Update all dependencies (main) by renovate[bot] · Pull Request #569 · android/codelab-android-compose

renovate · 2026-03-17T01:40:43Z

This PR contains the following updates:

Package	Type	Update	Change
gradle (source)		patch	`9.4.0` → `9.4.1`
gradle/actions	action	major	`v5` → `v6`
androidx.work:work-testing (source)	dependencies	patch	`2.11.1` → `2.11.2`
androidx.navigation:navigation-compose (source)	dependencies	patch	`2.9.7` → `2.9.8`
androidx.compose:compose-bom	dependencies	minor	`2026.03.00` → `2026.04.01`
com.google.code.gson:gson	dependencies	minor	`2.13.2` → `2.14.0`
com.github.bumptech.glide:glide	dependencies	patch	`5.0.5` → `5.0.7`
androidx.work:work-runtime-ktx (source)	dependencies	patch	`2.11.1` → `2.11.2`
androidx.navigation:navigation-ui-ktx (source)	dependencies	patch	`2.9.7` → `2.9.8`
androidx.navigation:navigation-fragment-ktx (source)	dependencies	patch	`2.9.7` → `2.9.8`
com.github.bumptech.glide:compiler	dependencies	patch	`5.0.5` → `5.0.7`
com.google.devtools.ksp (source)	plugin	patch	`2.3.6` → `2.3.7`
com.android.legacy-kapt (source)	plugin	minor	`9.1.0` → `9.2.0`
com.diffplug.spotless	plugin	minor	`8.3.0` → `8.4.0`
com.google.devtools.ksp:symbol-processing-gradle-plugin (source)	dependencies	patch	`2.3.6` → `2.3.7`
androidx.navigation:navigation-safe-args-gradle-plugin (source)	dependencies	patch	`2.9.7` → `2.9.8`
com.android.tools.build:gradle (source)	dependencies	minor	`9.1.0` → `9.2.0`
androidx.baselineprofile (source)	plugin	patch	`1.5.0-alpha04` → `1.5.0-alpha05`
androidx.compose.runtime:runtime-tracing (source)	dependencies	minor	`1.10.5` → `1.11.0`
androidx.media3:media3-ui	dependencies	minor	`1.9.2` → `1.10.0`
androidx.media3:media3-exoplayer	dependencies	minor	`1.9.2` → `1.10.0`
com.android.test (source)	plugin	minor	`9.1.0` → `9.2.0`
com.android.application (source)	plugin	minor	`9.1.0` → `9.2.0`

Release Notes

gradle/gradle (gradle)

`v9.4.1`: 9.4.1

Compare Source

The Gradle team is excited to announce Gradle 9.4.1.

Here are the highlights of this release:

Java 26 support
Non-class-based JVM tests
Enhanced console progress bar

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
akankshaa-00,
Attila Kelemen,
Björn Kautler,
dblood,
Dennis Rieks,
duvvuvenkataramana,
John Burns,
Julian,
kevinstembridge,
Niels Doucet,
Philip Wedemann,
ploober,
Richard Hernandez,
Roberto Perez Alcolea,
Sebastian Lövdahl,
stephan2405,
Stephane Landelle,
Ujwal Suresh Vanjare,
Victor Merkulov,
Vincent Potuček,
Vladimir Sitnikov.

Upgrade instructions

Switch your build to use Gradle 9.4.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.4.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

gradle/actions (gradle/actions)

`v6.1.0`

Compare Source

New: Basic Cache Provider

A new MIT-licensed Basic Caching provider is now available as an alternative to the proprietary Enhanced Caching provided by gradle-actions-caching. Choose Basic Caching by setting cache-provider: basic on setup-gradle or dependency-submission actions.

Built on @actions/cache -- fully open source
Caches ~/.gradle/caches and ~/.gradle/wrapper directories
Cache key derived from build files (*.gradle*, gradle-wrapper.properties, etc.)
Clean cache on build file changes (no restore keys, preventing stale entry accumulation)

Limitations vs Enhanced Caching: No cache cleanup, no deduplication of cached content, cached content is fixed unless build files change.

Revamped Licensing & Distribution Documentation

New DISTRIBUTION.md documents the licensing of each component (particularly Basic Caching vs Enhanced Caching)
Simplified licensing notices in README, docs, and runtime log output
Clear usage tiers: Enhanced Caching is free for public repos and in Free Preview for private repos

What's Changed

Use a unique cache entry for wrapper-validation test by @bigdaz in #921
Update Dependencies by @bigdaz in #922
Update dependencies and resolve npm vulnerabilities by @bigdaz in #933
Add open-source 'basic' cache provider and revamp licensing documentation by @bigdaz in #930
Restructure caching documentation for basic and enhanced providers by @bigdaz in #934

Full Changelog: gradle/actions@v6.0.1...v6.1.0

`v6.0.1`

Compare Source

[!IMPORTANT]
The release of gradle/actions@v6 contains important changes to the license terms. More details in this blog post.
TL;DR: By upgrading to v6, you accept the Terms of Use for the gradle-actions-caching component.

Summary

The license changes in v6 introduced a gradle-actions-caching license notice that is printed in logs and in each job summary.

With this release, the license notice will be muted if build-scan terms have been accepted, or if a Develocity access key is provided.

What's Changed

Bump actions used in docs by @Goooler in #792
Add typing information for use by typesafegithub by @bigdaz in #910
Mute license warning when terms are accepted by @bigdaz in #911
Mention explicit license acceptance in notice by @bigdaz in #912
Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.21.1 to 2.21.2 in /sources/test/init-scripts in the gradle group across 1 directory by @dependabot[bot] in #907

Full Changelog: gradle/actions@v6.0.0...v6.0.1

`v6.0.0`

Compare Source

[!IMPORTANT]
The release of gradle/actions@v6 contains important changes to the license terms. More details in this blog post.
TL;DR: By upgrading to v6, you accept the Terms of Use for the gradle-actions-caching component.

Summary

Caching functionality of 'gradle-actions' has been extracted into a separate gradle-actions-caching library, and is no longer open-source. See this blog post for more context.
Existing, rudimentary, configuration-cache support has been removed, pending a fully functional implementation in gradle-actions-caching.
Dependencies updated to address security vulnerabilities

[!IMPORTANT]

Licensing notice

The caching functionality in `gradle-actions` has been extracted into `gradle-actions-caching`, a proprietary commercial component that is not covered by the MIT License.
The bundled `gradle-actions-caching` component is licensed and governed by a separate license, available at https://gradle.com/legal/terms-of-use/.

The `gradle-actions-caching` component is used only when caching is enabled and is not loaded or used when caching is disabled.

Use of the `gradle-actions-caching` component is subject to a separate license, available at https://gradle.com/legal/terms-of-use/.
If you do not agree to these license terms, do not use the `gradle-actions-caching` component.

What's Changed

Bump the npm-dependencies group in /sources with 2 updates by @dependabot[bot] in #866
Update known wrapper checksums by @github-actions[bot] in #868
Dependency updates by @bigdaz in #876
Update known wrapper checksums by @github-actions[bot] in #878
Bump @types/node from 25.3.3 to 25.3.5 in /sources in the npm-dependencies group across 1 directory by @dependabot[bot] in #877
Bump the github-actions group across 3 directories with 3 updates by @dependabot[bot] in #867
Update known wrapper checksums by @github-actions[bot] in #881
Bump the npm-dependencies group in /sources with 6 updates by @dependabot[bot] in #879
Bump the github-actions group across 3 directories with 5 updates by @dependabot[bot] in #880
Remove configuration-cache support by @bigdaz in #884
Extract caching logic into a separate gradle-actions-caching component by @bigdaz in #885
Update gradle-actions-caching library to v0.3.0 by @bot-githubaction in #899
Avoid windows shutdown bug by @bigdaz in #900
Dependency updates by @bigdaz in #905
Fix critical and high npm vulnerabilities by @bigdaz in #904
Fix rendering of job-disabled message by @bigdaz in #909

Full Changelog: gradle/actions@v5.0.2...v6.0.0

`v6`

Compare Source

`v5.0.2`

Compare Source

Summary

This release contains no functional changes. It updates dependencies and known Gradle wrapper checksums.

What's Changed

Update dependencies by @bigdaz in #851
Bump the github-actions group across 2 directories with 3 updates by @dependabot[bot] in #850
Update DV config by @bigdaz in #848
Convert project to ESM and update dependencies by @bigdaz in #854
Workflow fixes by @bigdaz in #856
Remove superfluous text from log message by @bigdaz in #861
Bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in #860
Bump the npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #859
Update known wrapper checksums by @github-actions[bot] in #857
Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.21.0 to 2.21.1 in /sources/test/init-scripts in the gradle group across 1 directory by @dependabot[bot] in #862
Bump the npm-dependencies group in /sources with 2 updates by @dependabot[bot] in #863
Bump github/codeql-action from 4.32.3 to 4.32.4 in the github-actions group across 1 directory by @dependabot[bot] in #864

Full Changelog: gradle/actions@v5.0.1...v5.0.2

`v5.0.1`

Compare Source

What's Changed

Bump npm code dependency versions
Bump Gradle versions used in sample builds
Bump dependencies versions in Gradle sample builds
Bump GitHub actions used for build and test
Update known wrapper checksums to include Gradle 9.2+

Full Changelog: gradle/actions@v5.0.0...v5.0.1

bumptech/glide (com.github.bumptech.glide:glide)

`v5.0.7`: Glide v5.0.7

Compose

N/A

KTX

N/A

Build Changes

Add missing version bump

Changes

N/A

Full Changelog: bumptech/glide@v5.0.6...v5.0.7

google/ksp (com.google.devtools.ksp)

`v2.3.7`

Compare Source

What's Changed

Bumped Kotlin target language version to 2.3.20 (#2821)
Fixed an issue where the plugin adds a maven repo to the build and corrected the compiler plugin artifact (#2856)
Fixed a crash with IllegalStateException when source contains a class-level destructuring declaration (#2861)
Fixed support for Gradle Isolated Projects (#2844)
Fixed Windows build failure when the path is long (#2815)
Fixed issue where KSP does not call SymbolProcessor in some Gradle setups (#2511)
Fixed a crash in PsiResolutionStrategy for annotations with nullable fully qualified names (#2864)
Improved performance by lazily computing fully qualified Java annotation names (#2860)

Contributors

Thanks to everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.6...2.3.7

androidx/media (androidx.media3:media3-ui)

`v1.10.0`

Compare Source

This release includes the following changes since
1.9.1 release:

Common library:
- Promote Player.mute() and Player.unmute() from UnstableApi to
  stable.
- Promote Format.pcmEncoding and C.PcmEncoding from UnstableApi to
  stable.
- Add Format.primaryTrackGroupId to identify the primary group of
  embedded Format instances
  (#294).
ExoPlayer:
- Add clipping capabilities to AdsMediaSource.
- Add support for dynamic scheduling in MediaCodecVideoRenderer to
  better align scheduling work and CPU wake-cycles to when video frames
  can be processed. You can enable this using
  experimentalSetEnableMediaCodecVideoRendererDurationToProgressUs() in
  the DefaultRenderersFactory.
- Allow setting a custom DataSource.Factory in
  DefaultPreloadManager.Builder.
- Allow ExoPlayer to be mocked without Robolectric by moving some
  default constants to ExoPlayer.Builder. Mocking this complex interface
  is not generally encouraged - only when the usage is
  minimal/simple/incidental
  (#2985).
  - This required moving DEFAULT_STUCK_PLAYING_DETECTION_TIMEOUT_MS
    from ExoPlayer to ExoPlayer.Builder (without deprecation).
- Fix a bug where ProgressiveMediaSource propagates out-of-date timeline
  info to the player, and the queued periods unexpectedly get removed
  (#3016).
- Fix issue where ExoPlayer would not request delayed audio focus when
  playback is requested during phone calls.
- Fix bug where transitions from on-demand to live content may cause
  re-buffers at the end of the on-demand content
  (#3052).
- Add support for Dolby Vision Profile 10
  (#2830).
- Fix bug where an uninitialized pre roll ad produced an
  ArrayIndexOutOfBoundsException
  (#3125).
CompositionPlayer:
- Add support for EditedMediaItem.removeVideo.
Transformer:
- EditedMediaItem.Builder.setFrameRate() can now set a maximum output
  frame rate for video, which is particularly helpful when increasing
  media speed with setSpeed().
Track selection:
- Change signature of DefaultTrackSelector.selectAllTracks to include
  the output array as a parameter, pre-populated with track overrides.
- Fix issue where embedded metadata tracks are selected irrespective of
  whether the corresponding primary track is selected
  (#294).
- Stabilize TrackSelectionParameters options for
  preferredVideoLanguages, preferredVideoLabels,
  preferredAudioLabels, preferredTextLabels and selectTextByDefault.
Extractors:
- MP4: Support files with large uuid boxes before other boxes like
  moov (#3046).
- MP4: Add support for Versatile Video Coding (VVC) tracks in MP4
  containers.
Inspector:
- Breaking change: remove FrameExtractor. Users should now depend on the
  new :media3-inspector-frame module and update imports to
  androidx.media3.inspector.frame.FrameExtractor.
- Introduce a new module for extracting and processing decoded video
  frames.
Audio:
- Change underlying decoding library for the IAMF decoder extension from
  libiamf to iamf_tools.
- IAMF decoding supports binaural output either through the decoder (when
  using the IAMF decoder extension) or through the Android Spatializer.
- Correctly remove support for AC4Profile22 and other legacy profiles
  when assessing AC-4 decoder support in Automotive scenarios
  (#2609).
- Improve the retry logic of AudioOutput initialization in
  DefaultAudioSink
  (#2905).
- Improve the retry logic of AudioOutput initialization in
  DefaultAudioSink
  (#2905).
- Attempt to match the output layout of the speakers (or Spatializer if
  applicable) when decoding IAMF, both with the IAMF extension and media
  codec decoders, supported by new fields and logic in AudioCapabilities
  and AudioCapabilitiesReceiver.
- Fix bug where playback gets stuck when playing a playlist of gapless
  audio in compressed offload mode.
Text:
- VobSub: Use START and STOP SPU control commands to derive cue
  duration instead of always defaulting to 5 seconds
  (#2935).
Metadata:
- Increase default count of metadata renderers to four to cover all
  potential metadata tracks published by HLS variants and renditions
  (#3043).
Effect:
- Move LottieOverlay to a new :media3-effect-lottie module (which also
  involved renaming it from androidx.media3.effect.LottieOverlay to
  androidx.media3.effect.lottie.LottieOverlay).
Effect Lottie:
- Introduce a new :media3-effect-lottie module which provides
  functionality for applying lottie effects to video frames.
IMA extension:
- Update the IMA SDK version to 3.39.0 in order to have access to the
  latest Ad media info API.
- Fix a bug where the ad MIME type did not match the MIME type provided in
  the IMA LOADED event. The fix now maps the ad MIME type using the ad
  media info provided by IMA.
- Add setEnableCustomTabs to ImaAdsLoader and
  ImaServerSideAdInsertionMediaSource, allowing users to control whether
  ad click-through URLs are launched using Custom Tabs.
- Add the ImaAdTagUriBuilder, a class that offers an alternative way to
  construct an adTagUri. It contains the setPreferredLinearOrientation
  API. This is an API in alpha testing that will allow you to set your
  preferred orientation for linear ads. If you want to join the alpha
  testing group, please reach out to your account partner.
Session:
- Fix a bug where large arrays in MediaMetadata.artworkData can crash
  the app.
- Use type int for @Player.Command argument in the ActionFactory
  interface (#2933).
- Make MediaSessionService and MediaLibraryService a
  LifecycleService, allowing to attach lifecycle-aware operations to the
  service's lifecycle
  (#187).
- Stop supporting device volume change commands from MediaController and
  MediaBrowser for local playbacks. Apps shouldn't change the local
  device volume, and if required, can use AudioManager APIs for this
  purpose.
- Detect stale Intent instances that started the service as a foreground
  service. This prevents a ForegroundServiceDidNotStartInTimeException
  being thrown by the system. This is a breaking change on an unstable API
  for apps implementing a custom MediaNotification.Provider as there is
  a new required method.
- Add builders for PendingIntent instances to be used with home screen
  widgets (#2933).
- Add static methods for creating Intent instances for Compose-based
  home screen widgets
  (#2933).
- Fix a bug where the media item transition wasn't reported to controllers
  when playback transitioned from a given media item index to another with
  the same media item for discontinuity reason 'AUTO' and 'SEEK'
  (#2997).
- Fix issue where system UI button placement workaround negatively affects
  other UI surface like Android Auto or manufacturers not needing the
  workaround (#3041).
- Fix issue where access to subscriptions was not synchronized
  (#3056).
- Workaround SysUI bug on API 29 where media session artwork in a
  particular size can crash SysUI and force the device to reboot
  (#3118).
UI:
- Add PlaybackSpeedControl Composable to media3-ui-compose for
  displaying and modifying playback speed.
- Add PlaybackSpeedToggleButton Composable to
  media3-ui-compose-material3 for controlling playback speed.
- Add ProgressSlider Composable to media3-ui-compose-material3 for
  displaying player progress and performing seeks using dragging and
  tapping (#2288).
- Avoid large offscreen buffer in animating PlayerControlView.
- Add Player Composable to media3-ui-compose-material3 which combines
  a ContentFrame with customizable controls aligned to top, center, and
  bottom.
- Hide playback position from the accessibility service to prevent
  continuous announcement update when PlayerControlView is visible.
HLS extension:
- Support X-PLAYOUT-LIMIT with HLS interstitials
  (#2484).
- Support the QUERYPARAM attribute with #EXT-X-DEFINE
  (#1854).
- Optimize HLS playlist parsing by caching regular expression matchers
  (#3008).
- Expose ID3 (EMSG) metadata track in audio renditions
  (#3043).
- Allow location fallback upon encountering load errors, if redundant
  streams from different locations are available
  (#1988).
- Fix X-SNAP behaviour for HLS interstitials to correctly calculate start
  and resumption position
  (#3013).
DASH extension:
- Fix issue where tracks with unaligned segment start times cause delays
  or missed samples at the beginning of playback
  (#3057).
- Fix bug where timestamps of inband EMSG v0 metadata are not set
  correctly (#3024).
RTSP extension:
- Fixed regression in H.264 and H.265 streaming that would incorrectly
  parse samples of the same access unit that spanned multiple RTP packets.
  This resulted in visual artifacts and corruption in the video
  (#3121).
Decoder extensions (FFmpeg, VP9, AV1, etc.):
- Add MPEG-H UI manager support to the MPEG-H decoder extension
  (#3066).
Cast extension:
- Add RemoteCastPlayer.Builder#setTrackSelector method that enables the
  implementation of track selection for Cast playbacks.
Remove deprecated symbols:
- Remove ExperimentalFrameExtractor. Use
  androidx.media3.inspector.frame.FrameExtractor instead.
- Remove ChannelMixingMatrix.create(). Use
  ChannelMixingMatrix.createForConstantGain() instead.
- Remove androidx.media3.extractor.metadata.flac.VorbisComment. Use
  androidx.media3.extractor.metadata.vorbis.VorbisComment instead.
- Remove MediaSource.prepareSource(MediaSourceCaller, TransferListener).
  Use MediaSource.prepareSource(MediaSourceCaller, TransferListener, PlayerId) instead.

`v1.9.3`

Compare Source

Audio:
- Fix bug where playback gets stuck when playing a playlist of gapless audio in compressed offload mode.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM (* 0-3 * * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

…b-android-compose into renovate/main-all

This reverts commit 497e853.

renovate · 2026-04-24T21:07:27Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

renovate Bot requested a review from a team as a code owner March 17, 2026 01:40

renovate Bot requested a review from MagicalMeghan March 17, 2026 01:40

renovate Bot changed the title ~~Update all dependencies to v1.9.3 (main)~~ fix(deps): update all dependencies to v1.9.3 (main) Mar 17, 2026

renovate Bot changed the title ~~fix(deps): update all dependencies to v1.9.3 (main)~~ fix(deps): update all dependencies (main) Mar 18, 2026

renovate Bot force-pushed the renovate/main-all branch 5 times, most recently from 080620c to 7f0a944 Compare March 25, 2026 21:08

renovate Bot changed the title ~~fix(deps): update all dependencies (main)~~ Update all dependencies (main) Mar 26, 2026

renovate Bot force-pushed the renovate/main-all branch from 7f0a944 to 9e2e90a Compare March 27, 2026 14:22

renovate Bot force-pushed the renovate/main-all branch 3 times, most recently from 7969cee to 8003856 Compare April 19, 2026 09:09

renovate Bot force-pushed the renovate/main-all branch 3 times, most recently from 9a370c0 to a31b0f1 Compare April 23, 2026 02:06

Update all dependencies

e7baec4

renovate Bot force-pushed the renovate/main-all branch from a31b0f1 to e7baec4 Compare April 23, 2026 20:46

Update all dependencies

44559e3

renovate Bot force-pushed the renovate/main-all branch from e7baec4 to 44559e3 Compare April 24, 2026 20:50

MagicalMeghan added 4 commits April 24, 2026 16:58

Fix Issues on renovate main

497e853

Merge branch 'renovate/main-all' of https://github.com/android/codela…

f8ddad0

…b-android-compose into renovate/main-all

Revert "Fix Issues on renovate main"

372197d

This reverts commit 497e853.

Fix renovate error

3fe7395

MagicalMeghan added 2 commits April 24, 2026 17:09

Fixing locale issues

8abe7f1

Update RallyTopAppBar.kt

8507ab3

bsagmoe approved these changes Apr 24, 2026

View reviewed changes

MagicalMeghan merged commit d74d859 into main Apr 24, 2026
16 checks passed

MagicalMeghan deleted the renovate/main-all branch April 24, 2026 21:37

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update all dependencies (main)#569

Update all dependencies (main)#569
MagicalMeghan merged 8 commits intomainfrom
renovate/main-all

renovate Bot commented Mar 17, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Apr 24, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

renovate Bot commented Mar 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v9.4.1: 9.4.1

Upgrade instructions

Reporting problems

New: Basic Cache Provider

Revamped Licensing & Distribution Documentation

What's Changed

Summary

What's Changed

Summary

Licensing notice

What's Changed

Summary

What's Changed

What's Changed

v5.0.7: Glide v5.0.7

Compose

KTX

Build Changes

Changes

What's Changed

Contributors

Configuration

Uh oh!

renovate Bot commented Apr 24, 2026

Edited/Blocked Notification

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate Bot commented Mar 17, 2026 •

edited

Loading

`v9.4.1`: 9.4.1

`v5.0.7`: Glide v5.0.7