chore(deps): bump the gradle-dependencies group across 1 directory with 10 updates

[dependabot]

Bumps the gradle-dependencies group with 7 updates in the / directory:

Package	From	To
com.google.firebase:firebase-crashlytics-gradle	3.0.7	3.0.8
com.google.protobuf:protobuf-java	4.35.1	4.36.0
com.google.guava:guava	33.6.0-android	33.7.1-android
com.google.firebase:firebase-bom	34.17.0	34.18.0
org.json:json	20260719	20260814
gradle-wrapper	9.7.0	9.7.1
net.zetetic:sqlcipher-android	4.17.0	4.18.0

Updates com.google.firebase:firebase-crashlytics-gradle from 3.0.7 to 3.0.8

Updates com.google.protobuf:protobuf-java from 4.35.1 to 4.36.0

Commits

• See full diff in compare view

Updates com.google.protobuf:protobuf-javalite from 4.35.1 to 4.36.0

Updates com.google.protobuf:protobuf-kotlin from 4.35.1 to 4.36.0

Updates com.google.protobuf:protobuf-kotlin-lite from 4.35.1 to 4.36.0

Updates com.google.guava:guava from 33.6.0-android to 33.7.1-android

Release notes

Sourced from com.google.guava:guava's releases.

33.7.1

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.1-jre</version>
  <!-- or, for Android: -->
  <version>33.7.1-android</version>
</dependency>

Jar files

• 33.7.1-jre.jar
• 33.7.1-android.jar

Guava requires one runtime dependency, which you can download here:

• failureaccess-1.0.3.jar

Javadoc

• 33.7.1-jre
• 33.7.1-android

JDiff

• 33.7.1-jre vs. 33.7.0-jre
• 33.7.1-android vs. 33.7.0-android
• 33.7.1-android vs. 33.7.1-jre

Changelog

Guava 33.7.1 removes the Multi-Release line from our jar manifest, fixing an issue under Java 9 and 10 that was introduced to guava-jre in version 33.7.0. Sorry for the trouble.

33.7.0

Newly introduced problem for Java 9 and Java 10 only

Guava 33.7.0 includes a Multi-Release line in its jar manifest, even though it is no longer a multi-release jar. This causes some problems with tools from Java 9 and Java 10. The issue is fixed in version 33.7.1. Sorry for the trouble.

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.0-jre</version>
  <!-- or, for Android: -->
</tr></table> 

... (truncated)

Commits

• See full diff in compare view

Updates com.google.firebase:firebase-bom from 34.17.0 to 34.18.0

Updates org.json:json from 20260719 to 20260814

Release notes

Sourced from org.json:json's releases.

20260814

Pull Request	Description
#1070	Fix XML.unescape for valid whitespace chars

Changelog

Sourced from org.json:json's changelog.

20260814 Fixes XML.unescape whitespace handling

Commits

• 6c14048 Merge pull request #1073 from stleary/pre-release-20260814
• 34efda6 pre-release-20260814 initial commit
• 22ab2fb Update jar file link in README
• 392a352 Fix formatting of the latest release jar file link
• b594a32 Merge pull request #1070 from dong0713/fix/xml-unescape-whitespace-control-chars
• 94854a1 Fix XML.unescape rejecting valid whitespace numeric character references
• See full diff in compare view

Updates gradle-wrapper from 9.7.0 to 9.7.1

Release notes

Sourced from gradle-wrapper's releases.

9.7.1

The Gradle team is excited to announce Gradle 9.7.1.

This is a patch release for 9.7.0. We recommend using 9.7.1 instead of 9.7.0.

Here are the highlights of 9.7.0 release:

• Isolated Projects graduates to incubating
• Broader Configuration Cache compatibility
• Resilient Sync helps you fix broken builds
• More source locations in problem reports

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Adam, Aman Gautam, Aman Kumar, Anton Dubrouski, Aurimas, gbhavya07, Josh Friend, nicklauslittle-gov, Pragati, project516, Qin Mi, Ravi, sk-reddy17, Suvrat Acharya, Yongshun Ye.

Upgrade instructions

Switch your build to use Gradle 9.7.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.7.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

Commits

• 92f0512 update fixed issues for 9.7.1 (#38892)
• 820ee75 update fixed issues for 9.7.1
• 82c23f9 Fix annotation parameter ordering problem in KTS (#38878)
• ef11a72 Fix annotation parameter ordering issue
• bb0d8a9 Make relevant tests polyglot (run for multiple DSLs)
• 336e129 Update signing configuration (#38874)
• 4bdf0da Update signing configuration
• cd9b92c List issues resolved in 9.7.1 (#38839)
• 5f4e381 List issues resolved in 9.7.1
• 1e08ab5 Keep type-use annotations in extracted ABI classes (#38810)
• Additional commits viewable in compare view

Updates net.zetetic:sqlcipher-android from 4.17.0 to 4.18.0

Release notes

Sourced from net.zetetic:sqlcipher-android's releases.

v4.18.0

SQLCipher for Android v4.18.0 now includes:

• Support for Room 3
• Requires compileSdk 37

Full Changelog: sqlcipher/sqlcipher-android@v4.17.0...v4.18.0

Commits

• e15752c Bump library version to 4.18.0
• 04d9948 Bump version tests to 4.18.0
• e5534be Add test to verify existing WAL flag in db is reflected correctly
• 748e37e Add instrumentation tests for SQLCipherDriver for Room3
• 078a05b sqlcipher-android internally maintains a connection pool
• 1098fbd Adjustments to get Room3 tests to pass
• ae0d1a7 Adjust test packages to match source packages
• 212477e Initial implementation for SQLiteDriver, SQLiteConnection, SQLiteStatement fo...
• dba933b Implement SupportSQLiteQuery on SQLiteQuery, add tests
• 7cf28a8 Update AGP to 9.3.0 and Gradle to 9.5.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.