Update Gradle Dependencies - autoclosed

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
androidx.compose.material3:material3 (source)	1.3.1 → 1.4.0
me.saket.telephoto:zoomable	0.15.1 → 0.18.0
androidx.work:work-runtime-ktx (source)	2.10.0 → 2.11.1
androidx.webkit:webkit (source)	1.13.0-rc01 → 1.15.0
androidx.room:room-runtime (source)	2.6.1 → 2.8.4
androidx.room:room-ktx (source)	2.6.1 → 2.8.4
androidx.room:room-compiler (source)	2.6.1 → 2.8.4
androidx.navigation:navigation-compose (source)	2.8.8 → 2.9.7
com.tencent:mmkv	2.1.0 → 2.3.0
com.airbnb.android:lottie-compose	6.6.2 → 6.7.1
androidx.compose:compose-bom	2025.02.00 → 2025.12.01
androidx.activity:activity-compose (source)	1.10.1 → 1.12.4
androidx.lifecycle:lifecycle-runtime-ktx (source)	2.8.7 → 2.10.0
io.ktor:ktor-serialization-gson	3.1.1 → 3.4.0
io.ktor:ktor-client-logging	3.1.1 → 3.4.0
io.ktor:ktor-client-core	3.1.1 → 3.4.0
io.ktor:ktor-client-content-negotiation	3.1.1 → 3.4.0
io.ktor:ktor-client-android	3.1.1 → 3.4.0
org.jetbrains.kotlinx:kotlinx-coroutines-core	1.10.1 → 1.10.2
androidx.test.espresso:espresso-core	3.6.1 → 3.7.0
com.google.devtools.ksp (source)	2.1.10-1.0.31 → 2.3.6
androidx.test.ext:junit	1.2.1 → 1.3.0
androidx.core:core-ktx (source)	1.15.0 → 1.17.0
org.jetbrains.kotlin.plugin.compose (source)	2.1.10 → 2.3.10
org.jetbrains.kotlin.android (source)	2.1.10 → 2.3.10
com.paulcoding:js	1.0.3 → 1.0.4
androidx.javascriptengine:javascriptengine (source)	1.0.0-beta01 → 1.0.0
androidx.concurrent:concurrent-futures-ktx (source)	1.2.0 → 1.3.0
org.apache.commons:commons-compress (source)	1.27.1 → 1.28.0
io.coil-kt.coil3:coil-video	3.1.0 → 3.4.0
io.coil-kt.coil3:coil-network-okhttp	3.1.0 → 3.4.0
io.coil-kt.coil3:coil-gif	3.1.0 → 3.4.0
io.coil-kt.coil3:coil-compose	3.1.0 → 3.4.0
io.github.Rosemoe.sora-editor:bom	0.23.5 → 0.23.6
com.android.library (source)	8.8.2 → 8.13.2
com.android.application (source)	8.8.2 → 8.13.2
com.google.accompanist:accompanist-permissions	0.37.2 → 0.37.3

---

Release Notes

saket/telephoto (me.saket.telephoto:zoomable)

v0.18.0

Compare Source

Improvements

• #​162: Added support for rendering images flipped using exif metadata

v0.17.0

Compare Source

Highlights

• #​45, #​88, #​140, #​150, #​152, #​158: Upscaled images can now be zoomed.
• #​135: Zoom to a specific pixel using ZoomFocalPoint:

  val imageState = rememberZoomableImageState()
  imageState.zoomableState.zoomTo(
    zoomFactor = 2f,
    focal = ZoomFocalPoint.moveToViewportCenter(…), // or zoomAround()
  )

• #​141: Selectively disable zooming or panning:

  ZoomableAsyncImage(
    model = "https://dog.ceo",
    contentDescription = "…",
    gestures = EnabledZoomGestures.ZoomOnly,  // or PanOnly
  )

⚠️ Potentially breaking changes

• When a small image is upscaled to fit the viewport, its starting scale can be larger than its maximum zoom limit. In such cases, the image wouldn't respond to zoom gestures. telephoto now automatically increases the max zoom limit when this happens, ensuring the image can still be zoomed.
  • To disable this, pass DynamicZoomSpec.fixed(…) to rememberZoomableState().
  • If you're using a custom DoubleClickToZoomListener listener, review its behavior with small images.
• The receiver of DoubleClickToZoomListener#onDoubleClick() has changed. This API was already marked experimental.
• FlickToDismiss() now uses rubber banding. More on this below.

Improvements

• ZoomableImage() / Modifier.zoomable
  • Added DynamicZoomSpec for lazy calculation of zoom limits using the layout info.
  • Improved zooming using mouse-wheel scrolls on JVM.
  • Migrated to LocalHapticFeedback so haptics can be customized or disabled.
• SubSamplingImage()
  • #​149: Tile sizes are now consistent, making it easier to render PDFs (by @​sigmabeta).

Bug fixes

• #​146: Added missing contentPadding param to ZoomableAsyncImage() (by @​xertrec).
• #​160: Fixed ignored overzoom effect for under-zooms (by @​FooIbar).
• Fixed broken double-click zooming for images that use ContentScale.FillBounds.
• zoomTo() and zoomBy() no longer crash when given invalid or out-of-bound zoom factors.

Unreleased libraries

This release also includes updates to FlickToDismiss(). While it hasn't been officially released yet, some major apps have already started using it. I plan to announce it soon, but in the meantime here are the changes:

• Improved drag physics and added a rubber banding effect. You can customize this via rememberFlickToDismissState().
• A haptic feedback is now played when the dismiss threshold is crossed. This can customized via LocalHapticFeedback.

v0.16.0

Compare Source

Highlights

• Spatial geometry types: A new system of spatial geometry makes it easy to convert coordinates between the viewport and the zoomable content's coordinate space: SpatialOffset and SpatialRect. See these recipes for their usage examples:

  • Drawing drop shadows
  • Converting between viewport and image coordinates

• Content padding: Modifier.zoomable() and ZoomableImage() now accept a contentPadding parameter. This is similar to using Modifier.padding, but allows the zoomable content to display and receive touch events in the padded region. This is intended to be used by image croppers.

• A new sample demonstrating how telephoto can be used to build image croppers.

image.cropper.mp4

Other changes

• #​132, #​137: Support for Wasm and JS targets for Modifier.zoomable()
• Call prepareToDraw() on sub-sampled bitmaps for better performance

Bug fixes

• #​139: Fixed ConnectivityManager$TooManyRequestsException in ZoomableAsyncImage
• Small fixes for improved state restoration

Dependency updates

• Kotlin 2.1.20
• Compose Multiplatform 1.8.0

Tencent/MMKV (com.tencent:mmkv)

v2.3.0

This release is a breaking change and introduces AES-256 encryption for enhanced security.

All Platforms

• Feature: Added AES-256 encryption functionality. To upgrade an existing encrypted MMKV instance to AES-256, first load it using the old key. Then, call the reKey() method with the new key and set the aes256 parameter to true, e.g., reKey(newKey, aes256=true). After this, you should use the new key for all future loads of this instance.
• Fix: Resolved a crash that occurred when loading an empty file in ReadOnly mode.
• Fix: Added protection against the weakly_canonical() exception caused by an invalid file path.
• Fix: Fixed an issue where the file size could change during multi-process loading.
• Fix: Corrected a bug where a single key could be overridden incorrectly when upgrading from a v1.1.x version.

iOS/macOS/watchOS

• Change: Dropped support for the armv7k architecture on Apple Watch. To adapt, you should add armv7k to the "Excluded Architectures" setting for your Apple Watch App or Extension target.
• Important: Do not upgrade to this version if you need to maintain armv7k support.

POSIX

• Change: Dropped support for armv7 architecture. Do not upgrade to this version if you need to maintain armv7 support.

v2.2.4

This is a hotfix release mainly for iOS/macOS CocoaPods users.

Changes for All platforms

• Improve the performance of MMBuffer a little bit in some cases.

iOS/macOS

• Make MMKV and MMKVCore podspec define modules.

v2.2.3

This is a feature release that brings full desktop support to Flutter. It also includes key bug fixes and enhancements for Android and other platforms.

Flutter

• Added Full Desktop Support: MMKV for Flutter now officially supports Windows, macOS, and Linux.
• Example App: The example application has been updated to run on all new desktop platforms.

Android

• Feature: Added MMKVHandler.getNativeLogHandler() to allow native handling of MMKV logs from C++ code, improving performance.
• Fix: Corrected an integer overflow bug where a native memory address exceeding Long.MAX_VALUE was misinterpreted as a negative number.
• Fix: Prevented potential memory overflow by ensuring JNI local references are deleted after use.
• Fix: Fixed an issue where directories for special relative paths were not being created correctly.
• Enhancement: Improved the thread-safety of the callback handler to prevent crashes.

iOS/macOS

• Fix: Resolved a build error on Apple platforms that occurred when the MMKV_APPLE flag was not set.
• Fix: Addressed a naming conflict in the Swift implementation.

Windows

• Fix: Corrected character encoding issues in the Win32 demo by converting files to UTF-8.

v2.2.2

This is a hot fix version mainly for Android/Linux platforms. It’s highly recommended for v2.2.0~v2.2.1 users.

Changes for All platforms

• Improve file lock consistency for Mayfly FD MMKV instances.

Android

• Fix a potential ANR on multi-process mode MMKV init/creation.

POSIX

• Fix a potential ANR on multi-process mode MMKV init/creation on Linux.

iOS/macOS

• Retain the callback handler to prevent a potential short-lived callback handler from crashing.

Win32

• Improve efficiency on MMKV instance init/creation.

v2.2.1

Changes for All platforms

• Add importFrom().

Android

• Fix a bug on initialization.

v2.2.0

We introduce the Mayfly FD (short-lived file descriptor) enhancement, reducing MMKV's fd footprint by half and more. For a single-process mode MMKV instance, the fd footprint is reduced to zero (except Android/OHOS, details below). For a multi-process mode MMKV instance, the fd footprint is reduced by half, for we still need a long-lived fd to inter-process lock the shared memory.

Changes for All platforms

• Add Mayfly FD (short-lived file descriptor) enhancement.
• Improve multi-process access efficiency by about 20%.
• Add checkExist() to check if a MMKV instance exists on disk.
• Drop deprecated armv7 AES hardware acceleration.

Android

• Reduce the fd footprint by half. For a single-process mode MMKV instance, we still need a long-lived fd to support the process-mode checker and legacy name upgrading. In the far future, when all legacy names have been upgraded, we might drop the long-lived fd like other platforms.
• Upgrade Android compileSdk/targetSdk to 35, NDK to 28.1, Java to 11, Gradle to 8.11.1, and AGP to 8.9.2.

HarmonyOS NEXT

• Reduce the fd footprint by half. For a single-process mode MMKV instance, we still need a long-lived fd to support the legacy name upgrading. In the far future, when all legacy names have been upgraded, we might drop the long-lived fd like other platforms.
• Drop checkProcessMode(), it’s never been used.
• Improve obfuscation configuration with relative path.

iOS

• Add +mmkvGroupPath to get the group folder for MMKV multi-process storage.

Flutter

• Add isFileValid().
• Add groupPath() on iOS.
• Fix checkContentChangedByOuterProcess() not working bug.

airbnb/lottie-android (com.airbnb.android:lottie-compose)

v6.7.1

• Safeguard against very large Bitmap creation (#​2662)

v6.7.0

New Features

• Initial support for 3D animations (#​2666 and #​2673)

v6.6.10

• Add RTL support to lottie-android (#​2663)
• Make lottieComposition public (#​2660)

v6.6.9

• Fix transparent background rendering with MULTIPLY Blend mode on Android 34+ (#​2661)

v6.6.7

• Fix crash when drawing shadow on image using RenderNode (#​2635)

v6.6.6

• Guard against Bitmap allocations of size 0 (#​2626)

v6.6.4

• Fix an image NPE (#​2623)

v6.6.3

• Support system property to set a testing executor (#​2613)
• Fix a radial gradient crash (#​2611)
• Fix a bitmap crash (#​2578)

ktorio/ktor (io.ktor:ktor-serialization-gson)

v3.4.0

Compare Source

Published 22 January 2026

Features

• KTOR-8316 Support OpenAPI specification for the Ktor Client and Server Application
  • KTOR-9085 Read OpenAPI security details from authentication plugin
  • KTOR-8993 Use runtime-generated spec for OpenAPI / Swagger plugins
  • KTOR-9086 Read OpenAPI default content type information from ContentNegotiation plugin
  • KTOR-8859 Routing documentation compiler plugin
  • KTOR-8936 Routing documentation runtime API
  • KTOR-9087 Generate JSON schema for type references when using Jackson and Gson
• KTOR-7075 Zstd support
• KTOR-9209 Support Jackson 3
• KTOR-9198 Auth/Bearer: Make BearerAuthProvider detect disguised Bearer scheme
• KTOR-8927 Support for respondResource
• KTOR-9162 Auth API key plugin
• KTOR-7882 Support HTTP QUERY method
• KTOR-8195 Partial HTML response
• KTOR-8985 EngineMain: Support reading trust store settings from the configuration
• KTOR-9066 Add duplex streaming for OkHttpClient
• KTOR-8180 Auth: Provide control over tokens to user code
• KTOR-8273 iOS native interop for WebRTC client
• KTOR-8956 DI: Allow file configuration
• KTOR-9157 Support SIGINT on web and SIGTERM on Native

Improvements

• KTOR-8890 Rename target jsAndWasmShared to web
• KTOR-9242 Upgrade to Kotlin 2.3
• KTOR-9243 Update libcurl to 8.18.0
• KTOR-9014 Deprecate DarwinLegacy engine
• KTOR-8931 Test iOS target of the WebRTC Client in Ktor-Chat
• KTOR-9199 Make HttpHeaders strings const
• KTOR-9208 Expose plusIsSpace in parseUrlEncodedParameters
• KTOR-2404 Ktor Oauth2 feature sends 401 response when the client secret is invalid
• KTOR-9097 Java: Use HTTP/2 by default
• KTOR-8740 HTMX: Missing DSL for some attributes
• KTOR-9171 Redesign ByteReadChannel.readUTF8Line API
• KTOR-4219 Make readUTF8LineTo return number of read symbols instead of boolean
• KTOR-6761 Apache5: Simplify configuration of ConnectionManager
• KTOR-9037 Multipart/form-data: Make formData's block inline
• KTOR-9126 Missing function ByteReadChannel.readTo(sink: RawSink, byteCount: Long)
• KTOR-9026 Introduce/reuse interfaces for logging selectors
• KTOR-6766 Deprecate Apache 4 engine
• KTOR-8642 Excessive memory allocations while writing bytes into write channel of TCP/IP socket
• KTOR-9137 ByteReadChannel.readUTF8Line is inefficient for long lines
• KTOR-8657 Remove kotlinx-datetime from ktor-server-default-headers dependencies
• KTOR-8941 Add override DI conflict policy

Bugfixes

• KTOR-9258 headers { } block does not affect the request in defaultRequest due to function name collision with io.ktor.http.headers
• KTOR-9235 HttpCookies: Support parsing non-compilant Expires dates of Set-Cookie header
• KTOR-8945 ByteReadChannel.readUTF8Line doesn't throw TooLongLineException when the limit is reached
• KTOR-8339 Curl: caPath is not set by default in the Curl client on linuxArm64
• KTOR-9188 WebRTC. IceServer.urls should be a list.
• KTOR-9148 Logging: Body logging of multipart/form-data requests hangs when OkHttp format is on
• KTOR-9166 CORS: Excessive logs on INFO level since 3.3.3
• KTOR-9130 Missing implementation of getPluginId method error with Kotlin 2.3.0-RC
• KTOR-9147 OpenAPI: "AssertionError: Cannot add a performance measurements" leading to StackOverflowError within a multimodule project
• KTOR-2162 JettyKtorHandler executor will never grow beyond core size
• KTOR-9201 audio/x-matroska is wrongly recognized as mkv type
• KTOR-9146 Run HttpStatement.execute on the engine's dispatcher
• KTOR-6300 Native engines should use Dispatchers.IO not Dispatchers.Unconfined
• KTOR-9098 Curl: HttpResponse.version always returns HTTP_1_1
• KTOR-9100 Curl always uses HTTP/1.1
• KTOR-7162 DefaultRequest: Configuration applied twice for client created with HttpClient.config
• KTOR-9102 SSE: Java engine does not close the underlying connection when SSE session is canceled
• KTOR-9108 SSE: The handler adds Connection: Keep-Alive header, which is incompatible with HTTP/2
• KTOR-7884 Auth: The MutableList cannot be accessed since 3.0.0
• KTOR-6569 Bearer auth: Don't cache client bearer token (option)
• KTOR-4946 Auth: Bearer authentication - unable to update tokens
• KTOR-4759 Auth: BearerAuthProvider caches result of loadToken until process death
• KTOR-9129 Fix SendCountExceedException when maxRetries = Int.MAX_VALUE
• KTOR-9113 Netty HTTP2 server hangs on the plugin exception
• KTOR-9135 buildOpenApi fails with unknown serializer
• KTOR-8285 Bearer Auth: request cancellation causes refresh token invalidation
• KTOR-5241 The decodeBase64Bytes method doesn't throw an exception on illegal base64 characters
• KTOR-8912 Incorrect KDoc of ApplicationConfig.tryGetStringList
• KTOR-9079 The ktor-server-test-host module, having junit-jupiter runtime dependency, causes conflicts
• KTOR-7713 HttpCallValidatorConfig.handleResponseException() should receive a CallExceptionHandler
• KTOR-7121 testApplication: Test HTTP client does not use specified coroutine dispatcher
• KTOR-8785 DI: JobCancellationException during cleanup
• KTOR-6198 Client/WebSocket/Darwin close code and reason are incorrect
• KTOR-7824 Ktor doesn't parse multiple headers

v3.3.3

Compare Source

Published 26 November 2025

Improvements

• KTOR-6837 Discrepancies when parsing URL host with CIO and Darwin engines compared to the rest engines
• KTOR-9050 Logging: SimpleLogger should be an object, not a class
• KTOR-9094 Jetty Client: Support HTTP/2 over cleartext (h2c)
• KTOR-9120 OpenAPI gen: missing operationId for KDoc fields
• KTOR-3019 Improve logging for CORS plugin

Bugfixes

• KTOR-8671 Netty: RejectedExecutionException during shutdown on MacOS when dev mode is enabled
• KTOR-9096 Darwin: New SSE handlers stop responding after canceling few SSE sessions
• KTOR-9125 Double ResponseSent invocation when exception is thrown after respond
• KTOR-8878 OpenAPI: StackOverflowError when a response object has property with @​Contextual serializer
• KTOR-8947 Java, ContentEncoding: IllegalHeaderNameException is thrown for ":status" pseudo header with HTTP/2
• KTOR-9092 NettyHttp2Handler throws IllegalArgumentException: 'ktor.ApplicationCall' is already in use
• KTOR-8924 Curl: Client sends both Transfer-Encoding and Content-Length headers for DELETE requests with body
• KTOR-8838 Exception handling issue in client cache

v3.3.2

Compare Source

Published 5 November 2025

Improvements

• WebRTC Client. Remove redundant targets (KTOR-9062)
• Add Socks proxy support to Darwin engine (KTOR-8968)
• Java: Improve error message when SOCKS proxy is used (KTOR-2908)

Bugfixes

• HttpRequestRetry: SendCountExceedException when max retries is more than maxSendCount of HttpSend (KTOR-5850)
• Darwin: The maxFrameSize option has no effect (KTOR-6963)
• OpenAPI: StackOverflowError when a response object has property with @​Contextual serializer (KTOR-8878)
• OpenAPI gen: missing KDoc fields (KTOR-9021)
• Server call.request.path() returns routing selectors in path (KTOR-7639)
• StaticContent doesn't allow siblings (KTOR-9012)
• HttpCache: FileStorage doesn't use given dispatcher for all file operations (KTOR-8832)
• Curl: SOCKS proxy doesn't work (KTOR-9008)
• Netty: java.lang.VerifyError is thrown on Android since 3.3.0 (KTOR-8916)
• Response body channel is canceled while the body is being saved when having HttpRequestRetry and onDownload (KTOR-8975)
• HttpCache: InvalidCacheStateException when varyKeys stored in files contain uppercase letters since 3.3.0 (KTOR-8970)

v3.3.1

Compare Source

Published 8 October 2025

Improvements

• Add a note about SSE session lifetime in KDoc (KTOR-8440)
• Update Kotlin to 2.2.20 (KTOR-8896)

Bugfixes

• NumberFormatException when Content-Length header value contains null bytes (KTOR-4828)
• SerializationException: Serializer for class 'ClientSSESession' is not found when server responds with JSON (KTOR-7631)
• Netty: loadConfiguration missing enableHttp2 and enableH2c properties (KTOR-8898)
• Netty: EmbeddedServer.stop always blocks for twice of shutdownGracePeriod (KTOR-8770)
• shutdownGracePeriod is used instead of shutdownTimeout in EmbeddedServer.stop() (KTOR-8771)
• Support serving static resources within bootJar (KTOR-8592)

v3.3.0

Compare Source

Published 11 September 2025

Features

• Support for server side http2 without tls (h2c) (KTOR-4750)
• OpenAPI generation build extension preview (KTOR-8721)
• Serve static resources with caching headers and ETag based on sha256 of content (KTOR-6700)
• Jetty engine: Upgrade Jetty dependencies to the latest version 12 (KTOR-6734)
• Static content: Support a custom respond logic if the file is not found (KTOR-8496)
• Upgrade OkHttp to version 5.0.0 (KTOR-8652)
• WebRTC Client, Android + WASM (KTOR-7958)

Improvements

• SSE: Cannot read response body from SSEClientException (KTOR-8165)
• SSE: "SSEClientException: Content-Length mismatch" on saving response body in DefaultResponseValidation (KTOR-8753)
• var Route.staticRootFolder: File? should be deprecated (KTOR-5836)
• Add image/bmp to the ContentType (KTOR-8735)
• Add some missing image content types (KTOR-8624)
• Upgrade to Kotlin 2.2 (KTOR-8647)
• Bump Kotlin API level to 2.2 (KTOR-8637)
• CIO: The engine ignores system proxy settings (KTOR-5922)

Bugfixes

• Performance regression when using ContentEncoding and HttpRequestRetry since 3.2.0 (KTOR-8820)
• Big number of simultaneous outbound web socket connections leads to a coroutine deadlock (KTOR-8829)
• DI: JobCancellationException during cleanup (KTOR-8785)
• Autoreloading: JobCancellationException when app is reloaded in the debugger since 3.2.0 (KTOR-8810)
• HttpRedirect: The client is redirected when no Location header in response (KTOR-8697)
• SerializationException when Application.propertyOrNull() is called with type Map<String, Any?> (KTOR-8781)
• "Failed resolution of: Ljava/lang/management/ManagementFactory" on Android when JvmGcMetrics are initialized (KTOR-8714)
• HttpCache: all header values but first in HttpResponse.varyKeys() are ignored (KTOR-6402)
• HttpCache: plugin selects wrong cache entry when filtering Vary headers with different case (KTOR-7621)
• CountedByteWriteChannel: autoFlush of the source channel doesn't make the channel auto flushing (KTOR-8411)

v3.2.3

Compare Source

Published 29 July 2025

Improvements

• Server only accepts yaml as the configuration file suffix (KTOR-8712)
• JS / WASM error when process global is undefined (KTOR-8686)
• DI async duplicate resolution (KTOR-8681)

Bugfixes

• CIO: Expect 100-continue response is missing a final \r\n (KTOR-8687)
• Intermittent "ParserException: No colon in HTTP header" when parsing multipart request (KTOR-8523)
• Infinite loop in ByteReadChannel.readFully (KTOR-8682)
• ShutDownUrl: The server cannot shut down since 3.2.0 (KTOR-8674)

v3.2.2

Compare Source

Published 14 July 2025

Improvements

• SSE: Change the order of SSE field serialization: put event before data (KTOR-8627)

Bugfixes

• CORS: server replies with the 405 status code on a preflight request when the plugin is installed in a route (KTOR-4499)
• Darwin: The Content-Encoding header is removed since 3.0.3 (KTOR-8526)
• JS/WASM: response doesn't contain the Content-Length header in a browser (KTOR-8377)
• StatusPages: response headers of OutgoingContent aren't available in the status handlers (KTOR-8232)
• testApplication: The client.sse() acts like a REST call and not a stream in test environment (KTOR-7910)
• Config deserialization - default properties problem (KTOR-8654)
• kotlinx.datetime is not available transitively in 3.2.1 (KTOR-8656)
• Request builder block overrides HTTP method in specific request builders (get, post, etc) (KTOR-8636)

v3.2.1

Compare Source

Published 3 July 2025

Improvements

• Replace kotlinx.datetime APIs with kotlin.time (KTOR-8635)
• Thymeleaf: null values in template model (KTOR-8559)
• Publish Javadoc as a maven artifact (KTOR-3962)
• Netty: Invalid hex byte with malformed query string (KTOR-2934)

Bugfixes

• "Space characters in SimpleName" error when executing R8 mergeExtDex task with 3.2.0 (KTOR-8583)
• ForwardedHeaders: the plugin does not handle parameters case-insensitively (KTOR-8622)
• Potential race condition in socket.awaitClosed (hangs indefinitely) since 3.2.0 (KTOR-8618)
• Module parameter type Application.() -> kotlin.Unit is not supported in 3.2.0 (KTOR-8602)
• OkHttp: java.net.ProtocolException when sending MultiPartFormDataContent with onUpload (KTOR-6790)
• OAuth2 authentication provider breaks form-urlencoded POST requests when receiving request body (KTOR-4420)
• 404 for a link in KDoc for io.ktor.server.plugins.contentnegotiation.ContentNegotiation (KTOR-8597)
• Ktor fails to boot with default jvminline argument (KTOR-8608)
• Flow invariant is violated since 3.2.0 (KTOR-8606)
• ResponseSent hook handler of the plugin installed into a route isn't executed when an exception is thrown from the route (KTOR-6794)

v3.2.0

Compare Source

Published 12 June 2025

Features

• Dependency injection Ktor extension (KTOR-8267)
• Support Version Catalog (KTOR-8162)
• Unix domain socket support at the Ktor Engine level (KTOR-4766)
• Allow suspend Ktor modules (KTOR-8005)
• Ability to use browser cookie storage (KTOR-539)
• Configuration file deserialization (KTOR-7874)
• HttpCache: Support evicting/clearing cache (KTOR-6653)
• File configuration for dependencies (KTOR-8304)

Improvements

• Excessive allocation of ApplicationConfig when loading multiple files from CLI (KTOR-8563)
• Linux curl engine doesn't work for simultaneous websocket and http request (KTOR-8259)
• ktor-network produces ProGuard warning (KTOR-8525)
• More overloads for StringValuesBuilder.appendAll (KTOR-8573)
• HttpClientCall: Deprecate wrapWithContent and wrap (KTOR-8378)
• Add a way to create an ApplicationCall for testing (KTOR-7607)
• Configuration access API improvements (KTOR-8185)
• Application instance access in testApplication (KTOR-8215)
• The TestApplication client should be configurable and mutable (KTOR-8465)
• Support accessing resolved IP address on an instance of io.ktor.network.sockets.InetSocketAddress (KTOR-8490)
• Deprecate SaveBodyPlugin in favor of HttpClientCall.save (KTOR-8367)
• Obscure log message on server startup (KTOR-8519)
• Routing: accept should return 406 if the Accept header isn't matched (KTOR-8416)
• MicrometerMetrics: the route label can exceed length limit (KTOR-7274)
• Micrometer: Make route label configurable (KTOR-8183)
• Add more common ContentType values (KTOR-7108)

Bugfixes

• Logging/Darwin: IOException is thrown when detecting if body is a binary (KTOR-8581)
• Netty: NoSuchElementException or empty headers when responding with 204 (KTOR-8528)
• YAML configuration: NoSuchElementException when parameter is expanded with curly braces (KTOR-8575)
• ApplicationConfig: Most of the content is absent after merging configs (KTOR-8565)
• Android: "ProtocolException: TRACE does not support writing" when sending TRACE request (KTOR-8352)
• The "Content-Length: 0" header is added for GET requests sent to some servers (KTOR-6508)
• HttpRequestRetry: requests with some IOException's thrown by Java engine aren't retried (KTOR-6770)
• HttpCookies: Encoding of request cookies is not preserved in CookiesStorage (KTOR-8343)
• Url class mangles data URLs (KTOR-5708)
• SaveBodyPlugin: Logging plugin consumes response body (KTOR-6474)
• Config deserialization does not respect testApplication environment (KTOR-8436)
• Resources: Exclude a parent from query params when it is an object (KTOR-8507)
• BearerAuthProvider does not clear token if refreshTokens returns null (KTOR-8470)
• Coroutines launched from RoutingContext are not cancelled upon server shutdown (KTOR-8338)
• Application job is not joined during shutdown (KTOR-8291)
• HttpCache: InvalidCacheStateException thrown when Vary header has different entries is overly severe ([KTOR-8345](h

---

Configuration

📅 Schedule: Branch creation - "every 3 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.