Update example dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
com.google.firebase:firebase-bom	34.15.0 → 34.18.0
com.squareup.okhttp3:okhttp (source)	5.4.0 → 5.5.0
com.google.devtools.ksp (source)	2.3.9 → 2.3.11
com.google.dagger.hilt.android	2.60 → 2.60.1
com.google.dagger:hilt-compiler	2.60 → 2.60.1
com.google.dagger:hilt-android	2.60 → 2.60.1
androidx.appcompat:appcompat (source)	1.7.1 → 1.8.0
androidx.compose:compose-bom	2026.06.01 → 2026.08.00

---

Release Notes

lysine-dev/okhttp (com.squareup.okhttp3:okhttp)

v5.5.0

2026-08-16

This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature
improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s
Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re
looking at. With ECH, the router observes only the IP address. This additional privacy is most
effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.

This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37,
released June 2026). When other TLS stacks add ECH support, we'll integrate them.

ECH took a lot of work to implement because the encryption keys are published over DNS in the
[HTTPS resource record], and we needed to write new code to fetch these records. This release
includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not
just IP addresses!), asynchronous streaming results, and in-memory caching.

To opt in, you can use DnsOverHttps:

// DnsOverHttps itself uses OkHttpClient. Build both clients upon the
// same bootstrap client so they share a connection pool and dispatcher.
val bootstrapClient = OkHttpClient()

// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.
val client = bootstrapClient.newBuilder()
  .dns(DnsOverHttps.Builder()
    .client(bootstrapClient)
    .url("https://1.1.1.1/dns-query".toHttpUrl())
    .build())
  .build()

You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are
deficient because its DNS queries are not encrypted by default.

// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.
val client = OkHttpClient.Builder()
  .dns(AndroidDns())
  .build()

• New: OkHttp artifacts is now signed with our [new signing key]. This project and three sibling
  projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
• Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
• Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
• Fix: Closing a multipart part's sink no longer closes the entire request body.
• Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts
  weren’t applied correctly.
• Fix: Follow [RFC 1008]'s requirements for HTTP QUERY redirects.
• Fix: Fall back to no proxy when the system proxy selector throws. Previously this would cause
  the HTTP call to crash.
• Upgrade: [Okio 3.18.1][okio_3_18_1].

google/ksp (com.google.devtools.ksp)

v2.3.11

Compare Source

What's Changed

• Support org.gradle.isolated-projects for project isolation (#​3051)
• Fix premature kspDebugAndroidTest task skipping on Android library modules (#​3050)
• Fix missing parent declaration exception for @NotNull annotations during incremental compilation (#​3030)
• Clean output directories instead of skipping tasks when processor classpath transitions to empty (#​3046)
• Fix build cache misses by marking KspGradleConfig.logLevel as @Internal (#​3039)
• Add org.gradle.isolated-projects=true to KSP Gradle properties reference table (#​3076)
• Add KSP Gradle properties reference table to README documentation (#​3070)
• Document collection values in KSValueArgument.value (#​3069)
• Update error messaging for ksp.useKSP2 deprecation notice (#​3066)

Contributors

• Thanks to @​simonlebras, @​ChristianKatzmann, @​Yong-yuan-X, @​bacecek, @​KlyneChrysler, @​Shaurya2k06, and everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.10...2.3.11

v2.3.10

Compare Source

What's Changed

• Fix OOMs caused by unstopped coroutine Dispatcher threads by moving KSP task cache to a gradle build service (#​2817)
• Sanitize ':' in internal-name module suffix so KSP works with Kotlin 2.4.0 default module names (#​2964)
• Filter source file trees in KspAATask to restore NO-SOURCE skipping behaviour (#​2947)
• Fix R-class resolution in KSP when AGP 9 built-in Kotlin is enabled (#​2857)
• Fix KSP2 incremental cache path normalization mismatch (#​2854)
• Normalize line endings for KspAATask source roots to prevent cross-platform remote build cache misses (#​2849)
• Fix bug where KSP incremental compilation does not consider library class references in annotations (#​3011)
• Consume all Kotlin sources in KSP to support other code generators (#​3001)
• Fix configuration cache invalidation in klib cross-compilation check (#​3014)
• Memoized hash code for KSTypeImpl to speed up processing (#​2896)
• Fix incorrect name generation for data classes annotated with @JvmRecord (#​2813)
• Include kotlinx.coroutines in the distributed uber jar symbol-processing-aa-embeddable (#​2938)
• New debugging features for incremental compilation, including additional logging and dependency graph visualization (#​3015)
• Deprecate the ksp(...) Gradle configuration in Kotlin Multiplatform (KMP) projects in favor of target-specific configurations (#​2956). Note: Non-KMP projects are also affected. For migration details, see the documentation.

Contributors

• Thanks to @​mvanhorn, @​Yong-yuan-X, @​MariusVolkhart, @​shmuelr and everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.9...2.3.10

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.