build(deps): bump the maven group across 1 directory with 6 updates

[dependabot]

Bumps the maven group with 5 updates in the / directory:

Package	From	To
org.eclipse.jgit:org.eclipse.jgit	7.3.0.202506031305-r	7.5.0.202512021534-r
com.android.tools.build:apksig	8.0.2	9.0.0
com.squareup.retrofit2:retrofit	2.9.0	3.0.0
com.squareup.moshi:moshi-kotlin	1.15.0	1.15.2
gradle-wrapper	8.13	9.3.0

Updates org.eclipse.jgit:org.eclipse.jgit from 7.3.0.202506031305-r to 7.5.0.202512021534-r

Commits

• 402b0dd JGit v7.5.0.202512021534-r
• 8e44997 Merge branch 'master' into stable-7.5
• 34f169f [ignore patterns] Backslash is a general escape
• 6842299 Merge branch 'stable-7.4'
• 4189f39 Merge branch 'stable-7.3' into stable-7.4
• 85b454b Merge branch 'stable-7.2' into stable-7.3
• 6b8d2a5 Merge branch 'stable-7.1' into stable-7.2
• 052c411 Merge branch 'stable-7.0' into stable-7.1
• 4eb0802 Merge branch 'stable-6.10' into stable-7.0
• ffebbe7 Prepare 7.5.0-SNAPSHOT builds
• Additional commits viewable in compare view

Updates com.android.tools.build:apksig from 8.0.2 to 9.0.0

Updates com.squareup.retrofit2:retrofit from 2.9.0 to 3.0.0

Release notes

Sourced from com.squareup.retrofit2:retrofit's releases.

3.0.0

Changed

• Upgrade to OkHttp 4.12 (from 3.14).

  This is the version of OkHttp that is written in Kotlin, and as a result Retrofit now has a transitive Kotlin dependency. However, this is also the supported version of OkHttp whereas the previous version was out of support for nearly 4 years.

Note: The 3.x versions of Retrofit maintain forward binary-compatibility with the 2.x versions. This means libraries compiled against 2.x can still be used with the 3.x versions.

2.12.0

New

• First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

  The following converters support this feature through a new withStreaming() factory method:

  • Gson
  • Jackson
  • Moshi
  • Protobuf
  • Wire

Fixed

• Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.

2.11.0

New

• The built-in OptionalConverterFactory is now public to allow installing it before other converters which consume all types (e.g., Moshi, Gson, Jackson, etc.).

Fixed

• Ensure that exceptions thrown from failure to parse method annotations can be observed by multiple threads/callers. Previously only the first caller would see the actual parsing exception and other callers would get a cryptic ClassCastException.

2.10.0

New

• Support using Unit as a response type. This can be used for non-body HTTP methods like HEAD or body-containing HTTP methods like GET where the body will be discarded without deserialization.

• kotlinx.serialization converter!

  This was imported from github.com/JakeWharton/retrofit2-kotlinx-serialization-converter/ and remains unchanged from its 1.0.0 release.

  The Maven coordinates are com.squareup.retrofit2:converter-kotlinx-serialization.

• JAXB 3 converter!

... (truncated)

Changelog

Sourced from com.squareup.retrofit2:retrofit's changelog.

3.0.0 - 2025-05-15

Changed

• Upgrade to OkHttp 4.12 (from 3.14).

  This is the version of OkHttp that is written in Kotlin, and as a result Retrofit now has a transitive Kotlin dependency. However, this is also the supported version of OkHttp whereas the previous version was out of support for nearly 4 years.

Note: The 3.x versions of Retrofit maintain forward binary-compatibility with the 2.x versions. This means libraries compiled against 2.x can still be used with the 3.x versions.

2.12.0 - 2025-05-15

New

• First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

  The following converters support this feature through a new withStreaming() factory method:

  • Gson
  • Jackson
  • Moshi
  • Protobuf
  • Wire

Fixed

• Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.

[2.11.0] - 2024-03-28

New

• The built-in OptionalConverterFactory is now public to allow installing it before other converters which consume all types (e.g., Moshi, Gson, Jackson, etc.).

Fixed

• Ensure that exceptions thrown from failure to parse method annotations can be observed by multiple threads/callers. Previously only the first caller would see the actual parsing exception and other callers would get a cryptic ClassCastException.

[2.10.0] - 2024-03-18

New

• Support using Unit as a response type. This can be used for non-body HTTP methods like HEAD or body-containing HTTP methods like GET where the body will be discarded without deserialization.
• kotlinx.serialization converter!

... (truncated)

Commits

• 3ab0f1a Prepare version 3.0.0
• e5c02d0 Commit 2.x docs (#4378)
• 5bc3f18 Fix links on the proudction site (#4377)
• 7c3b229 Remove compileOnly stdlib dependency (#4376)
• 8418547 Update okhttp monorepo to v4 (major) (#4375)
• 06216a3 Try to fix removal of latest dir during release
• 1697bdc Prepare next development version
• 5a6ce36 Prepare version 2.12.0
• 4fb8aed Fix artifact name (#4372)
• bf11ef4 Dedicated website build, final status job (#4371)
• Additional commits viewable in compare view

Updates com.squareup.retrofit2:converter-moshi from 2.9.0 to 3.0.0

Release notes

Sourced from com.squareup.retrofit2:converter-moshi's releases.

3.0.0

Changed

• Upgrade to OkHttp 4.12 (from 3.14).

  This is the version of OkHttp that is written in Kotlin, and as a result Retrofit now has a transitive Kotlin dependency. However, this is also the supported version of OkHttp whereas the previous version was out of support for nearly 4 years.

Note: The 3.x versions of Retrofit maintain forward binary-compatibility with the 2.x versions. This means libraries compiled against 2.x can still be used with the 3.x versions.

2.12.0

New

• First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

  The following converters support this feature through a new withStreaming() factory method:

  • Gson
  • Jackson
  • Moshi
  • Protobuf
  • Wire

Fixed

• Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.

2.11.0

New

• The built-in OptionalConverterFactory is now public to allow installing it before other converters which consume all types (e.g., Moshi, Gson, Jackson, etc.).

Fixed

• Ensure that exceptions thrown from failure to parse method annotations can be observed by multiple threads/callers. Previously only the first caller would see the actual parsing exception and other callers would get a cryptic ClassCastException.

2.10.0

New

• Support using Unit as a response type. This can be used for non-body HTTP methods like HEAD or body-containing HTTP methods like GET where the body will be discarded without deserialization.

• kotlinx.serialization converter!

  This was imported from github.com/JakeWharton/retrofit2-kotlinx-serialization-converter/ and remains unchanged from its 1.0.0 release.

  The Maven coordinates are com.squareup.retrofit2:converter-kotlinx-serialization.

• JAXB 3 converter!

... (truncated)

Changelog

Sourced from com.squareup.retrofit2:converter-moshi's changelog.

3.0.0 - 2025-05-15

Changed

• Upgrade to OkHttp 4.12 (from 3.14).

  This is the version of OkHttp that is written in Kotlin, and as a result Retrofit now has a transitive Kotlin dependency. However, this is also the supported version of OkHttp whereas the previous version was out of support for nearly 4 years.

Note: The 3.x versions of Retrofit maintain forward binary-compatibility with the 2.x versions. This means libraries compiled against 2.x can still be used with the 3.x versions.

2.12.0 - 2025-05-15

New

• First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

  The following converters support this feature through a new withStreaming() factory method:

  • Gson
  • Jackson
  • Moshi
  • Protobuf
  • Wire

Fixed

• Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.

[2.11.0] - 2024-03-28

New

• The built-in OptionalConverterFactory is now public to allow installing it before other converters which consume all types (e.g., Moshi, Gson, Jackson, etc.).

Fixed

• Ensure that exceptions thrown from failure to parse method annotations can be observed by multiple threads/callers. Previously only the first caller would see the actual parsing exception and other callers would get a cryptic ClassCastException.

[2.10.0] - 2024-03-18

New

• Support using Unit as a response type. This can be used for non-body HTTP methods like HEAD or body-containing HTTP methods like GET where the body will be discarded without deserialization.
• kotlinx.serialization converter!

... (truncated)

Commits

• 3ab0f1a Prepare version 3.0.0
• e5c02d0 Commit 2.x docs (#4378)
• 5bc3f18 Fix links on the proudction site (#4377)
• 7c3b229 Remove compileOnly stdlib dependency (#4376)
• 8418547 Update okhttp monorepo to v4 (major) (#4375)
• 06216a3 Try to fix removal of latest dir during release
• 1697bdc Prepare next development version
• 5a6ce36 Prepare version 2.12.0
• 4fb8aed Fix artifact name (#4372)
• bf11ef4 Dedicated website build, final status job (#4371)
• Additional commits viewable in compare view

Updates com.squareup.moshi:moshi-kotlin from 1.15.0 to 1.15.2

Changelog

Sourced from com.squareup.moshi:moshi-kotlin's changelog.

[1.15.2] - 2024-12-05

• Do not generate conditional shrinker rules (i.e., -if) when the rule is already predicated on the presence of the target type (as -keepnames and -keepclassmembers are). This will improve shrinker performance for projects with hundreds of model types, as conditional rules are more expensive to evaluate.

[1.15.1] - 2024-01-30

• Upgrade to Okio 3.7.0

Commits

• 7f957b1 Prepare version 1.15.2
• 8feae55 Remove redundant preconditions from generated ProGuard rules (#1913)
• 932807e Prepare next development version
• ee55c10 Prepare version 1.15.1
• 9ea3d52 Latest Okio
• 637bf02 Publish empty Javadoc for moshi-kotlin-codegen (#1674)
• 5225006 Prepare next development version.
• See full diff in compare view

Updates gradle-wrapper from 8.13 to 9.3.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions