build(deps): bump the maven-dependencies group across 1 directory with 40 updates

[dependabot]

Bumps the maven-dependencies group with 40 updates in the / directory:

Package	From	To
org.jetbrains.kotlin.android	2.2.10	2.3.10
org.jetbrains.kotlin.plugin.compose	2.2.10	2.3.10
plugin.serialization	2.2.10	2.3.10
gradle-wrapper	8.13	9.3.1
com.mikepenz:aboutlibraries-core	12.2.4	13.2.1
com.mikepenz.aboutlibraries.plugin	12.2.4	13.2.1
androidx.activity:activity-compose	1.10.1	1.12.4
androidx.activity:activity-ktx	1.10.1	1.12.4
androidx.biometric:biometric	1.4.0-alpha04	1.4.0-alpha05
androidx.compose:compose-bom	2025.08.01	2026.02.01
androidx.datastore:datastore-preferences	1.1.7	1.2.0
androidx.lifecycle:lifecycle-livedata-ktx	2.9.3	2.10.0
androidx.lifecycle:lifecycle-runtime-ktx	2.9.3	2.10.0
androidx.lifecycle:lifecycle-viewmodel-compose	2.9.3	2.10.0
androidx.lifecycle:lifecycle-viewmodel-ktx	2.9.3	2.10.0
androidx.compose.material3:material3	1.5.0-alpha03	1.5.0-alpha15
androidx.compose.material3:material3-window-size-class	1.5.0-alpha03	1.5.0-alpha15
androidx.compose.runtime:runtime-livedata	1.9.0	1.10.4
androidx.compose.ui:ui	1.9.0	1.10.4
androidx.compose.ui:ui-tooling	1.9.0	1.10.4
androidx.compose.ui:ui-tooling-preview	1.9.0	1.10.4
androidx.compose.ui:ui-graphics	1.9.0	1.10.4
io.coil-kt.coil3:coil	3.3.0	3.4.0
io.coil-kt.coil3:coil-network-okhttp	3.3.0	3.4.0
org.apache.commons:commons-compress	1.27.1	1.28.0
commons-io:commons-io	2.20.0	2.21.0
com.google.firebase:firebase-bom	34.2.0	34.10.0
org.kohsuke:github-api	1.329	1.330
com.google.gms:google-services	4.4.3	4.4.4
com.google.code.gson:gson	2.13.1	2.13.2
org.jsoup:jsoup	1.21.2	1.22.1
com.tencent.kona:kona-crypto	1.0.18	1.0.19
com.tencent.kona:kona-provider	1.0.18	1.0.19
org.jetbrains.kotlinx:kotlinx-serialization-json	1.9.0	1.10.0
com.google.android.material:material	1.14.0-alpha04	1.14.0-alpha09
org.apache.maven:maven-artifact	3.9.11	3.9.12
com.squareup.okhttp3:okhttp	5.1.0	5.3.2
com.airbnb.android:paris	2.0.2	2.2.1
androidx.activity:activity	1.10.1	1.12.4
com.android.application	8.12.2	9.0.1

Updates org.jetbrains.kotlin.android from 2.2.10 to 2.3.10

Release notes

Sourced from org.jetbrains.kotlin.android's releases.

Kotlin 2.3.10

Changelog

Compiler

• KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
• KT-83317 ClassCastException: with cast kotlin.UInt to java.lang.Number when defining constant
• KT-83031 K2: unstable resolution of EnhancedNullability from type-use NotNull in presence of unused code
• KT-81700 flaky overload resolution behaviors (false-positive errors, different final candidates, compile-time failures)
• KT-83983 Revert of KT-83081
• KT-83314 JSpecify @NullMarked changes Java equals(Object) to equals(Any?) causing override conflict in Kotlin 2.3
• KT-82863 @NoInfer regression since 2.2.20
• KT-82841 "kotlin.NoWhenBranchMatchedException" in when with !is check & non-sealed class in the middle of hierarchy

JVM. Reflection

• KT-83608 Kotlin-reflect: "Unknown origin of public abstract operator fun invoke(p1: P1, p2: P2): R"
• KT-83361 "KotlinReflectionInternalError: Type parameter not found: 0" on super types with Kotlin 2.3.0
• KT-42199 "KotlinReflectionInternalError: Unknown origin of public abstract operator fun invoke" on function reference to FunctionN.invoke
• KT-81024 Reflection: New KType implementation fails on arguments comparison for a Nothing type parameter

Tools. Compiler Plugins

• KT-83266 "Unsupported class file major version 69" for "produceReleaseComposeMapping" task with Kotlin 2.3
• KT-83099 Compose compiler does not generate stack trace mappings for project files

Tools. Gradle

• KT-83070 The KGP api reference is missing a description
• KT-82459 Improve iOS simulator boot implementation

Tools. Gradle. JS

• KT-82946 Js, Wasm: Upgrade NPM dependencies

Tools. Gradle. Multiplatform

• KT-83687 Revert deprecation of 'androidTarget' for AGP lower than 9

Kotlin 2.3.10-RC2

ChangeLog

Compiler

• KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
• KT-83983 Revert of KT-83081

Kotlin 2.3.10-RC

Changelog

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin.android's changelog.

2.3.10

Compiler

• KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
• KT-83317 ClassCastException: with cast kotlin.UInt to java.lang.Number when defining constant
• KT-83031 K2: unstable resolution of EnhancedNullability from type-use NotNull in presence of unused code
• KT-81700 flaky overload resolution behaviors (false-positive errors, different final candidates, compile-time failures)
• KT-83983 Revert of KT-83081
• KT-83314 JSpecify @NullMarked changes Java equals(Object) to equals(Any?) causing override conflict in Kotlin 2.3
• KT-82863 @NoInfer regression since 2.2.20
• KT-82841 "kotlin.NoWhenBranchMatchedException" in when with !is check & non-sealed class in the middle of hierarchy

JVM. Reflection

• KT-83608 Kotlin-reflect: "Unknown origin of public abstract operator fun invoke(p1: P1, p2: P2): R"
• KT-83361 "KotlinReflectionInternalError: Type parameter not found: 0" on super types with Kotlin 2.3.0
• KT-42199 "KotlinReflectionInternalError: Unknown origin of public abstract operator fun invoke" on function reference to FunctionN.invoke
• KT-81024 Reflection: New KType implementation fails on arguments comparison for a Nothing type parameter

Tools. Compiler Plugins

• KT-83266 "Unsupported class file major version 69" for "produceReleaseComposeMapping" task with Kotlin 2.3
• KT-83099 Compose compiler does not generate stack trace mappings for project files

Tools. Gradle

• KT-83070 The KGP api reference is missing a description
• KT-82459 Improve iOS simulator boot implementation

Tools. Gradle. JS

• KT-82946 Js, Wasm: Upgrade NPM dependencies

Tools. Gradle. Multiplatform

• KT-83687 Revert deprecation of 'androidTarget' for AGP lower than 9

2.3.0

Analysis API

• KT-80082 K2. False positive "Cannot resolve method" for self-bounded generic with wildcard return type in Java interop
• KT-80303 Move :native:analysis-api-klib-reader to :libraries:tools

Analysis API. Code Compilation

• KT-70860 K2 IDE / Kotlin Debugger: CCE “java.lang.String cannot be cast to java.lang.Void” on evaluating not-null variable on the line with assigning null to that var
• KT-78554 K2 IDE / Kotlin Debugger: ISE “No override for FUN IR_EXTERNAL_DECLARATION_STUB” on calling toString() for local class instance during evaluation

... (truncated)

Commits

• 679366a Add ChangeLog for 2.3.10-RC2
• 14ba833 Serialization: remove potential data race during extension registration
• fb8d334 Revert "K2: implement equality for ConeAttribute.EnhancedNullability"
• 412afb7 Add ChangeLog for 2.3.10-RC
• edea41e [Gradle] Un-deprecate 'androidTarget()'
• 0946452 Bump version of the ASM dependency
• 655fb78 Reflection: always compute JVM signature of built-in functions manually
• 58d3875 Fix mergeReleaseComposeMapping task failure when build cache is enabled
• 56e0a79 Copy R8 outputs to Compose folder when transforming obfuscation file
• e0eb174 Fix classId for detecting protobuf enums
• Additional commits viewable in compare view

Updates org.jetbrains.kotlin.plugin.compose from 2.2.10 to 2.3.10

Release notes

Sourced from org.jetbrains.kotlin.plugin.compose's releases.

Kotlin 2.3.10

Changelog

Compiler

• KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
• KT-83317 ClassCastException: with cast kotlin.UInt to java.lang.Number when defining constant
• KT-83031 K2: unstable resolution of EnhancedNullability from type-use NotNull in presence of unused code
• KT-81700 flaky overload resolution behaviors (false-positive errors, different final candidates, compile-time failures)
• KT-83983 Revert of KT-83081
• KT-83314 JSpecify @NullMarked changes Java equals(Object) to equals(Any?) causing override conflict in Kotlin 2.3
• KT-82863 @NoInfer regression since 2.2.20
• KT-82841 "kotlin.NoWhenBranchMatchedException" in when with !is check & non-sealed class in the middle of hierarchy

JVM. Reflection

• KT-83608 Kotlin-reflect: "Unknown origin of public abstract operator fun invoke(p1: P1, p2: P2): R"
• KT-83361 "KotlinReflectionInternalError: Type parameter not found: 0" on super types with Kotlin 2.3.0
• KT-42199 "KotlinReflectionInternalError: Unknown origin of public abstract operator fun invoke" on function reference to FunctionN.invoke
• KT-81024 Reflection: New KType implementation fails on arguments comparison for a Nothing type parameter

Tools. Compiler Plugins

• KT-83266 "Unsupported class file major version 69" for "produceReleaseComposeMapping" task with Kotlin 2.3
• KT-83099 Compose compiler does not generate stack trace mappings for project files

Tools. Gradle

• KT-83070 The KGP api reference is missing a description
• KT-82459 Improve iOS simulator boot implementation

Tools. Gradle. JS

• KT-82946 Js, Wasm: Upgrade NPM dependencies

Tools. Gradle. Multiplatform

• KT-83687 Revert deprecation of 'androidTarget' for AGP lower than 9

Kotlin 2.3.10-RC2

ChangeLog

Compiler

• KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
• KT-83983 Revert of KT-83081

Kotlin 2.3.10-RC

Changelog

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin.plugin.compose's changelog.

2.3.10

Compiler

• KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
• KT-83317 ClassCastException: with cast kotlin.UInt to java.lang.Number when defining constant
• KT-83031 K2: unstable resolution of EnhancedNullability from type-use NotNull in presence of unused code
• KT-81700 flaky overload resolution behaviors (false-positive errors, different final candidates, compile-time failures)
• KT-83983 Revert of KT-83081
• KT-83314 JSpecify @NullMarked changes Java equals(Object) to equals(Any?) causing override conflict in Kotlin 2.3
• KT-82863 @NoInfer regression since 2.2.20
• KT-82841 "kotlin.NoWhenBranchMatchedException" in when with !is check & non-sealed class in the middle of hierarchy

JVM. Reflection

• KT-83608 Kotlin-reflect: "Unknown origin of public abstract operator fun invoke(p1: P1, p2: P2): R"
• KT-83361 "KotlinReflectionInternalError: Type parameter not found: 0" on super types with Kotlin 2.3.0
• KT-42199 "KotlinReflectionInternalError: Unknown origin of public abstract operator fun invoke" on function reference to FunctionN.invoke
• KT-81024 Reflection: New KType implementation fails on arguments comparison for a Nothing type parameter

Tools. Compiler Plugins

• KT-83266 "Unsupported class file major version 69" for "produceReleaseComposeMapping" task with Kotlin 2.3
• KT-83099 Compose compiler does not generate stack trace mappings for project files

Tools. Gradle

• KT-83070 The KGP api reference is missing a description
• KT-82459 Improve iOS simulator boot implementation

Tools. Gradle. JS

• KT-82946 Js, Wasm: Upgrade NPM dependencies

Tools. Gradle. Multiplatform

• KT-83687 Revert deprecation of 'androidTarget' for AGP lower than 9

2.3.0

Analysis API

• KT-80082 K2. False positive "Cannot resolve method" for self-bounded generic with wildcard return type in Java interop
• KT-80303 Move :native:analysis-api-klib-reader to :libraries:tools

Analysis API. Code Compilation

• KT-70860 K2 IDE / Kotlin Debugger: CCE “java.lang.String cannot be cast to java.lang.Void” on evaluating not-null variable on the line with assigning null to that var
• KT-78554 K2 IDE / Kotlin Debugger: ISE “No override for FUN IR_EXTERNAL_DECLARATION_STUB” on calling toString() for local class instance during evaluation

... (truncated)

Commits

• 679366a Add ChangeLog for 2.3.10-RC2
• 14ba833 Serialization: remove potential data race during extension registration
• fb8d334 Revert "K2: implement equality for ConeAttribute.EnhancedNullability"
• 412afb7 Add ChangeLog for 2.3.10-RC
• edea41e [Gradle] Un-deprecate 'androidTarget()'
• 0946452 Bump version of the ASM dependency
• 655fb78 Reflection: always compute JVM signature of built-in functions manually
• 58d3875 Fix mergeReleaseComposeMapping task failure when build cache is enabled
• 56e0a79 Copy R8 outputs to Compose folder when transforming obfuscation file
• e0eb174 Fix classId for detecting protobuf enums
• Additional commits viewable in compare view

Updates plugin.serialization from 2.2.10 to 2.3.10

Release notes

Sourced from plugin.serialization's releases.

Kotlin 2.3.10

Changelog

Compiler

• KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
• KT-83317 ClassCastException: with cast kotlin.UInt to java.lang.Number when defining constant
• KT-83031 K2: unstable resolution of EnhancedNullability from type-use NotNull in presence of unused code
• KT-81700 flaky overload resolution behaviors (false-positive errors, different final candidates, compile-time failures)
• KT-83983 Revert of KT-83081
• KT-83314 JSpecify @NullMarked changes Java equals(Object) to equals(Any?) causing override conflict in Kotlin 2.3
• KT-82863 @NoInfer regression since 2.2.20
• KT-82841 "kotlin.NoWhenBranchMatchedException" in when with !is check & non-sealed class in the middle of hierarchy

JVM. Reflection

• KT-83608 Kotlin-reflect: "Unknown origin of public abstract operator fun invoke(p1: P1, p2: P2): R"
• KT-83361 "KotlinReflectionInternalError: Type parameter not found: 0" on super types with Kotlin 2.3.0
• KT-42199 "KotlinReflectionInternalError: Unknown origin of public abstract operator fun invoke" on function reference to FunctionN.invoke
• KT-81024 Reflection: New KType implementation fails on arguments comparison for a Nothing type parameter

Tools. Compiler Plugins

• KT-83266 "Unsupported class file major version 69" for "produceReleaseComposeMapping" task with Kotlin 2.3
• KT-83099 Compose compiler does not generate stack trace mappings for project files

Tools. Gradle

• KT-83070 The KGP api reference is missing a description
• KT-82459 Improve iOS simulator boot implementation

Tools. Gradle. JS

• KT-82946 Js, Wasm: Upgrade NPM dependencies

Tools. Gradle. Multiplatform

• KT-83687 Revert deprecation of 'androidTarget' for AGP lower than 9

Kotlin 2.3.10-RC2

ChangeLog

Compiler

• KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
• KT-83983 Revert of KT-83081

Kotlin 2.3.10-RC

Changelog

... (truncated)

Changelog

Sourced from plugin.serialization's changelog.

2.3.10

Compiler

• KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
• KT-83317 ClassCastException: with cast kotlin.UInt to java.lang.Number when defining constant
• KT-83031 K2: unstable resolution of EnhancedNullability from type-use NotNull in presence of unused code
• KT-81700 flaky overload resolution behaviors (false-positive errors, different final candidates, compile-time failures)
• KT-83983 Revert of KT-83081
• KT-83314 JSpecify @NullMarked changes Java equals(Object) to equals(Any?) causing override conflict in Kotlin 2.3
• KT-82863 @NoInfer regression since 2.2.20
• KT-82841 "kotlin.NoWhenBranchMatchedException" in when with !is check & non-sealed class in the middle of hierarchy

JVM. Reflection

• KT-83608 Kotlin-reflect: "Unknown origin of public abstract operator fun invoke(p1: P1, p2: P2): R"
• KT-83361 "KotlinReflectionInternalError: Type parameter not found: 0" on super types with Kotlin 2.3.0
• KT-42199 "KotlinReflectionInternalError: Unknown origin of public abstract operator fun invoke" on function reference to FunctionN.invoke
• KT-81024 Reflection: New KType implementation fails on arguments comparison for a Nothing type parameter

Tools. Compiler Plugins

• KT-83266 "Unsupported class file major version 69" for "produceReleaseComposeMapping" task with Kotlin 2.3
• KT-83099 Compose compiler does not generate stack trace mappings for project files

Tools. Gradle

• KT-83070 The KGP api reference is missing a description
• KT-82459 Improve iOS simulator boot implementation

Tools. Gradle. JS

• KT-82946 Js, Wasm: Upgrade NPM dependencies

Tools. Gradle. Multiplatform

• KT-83687 Revert deprecation of 'androidTarget' for AGP lower than 9

2.3.0

Analysis API

• KT-80082 K2. False positive "Cannot resolve method" for self-bounded generic with wildcard return type in Java interop
• KT-80303 Move :native:analysis-api-klib-reader to :libraries:tools

Analysis API. Code Compilation

• KT-70860 K2 IDE / Kotlin Debugger: CCE “java.lang.String cannot be cast to java.lang.Void” on evaluating not-null variable on the line with assigning null to that var
• KT-78554 K2 IDE / Kotlin Debugger: ISE “No override for FUN IR_EXTERNAL_DECLARATION_STUB” on calling toString() for local class instance during evaluation

... (truncated)

Commits

• 679366a Add ChangeLog for 2.3.10-RC2
• 14ba833 Serialization: remove potential data race during extension registration
• fb8d334 Revert "K2: implement equality for ConeAttribute.EnhancedNullability"
• 412afb7 Add ChangeLog for 2.3.10-RC
• edea41e [Gradle] Un-deprecate 'androidTarget()'
• 0946452 Bump version of the ASM dependency
• 655fb78 Reflection: always compute JVM signature of built-in functions manually
• 58d3875 Fix mergeReleaseComposeMapping task failure when build cache is enabled
• 56e0a79 Copy R8 outputs to Compose folder when transforming obfuscation file
• e0eb174 Fix classId for detecting protobuf enums
• Additional commits viewable in compare view

Updates gradle-wrapper from 8.13 to 9.3.1

Updates com.mikepenz:aboutlibraries-core from 12.2.4 to 13.2.1

Release notes

Sourced from com.mikepenz:aboutlibraries-core's releases.

13.2.1

[!NOTE]
Re-publish of 13.2.0 due to a sonatype central API issue

> Failed to check deployment status for f4a5b999-79b5-4bdf-83a8-e758ed898a66 code: 502 msg: <html>
For more on this, please refer to https://docs.gradle.org/9.1.0/userguide/command_line_interface.html#sec:command_line_warnings in the Gradle documentation.
  <head><title>502 Bad Gateway</title></head>
  <body>
  <center><h1>502 Bad Gateway</h1></center>
  </body>
  </html>

13.2.0

🚀 Features

• Compose 1.10.0 | Kotlin 2.3.0
  • PR: #1273

🐛 Fixes

• Update forced offline mode in AboutLibrariesIdTask
  • PR: #1272

💬 Other

• Bump actions/upload-artifact from 4 to 5
  • PR: #1251
• Bump mikepenz/release-changelog-builder-action from 5 to 6
  • PR: #1252
• Bump actions/checkout from 5 to 6
  • PR: #1258
• Bump actions/upload-artifact from 5 to 6
  • PR: #1269
• Bump actions/cache from 4 to 5
  • PR: #1268

Contributors:

• @​dependabot[bot], @​smelfungus, @​Goooler, @​mikepenz

13.1.0

[!IMPORTANT]
v13.1.0 introduces a slight behavior change of the plugin, enabling merging of duplicated libraries with an exact match. Please refer to the MIGRATION GUIDE for more information on how to migrate from a previous version.

🚀 Features

• Offer configuration to include test variants in generated metadata

... (truncated)

Commits

• 2bf7fd0 Merge pull request #1275 from mikepenz/develop
• 4c0a8e4 - [release] v13.2.1
• e1957e5 - update to new version-catalog, with convention plugin which won't validate ...
• 09af193 Merge pull request #1274 from mikepenz/develop
• 3afe40c - [release] v13.2.0
• 48087e0 Merge pull request #1273 from mikepenz/feature/compose_1.10.x
• 556a3f5 Merge pull request #1272 from mikepenz/fix/1270
• 105677b Upgrade to Compose 1.10.0, Kotlin 2.3.0
• 4f42453 Update forced offline mode in AboutLibrariesIdTask
• d805da0 Merge pull request #1268 from mikepenz/dependabot/github_actions/actions/cache-5
• Additional commits viewable in compare view

Updates com.mikepenz.aboutlibraries.plugin from 12.2.4 to 13.2.1

Updates androidx.activity:activity-compose from 1.10.1 to 1.12.4

Updates androidx.activity:activity-ktx from 1.10.1 to 1.12.4

Updates androidx.activity:activity-ktx from 1.10.1 to 1.12.4

Updates androidx.biometric:biometric from 1.4.0-alpha04 to 1.4.0-alpha05

Updates androidx.compose:compose-bom from 2025.08.01 to 2026.02.01

Updates androidx.datastore:datastore-preferences from 1.1.7 to 1.2.0

Updates androidx.lifecycle:lifecycle-livedata-ktx from 2.9.3 to 2.10.0

Updates androidx.lifecycle:lifecycle-runtime-ktx from 2.9.3 to 2.10.0

Updates androidx.lifecycle:lifecycle-viewmodel-compose from 2.9.3 to 2.10.0

Updates androidx.lifecycle:lifecycle-viewmodel-ktx from 2.9.3 to 2.10.0

Updates androidx.lifecycle:lifecycle-runtime-ktx from 2.9.3 to 2.10.0

Updates androidx.lifecycle:lifecycle-viewmodel-compose from 2.9.3 to 2.10.0

Updates androidx.lifecycle:lifecycle-viewmodel-ktx from 2.9.3 to 2.10.0

Updates androidx.compose.material3:material3 from 1.5.0-alpha03 to 1.5.0-alpha15

Updates androidx.compose.material3:material3-window-size-class from 1.5.0-alpha03 to 1.5.0-alpha15

Updates androidx.compose.material3:material3-window-size-class from 1.5.0-alpha03 to 1.5.0-alpha15

Updates androidx.compose.runtime:runtime-livedata from 1.9.0 to 1.10.4

Updates androidx.compose.ui:ui from 1.9.0 to 1.10.4

Updates androidx.compose.ui:ui-tooling from 1.9.0 to 1.10.4

Updates androidx.compose.ui:ui-tooling-preview from 1.9.0 to 1.10.4

Updates androidx.compose.ui:ui-graphics from 1.9.0 to 1.10.4

Updates androidx.compose.ui:ui-tooling from 1.9.0 to 1.10.4

Updates androidx.compose.ui:ui-tooling-preview from 1.9.0 to 1.10.4

Updates io.coil-kt.coil3:coil from 3.3.0 to 3.4.0

Release notes

Sourced from io.coil-kt.coil3:coil's releases.

3.4.0

See CHANGELOG.md.

Changelog

Sourced from io.coil-kt.coil3:coil's changelog.

[3.4.0] - February 24, 2026

• New: Add ConcurrentRequestStrategy to support combining in-flight network requests for the same key. (#2995, #3326)
  • DeDupeConcurrentRequestStrategy enables this behavior and lets waiters wait for the results of an in-flight network request.
    • This behavior is experimental and is currently disabled by default.
    • Currently, requests are always combined based on their diskCacheKey.
  • OkHttpNetworkFetcherFactory, KtorNetworkFetcherFactory, and NetworkFetcher.Factory now accept concurrentRequestStrategy.
• New: Decode images on JS/WASM using a web worker to avoid blocking the browser main thread. (#3305)
• New: Add support for Linux native targets (linuxX64 and linuxArm64) for non-Compose multiplatform artifacts. (#3054)
• New: Add Compose-only APIs to improve transitions between subsequent requests. (#3141, #3175)
  • ImageRequest.Builder.useExistingImageAsPlaceholder enables crossfading from the previous image when no placeholder is set.
  • ImageRequest.Builder.preferEndFirstIntrinsicSize lets CrossfadePainter prefer the end painter's intrinsic size.
• New: Add ImageLoader.Builder.repeatCount(Int) in coil-gif to set a global animated image repeat count. (#3143)
• New: Add support for preferring embedded video thumbnails in coil-video. (#3107)
• New: Publish coil-lint with coil-core and add a lint check to catch accidental kotlin.error() calls in ImageRequest.Builder blocks. (#3304)
• Set Kotlin language version to 2.1. (#3302)
• Make BitmapFetcher available in common code. (#3286)
• Use applicationContext when creating the singleton ImageLoader on Android. (#3246)
• Cache eligible non-2xx HTTP responses by default (e.g. 404) and stop caching non-cacheable responses (e.g. 500). (#3137, #3139)
• Fix potential race condition when consuming OkHttp response bodies. (#3186)
• Fix maxBitmapSize edge case to prevent oversized bitmap crashes on Android. (#3259)
• Update Kotlin to 2.3.10.
• Update Compose to 1.9.3.
• Update Okio to 3.16.4.
• Update Skiko to 0.9.22.2.
• Update kotlinx-io-okio to 0.9.0.
• Update androidx.core to 1.16.0.
• Update androidx.lifecycle to 2.9.4.
• Update androidx.exifinterface to 1.4.2.

Commits

• 51638b0 Prepare version 3.4.0.
• e56678b Add changes for 3.4.0. (#3331)
• be899b5 Implement ConcurrentRequestStrategy to support awaiting in-flight requests. (...
• 4981da1 fix(deps): update dependency org.jetbrains.kotlinx:kotlinx-io-okio to v0.9.0 ...
• 8693061 Enable ktlint trailing commas (#3327)
• 72f919b Add work around for updateLegacyAbi not updating Android API files. (#3325)
• 09dab03 Update ktlint to 1.8.0. (#3324)
• 69944c7 Publish coil-lint with coil-core. Improve coil-lint test coverage. (#3323)
• 5e1ad4e Fix use of deprecated computeSizeMultiplier overload. (#3321)
• 896fde5 fix(deps): update androidx.benchmark to v1.5.0-alpha03 (#3314)
• Additional commits viewable in compare view

Updates io.coil-kt.coil3:coil-network-okhttp from 3.3.0 to 3.4.0

Release notes

Sourced from io.coil-kt.coil3:coil-network-okhttp's releases.

3.4.0

See CHANGELOG.md.

Changelog

Sourced from io.coil-kt.coil3:coil-network-okhttp's changelog.

[3.4.0] - February 24, 2026

• New: Add ConcurrentRequestStrategy to support combining in-flight network requests for the same key. (#2995, #3326)
  • DeDupeConcurrentRequestStrategy enables this behavior and lets waiters wait for the results of an in-flight network request.
    • This behavior is experimental and is currently disabled by default.
    • Currently, requests are always combined based on their diskCacheKey.
  • OkHttpNetworkFetcherFactory, KtorNetworkFetcherFactory, and NetworkFetcher.Factory now accept concurrentRequestStrategy.
• New: Decode images on JS/WASM using a web worker to avoid blocking the browser main thread. (#3305)
• New: Add support for Linux native targets (linuxX64 and linuxArm64) for non-Compose multiplatform artifacts. (#3054)
• New: Add Compose-only APIs to improve transitions between subsequent requests. (#3141, #3175)
  • ImageRequest.Builder.useExistingImageAsPlaceholder enables crossfading from the previous image when no placeholder is set.
  • ImageRequest.Builder.preferEndFirstIntrinsicSize lets CrossfadePainter prefer the end painter's intrinsic size.
• New: Add ImageLoader.Builder.repeatCount(Int) in coil-gif to set a global animated image repeat count. (#3143)
• New: Add support for preferring embedded video thumbnails in coil-video. (#3107)
• New: Publish coil-lint with coil-core and add a lint check to catch accidental kotlin.error() calls in ImageRequest.Builder blocks. (#3304)
• Set Kotlin language version to 2.1. (#3302)
• Make BitmapFetcher available in common code. (#3286)
• Use applicationContext when creating the singleton ImageLoader on Android. (#3246)
• Cache eligible non-2xx HTTP responses by default (e.g. 404) and stop caching non-cacheable responses (e.g. 500). (#3137, #3139)
• Fix potential race condition when consuming OkHttp response bodies. (#3186)
• Fix maxBitmapSize edge case to prevent oversized bitmap crashes on Android. (#3259)
• Update Kotlin to 2.3.10.
• Update Compose to 1.9.3.
• Update Okio to 3.16.4.
• Update Skiko to 0.9.22.2.
• Update kotlinx-io-okio to 0.9.0.
• Update androidx.core to 1.16.0.
• Update androidx.lifecycle to 2.9.4.
• Update androidx.exifinterface to 1.4.2.

Commits

• 51638b0 Prepare version 3.4.0.
• e56678b Add changes for 3.4.0. (#3331)
• be899b5 Implement ConcurrentRequestStrategy to support awaiting in-flight requests. (...
• 4981da1 fix(deps): update dependency org.jetbrains.kotlinx:kotlinx-io-okio to v0.9.0 ...
• 8693061 Enable ktlint trailing commas (#3327)
• 72f919b Add work around for updateLegacyAbi not updating Android API files. (#3325)
• 09dab03 Update ktlint to 1.8.0. (#3324)
• 69944c7 Publish coil-lint with coil-core. Improve coil-lint test coverage. (#3323)
• 5e1ad4e Fix use of deprecated computeSizeMultiplier overload. (#3321)
• 896fde5 fix(deps): update androidx.benchmark to v1.5.0-alpha03 (#3314)
• Additional commits viewable in compare view

Updates io.coil-kt.coil3:coil-network-okhttp from 3.3.0 to 3.4.0

Release notes

Sourced from io.coil-kt.coil3:coil-network-okhttp's releases.

3.4.0

See CHANGELOG.md.

Changelog

Sourced from io.coil-kt.coil3:coil-network-okhttp's changelog.

[3.4.0] - February 24, 2026

• New: Add ConcurrentRequestStrategy to support combining in-flight network requests for the same key. (#2995, #3326)
  • DeDupeConcurrentRequestStrategy enables this behavior and lets waiters wait for the results of an in-flight network request.
    • This behavior is experimental and is currently disabled by default.
    • Currently, requests are always combined based on their diskCacheKey.
  • OkHttpNetworkFetcherFactory, KtorNetworkFetcherFactory, and NetworkFetcher.Factory now accept concurrentRequestStrategy.
• New: Decode images on JS/WASM using a web worker to avoid blocking the browser main thread. (#3305)
• New: Add support for Linux native targets (linuxX64 and linuxArm64) for non-Compose multiplatform artifacts. (#3054)
• New: Add Compose-only APIs to improve transitions between subsequent requests. (#3141, #3175)
  • ImageRequest.Builder.useExistingImageAsPlaceholder enables crossfading from the previous image when no placeholder is set.
  • ImageRequest.Builder.preferEndFirstIntrinsicSize lets CrossfadePainter prefer the end painter's intrinsic size.
• New: Add ImageLoader.Builder.repeatCount(Int) in coil-gif to set a global animated image repeat count. (#3143)
• New: Add support for preferring embedded video thumbnails in coil-video. (#3107)
• New: Publish coil-lint with coil-core and add a lint check to catch accidental kotlin.error() calls in ImageRequest.Builder blocks. (#3304)
• Set Kotlin language version to 2.1. (#3302)
• Make BitmapFetcher available in common code. (#3286)
• Use applicationContext when creating the singleton ImageLoader on Android. (#3246)
• Cache eligible non-2xx HTTP responses by default (e.g. 404) and stop caching non-cacheable responses (e.g. 500). (#3137, #3139)
• Fix potential race condition when consuming OkHttp response bodies. (#3186)
• Fix maxBitmapSize edge case to prevent oversized bitmap crashes on Android. (#3259)
• Update Kotlin to 2.3.10.
• Update Compose to 1.9.3.
• Update Okio to 3.16.4.
• Update Skiko to 0.9.22.2.
• Update kotlinx-io-okio to 0.9.0.
• Update androidx.core to 1.16.0.
• Update androidx.lifecycle to 2.9.4.
• Update androidx.exifinterface to 1.4.2.

Commits

• 51638b0 Prepare version 3.4.0.
• e56678b Add changes for 3.4.0. (#3331)
• be899b5 Implement ConcurrentRequestStrategy to support awaiting in-flight requests. (...
• 4981da1 fix(deps): update dependency org.jetbrains.kotlinx:kotlinx-io-okio to v0.9.0 ...
• 8693061 Enable ktlint trailing commas (#3327)
• 72f919b Add work around for updateLegacyAbi not updating Android API files. (#3325)
• 09dab03 Update ktlint to 1.8.0. (#3324)
• 69944c7 Publish coil-lint with coil-core. Improve coil-lint test coverage. (#3323)
• 5e1ad4e Fix use of deprecated computeSizeMultiplier overload. (#3321)
• 896fde5 fix(deps): update androidx.benchmark to v1.5.0-alpha03 (#3314)
• Additional commits viewable in compare view

Updates org.apache.commons:commons-compress from 1.27.1 to 1.28.0

Changelog

Sourced from org.apache.commons:commons-compress's changelog.

Apache Commons Compress 1.28.0 Release Notes

The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.

Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

This is a feature and maintenance release. Java 8 or later is required.

This release updates Apache Commons Lang to 3.18.0 to pick up the fix for CVE-2025-48924 (https://nvd.nist.gov/vuln/detail/CVE-2025-48924), but is not affected by it.

Changes in this version

Changes in this version include the following.

New Features

•        Add GzipParameters.getModificationInstant(). Thanks to Gary Gregory. 
  

•        Add GzipParameters.setModificationInstant(Instant). Thanks to Gary Gregory. 
  

•        Add GzipParameters.OS, setOS(OS), getOS(). Thanks to Gary Gregory. 
  

•        Add GzipParameters.toString(). Thanks to Gary Gregory. 
  ...
  Description has been truncated