Skip to content

Update all dependencies#2713

Open
renovate-bot wants to merge 1 commit intogoogle:mainfrom
renovate-bot:renovate/all
Open

Update all dependencies#2713
renovate-bot wants to merge 1 commit intogoogle:mainfrom
renovate-bot:renovate/all

Conversation

@renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented Dec 10, 2025

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/cache action major v4v5 age confidence
actions/checkout action major v5v6 age confidence
actions/setup-python action major v5v6 age confidence
actions/upload-artifact action major v4v7 age confidence
gradle (source) major 8.14.39.4.0 age confidence
stefanzweifel/git-auto-commit-action action major v6v7 age confidence
com.google.protobuf plugin patch 0.9.50.9.6 age confidence
com.google.android.gms:play-services-base dependencies minor 18.9.018.10.0 age confidence
io.grpc:grpc-protobuf-lite dependencies minor 1.73.01.79.0 age confidence
io.grpc:grpc-kotlin-stub dependencies minor 1.4.31.5.0 age confidence
io.grpc:grpc-binder dependencies minor 1.73.01.79.0 age confidence
io.grpc:grpc-android dependencies minor 1.73.01.79.0 age confidence
com.google.genai:google-genai dependencies minor 1.30.01.43.0 age confidence
androidx.paging:paging-compose (source) dependencies minor 3.3.63.4.2 age confidence
com.android.tools.build:gradle (source) dependencies major 8.12.39.1.0 age confidence
androidx.wear.compose:compose-ui-tooling (source) dependencies patch 1.6.0-alpha061.6.0-rc01 age confidence
androidx.wear.compose:compose-navigation (source) dependencies patch 1.6.0-alpha061.6.0-rc01 age confidence
androidx.wear.compose:compose-material (source) dependencies patch 1.6.0-alpha061.6.0-rc01 age confidence
androidx.wear.compose:compose-foundation (source) dependencies patch 1.6.0-alpha061.6.0-rc01 age confidence
androidx.wear.compose:compose-material3 (source) dependencies patch 1.6.0-alpha061.6.0-rc01 age confidence
com.diffplug.spotless plugin major 7.2.18.3.0 age confidence
androidx.compose.runtime:runtime-tracing (source) dependencies patch 1.10.01.10.5 age confidence
io.github.takahirom.roborazzi plugin minor 1.52.01.59.0 age confidence
io.github.takahirom.roborazzi:roborazzi-junit-rule dependencies minor 1.52.01.59.0 age confidence
io.github.takahirom.roborazzi:roborazzi-painter dependencies minor 1.52.01.59.0 age confidence
io.github.takahirom.roborazzi:roborazzi-compose dependencies minor 1.52.01.59.0 age confidence
io.github.takahirom.roborazzi:roborazzi-accessibility-check dependencies minor 1.52.01.59.0 age confidence
io.github.takahirom.roborazzi:roborazzi dependencies minor 1.52.01.59.0 age confidence
io.grpc:protoc-gen-grpc-java dependencies minor 1.73.01.79.0 age confidence
com.google.android.gms:play-services-oss-licenses dependencies minor 17.3.017.4.0 age confidence
com.google.android.gms:play-services-auth dependencies minor 21.4.021.5.1 age confidence
io.github.droibit.oss-licenses-android:ui-wear-compose-material dependencies minor 0.9.00.10.0 age confidence
com.google.android.gms:oss-licenses-plugin dependencies patch 0.10.90.10.10 age confidence
org.robolectric:shadows-framework (source) dependencies patch 4.164.16.1 age confidence
org.robolectric:robolectric (source) dependencies patch 4.164.16.1 age confidence
com.squareup.okio:okio dependencies minor 3.16.43.17.0 age confidence
me.tylerbwong.gradle.metalava plugin minor 0.4.0-alpha030.5.0 age confidence
io.grpc:grpc-stub dependencies minor 1.73.01.79.0 age confidence
com.vanniktech.maven.publish plugin minor 0.34.00.36.0 age confidence
com.vanniktech:gradle-maven-publish-plugin dependencies minor 0.34.00.36.0 age confidence
com.google.dagger:hilt-android-testing dependencies minor 2.57.22.59.2 age confidence
com.google.dagger:hilt-android-gradle-plugin dependencies minor 2.57.22.59.2 age confidence
com.google.dagger:hilt-android-compiler dependencies minor 2.57.22.59.2 age confidence
com.google.dagger:hilt-android dependencies minor 2.57.22.59.2 age confidence
org.jetbrains.dokka plugin minor 2.0.02.1.0 age confidence
org.jetbrains.dokka:dokka-gradle-plugin dependencies minor 2.0.02.1.0 age confidence
com.autonomousapps.dependency-analysis plugin major 2.19.03.6.1 age confidence
androidx.work:work-testing (source) dependencies patch 2.11.02.11.1 age confidence
androidx.work:work-runtime-ktx (source) dependencies patch 2.11.02.11.1 age confidence
androidx.wear:wear (source) dependencies patch 1.4.0-alpha021.4.0 age confidence
androidx.wear:wear-remote-interactions (source) dependencies minor 1.1.01.2.0 age confidence
com.gradle.develocity plugin minor 4.1.14.3.2 age confidence
androidx.navigation:navigation-testing (source) dependencies patch 2.9.62.9.7 age confidence
androidx.navigation:navigation-runtime (source) dependencies patch 2.9.62.9.7 age confidence
androidx.navigation:navigation-compose (source) dependencies patch 2.9.62.9.7 age confidence
androidx.core:core-ktx (source) dependencies minor 1.17.01.18.0 age confidence
androidx.core:core (source) dependencies minor 1.17.01.18.0 age confidence
androidx.activity:activity-compose (source) dependencies minor 1.12.11.13.0 age confidence
androidx.activity:activity (source) dependencies minor 1.12.11.13.0 age confidence
androidx.wear.watchface:watchface-complications-data-source-ktx (source) dependencies patch 1.3.0-alpha071.3.0 age confidence
androidx.media3:media3-ui dependencies minor 1.8.01.9.2 age confidence
androidx.media3:media3-test-utils-robolectric dependencies minor 1.8.01.9.2 age confidence
androidx.media3:media3-test-utils dependencies minor 1.8.01.9.2 age confidence
androidx.media3:media3-session dependencies minor 1.8.01.9.2 age confidence
androidx.media3:media3-exoplayer-workmanager dependencies minor 1.8.01.9.2 age confidence
androidx.media3:media3-exoplayer-rtsp dependencies minor 1.8.01.9.2 age confidence
androidx.media3:media3-exoplayer-hls dependencies minor 1.8.01.9.2 age confidence
androidx.media3:media3-exoplayer-dash dependencies minor 1.8.01.9.2 age confidence
androidx.media3:media3-exoplayer dependencies minor 1.8.01.9.2 age confidence
androidx.media3:media3-datasource-okhttp dependencies minor 1.8.01.9.2 age confidence
androidx.media3:media3-common dependencies minor 1.8.01.9.2 age confidence
androidx.health:health-services-client (source) dependencies patch 1.1.0-alpha051.1.0-rc01 age confidence
androidx.wear.watchface:watchface-complications-data (source) dependencies patch 1.3.0-alpha071.3.0 age confidence

Release Notes

actions/cache (actions/cache)

v5

Compare Source

actions/checkout (actions/checkout)

v6

Compare Source

actions/setup-python (actions/setup-python)

v6

Compare Source

actions/upload-artifact (actions/upload-artifact)

v7

Compare Source

v6

Compare Source

v5

Compare Source

gradle/gradle (gradle)

v9.4.0

Compare Source

v9.3.1: 9.3.1

Compare Source

This is a patch release for 9.3.0. We recommend using 9.3.1 instead of 9.3.0.

The following issues were resolved:

Read the Release Notes

Upgrade instructions

Switch your build to use Gradle 9.3.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.3.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.3.0

Compare Source

v9.2.1: 9.2.1

Compare Source

The Gradle team is excited to announce Gradle 9.2.1.

Here are the highlights of this release:

  • Windows ARM support
  • Improved publishing APIs
  • Better guidance for dependency verification failures

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
Björn Kautler,
hasunzo,
HYEON,
Hyunjoon Park,
HYUNJUN SON,
Jendrik Johannes,
Kirill Gavrilov,
Madalin Valceleanu,
Martin Bonnin,
Matthew Haughton,
Mikhail Polivakha,
Na Minhyeok,
Philip Wedemann,
Philipp Schneider,
Róbert Papp,
Simon Marquis,
TheGoesen,
Vincent Potucek,
Xin Wang.

Upgrade instructions

Switch your build to use Gradle 9.2.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.2.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.2.0

Compare Source

v9.1.0: 9.1.0

Compare Source

The Gradle team is excited to announce Gradle 9.1.0.

Here are the highlights of this release:

  • Full Java 25 support
  • Native task graph visualization
  • Enhanced console output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Eng Zer Jun,
EunHyunsu,
Gaëtan Muller,
HeeChul Yang,
Jendrik Johannes,
Johnny Lim,
Junho Lee,
Kirill Gavrilov,
Matthew Haughton,
Na Minhyeok,
Philip Wedemann,
Philipp Schneider,
Pradyumna C,
r-a-sattarov,
Ryszard Perkowski,
Sebastian Schuberth,
SebastianHeil,
Staffan Al-Kadhimi,
winfriedgerlach,
Xin Wang.

Upgrade instructions

Switch your build to use Gradle 9.1.0 by updating your wrapper:

./gradlew wrapper --gradle-version=9.1.0 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.0.0: 9.0.0

Compare Source

The Gradle team is excited to announce Gradle 9.0.0.

Here are the highlights of this release:

  • Configuration Cache is the recommended execution mode
  • Gradle requires JVM 17 or higher to run
  • Build scripts use Kotlin 2.2 and Groovy 4.0
  • Improved Kotlin DSL script compilation avoidance

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aaron Matthis,
Adam E,
Adam S,
Björn Kautler,
Daniel Lacasse,
Eng Zer Jun,
EunHyunsu,
FlorianMichael,
Francisco Prieto,
Gaëtan Muller,
Jake Wharton,
Kengo TODA,
Kent Kaseda,
Madalin Valceleanu,
Marc Philipp,
Mark S. Lewis,
Matthew Haughton,
Mycroft Wong,
Na Minhyeok,
Nelson Osacky,
Olivier "Oli" Dagenais,
ploober,
Radai Rosenblatt,
Róbert Papp,
Sebastian Schuberth,
Victor Merkulov.

Upgrade instructions

Switch your build to use Gradle 9.0.0 by updating your wrapper:

./gradlew wrapper --gradle-version=9.0.0 && ./gradlew wrapper

See the Gradle 9.0.0 upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.14.4

Compare Source

stefanzweifel/git-auto-commit-action (stefanzweifel/git-auto-commit-action)

v7

Compare Source

Added
Changes
Dependency Updates
grpc/grpc-java (io.grpc:grpc-protobuf-lite)

v1.79.0

API Changes

  • core: Delete the never-used io.grpc.internal.ReadableBuffer.readBytes(ByteBuffer) (#​12580) (738782f). This is deeply internal and not accessible, so shouldn’t impact anything. However, Apache Arrow Java uses reflection to access private fields; GH-939: Remove reflection for gRPC buffers is swapping to gRPC’s public zero-copy APIs

  • opentelemetry: Add target attribute filter for metrics (#​12587). Introduce an optional Predicate targetAttributeFilter to control how grpc.target is recorded in OpenTelemetry client metrics. When a filter is provided, targets rejected by the predicate are normalized to "other" to reduce grpc.target metric cardinality, while accepted targets are recorded as-is. If no filter is set, existing behavior is preserved. This change adds a new Builder API on GrpcOpenTelemetry to allow applications to configure the filter. 

Behavior Changes

  • core: Convert AutoConfiguredLB to an actual LB (4bbf8ee). This is an internal refactoring, but it does improve how errors are handled for broken binaries. Previously, not being able to load pick_first would result in a channel panic. Now it is handled as a regular load balancing error

  • okhttp: Assert no pending streams before transport READY (#​12566) (ed6d175). No pending streams should exist when the transport transitions to READY. This PR adds an assertion to help verify this invariant.

Bug Fixes

  • core: PickFirstLB should not return a subchannel during CONNECTING (228fc8e). Pick-first in grpc-java has behaved this way since it was created, and it was of no consequence. However, now there are some load balancing policies (mainly RLS) that will do a pick() and hope the result to be reasonably accurate for metrics.

Improvements

  • core: Improve DEADLINE_EXCEEDED message for CallCreds delays (ead532b). Previously the error message contained “buffered_nanos” and “waiting_for_connection” for connection delays. However, we discovered the same strings were also used if waiting on CallCredentials. Now you’ll see details like “connecting_and_lb_delay”, “call_credentials_delay”, and “was_still_waiting”.

  • opentelemetry: Add Android API checking (a9f73f4). Previously we assumed OpenTelemetry support would not be used on Android. It did happen to be compatible with Android, but since OpenTelemetry does have some Android support, we now have a check that it remains compatible

  • core: Catch Errors when calling complex config parsing code (a535ed7). Error (and any other Throwable) is now caught and handled when parsing configuration (e.g., service config, xds). This will cause such failures to be handled gracefully instead of panicking the channel

  • core: Implement LoadBalancer.Helper.createOobChannel() with the internals of createResolvingOobChannel() (3915d02). This API is only expected to be relevant to the gRPC-LB lookaside load balancer, and is not believed to have behavior changes. Out-of-band channel had been implemented with its own stripped-down Channel without load balancing. Reimplementing using the resolving oob channel makes it a full-fledged channel and reduces the burden when integrating new features and allows us to have a ManagedChannelBuilder to use with efforts like gRFC A110: Child Channel Options.

  • xds: Implement the proactive connection logic in RingHashLoadBalancer as outlined in gRFC A61 (#​12596). Previously, the Java implementation only initialized child balancers when a ring-chosen endpoint was in TRANSIENT_FAILURE during a picker's pickSubchannel call. This PR adds the missing logic: when a child balancer reports TRANSIENT_FAILURE, the LoadBalancer now proactively initializes the first available IDLE child if no other children are currently connecting or ready.

This ensures a backup subchannel starts warming up immediately outside the RPC flow, reducing failover latency and improving overall resilience. This behavior was previously present but was inadvertently lost after #​10610.

  • api: Add RFC 3986 support to DnsNameResolverProvider (#​12602) (f65127c) Experimental RFC 3986 target URI parsing mode (disabled by default)

New Features

Dependencies 

  • protobuf: Upgrade Bazel protobuf to 33.1 (#​12553) (b61a8f4) and load java_proto_library from the protobuf repo (c7f3cdb)

  • protobuf: Fix build with Bazel 9 by upgrading bazel_jar_jar and grpc-proto versions (#​12569)

  • Upgrade dependencies (#​12588) (6422092) Netty to 4.1.130, error-prone annotations to 2.45.0, google-auth-library to 1.41.0, tomcat-embed-core9 to 9.0.113, tomcat-embed-core to 10.1.50, opentelemetry to 1.57.0, jetty-ee10-servlet to 12.1.5, jetty-http2-server to 12.1.5, google-cloud-logging to 3.23.9, google-auth to 1.41.0, proto-google-common-protos to 2.63.2.

Thanks to

v1.78.0

Bug Fixes
  • core: Fix shutdown failing accepted RPCs during channel startup (02e98a8). This fixes a race where RPCs could fail with "UNAVAILABLE: Channel shutdown invoked" even though they were created before channel.shutdown()
  • okhttp: Fix race condition overwriting MAX_CONCURRENT_STREAMS (#​12548) (8d49dc1)
  • binder: Stop leaking this from BinderServerTransport's ctor (#​12453) (89d77e0)
  • rls: Avoid missed config update from reentrancy (55ae1d0). This fixes a regression since 1.75.0 triggered by CdsLb being converted to XdsDepManager. Without this fix, a second channel to the same target may hang when starting, causing DEADLINE_EXCEEDED, and unhang when the control plane delivers an update (e.g., endpoint address update)
Improvements
  • xds: gRFC A88 - Changes to XdsClient Watcher APIs (#​12446) (f385add). We now have improved xDS error handling and this provides a clearer mechanism for the xDS server to report per-resource errors to the client, resulting in better error messages for debugging and faster detection of non-existent resources. This also improves the handling of all xDS-related data errors and the behavior of the xDS resource timer.
  • rls: Control plane channel monitor state and back off handling (#​12460) (26c1c13). Resets RLS request backoff timers when the Control plane channel state transitions to READY. Also when the backoff timer expires, instead of making a RLS request immediately, it just causes a picker update to allow making rpc again to the RLS target.
  • core: simplify DnsNameResolver.resolveAddresses() (4843256)
  • netty: Run handshakeCompleteRunnable in success cases (283f103)
  • api,netty: Add custom header support for HTTP CONNECT proxy (bbc0aa3)
  • binder: Pre-factor out the guts of the BinderClientTransport handshake. (9313e87)
  • compiler: Add RISC-V 64-bit architecture support to compiler build configuration (725ab22)
  • core: Release lock before closing shared resource (cb73f21). Shared resources are internal to gRPC for sharing expensive objects across channels and servers, like threads. This reduces the chances of forming a deadlock, like seen with s2a in d50098f
  • Upgrade gson to 2.12.1 (6dab2ce)
  • Upgrade dependencies (f36defa). proto-google-common-protos to 2.63.1, google-auth-library to 1.40.0, error-prone annotations to 2.44.0, guava to 33.5.0-android, opentelemetry to 1.56.0
  • compiler: Update maximum supported protobuf edition to EDITION_2024 (2f64092)
  • binder: Introduce server authorization strategy v2 (d971072). Adds support for android:isolatedProcess Services and moves all security checks to the handshake, making subsequent transactions more efficient.
New Features
  • compiler: Upgrade to C++ protobuf 33.1 (#​12534) (58ae5f8).
  • util: Add gRFC A68 random subsetting LB (48a4288). The policy uses the name random_subsetting_experimental. If it is working for you, tell us so we can gauge marking it stable. While the xDS portions haven’t yet landed, it is possible to use with xDS with JSON-style Structs as supported by gRFC A52
  • xds: Support for System Root Certs (#​12499) (51611ba). Most service mesh workloads use mTLS, as described in gRFC A29. However, there are cases where it is useful for applications to use normal TLS rather than using certificates for workload identity, such as when a mesh wants to move some workloads behind a reverse proxy. The xDS CertificateValidationContext message (see envoyproxy/envoy#34235) has a system_root_certs field. In the gRPC client, if this field is present and the ca_certificate_provider_instance field is unset, system root certificates will be used for validation. This implements [gRFC A

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot renovate-bot force-pushed the renovate/all branch 6 times, most recently from f14e4db to 1cdc217 Compare December 17, 2025 04:06
@renovate-bot renovate-bot force-pushed the renovate/all branch 2 times, most recently from 77923cd to 17c6741 Compare December 23, 2025 21:54
@renovate-bot renovate-bot force-pushed the renovate/all branch 3 times, most recently from 24ff9ae to 4ce96ce Compare January 3, 2026 09:42
@renovate-bot renovate-bot force-pushed the renovate/all branch 5 times, most recently from ad5d35b to 67588dd Compare January 12, 2026 18:16
@renovate-bot renovate-bot force-pushed the renovate/all branch 8 times, most recently from 014cb84 to e8b071d Compare January 21, 2026 02:09
@renovate-bot renovate-bot force-pushed the renovate/all branch 6 times, most recently from eef97fd to f9e8201 Compare January 28, 2026 17:46
@renovate-bot renovate-bot force-pushed the renovate/all branch 8 times, most recently from 298b22f to 970a275 Compare February 5, 2026 00:39
@renovate-bot renovate-bot force-pushed the renovate/all branch 5 times, most recently from 8924f95 to 3e04e3f Compare February 12, 2026 01:12
@renovate-bot renovate-bot force-pushed the renovate/all branch 3 times, most recently from c7733a2 to f95e409 Compare February 20, 2026 00:39
@renovate-bot renovate-bot force-pushed the renovate/all branch 5 times, most recently from c6f4a2e to 5b57b8d Compare February 26, 2026 21:04
@renovate-bot renovate-bot force-pushed the renovate/all branch 4 times, most recently from 2025390 to ac2a2b2 Compare March 5, 2026 02:16
@renovate-bot renovate-bot force-pushed the renovate/all branch 2 times, most recently from fac801f to 4144ef2 Compare March 12, 2026 01:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant