loaded registry"
• KT-84279 Test Data Manager fails on a clean build
• KT-83913 Exclude compiler-based Analysis API tests from Git tracking
• KT-80379 Extract per-module test generators for AA tests
• KT-84120 Move CLI modules out of kotlin-compiler-fe10-for-ide
• KT-83200 Track external dependencies of the Analysis API modules

Analysis API. Light Classes

• KT-82434 Light classes should prefer enum ent...

  Description has been truncated