⬆️ Update all dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
dev.drewhamilton.poko	0.22.0 → 0.22.1
io.nlopez.compose.rules:detekt	0.5.6 → 0.5.8
io.ktor:ktor-bom	3.4.1 → 3.4.3
com.google.devtools.ksp (source)	2.3.6 → 2.3.7
com.google.devtools.ksp:com.google.devtools.ksp.gradle.plugin (source)	2.3.6 → 2.3.7
io.kotest	6.1.7 → 6.1.11
io.kotest:kotest-bom	6.1.7 → 6.1.11
io.insert-koin:koin-bom (source)	4.2.0 → 4.2.1
org.jetbrains.dokka	2.1.0 → 2.2.0
dev.detekt (source)	2.0.0-alpha.2 → 2.0.0-alpha.3
dev.detekt:detekt-gradle-plugin (source)	2.0.0-alpha.2 → 2.0.0-alpha.3
dev.detekt:detekt-rules-ruleauthors (source)	2.0.0-alpha.2 → 2.0.0-alpha.3
dev.detekt:detekt-rules-libraries (source)	2.0.0-alpha.2 → 2.0.0-alpha.3
dev.detekt:detekt-rules-ktlint-wrapper (source)	2.0.0-alpha.2 → 2.0.0-alpha.3
dev.detekt:detekt-cli (source)	2.0.0-alpha.2 → 2.0.0-alpha.3
dev.detekt:detekt-api (source)	2.0.0-alpha.2 → 2.0.0-alpha.3
com.android.compose.screenshot (source)	0.0.1-alpha13 → 0.0.1-alpha14
com.android.tools.screenshot:screenshot-validation-api	0.0.1-alpha13 → 0.0.1-alpha14
androidx.navigation:navigation-compose (source)	2.9.7 → 2.9.8
androidx.compose:compose-bom	2026.03.00 → 2026.04.01
com.android.tools:common (source)	32.1.0 → 32.2.0
com.android.kotlin.multiplatform.library (source)	9.1.0 → 9.2.0
com.android.library (source)	9.1.0 → 9.2.0
com.android.application (source)	9.1.0 → 9.2.0
com.android.tools.build:gradle (source)	9.1.0 → 9.2.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

drewhamilton/Poko (dev.drewhamilton.poko)

v0.22.1

Compare Source

2026-04-24

Compile with Kotlin 2.3.21. Implement forward compatibility with Kotlin 2.4.0-Beta2.

mrmans0n/compose-rules (io.nlopez.compose.rules:detekt)

v0.5.8: 0.5.8

What's Changed

• Add Material 3 dividers as content emitters by @​alyssoncs in #​613
• Update plugin com.gradle.develocity to v4.4.1 by @​renovate[bot] in #​614
• Update astral-sh/setup-uv action to v8 by @​renovate[bot] in #​615
• Update dependency androidx.compose:compose-bom to v2026.04.01 by @​renovate[bot] in #​616
• Update detekt to 2.0.0-alpha.3 by @​mrmans0n in #​619

New Contributors

• @​alyssoncs made their first contribution in #​613

Dependency Matrix

linter	version	kotlin version
detekt	2.0.0-alpha.3	2.3.21
ktlint	1.8.0	2.2.21

Full Changelog: mrmans0n/compose-rules@v0.5.7...v0.5.8

v0.5.7

What's changed

• Update plugin shadowJar to v9.4.1 (#​611) @​renovate[bot]
• Update dependency androidx.compose:compose-bom to v2026.03.01 (#​609) @​renovate[bot]
• Update plugin com.gradle.develocity to v4.4.0 (#​610) @​renovate[bot]
• Update gradle/actions action to v6 (#​608) @​renovate[bot]
• Update Gradle to v9.4.1 (#​607) @​renovate[bot]
• Update plugin spotless to v8.4.0 (#​606) @​renovate[bot]
• Update plugin shadowJar to v9.4.0 (#​605) @​renovate[bot]
• Update release-drafter/release-drafter action to v7 (#​604) @​renovate[bot]
• Update dependency androidx.compose:compose-bom to v2026.03.00 (#​603) @​renovate[bot]
• Update Gradle to v9.4.0 (#​602) @​renovate[bot]
• Update plugin spotless to v8.3.0 (#​601) @​renovate[bot]
• Update plugin shadowJar to v9.3.2 (#​600) @​renovate[bot]
• Update dependency androidx.compose:compose-bom to v2026.02.01 (#​599) @​renovate[bot]
• Update actions/upload-artifact action to v7 (#​598) @​renovate[bot]
• Update dependency org.yaml:snakeyaml to v2.6 (#​597) @​renovate[bot]
• Update junit-framework monorepo (#​596) @​renovate[bot]
• Update dependency androidx.compose:compose-bom to v2026.02.00 (#​595) @​renovate[bot]
• Fix detekt version matrix: alpha.2 support started in 0.5.6 (#​594) @​mrmans0n
• Update Gradle to v9.3.1 (#​592) @​renovate[bot]
• Update dependency androidx.compose:compose-bom to v2026.01.01 (#​591) @​renovate[bot]
• Update plugin com.gradle.develocity to v4.3.2 (#​590) @​renovate[bot]
• Update plugin spotless to v8.2.1 (#​589) @​renovate[bot]

Dependency Matrix

linter	version	kotlin version
detekt	2.0.0-alpha.2	2.3.0
ktlint	1.8.0	2.2.21

ktorio/ktor (io.ktor:ktor-bom)

v3.4.3

Compare Source

Published 22 April 2026

Bugfixes

• KTOR-9451 OpenAPI schema inference not working for custom nested generics
• KTOR-9490 OpenAPI: Self-referential schema $ref uses FQN while schema is registered with a simple name
• KTOR-9463 OpenAPI: schema inference StackOverflow
• KTOR-8938 WebSockets: WebSockets handler does not inherit server coroutine context
• KTOR-8989 Shared engine is closed when a client created with config method is closed
• KTOR-9485 Apache5: FutureCallback never called, breaking Java agent instrumentation
• KTOR-9497 Darwin: SIGABRT crash when close() races with in-flight execute() since 3.4.2
• KTOR-9431 SuspendFunctionGun: ThreadContextElement leaks across requests when interceptor suspends
• KTOR-9423 CannotTransformContentToTypeException leaks internal class names in response body
• KTOR-9461 Incorrect link to the OWASP cheatsheet in the KDoc for CSRF plugin
• KTOR-9476 Unable to update/remove session data if no response content
• KTOR-9343 HttpRequestLifecycle plugin with cancelCallOnClose on, cancels subsequent requests when CallLogging plugin with callIdMdc is installed

v3.4.2

Compare Source

Published 27 March 2026

Improvements

• KTOR-9327 Curl: The WebSockets maxFrameSize option does not have an effect
• KTOR-9383 CaseInsensitiveString: reduce allocations
• KTOR-9385 Netty: Allocation micro-optimizations
• KTOR-9403 Darwin: Unnecessary ByteArray copy for each received response chunk
• KTOR-9412 KDoc for formFieldLimit documents incorrect default value (64 KB instead of 50 MiB)

Bugfixes

• KTOR-9351 OpenAPI: Incorrect schema generated for nested classes with lists
• KTOR-9361 WebSockets: JsWebSocketSession._closeReason is completed twice
• KTOR-9437 Fix GraalVM Compatibility
• KTOR-9424 Logging: OkHttp format should log the full requested URL
• KTOR-8540 Logging: IllegalStateException is thrown when response is cached and deserialization fails
• KTOR-9370 OpenAPI: NoSuchMethodError - getLOCAL_FUNCTION_FOR_LAMBDA with Kotlin 2.3.20-*
• KTOR-9421 Netty: active SSE connection blocks HTTP/2 response flushing for other requests
• KTOR-3390 JS browser: "Failed to execute 'digest' on 'SubtleCrypto'" error when using digest auth
• KTOR-5977 Compression: The encoders buffer streaming response
• KTOR-9393 Certificate pinning matches against all pins instead of hostname-scoped pins
• KTOR-8751 DI: AmbiguousDependencyException when named dependency is overridden in testApplication
• KTOR-9039 Bearer Auth: Request body transformed with jsonIO isn't sent over again after refreshToken request
• KTOR-9404 Darwin: Memory leak in KtorNSURLSessionDelegate
• KTOR-9399 LinkageError when running Ktor app with development mode inside Spring Boot / Amper fat-JAR
• KTOR-9402 NoSuchMethodError on RawWebSocket after 3.4.0
• KTOR-9372 Frame.Text.readText() causes infinite loop and 100% CPU on Kotlin/Native when WebSocket frame data is malformed or connection drops unexpectedly
• KTOR-9387 ZstdEncoder decode fails when source data is split into multiple Zstd frames

google/ksp (com.google.devtools.ksp)

v2.3.7

Compare Source

What's Changed

• Bumped Kotlin target language version to 2.3.20 (#​2821)
• Fixed an issue where the plugin adds a maven repo to the build and corrected the compiler plugin artifact (#​2856)
• Fixed a crash with IllegalStateException when source contains a class-level destructuring declaration (#​2861)
• Fixed support for Gradle Isolated Projects (#​2844)
• Fixed Windows build failure when the path is long (#​2815)
• Fixed issue where KSP does not call SymbolProcessor in some Gradle setups (#​2511)
• Fixed a crash in PsiResolutionStrategy for annotations with nullable fully qualified names (#​2864)
• Improved performance by lazily computing fully qualified Java annotation names (#​2860)

Contributors

• Thanks to everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.6...2.3.7

kotest/kotest (io.kotest:kotest-bom)

v6.1.11

Compare Source

What's Changed

• Fix native IR crash from shadowed OnlyInputTypes (#​5821) by @​PreAgile in #​5828
• Fix wasmJsD8Test timeout failure when tests use delay() by @​sksamuel in #​5827

Full Changelog: kotest/kotest@v6.1.10...6.1.11

v6.1.10

Compare Source

What's Changed

• Test Result Gutters by @​alfonsoristorato in #​5684
• Add tests confirming DSL callback ordering relative to annotation and project config listeners by @​sksamuel in #​5800
• Fix import alias clash when spec name digits concatenate with index digits by @​sksamuel in #​5802
• Fix PackageRunConfigurationProducer shouldReplace/isPreferredConfiguration over spec configs (#​5652) by @​sksamuel in #​5803
• Fix Kotest engine skipping discovery when AGP 9+ passes MethodSelectors (#​5773) by @​sksamuel in #​5804
• Add custom Json parser support to JSON matchers by @​PreAgile in #​5795
• Set KOTEST_IDEA_PLUGIN=true in Gradle and Android run producers by @​sksamuel in #​5808
• Add JVM_SUITE_NAME env var for Allure suite grouping (#​4573) by @​sksamuel in #​5792
• Add type-safe shouldEq / shouldNotEq assertions by @​PreAgile in #​5789
• AI Agent kotest skill by @​alfonsoristorato in #​5754
• speed-up-containExactly by @​AlexCue987 in #​5812
• docs: add AI-ready configuration for coding assistants by @​lunacompsia-oss in #​5810
• Fix JS engine mocha race: single channel send in engineFinished by @​sksamuel in #​5809
• Add anyOf/oneOf support to JsonSchema DSL and parser (#​4463) by @​PreAgile in #​5807
• Update shouldContainInOrder to find best matches by @​AlexCue987 in #​5817

New Contributors

• @​lunacompsia-oss made their first contribution in #​5810

Full Changelog: kotest/kotest@v6.1.9...v6.1.10

v6.1.9

Compare Source

Full Changelog: kotest/kotest@v6.1.8...v6.1.9

The Gradle 9.4 --tests filter change was missed from the 6.1.8 release.
This 6.1.9 release includes it.

If you are using Gradle 9.4+ then you need this build to run a single test from the IDE.

v6.1.8

Compare Source

What's Changed

• Precise Gradle configuration needed for pitest extension by @​szpak in #​5748
• Add automatic JUnit4 @​Rule support to KotestTestRunner by @​sksamuel in #​5749
• Follow up to #​5704 to clean filters at execution time not configuration time by @​sksamuel in #​5751
• ci: add workflow to auto-update API dumps on PR failures by @​Kantis in #​5757
• Update JsTestFrameworkTestEngineListener to handle nested tests correctly. by @​sksamuel in #​5752
• Enabling update-api-dump for PRs from forks by @​Kantis in #​5760
• Make shouldHaveSingleElement and shouldNotHaveSingleElement chainable by @​PreAgile in #​5756
• Fix ProhibitedAnalysisException when re-running failed tests by @​sksamuel in #​5766
• Add JSON Schema prefixItems (tuple validation) and enum support by @​sksamuel in #​5771
• Add primitive array support for contain matcher (#​4354) by @​sksamuel in #​5775
• Add JS lifecycle order test for issue #​3340 by @​sksamuel in #​5767
• Mark AnnotationSpec lifecycle methods as implicitly used by @​sksamuel in #​5768
• Support @​Suppress for duplicated test name and focus-in-nested-test warnings by @​sksamuel in #​5769
• Fix withClue clue context not included in assertion errors on non-JVM platforms by @​sksamuel in #​5770
• re-add support for gradle test filters after gradle 9.4.0 by @​alfonsoristorato in #​5785
• Add primitive array support for sorted (shouldBeSorted) matcher (#​4354) by @​sksamuel in #​5781
• Fix Slow Arb.generate for large objects by @​sksamuel in #​5761
• Publish IntelliJ plugin distribution zip to GitHub Packages on master by @​sksamuel in #​5763
• Tidy up logging across the engine and runner by @​sksamuel in #​5787
• Fix typo in SpringExtension by @​T45K in #​5788
• Refactor Discovery to improve class visibility filtering by @​sksamuel in #​5790
• Add tests for leading wildcard class name Gradle filter (#​5639) by @​sksamuel in #​5791
• Add primitive array support for startWith/endWith matchers (#​4354) by @​sksamuel in #​5779
• Add primitive array support for containExactly matcher (#​4354) by @​sksamuel in #​5777
• closing #​5782 : add ClasspathRootSelector support to shouldRunTests g… by @​SimY4 in #​5783
• Add LazyJvmAssertion to avoid stacktraces in inspectors by @​sksamuel in #​5759
• Add primitive array support for beIn (shouldBeIn) matcher (#​4354) by @​sksamuel in #​5780
• Add finalizeSpec DSL function to TestConfiguration and Spec by @​sksamuel in #​5750
• Add tests and fix for afterSpec/beforeSpec in TestFactory (#​4133) by @​sksamuel in #​5786
• Normalize line breaks in test names for Gradle test filters by @​sksamuel in #​5764
• Add primitive array support for inorder (shouldContainInOrder) matcher (#​4354) by @​sksamuel in #​5778
• Add primitive array support for containAll matcher (#​4354) by @​sksamuel in #​5776

New Contributors

• @​PreAgile made their first contribution in #​5756
• @​SimY4 made their first contribution in #​5783

Full Changelog: kotest/kotest@v6.1.7...v6.1.8

InsertKoinIO/koin (io.insert-koin:koin-bom)

v4.2.1: Koin 4.2.1

Compare Source

Support for Compile Safety with Koin Compiler 1.0.0-RC1

• Koin Compiler Plugin 1.0.0-RC1 - https://github.com/InsertKoinIO/koin-compiler-plugin/releases/tag/1.0.0-RC1

Bug Fixes

• Fix stacked-params lookup on linked scopes (#​2387) — The 4.2.0 resolver rewrite (CoreResolverV2) walked linked scopes but dropped the per-parent stacked-parameters check that 4.1.x performed via recursion. This broke patterns where AndroidParametersHolder is stacked on the factory scope by KoinViewModelFactory and SavedStateHandle is then resolved from a child ViewModel scope. Linked-scope resolution now also checks stacked params on each parent scope.

• Restore ABI compatibility for runOnKoinStarted (#​2391) — The 4.2.0 release inadvertently broke binary compatibility for runOnKoinStarted on JVM. Fixed by restoring the original JVM class name via @JvmName/@JvmMultifileClass annotations.

• Fix scope _closed concurrency issue (#​2389) — The Scope._closed flag was not volatile, which could cause stale reads under concurrent access.

Improvements

• Improved Scope resolution error messages — CoreResolverV2 now provides clearer error messages when scope resolution fails, making it easier to diagnose misconfigured scopes.

• Added apiCheck to CI — Binary compatibility validation (kotlinx.binary-compatibility-validator) now runs on every PR to prevent future ABI breaks.

Documentation

• parametersOf type-collision warning (#​2328) — Added a caution note explaining that when a value passed via parametersOf has the same type as the requested definition, Koin returns the value directly and skips the factory block. Suggests using a wrapper type as a workaround.

Contributors

Thanks to the following contributors for this release:

• @​arnaudgiuliani (Arnaud Giuliani)
• @​inemtsev (Ilya Nemtsev) — fix for scope closed concurrency issue (#​2389)

Kotlin/dokka (org.jetbrains.dokka)

v2.2.0: 2.2.0

Dokka Gradle Plugin

Starting from Dokka 2.1.0, the new Dokka Gradle Plugin is enabled by default. The documentation on kotlinlang.org has been updated accordingly:

• See Get started with Dokka for instructions on adding Dokka to a project
• See Migrate to Dokka Gradle plugin v2 for migrating from the old plugin

Dokka 2.2.0 introduces multiple improvements and fixes:

Note: most of the following changes affect only the new Dokka Gradle Plugin, enabled by default since Dokka 2.1.0

• Compatibility with Android Gradle Plugin 9.0.0, including Built-in Kotlin. (#​4231, #​4295, #​4412)
  • See #​4472 on documenting Android projects with flavors / multiple variants
• Android Gradle Library Plugin for KMP is now properly supported. (#​4359, #​4366)
• Support the new Kotlin Gradle Plugin API to work with generated sources (#​4402, #​4410)
• Fix suppressGeneratedFiles flag was unused (#​4348)
• Improve classpath resolution and platform detection logic (#​4296, #​4263, #​4258)
• Add olderVersionsDirName to DokkaVersioningPluginParameters (#​4301). Thanks to @​osipxd!
• Rework the Gradle attributes to make them integrate better with the ecosystem (#​4334). Thanks to @​martinbonnin!
• Drop usages of APIs deprecated in KGP (#​4271)
  • this change makes deprecated DGPv1 be compatible with KGP 1.9.0+, aligning it with DGPv2

Analysis improvements

Starting from Dokka 2.1.0, the K2 analysis is enabled by default. K2 analysis is now stable, enabled by default, and fully migrated to the new shared Analysis API. This includes the migration to the new KDoc resolution API within the Analysis API.

Dokka 2.2.0 introduces multiple improvements and fixes:

Note: most of the following changes affect only Dokka's K2 analysis, enabled by default since Dokka 2.1.0

• Allow actual declarations to automatically inherit their documentation from expect counterparts in multiplatform projects (#​2493, #​4245, #​4351)
• Link resolution improvements:
  • Support references to declarations with quoted names (#​3356)
  • Support resolution of links to extensions with type parameters according to KEEP#385 (#​3555)
  • Improve handling of ambiguous KDoc links according to KEEP#389 (#​3451, #​3179, #​3632, #​4327, #​3604)
    • Note: those changes are currently available only under experimental org.jetbrains.dokka.analysis.enableExperimentalKDocResolution system property
• K2/K1 compatibility improvements:
  • Fix Multiple pages associated with key (#​4300)
  • Fix inconsistent constructor rendering for expect/actual annotation (#​4055)
  • Fix missing abstract modifier for abstract interface method with redundant open modifier (#​4144)
  • Fix working with intersected and overridden fake functions/properties (#​3857)
  • Fix rendering of links in @see block (#​3680)
  • Fix redundant ? on properties with a type of typealias to nullable type (#​4337)
  • Fix the missing default parameter value for inherited (not overridden) members (#​4320)
  • Fix duplicate source links for function overloads and properties (#​4049, #​4338)
  • Fix resolution of links in the second line of KDoc tags (#​4332, KT-75215, KT-79783)
• Improve DRI handling for varargs and properties (#​3558, #​4347)
• Context parameters improvements:
  • Fix KDoc links to context parameters (#​4389)
  • Support context parameters documentation via @param tag (#​4065)
• Java/Javadoc related improvements:
  • Use language-java class for <pre> and <code> tags generated from Java sources (#​4346)
  • Add new Mark DocTag, TextStyle.Highlight and support for <mark> javadoc HTML tag (#​4376)
  • Fix source links to accessors in the KotlinAsJava plugin (#​4396)
  • Fix incorrect links to Javadoc's functions with type parameters (#​3502)
  • Fix links to Java fields (#​4360)
  • Fix documentation on extension properties is not propagated to the generated extension getters (#​3752)
  • Fix generated getter for property in kotlin-as-java doesn't inherit KDoc description (#​3369)

Kotlin playground runnable samples extracted into a separate plugin

Starting with Dokka 2.2.0, Kotlin Playground–based rendering of @sample KDoc references is disabled by default. Samples are now rendered as non-runnable code blocks.

Support for interactive, runnable samples has been extracted into a separate plugin with configurable options, including custom Playground scripts and server URLs. See the plugin README.md for setup instructions.

Other changes and bugfixes

• Fix unnecessary logging for unresolved links in module documentation (#​4413)
• Fix CLI runner to force use of the latest stdlib (#​4324)
• Use the shadowed stdlib in the Dokka Maven Plugin (#​4229)

Changes from 2.2.0-Beta

• Fix DGP reads all Gradle properties, which causes unnecessary CC invalidation (#​4467)
• Detect and handle intersected source roots in Android multi-variant projects (#​4473)

Feedback

We would appreciate your feedback!

• Please report any feedback or problems https://kotl.in/dokka-issues
• Chat with the community visit #dokka in https://kotlinlang.slack.com/ (To sign up visit https://kotl.in/slack)

detekt/detekt (dev.detekt)

v2.0.0-alpha.3

2.0.0-alpha.3 - 2026-04-24

This is an alpha release of Detekt 2.0.0. Is built against Kotlin 2.3.21, Gradle 9.3.1, AGP 9.1.1 and is tested against JDK 25.

As of this release, the workaround of disabling the new DSL and built-in Kotlin via gradle.properties for AGP 9.x projects is no longer required.

Notable Changes

• Bump Kotlin to v2.3.21 - #​9272
• Bump AGP to v9.1.1 - #​9244
• Add support for AGP 9 built-in Kotlin - #​9100
• Rule UnnecessaryFullyQualifiedName now requires full mode to run - #​9061
• Add new rule: UnnecessaryRun - #​7428

Breaking Changes

• Remove DetektProgressListener from our public API - #​9221
• Remove `Inval

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At 10:00 PM through 11:59 PM and 12:00 AM through 04:59 AM (* 22-23,0-4 * * *)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.