Update all dependencies

[renovate-bot]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/cache	action	major	v5 → v6
actions/checkout	action	major	v6 → v7
gradle (source)		minor	9.4.1 → 9.6.0
androidx.navigation3:navigation3-ui (source)	dependencies	patch	1.1.1 → 1.1.3
androidx.navigation3:navigation3-runtime (source)	dependencies	patch	1.1.1 → 1.1.3
com.google.android.gms:play-services-wearable	dependencies	major	19.0.0 → 20.0.1
io.grpc:grpc-protobuf-lite	dependencies	minor	1.80.0 → 1.82.1
io.grpc:grpc-binder	dependencies	minor	1.80.0 → 1.82.1
io.grpc:grpc-android	dependencies	minor	1.80.0 → 1.82.1
com.google.genai:google-genai	dependencies	minor	1.51.0 → 1.59.0
androidx.paging:paging-compose (source)	dependencies	minor	3.4.2 → 3.5.0
io.grpc:grpc-stub	dependencies	minor	1.80.0 → 1.82.1
com.google.protobuf:protobuf-javalite (source)	dependencies	minor	4.34.1 → 4.35.1
com.android.tools.build:gradle (source)	dependencies	minor	9.1.0 → 9.2.1
com.diffplug.spotless	plugin	minor	8.4.0 → 8.7.0
androidx.compose.runtime:runtime-tracing (source)	dependencies	patch	1.11.0 → 1.11.3
io.github.takahirom.roborazzi	plugin	minor	1.59.0 → 1.64.0
io.github.takahirom.roborazzi:roborazzi-junit-rule	dependencies	minor	1.59.0 → 1.64.0
io.github.takahirom.roborazzi:roborazzi-painter	dependencies	minor	1.59.0 → 1.64.0
io.github.takahirom.roborazzi:roborazzi-compose	dependencies	minor	1.59.0 → 1.64.0
io.github.takahirom.roborazzi:roborazzi-accessibility-check	dependencies	minor	1.59.0 → 1.64.0
io.github.takahirom.roborazzi:roborazzi	dependencies	minor	1.59.0 → 1.64.0
io.grpc:protoc-gen-grpc-java	dependencies	minor	1.80.0 → 1.82.1
com.google.android.gms:play-services-auth	dependencies	minor	21.5.1 → 21.6.0
com.google.android.gms:oss-licenses-plugin	dependencies	minor	0.11.0 → 0.12.0
com.google.android.material:material	dependencies	minor	1.13.0 → 1.14.0
com.vanniktech.maven.publish	plugin	minor	0.36.0 → 0.37.0
com.vanniktech:gradle-maven-publish-plugin	dependencies	minor	0.36.0 → 0.37.0
com.autonomousapps.dependency-analysis	plugin	minor	3.7.0 → 3.15.0
ee.schimke.composeai.preview	plugin	minor	0.7.7 → 0.16.1
androidx.compose.material3:material3 (source)	dependencies	patch	1.5.0-alpha18 → 1.5.0-alpha22
com.squareup.okhttp3:okhttp-coroutines (source)	dependencies	minor	5.3.2 → 5.4.0
com.squareup.okhttp3:okhttp (source)	dependencies	minor	5.3.2 → 5.4.0
com.squareup.okhttp3:mockwebserver (source)	dependencies	minor	5.3.2 → 5.4.0
com.squareup.okhttp3:logging-interceptor (source)	dependencies	minor	5.3.2 → 5.4.0
com.gradle.develocity	plugin	patch	4.4.1 → 4.4.3
androidx.lifecycle:lifecycle-viewmodel-ktx (source)	dependencies	minor	2.10.0 → 2.11.0
androidx.lifecycle:lifecycle-viewmodel-compose (source)	dependencies	minor	2.10.0 → 2.11.0
androidx.lifecycle:lifecycle-viewmodel (source)	dependencies	minor	2.10.0 → 2.11.0
androidx.lifecycle:lifecycle-runtime-testing (source)	dependencies	minor	2.10.0 → 2.11.0
androidx.lifecycle:lifecycle-service (source)	dependencies	minor	2.10.0 → 2.11.0
androidx.lifecycle:lifecycle-runtime-compose (source)	dependencies	minor	2.10.0 → 2.11.0
androidx.lifecycle:lifecycle-runtime-ktx (source)	dependencies	minor	2.10.0 → 2.11.0
androidx.lifecycle:lifecycle-process (source)	dependencies	minor	2.10.0 → 2.11.0
androidx.lifecycle:lifecycle-common (source)	dependencies	minor	2.10.0 → 2.11.0
androidx.core:core-ktx (source)	dependencies	minor	1.18.0 → 1.19.0
androidx.core:core (source)	dependencies	minor	1.18.0 → 1.19.0
androidx.media3:media3-ui	dependencies	patch	1.10.0 → 1.10.1
androidx.media3:media3-test-utils-robolectric	dependencies	patch	1.10.0 → 1.10.1
androidx.media3:media3-test-utils	dependencies	patch	1.10.0 → 1.10.1
androidx.media3:media3-session	dependencies	patch	1.10.0 → 1.10.1
androidx.media3:media3-exoplayer-workmanager	dependencies	patch	1.10.0 → 1.10.1
androidx.media3:media3-exoplayer-rtsp	dependencies	patch	1.10.0 → 1.10.1
androidx.media3:media3-exoplayer-hls	dependencies	patch	1.10.0 → 1.10.1
androidx.media3:media3-exoplayer-dash	dependencies	patch	1.10.0 → 1.10.1
androidx.media3:media3-exoplayer	dependencies	patch	1.10.0 → 1.10.1
androidx.media3:media3-datasource-okhttp	dependencies	patch	1.10.0 → 1.10.1
androidx.media3:media3-common	dependencies	patch	1.10.0 → 1.10.1
androidx.health:health-services-client (source)	dependencies	patch	1.1.0-rc01 → 1.1.0-rc02

---

Release Notes

actions/cache (actions/cache)

v6.0.0

Compare Source

What's Changed

• Update packages, migrate to ESM by @​Samirat in #​1760

Full Changelog: actions/cache@v5...v6.0.0

v6

Compare Source

actions/checkout (actions/checkout)

v7.0.0

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

v7

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

gradle/gradle (gradle)

v9.6.0

Compare Source

v9.5.1: 9.5.1

Compare Source

The Gradle team is excited to announce Gradle 9.5.1.

Here are the highlights of this release:

• Task provenance in reports and failure messages
• Type-safe accessors for precompiled Kotlin Settings plugins

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
atm1020,
mataha,
Adam,
Attila Kelemen,
Benedikt Ritter,
Björn Kautler,
Caro Silva Rode,
CHANHAN,
Dmitry Nezavitin,
Eng Zer Jun,
KugelLibelle,
Madalin Valceleanu,
Markus Gaisbauer,
Oliver Kopp,
Philip Wedemann,
ploober,
Roberto Perez Alcolea,
Rohit Anand,
Suvrat Acharya,
Ujwal Suresh Vanjare,
Victor Merkulov

Upgrade instructions

Switch your build to use Gradle 9.5.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.5.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.5.0: 9.5.0

Compare Source

The Gradle team is excited to announce Gradle 9.5.0.

Here are the highlights of this release:

• Task provenance in reports and failure messages
• Type-safe accessors for precompiled Kotlin Settings plugins

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
atm1020,
mataha,
Adam,
Attila Kelemen,
Benedikt Ritter,
Björn Kautler,
Caro Silva Rode,
CHANHAN,
Dmitry Nezavitin,
Eng Zer Jun,
KugelLibelle,
Madalin Valceleanu,
Markus Gaisbauer,
Oliver Kopp,
Philip Wedemann,
ploober,
Roberto Perez Alcolea,
Rohit Anand,
Suvrat Acharya,
Ujwal Suresh Vanjare,
Victor Merkulov

Upgrade instructions

Switch your build to use Gradle 9.5.0 by updating your wrapper:

./gradlew wrapper --gradle-version=9.5.0 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

grpc/grpc-java (io.grpc:grpc-protobuf-lite)

v1.82.1

• protoc-gen-grpc-java: Fix missing osx-x86_64 binary (#​12878). This fixes a regression in v1.82.0

v1.82.0

This release drops support for Bazel 7. It may still run, but we are no longer testing it. We are testing Bazel 8 and 9.

We are anticipating requiring Netty 4.2 in the next release. Please file an issue if you still need Netty 4.1 support.

Behavior Changes

• xds: Disable Priority LB child policy retention cache (#​12806). Previously, when a priority became inactive, its associated child load balancer was kept in a deactivated state for potential reuse. Now, inactive child balancers are immediately torn down and removed.
• xds: skip DiscoveryRequest for unsubscribed types on stream ready (#​12782). When the bootstrap declares more than one xDS server (e.g. a default server for LDS/CDS plus an authority-specific EDS-only server), grpc-java was sending CDS/LDS DiscoveryRequests to the EDS-only server too. That server replies UNIMPLEMENTED, which tears down the stream and EDS data never arrives. This fix makes it skip DiscoveryRequests for resource types we don't actually subscribe to on a given server.

Improvements

• Remove JSR-305 @ThreadSafe annotation and replace with JavaDoc (#​12762). Removes JSR-305 annotations but instead of replacing it with ErrorProne's ThreadSafe, sticks to adding a JavaDoc comment. This is done only in public non-final classes and interfaces. This allows Java applications that have moved away from javax to compile and avoids a bug in Immutables and Lombok (and possibly other annotation processors) from failing when JSR-305 is not present.
• core: Reduce per-stream idle memory on the server by 0.5 KB (b38df6c). The main improvement here is not retaining the request Metadata for the life of the RPC. That means RPCs with larger request Metadata would see a larger benefit.
• core: Clarify missing content-type on HTTP error responses (#​12720). Adjusts the diagnostic for the missing rather than invalid content-type, in the Status description.
• core: throw IOException when ProxySelector returns null or empty list (#​12793). ProxySelector.select(URI) is required to return a non-null, non-empty list. Some implementations violate this, which previously caused an opaque crash in ProxyDetectorImpl. Now it detects this case explicitly and fails gracefully, naming the offending ProxySelector class to help with debugging.
• okhttp: enable TLS 1.3 by default for Android clients, retain TLS 1.2-only for desktop JVM (f430131)
• xds: Reduce per-endpoint memory from CDS LB (cc0d1a8). This is most noticeable when there are many endpoints returned by EDS, but the LB policy only uses a few of them, like pick_first.
• xds: pre-parse custom metric names in WRR load balancer (#​12773) (324fce7). This reduces the per-RPC overhead of the gRFC A114 support added in v1.81.0
• xds: Propagate status cause through XdsDepManager (13b4b97). This preserves more information for failures communicating with the control plane.
• binder: Give clear error when message is larger than parcel (d92ca44)

Bug Fixes

• xds: Trust Manager fix for certain scenarios where SAN validation shouldn't use the SNI sent (#​12775) (bb153a8).
• core: Cancel DelayedClientCall when application listener throws (#​12761). Align DelayedClientCall.DelayedListener with ClientCallImpl's existing behavior for listener exceptions. When the application listener throws from onHeaders/onMessage/onReady, catch the Throwable, cancel the call with CANCELLED (cause = the throwable), and swallow subsequent callbacks. Previously, a throw from the application listener escaped to the callExecutor's uncaught-exception handler. The real call was not cancelled and the transport kept delivering callbacks to an already broken listener
• core,opentelemetry: Fix server metric labels on early close (#​12774). Addresses the server-side OpenTelemetry metric labeling bug where a generated method can be recorded as grpc.method="other" if streamClosed() happens before serverCallStarted().
• core: Fix pick_first NPE with GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=true when accepting resolved addresses and in CONNECTING state (#​12814). It makes sure that whenever PickFirstLeafLoadBalancer transitions into CONNECTING the current address in the addressIndex has a corresponding subchannel. This prevents an NPE in acceptResolvedAddresses in some situations.
• okhttp: HPACK should fail on varint overflow (ec10992). This should have no visible impact in normal use. It mostly just makes it easier to debug broken implementations
• xds: When using the file watcher certificate provider, reload cert/key even if only one of them changes (f4125c5)
• compiler: Avoid compile error on weird proto file names (f021bef)

New Features

• googleapis: support ?force-xds query parameter in the google-c2p resolver (#​12760) (86fa860). This disables environment checks and uses xDS unconditionally. Please note that this feature has not yet seen comprehensive testing.

Dependencies

• Upgrade Netty to 4.1.133 (ada087b)
• bazel: Upgrade googleapis proto repo to commit 1dbb1a1 (ec0a9c9). This fixed a rules_go incompatibility issue with Bazel 9.1. But it also greatly reduced the overall transitive dependencies, as the C++ grpc repo is no longer a dependency
• bazel: Upgrade workflows to Bazel 8 (039ad77) add Bazel 9.1.0 to our CI matrix (17be0d3)
• protoc-gen-grpc-java: Linux binaries are now built with Ubuntu 20.04 instead of 18.04 (8802dc3, da98b04)

Thanks to

@​becomeStar
@​bengtsson1-flir
@​jnowjack-lucidchart
@​Kainsin
@​kenkangxgwe
@​mfperminov
@​paulmurhy123
@​schiemon
@​therepanic

v1.81.0

In this release we drop support for Android API level 22 or lower (Lollipop or earlier), following Google Play Service’s discontinued updates for Lollipop (API levels 21 & 22) and now requires a minimum of API level 23 (Android 6.0 Marshmallow).

API Changes

• api: Deprecate LoadBalancer.handleResolvedAddresses(). Developers maintaining custom LoadBalancer implementations should transition to using LoadBalancer.acceptResolvedAddresses(). Unlike the deprecated method, acceptResolvedAddresses() returns a Status object, allowing the load balancer to explicitly report success or reject the update if the provided addresses or configuration are invalid. (#​11623)

Behavior Changes

• core: Enable dns "caching" on Android for 30 seconds to reduce CPU impact of a refresh loop with an LB policy (0675f70). DnsNameResolver ignores re-resolution requests on OpenJDK-like platforms if it has been too soon since the last DNS query because InetAddress.getAllByName() has a cache with a fixed entry lifetime, but this logic was disabled for Android which does not have that style of cache. Android’s cache uses the result TTL, which will rarely be less than 30 seconds. This change would probably be most noticeable when 1) changing to a different network (e.g., from wifi to mobile), 2) the server has different addresses for different networks, and 3) the app is not using AndroidChannelBuilder with an android.context.Context. For reference, it seems Chrome caches for 1 minute

Bug Fixes

• opentelemetry: Fix baggage propagation, the baggage propagation for opentelemetry introduced in #​12389 was broken. The context is decided once and used for all recording for the call, thus guaranteeing all record()s have consistent information.
• core: Address a race condition where ManagedChannelOrphanWrapper could incorrectly log a "not shutdown properly" warning during garbage collection when using directExecutor(). (#​12705) (d459338)
• xds: Fix xDS HTTP CONNECT's transport socket name bug which is now corrected to use typeUrl. (#​12740) (eac9fe9)
• xds: Fix an issue where subchannel metrics were dropping their association with the backend_service. This ensures xDS load balancing metrics are reported accurately. (#​12735)

New Features

• netty: Add tcp metrics, by implementing a few of the metrics defined in A80.
• api: Add a CallOption for a custom label on per-RPC metrics (0e39b29). This CallOption is copied by grpc-opentelemetry to the grpc.client.call.custom label as defined by gRFC A108. See also the gRPC OpenTelemetry Metrics guide (update in-progress)
• xds: Add support for Weighted Round Robin (WRR) load balancing driven by custom backend metrics, implementing the behavior defined in gRFC A114. (#​12645)
• utils: Update AdvancedTlsX509KeyManager so that developers can now preserve and use key aliases when dynamically reloading TLS certificates. (#​12686)

Documentation

• Update the "Outgoing Flow Control" section in the Manual Flow Control example to say onNext() does not block, but rather queues the messages in memory and advises developers to use CallStreamObserver.isReady() to prevent this memory exhaustion (#​12700) (a3a9ffc) (#​12726) (65ae2ef)
• examples: Clean up Health example, and document need for grpc-services (3ed732f)

Dependencies

• Upgrade Dependencies (#​12719) (16e17ab). Google-auth-library: 1.42.1, animal-sniffer: 1.27, assertj-core:3.27.7, error_prone_annotations:2.48.0, proto-google-common-protos:2.64.1, google-cloud-logging:3.23.10, jetty-http2-server:12.1.7, jetty-ee10-servlet:12.1.7, lincheck:3.4, opentelemetry-api:1.60.1, opentelemetry-exporter-prometheus:1.60.1-alpha, opentelemetry-gcp-resources:1.54.0-alpha, opentelemetry-sdk-extension-autoconfigure:1.60.1, opentelemetry-sdk-testing:1.60.1, robolectric:4.16.1, tomcat-embed-core:10.1.52, tomcat-embed-core9: 9.0.115,
• Upgrade Netty to 4.1.132 and netty-tcnative to 2.0.75 (1528f80)

Thanks to

• @​becomeStar
• @​benjaminp
• @​JoeCqupt
• @​Kainsin
• @​merlimat
• @​SreeramdasLavanya
• @​themechbro
• @​zhangweikop

googleapis/java-genai (com.google.genai:google-genai)

v1.59.0

Features

• Add audioOffset to VoiceActivity (3d5a51b)
• Add interimInputTranscription to LiveServerContent (3d5a51b)
• Add LanguageAuto, LanguageHints, and adaptationPhrases to AudioTranscriptionConfig (3d5a51b)

Documentation

• announce Automatic Function Calling (AFC) upcoming breaking change warning (fb2a9b4)
• Clarify Live API START/END_SENSITIVITY_HIGH/LOW defaults are different in Gemini Live and Gemini Enterprise Agent Platform Live API (b2e8024), closes #​2555
• Update to latest Gemini models in the examples (ef1fa86)

v1.58.0

Compare Source

Features

• Add custom OkHttpClient support in ClientOptions (a6913fa)
• Add ServiceTier to UsageMetadata (df1288b)
• Improve performance of local tokenizer (d065597)

v1.57.0

Compare Source

Features

• Add Agent Platform MCP support to async generate_content (0b20c55)
• Add transcription language code. (0d7fcfa)
• Add TranslationConfig for live translation. (ed7efcf)
• Support ReinforcementTuning in GenAI SDK including ValidateReward API method. (05a7a3a)

Documentation

• A comment for field enable_widget in message GoogleMaps is changed (c630c08)
• A comment for field google_maps_widget_context_token in message GroundingMetadata is changed (c630c08)

v1.56.0

Compare Source

Features

• additional computer_use field support for vertex. (94671df)
• Support Reinforcement Tuning in GenAI SDK (c0248fb)

v1.55.0

Compare Source

Features

• add enable_prompt_injection_detection for Computer Use feature for the Gemini API. (1a496a7)
• add new fields (d4b0867)

v1.54.0

Compare Source

⚠ BREAKING CHANGES

• Remove the experimental Interactions module. This feature will be supported in the future.

Features

• Add more details to the ApiResponse error message (c429c2b)
• support Blocking FunctionCall in Live API in AgentPlatform (Vertex) (0d1cc9c)

Bug Fixes

• Missing jackson-module-kotlin in classpath (0849b86)
• request level timeout is ignored in favor of client level timeout (c9464b5)
• request URL is incorrectly rewritten when baseUrl is configured as a proxy address (400776d)

Documentation

• Update the README (beb39f7)

v1.53.0

Compare Source

Features

• [Python] Multimodal file search (b12cd29)
• Multimodal file search (aaf0c40)

v1.52.0

Compare Source

Features

• [Interactions] Add FileCitation.{custom_metadata,media_id,page_number} (a09716e)
• Add output_info to BatchJob (e337ba9)
• Add ImageResizeMode for GenerateVideos (e089fcb)
• Add new Gemini Deep Research agent models (88d7019)
• Add Vertex Dataset input and output options for batch jobs (612601d)
• interaction-api: Add grounding tool usage breakdown to Interaction Usage. (bc2f815)
• introduce enterprise and GOOGLE_GENAI_USE_ENTERPRISE (97adcd9)
• Replace the more ambiguous rate field with sample_rate. (d762b6e)

Documentation

• replace Vertex AI with Gemini Enterprise Agent Platform ([84c1d43](https://redirect.github.com

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.