Bump the dependencies group across 1 directory with 11 updates

[dependabot]

Bumps the dependencies group with 9 updates in the / directory:

Package	From	To
org.jetbrains.kotlin.android	2.3.0	2.4.10
androidx.core:core-ktx	1.15.0	1.19.0
androidx.lifecycle:lifecycle-service	2.8.7	2.11.0
androidx.activity:activity-ktx	1.9.3	1.13.0
com.google.android.material:material	1.12.0	1.14.0
androidx.constraintlayout:constraintlayout	2.2.0	2.2.2
org.apache.commons:commons-compress	1.27.1	1.28.0
org.tukaani:xz	1.10	1.12
gradle-wrapper	8.13	8.14.5

Updates org.jetbrains.kotlin.android from 2.3.0 to 2.4.10

Release notes

Sourced from org.jetbrains.kotlin.android's releases.

Kotlin 2.4.10

Changelog

Backend. Wasm

• KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

Compiler

• KT-86939 JVM: IllegalStateException "No value for annotation parameter" when using const val in nested Java annotation array argument
• KT-83766 K2: Wrong sourcePsi is set for SymbolPsiLiteral in SLC for annotation arguments referencing a const val
• KT-86728 Reified type inference: expected type not propagated into inline call inside lambda with elvis operator

Compose Compiler

• b/522127447 Compose Compiler 2.4: classes previously inferred stable now reported runtime/Uncertain

Klibs

• KT-86501 Native: IrTypeAliasSymbolImpl is already bound. Signature: kotlinx.datetime/Instant|null[0] on iosSimulatorArm64

Tools. CLI

• KT-86930 Introduce kotlinr in the Kotlin distribution

Tools. Gradle. BCV

• KT-87223 Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of 2.4.0

Tools. Gradle. JS

• KT-87304 jsBrowserTest fails with "exited with errors (exit code: 1)"
• KT-86057 kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall is up-to-date, causing kotlinStoreYarnLock to fail

Tools. Gradle. Multiplatform

• KT-87084 False positive warning for JS and Wasm compilations when CRI is enabled

Tools. Scripts

• KT-87076 @file:CompilerOptions("-jvm-target", ...) ignored in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target 1.8
• KT-86352 K2 scripting: FirResolvedTypeRef exception when resolving extension functions from imported scripts

Kotlin 2.4.10-RC2

Changelog

Backend. Wasm

• KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin.android's changelog.

2.4.10

Backend. Wasm

• KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

Compiler

• KT-86939 JVM: IllegalStateException "No value for annotation parameter" when using const val in nested Java annotation array argument
• KT-83766 K2: Wrong sourcePsi is set for SymbolPsiLiteral in SLC for annotation arguments referencing a const val
• KT-86728 Reified type inference: expected type not propagated into inline call inside lambda with elvis operator

Compose Compiler

• b/522127447 Compose Compiler 2.4: classes previously inferred stable now reported runtime/Uncertain

Klibs

• KT-86501 Native: IrTypeAliasSymbolImpl is already bound. Signature: kotlinx.datetime/Instant|null[0] on iosSimulatorArm64

Tools. CLI

• KT-86930 Introduce kotlinr in the Kotlin distribution

Tools. Gradle. BCV

• KT-87223 Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of 2.4.0

Tools. Gradle. JS

• KT-87304 jsBrowserTest fails with "exited with errors (exit code: 1)"
• KT-86057 kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall is up-to-date, causing kotlinStoreYarnLock to fail

Tools. Gradle. Multiplatform

• KT-87084 False positive warning for JS and Wasm compilations when CRI is enabled

Tools. Scripts

• KT-87076 @file:CompilerOptions("-jvm-target", ...) ignored in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target 1.8
• KT-86352 K2 scripting: FirResolvedTypeRef exception when resolving extension functions from imported scripts

2.4.0

Analysis API

• KT-83867 OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ repo
• KT-83723 [Analysis API] Enable experimental KDoc resolver by default
• KT-83388 Analysis API: properly support KMP in KotlinPackageProvider

... (truncated)

Commits

• 5687445 Add Changelog for 2.4.10-RC2
• ba30392 [Wasm] Support regenerate unchanged modules flag on KGP
• 6307e73 [Wasm] Implement Xwasm-IC-generate-unchanged-modules flag
• 39d7aee Add ChangeLog for 2.4.10-RC2
• a2956be [Gradle] Update karma.conf.js to use 'require(...)' instead plain strings
• 9b1361c [Gradle] KT-87223: Updated regression test
• a4c153a [Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat config
• bc04b90 Add ChangeLog for 2.4.10-RC
• bbcb94b [CRI] explicitly disable CRI generation for non-JVM targets to avoid false-po...
• 6c2c458 Scripting: fix jvmTarget processing from script annotations
• Additional commits viewable in compare view

Updates androidx.core:core-ktx from 1.15.0 to 1.19.0

Updates androidx.lifecycle:lifecycle-service from 2.8.7 to 2.11.0

Updates androidx.lifecycle:lifecycle-runtime-ktx from 2.8.7 to 2.11.0

Updates androidx.lifecycle:lifecycle-viewmodel-ktx from 2.8.7 to 2.11.0

Updates androidx.activity:activity-ktx from 1.9.3 to 1.13.0

Updates com.google.android.material:material from 1.12.0 to 1.14.0

Release notes

Sourced from com.google.android.material:material's releases.

1.14.0

New in 1.14.0!

• Expressive Themes (doc)
• Expressive Lists (doc)
• Expressive Button Styles (doc)
• Expressive Icon Button Styles (doc)
• Expressive Button Group Styles (doc)
• Expressive FAB Styles (doc)
• Expressive Top App Bar Styles (doc)
• Expressive Navigation Bar (BottomNavigationView) Styles (doc)
• Expressive Navigation Rail Styles (doc)
• Expressive Search Styles (doc)
• Expressive Progress Indicator Styles (doc)
• Expressive Slider Styles (doc)
• Emphasized Typescale (doc)

Important

• Required minSdkVersion is now 23 or higher, for Material and AndroidX.
• Library is now built with Android Gradle Plugin (AGP) 8.11.1 and Gradle 8.13.

Dependency Updates

Dependency	Previous version	New version
androidx.constraintlayout:constraintlayout	2.1.0	2.2.1
androidx.core:core	1.6.0	1.16.0
androidx.customview:customview	N/A	1.2.0
com.android.tools.build:gradle	8.7.3	8.11.1

Library Updates

• AppBar
  • Fixed the bug that setBackground will reset the internal MaterialShapeDrawable for lift-on-scroll feature. (1adc50110ed6491661f89aa535355b1480fac73a)
  • Add support for navigation button with circle background (015e0534e1a6205224097f258102f913832f99ed)
  • Improve keyboard navigation in TopAppBar catalog demos (98a73a61d272d3e38ee87dd4b322f7787c374a9c)
  • Removed special key shortcut and keyboard navigation cluster for top app bar for correct keyboard navigation a11y. (ee52adbf051f744f2345ec5b7f4ab4df3b101d4d)
  • Updated ripple color on actions in M3 toolbar. (3b971c9fe9d6ae9a175d96a448a2e740fa97996f)
• BottomAppBar
  • Remove special key shortcut and keyboard navigation cluster for bottom app bar for correct keyboard navigation a11y. (5c73d7a9284fb8e8409452bb95751bf70912acfd)
• BottomNavigationView
  • Fix navigation item layout in non-compact windows (78189012dada1fae4516eaccab7b8f75c481aa73)
• BottomSheet
  • Deprecated enableEdgeToEdge for bottom sheet dialogs on API 35+. (603f1ef9d5223fc06fa432c4175473eda2138330)
  • Prevent ACTION_DOWN events on the BottomSheetHandleDragView from setting touchingScrollChild to true. (af7f254bf660704368d46e630d34a81c479fa1c7)
  • Fixed keyboard animation on Android 14 (a0b4dfa8769f98851efe97569c900f75eb0d5ef2)
  • Fixed crash when protections are set before setContentView is called (d2119098489f6f6b55d77f2c7966b8ddf16c90ed)
  • Added half-expanded state description for accessibility (95e7b452088d88005982a3f29ec212ef7ee8696d)
  • Added support for androidx.core ProtectionLayout API and update dependency to 1.16 (e7f9f639d2f4a3b9f619ce704df82cbb14e49222)
  • Make handle respond to keyboard input (1ee07687af2c4c84f515e45c1b809d65aeecbbf4)
  • Delete duplicate "Handling insets and fullscreen" section (5e7e8238f7be448af6b4db4b2ad6128737c0bc50)
  • Added support for Nested Scrolling with multiple nested scroll children. (4e4e8f3388beb7e82a87cb67142aa34444a79740)
  • Make behavior_draggableOnNestedScroll public (a67afdff0d207239d0f427a37e44074936db3166)

... (truncated)

Commits

• 66c334b [Release] Update library version to 1.14.0 stable
• 12e57b5 [Focus Rings] Add setters and getters for stroke widths and inner inset
• f4652d6 [NavigationView] Improve focus saving when opening NavigationView
• 14b9ac9 [Focus Rings] Add setters for outer and inner stroke colors and for refreshin...
• d6de1da [A11y][BottomSheet] Auto-expand when a focused view is off-screen in non-touc...
• 41cfb65 [A11y][NavigationView] Request and restore focus when opened and closed in Dr...
• 8f63e94 [Catalog] Fix lift on scroll glitchiness in All Components demo
• 80aa0cc [Release] Update library version to 1.14.0-rc01
• fd44c9d [Button] [SplitButton] Fix inset and optical centering issue for SplitButton ...
• e6ae416 [SearchView] Make sure IME is hidden when EditText loses focus
• Additional commits viewable in compare view

Updates androidx.constraintlayout:constraintlayout from 2.2.0 to 2.2.2

Updates org.apache.commons:commons-compress from 1.27.1 to 1.28.0

Changelog

Sourced from org.apache.commons:commons-compress's changelog.

Apache Commons Compress 1.28.0 Release Notes

The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.

Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

This is a feature and maintenance release. Java 8 or later is required.

This release updates Apache Commons Lang to 3.18.0 to pick up the fix for CVE-2025-48924 (https://nvd.nist.gov/vuln/detail/CVE-2025-48924), but is not affected by it.

Changes in this version

Changes in this version include the following.

New Features

•        Add GzipParameters.getModificationInstant(). Thanks to Gary Gregory. 
  

•        Add GzipParameters.setModificationInstant(Instant). Thanks to Gary Gregory. 
  

•        Add GzipParameters.OS, setOS(OS), getOS(). Thanks to Gary Gregory. 
  

•        Add GzipParameters.toString(). Thanks to Gary Gregory. 
  

• COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset) and getFileNameCharset() to override the default ISO-8859-1 Charset #602. Thanks to vincexjl, Gary Gregory, Piotr P. Karwasz.

•        Add support for gzip extra subfields, see GzipParameters.setExtra(HeaderExtraField) [#604](https://github.com/apache/commons-compress/issues/604). Thanks to ddeschenes-1, Gary Gregory. 
  

•        Add CompressFilterOutputStream and refactor to use. Thanks to Gary Gregory. 
  

•        Add ZipFile.stream(). Thanks to Gary Gregory. 
  

•        GzipCompressorInputStream reads the modification time (MTIME) and stores its value incorrectly multiplied by 1,000. Thanks to Danny Deschenes, Gary Gregory. 
  

•        GzipCompressorInputStream writes the modification time (MTIME) the value incorrectly divided by 1,000. Thanks to Danny Deschenes, Gary Gregory. 
  

•        Add optional FHCRC to GZIP header [#627](https://github.com/apache/commons-compress/issues/627). Thanks to Danny Deschenes, Gary Gregory. 
  

•        Add GzipCompressorInputStream.Builder allowing to customize the file name and comment Charsets. Thanks to Gary Gregory. 
  

•        Add GzipCompressorInputStream.Builder.setOnMemberStart(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. 
  

•        Add GzipCompressorInputStream.Builder.setOnMemberEnd(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. 
  

•        Add PMD check to default Maven goal. Thanks to Gary Gregory. 
  

•        Add SevenZFile.Builder.setMaxMemoryLimitKiB(int). Thanks to Gary Gregory. 
  

•        Add MemoryLimitException.MemoryLimitException(long, int, Throwable) and deprecate MemoryLimitException.MemoryLimitException(long, int, Exception). Thanks to Gary Gregory. 
  

• COMPRESS-692: Add support for zstd compression in zip archives. Thanks to Mehmet Karaman, Andrey Loskutov, Gary Gregory.

•        Add support for XZ compression in ZIP archives. Thanks to Gary Gregory. 
  

• COMPRESS-695: Add ZipArchiveInputStream.createZstdInputStream(InputStream) to provide a different InputStream implementation for Zstandard (Zstd) #649. Thanks to Gary Gregory.

•        Add org.apache.commons.compress.harmony.pack200.Pack200Exception.Pack200Exception(String, Throwable). Thanks to Gary Gregory. 
  

• COMPRESS-697: Move BitStream.nextBit() method to BitInputStream #663. Thanks to Fredrik Kjellberg, Gary Gregory.

•        Add org.apache.commons.compress.compressors.lzma.LZMACompressorInputStream.builder/Builder(). Thanks to Gary Gregory. 
  

•        Add org.apache.commons.compress.compressors.lzma.LZMACompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. 
  

•        Add org.apache.commons.compress.compressors.xz.XZCompressorInputStream.builder/Builder(). Thanks to Gary Gregory. 
  

•        Add org.apache.commons.compress.compressors.xz.XZCompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. 
  

•        Add org.apache.commons.compress.compressors.xz.ZstdCompressorOutputStream.builder/Builder() [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. 
  

•        Add org.apache.commons.compress.compressors.xz.ZstdConstants [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. 
  

... (truncated)

Commits

• 852d9c2 Prepare for the release candidate 1.28.0 RC1
• f5eb9e2 Prepare for the next release candidate
• 36f204c Camel case parameter name
• 4c04e4a Use final
• 6cb7da1 Javadoc
• 563c9d2 Javadoc
• ce73bd8 Javadoc
• a464ae9 Better parameter names
• c0b2b84 Add TODO for next major version
• c76bc97 Use OpenVEX to document that we are not affected by CVE-2025-48924 in
• Additional commits viewable in compare view

Updates org.tukaani:xz from 1.10 to 1.12

Changelog

Sourced from org.tukaani:xz's changelog.

1.12 (2026-03-01)

• Fix ArrayIndexOutOfBoundsException in the LZMA/LZMA2 encoder on x86-64 and ARM64 when running on Java 9 or newer. The affected code isn't used on Java 8. The bug is present in versions 1.10 and 1.11. If one cannot upgrade, one should set the property org.tukaani.xz.MatchLengthFinder=Basic to disable the affected code path.

• Fix ArrayCache usage in LZMAInputStream. If ArrayCache was enabled, decompression was likely to fail quickly when the cache returns a cached array. ArrayCache is disabled by default.

• The binaries of 1.12 in the Maven Central require Java 8 and contain optimized classes for Java >= 9 as multi-release JAR. They were built with OpenJDK 21.0.10 on GNU/Linux and can be reproduced using the following command:

  SOURCE_DATE_EPOCH=1772370000 TZ=UTC0 ant maven
  

1.11 (2025-11-19)

• Fix a data corruption bug when encoding with the rarely-used option LZMA2Options.MODE_UNCOMPRESSED. To trigger the bug, a write call must cross an offset that is a multiple of 65536 bytes. For example, one write of 70000 bytes or two write calls of 50000 bytes each would trigger the bug. The bug isn't triggered if there are ten write calls of 8192 bytes each followed by one 123-byte write.

  If encoding to a .xz file, a decoder would catch the issue because the integrity check wouldn't match.

• The binaries of 1.11 in the Maven Central require Java 8 and contain optimized classes for Java >= 9 as multi-release JAR. They were built with OpenJDK 21.0.9 on GNU/Linux and can be reproduced using the following command:

  SOURCE_DATE_EPOCH=1763575020 TZ=UTC0 ant maven
  

Commits

• 107a519 Bump the version number to 1.12
• 3061152 Update NEWS.md for 1.12
• 0ecee25 Refactor EXTRA_SIZE to getExtraSize()
• ac1aeb1 Fix ArrayIndexOutOfBoundsException in the LZMA/LZMA2 encoder
• 12c75fd Fix ArrayCache usage with LZMAInputStream
• e52d9ad SHA256SUMS: Add 1.11 files
• 9a755ec CI: Add missing SPDX tags
• eec2ad9 Bump the version number to 1.11
• cd59206 Update NEWS.md for 1.11
• afd20a2 Omit the .github directory from releases
• Additional commits viewable in compare view

Updates gradle-wrapper from 8.13 to 8.14.5

Release notes

Sourced from gradle-wrapper's releases.

8.14.5

The Gradle team is excited to announce Gradle 8.14.5.

Here are the highlights of this release:

• Java 24 support
• GraalVM Native Image toolchain selection
• Enhancements to test reporting
• Build Authoring improvements

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aurimas, Ben Bader, Björn Kautler, chandre92, Daniel Hammer, Danish Nawab, Florian Dreier, Ivy Chen, Jendrik Johannes, jimmy1995-gu, Madalin Valceleanu, Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.5 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.5 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

8.14.4

This is a patch release for 8.14. We recommend using 8.14.4 instead of 8.14.

This release addresses two security vulnerabilities:

• Failure to disable repositories failing to answer can expose builds to malicious artifacts
• Failure to disable repositories with unknown host can expose builds to malicious artifacts

... (truncated)

Commits

• 62345be Finalize release notes for 8.14.5 (#37829)
• 38049c2 Finalize release notes for 8.14.5
• f378139 Update jdks.yaml (#37780)
• 4e739b5 Update jdks.yaml
• d94136a Update jdks.yaml (#37704)
• a2f6942 Update jdks.yaml
• 28df263 Backport exclude bugfix (#37559)
• e03dca1 Upgrade BouncyCastle to 1.84 (#37656)
• 987d1a3 Bump the Jackson version
• 56e392c Bump Bouncycastle to 1.84
• Additional commits viewable in compare view