Update all non-major dependencies (except core Kotlin)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.junit.jupiter:junit-jupiter-engine (source)	5.10.3 -> 5.14.0
org.ajoberstar.reckon:reckon-gradle	0.18.3 -> 0.19.2
io.gitlab.arturbosch.detekt:detekt-gradle-plugin (source)	1.23.6 -> 1.23.8
org.apache.logging.log4j:log4j-core (source)	2.23.1 -> 2.25.2
org.apache.logging.log4j:log4j-slf4j2-impl (source)	2.23.1 -> 2.25.2
io.github.petertrr:kotlin-multiplatform-diff	0.5.0 -> 0.7.0
org.jetbrains.kotlinx:kotlinx-datetime	0.6.0 -> 0.7.1-0.6.x-compat
com.gradle.enterprise	3.17.6 -> 3.19.2
org.jetbrains.kotlinx:kotlinx-serialization-properties	1.7.1 -> 1.9.0
org.jetbrains.kotlinx:kotlinx-serialization-json	1.7.1 -> 1.9.0
org.jetbrains.kotlinx:kotlinx-serialization-core	1.7.1 -> 1.9.0
com.squareup.okio:okio-fakefilesystem	3.9.0 -> 3.16.2
com.squareup.okio:okio	3.9.0 -> 3.16.2

---

Release Notes

detekt/detekt (io.gitlab.arturbosch.detekt:detekt-gradle-plugin)

v1.23.8

1.23.8 - 2025-02-20

This is a point release for Detekt 1.23.0, built against Kotlin 2.0.21, with fixes for several bugs that got reported by the community.

Notable Changes

• fix(deps): Update kotlin to 2.0.21 - #​7580
• fix(deps): Update AGP to v8.8.1 - #​7879
• fix(deps): update Gradle to v8.12.1 - #​7780

Changelog

• UseDataClass: do not report on expect classes - #​7857
• Fix InjectDispatcher false positives - #​7797
• [UnnecessaryParentheses] Allow float/double without integer part - #​7751
• Fix ThrowingExceptionsWithoutMessageOrCause false positive - #​7715
• Issue #​7634: Make UndocumentedPublicClass configurable to flag `com… - #​7635
• Fix redundant empty tags in baseline XML - #​7625
• MatchingDeclarationName now supports platofrm suffixes - #​6426

Contributors

We would like to thank the following contributors that made this release possible: @​BraisGabin, @​JordanLongstaff, @​Nava2, @​atulgpt, @​eygraber, @​lexa-diky, @​t-kameyama

v1.23.7

1.23.7 - 2024-09-08

This is a point release for Detekt 1.23.0, built against Kotlin 2.0.10, with fixes for several bugs that got reported by the community.

Notable Changes

• fix(deps): update kotlin monorepo to v2.0.10 - #​7517
• Update to Kotlin 2.0.0 #​6640
• fix(deps): update kotlin monorepo to v1.9.24 - #​7264
• fix(deps): update dependency com.android.tools.build:gradle to v8.5.2 - #​7525
• chore(deps): update dependency gradle to v8.10 - #​7546

Changelog

• Add basic support for isolated projects to 1.x - #​7526
• ExplicitCollectionElementAccessMethod: fix false positive when Map put has 3 arguments - #​7563
• BracesOnIfStatements: fix false-positive when chained - #​7444
• Add enum entry check in UndocumentedPublicProperty - #​7426
• Use the anchor which is already present before - #​7423
• Fix small corner-case in "SerialVersionUIDInSerializableClass" rule, … - #​7346
• SwallowedException: fix false positive when exception is used as a receiver - #​7288
• NamedArguments: fix false positive on spread varargs - #​7283
• MultilineLambdaItParameter: fix false negative with single statement on multiple lines - #​7221
• Check for root of receiver in selector expression - #​7220
• Check for public companion object for UndocumentedPublicClass - #​7219
• fix: TopLevelPropertyNaming also detecting extension property name - #​7212
• Publish detekt-compiler-plugin-all to Maven and GH Releases - #​7179
• versioned default detekt config file link - #​7161
• Support rangeUntil operator for UnusedImport rule - #​7104
• Fix false positive on it usages when type parameter is specified - #​6850

Housekeeping/Docs

• [bugfix] AnnotationOnSeparateLine in snippets - #​6526
• Add docs about using the Compiler Plugin with the Kotlin CLI compiler - #​7184

petertrr/kotlin-multiplatform-diff (io.github.petertrr:kotlin-multiplatform-diff)

v0.7.0

What's Changed

• add ARM cpu targets by @​dobe in #​115
• Do another general cleanup by @​lppedd in #​114
• chore(deps): update dependency gradle to v8.8 by @​renovate in #​106

New Contributors

• @​dobe made their first contribution in #​115

Full Changelog: petertrr/kotlin-multiplatform-diff@v0.6.0...v0.7.0

v0.6.0

What's Changed

• Introduce Myers algorithm in linear space by @​lppedd in #​112

• chore(deps): update all github actions to v4 (major) by @​renovate in #​99

• Update Gradle to 8.6, switch to new Gradle GH actions by @​petertrr in #​100

• chore(deps): update dependency org.jetbrains.kotlin.multiplatform to v1.9.22 by @​renovate in #​95

• chore(deps): update detekt to v1.23.5 by @​renovate in #​96

• chore(deps): update junit to v5.10.1 by @​renovate in #​94

• chore(deps): update plugin org.ajoberstar.reckon.settings to v0.18.2 by @​renovate in #​90

• Update build configuration to reflect KGP improvements by @​lppedd in #​102

• Update codecov action to v4 by @​petertrr in #​109

• Perform an overall code cleanup by @​lppedd in #​108

• Support WebAssembly targets by @​lppedd in #​111

• Switch to the new Gradle action in release.yml by @​petertrr in #​110

New Contributors

• @​lppedd made their first contribution in #​102

Full Changelog: petertrr/kotlin-multiplatform-diff@v0.5.0...v0.6.0

Kotlin/kotlinx-datetime (org.jetbrains.kotlinx:kotlinx-datetime)

v0.7.1-0.6.x-compat

v0.7.1

• Add kotlinx.datetime.Instant and kotlinx.datetime.Clock type aliases to, respectively, kotlin.time.Instant and kotlin.time.Clock to make migration more convenient.
• Add a fallback timezone database implementation for Darwin that uses the Foundation framework if the timezone database is unavailable on the filesystem (#​485).
• Restore binary compatibility in string format definitions utilizing dates on the JVM (#​545).

v0.7.0-0.6.x-compat

v0.7.0

Breaking changes:

• Remove kotlinx.datetime.Instant and kotlinx.datetime.Clock in favor of kotlin.time.Instant (#​506). See https://github.com/Kotlin/kotlinx-datetime?tab=readme-ov-file#deprecation-of-instant for a description of what to do if this causes problems.
• Unify the range of admissible LocalDate and LocalDateTime values on all platforms (#​432).
• Rename dayOfMonth to day, monthNumber to month (#​84).
• Make DayOfWeek and Month no longer type aliases to java.time.DayOfWeek and java.time.Month (#​96).
• Make "UTC" and not "Z" be the timezone identifier for TimeZone.UTC (#​474).
• Accept "z" in TimeZone.of, with the same meaning as "Z" (#​529).
• Add DateTimeFormat-based KSerializer implementations for datetime entities, and change the default serializers to be based on toString/parse pairs (#​415).

Additions:

• Add java.io.Serializable implementations for most of the entities in the library (#​143). Thanks for spotting and fixing a potential vulnerability, @​lukellmann!
• Add LocalDateRange, a range of LocalDate values (#​190). Thanks, @​PeterAttardo!
• Add YearMonth and YearMonthRange (#​457).

Tweaks and fixes:

• Support obtaining the system timezone on old Debian-based distributions (#​430).
• Fix not being able to parse some valid timezone identifiers using the timeZoneId() directive (#​444).
• Use the grammar defined in RFC 9557 for parsing timezone identifiers in the timeZoneId() directive, allowing parsing values not present in the timezone database (#​531).
• Improved error messages when formatting an invalid DateTimeComponents value (#​471).
• Set the JPMS dependency on kotlinx.serialization.core to be optional (#​496).

v0.6.2

• Add the Wasm/WASI target support (#​366). Thanks, @​igoriakovlev!
• Add TimeSource.asClock (#​164). Thanks, @​hfhbd!
• Implement parsing and formatting day-of-year (#​414)
• Improve the precision of NSDate to Instant conversions (#​427)
• Deprecate DatePeriod.plus and DateTimePeriod.plus with a warning (#​381)
• Deprecate Clock.asTimeSource with a warning (#​372)
• Fix a bug in module-info preventing using kotlinx.datetime.format together with JPMS (#​438). Thanks, @​cdelabou!
• Small tweaks and fixes.

v0.6.1

• Prohibit parsing non-ASCII digits as numbers in DateTimeFormat (#​405)
• More accurately determine which files represent time zones and which don't on Linux and Darwin (#​395)
• Fix a regression that occasionally considered the right boundary of a time overlap to be a part of it on Native (#​399)
• Introduce various small improvements to the timezone handling on Windows (#​390)
• On Linux, allow not having any /etc/localtime set, defaulting to TimeZone.UTC as the system time zone (#​426)

Kotlin/kotlinx.serialization (org.jetbrains.kotlinx:kotlinx-serialization-properties)

v1.9.0

==================

This release updates Kotlin version to 2.2.0, includes several bugfixes and provides serializers for kotlin.time.Instant.

Add kotlin.time.Instant serializers

Instant class was moved from kotlinx-datetime library to Kotlin standard library.
As a result, kotlinx-datetime 0.7.0 no longer has serializers for the Instant class.
To use new kotlin.time.Instant class in your @​Serializable classes,
you can use this 1.9.0 kotlinx-serialization version (Kotlin 2.2 is required).
You can choose between default InstantSerializer which uses its string representation,
or specify InstantComponentSerializer that represents instant as its components.
See details in the PR.

Other bugfixes

• Fix resize in JsonPath (#​2995)
• Fixed proguard rules for obfuscation to work correctly (#​2983)

v1.8.1

==================

This release updates Kotlin version to 2.1.20, while also providing several important improvements
and bugfixes.

Improvements

• Implemented encoding null in key and value of a map in Protobuf (#​2910)
• Make type argument in JsonTransformingSerializer nullable (#​2911)
• Use SPDX identifier in POMs (#​2936) (thanks to Leon Linhart)
• Add watchosDeviceArm64 to Okio integration module (#​2920) (thanks to Daniel Santiago)
• Update kotlinx-io version to 0.6.0 (#​2933) (thanks to Piotr Krzemiński)

Bugfixes

• Fix incorrect enum coercion during deserialization from JsonElement (#​2962)
• Supply proper equals(), hashCode(), and toString() for SerialDescriptor() wrapper (#​2942)
• Do not encode empty packed collections in protobuf (#​2907)

v1.8.0

==================

This release contains all of the changes from 1.8.0-RC. Kotlin 2.1.0 is used as a default, while upcoming 2.1.10 is also supported.
Also added small bugfixes, including speedup of ProtoWireType.from (#​2879).

v1.7.3

==================

This release aims to fix important issues that were discovered in the 1.7.2 release,
including the inability to sync certain projects into Android Studio/IntelliJ IDEA and exceptions from custom Uuid serializers.

It uses Kotlin 2.0.20 by default.

• Use explicit kotlin-stdlib and kotlin-test versions from version catalog (#​2818)
• Drop usage of deprecated Any?.freeze() in K/N target (#​2819)
• Check against serialName instead of simpleClassName (#​2802)
• Ignore NoClassDefFoundError when initializing builtins map for serializer() function (#​2803)
• Clarify example for SerializationException (#​2806)

v1.7.2

==================

This release provides several new features, including a major Cbor configuration rework.
It uses Kotlin 2.0.20 by default.

Cbor feature set for COSE compliance

This change brings a lot of features to the CBOR format, namely:

• Serial Labels — see @CborLabel annotation and preferCborLabelsOverNames flag.
• Tagging of keys and values — see encode*Tags and verify*Tags set of flags
• Definite length encoding — see useDefiniteLengthEncoding. This flag affects object encoding, since decoding of arrays with definite lenghts is automatically supported.
• Option to globally prefer major type 2 for byte array encoding — see alwaysUseByteString flag.

Since there are quite a lot of flags now, they were restructured to a separate CborConfiguration class, similarly to JsonConfiguration.
It is possible to retrieve this configuration from CborEncoder/CborDecoder interfaces in your custom serializers (see their documentation for details).

All of these features make it possible to serialize and parse COSE-compliant CBOR, for example, ISO/IEC 18013-5:2021-compliant mobile driving license data.
In case you want to make use of them, there is a predefined Cbor.CoseCompliant instance.
However, some canonicalization steps (such as sorting keys) still need to be performed manually.

This functionality was contributed to us by Bernd Prünster.

Keeping generated serializers

One of the most requested features for serialization plugin was to continue to generate a serializer even if a custom one is specified for the class.
It allows using a plugin-generated serializer in a fallback or delegate strategy, accessing type structure via descriptor, using default serialization behavior in inheritors that do not use custom serializers.

Starting with this release, you can specify the @KeepGeneratedSerializer annotation on the class declaration to instruct the plugin to continue generating the serializer.
In this case, the serializer will be accessible using the .generatedSerializer() function on the class's companion object.

This annotation is currently experimental. Kotlin 2.0.20 or higher is required for this feature to work.

You can check out the examples in the documentation and in the PRs: #​2758, #​2669.

Serializer for kotlin.uuid.Uuid

Kotlin 2.0.20 added a common class to represent UUIDs in a multiplatform code.
kotlinx.serialization 1.7.2 provides a corresponding Uuid.serializer() for it, making it possible to use it in @Serializable classes.
Note that for now, serializer should be provided manually with @Contextual annotation.
Plugin will be able to automatically insert Uuid serializer in Kotlin 2.1.0.

See more details in the corresponding PR.

Other bugfixes and improvements

• Prohibited using of zero and negative field numbers in ProtoNumber (#​2766)
• Improve readability of protobuf decoding exception messages (#​2768) (thanks to xiaozhikang0916)
• docs(serializers): Fix grammatical errors (#​2779) (thanks to jamhour1g)
• Fixed VerifyError after ProGuard optimization (#​2728)
• Add wasm-wasi target to Okio integration (#​2727)

square/okio (com.squareup.okio:okio-fakefilesystem)

v3.16.2

2025-10-14

• Fix: okio-assetfilesystem APIs now correctly restored as visible to Kotlin.

v3.16.1

2025-10-09

• Fix: Don't crash when calling Socket.shutdownOutput() or shutdownInput() on an SSLSocket on
  Android API 21. This method throws an UnsupportedOperationException, so we now catch that and
  close the underlying stream instead.

v3.16.0

2025-07-29

• Fix: Change Socket.asOkioSocket() to resolve its source InputStream and OutputStream
  eagerly. This will throw a SocketException immediately if the socket isn’t connected.
  This behavior is consistent with our similar APIs, Socket.source() and Socket.sink().

• Fix: Optimize AsyncTimeout on systems with a very large number of active timeouts. This class
  originally kept active timeouts in a linked list; with this update the internal data structure is
  a binary heap. The old runtime was 𝑂(𝑛²) to activate 𝑛 timeouts; with this optimization the
  runtime is 𝑂(𝑛 log 𝑛).

• Upgrade: [Kotlin 2.2.0][kotlin_2_2_0].

v3.15.0

2025-07-01

• Upgrade: [kotlinx-datetime 0.7.0-0.6.x-compat][datetime_0_7_0_compat]. The previous 3.14.0
  release, FakeFileSystem broke binary-compatibility for calls to FakeFileSystem(). This
  restores that compatibility.

• Breaking: Change FakeFileSystem.clock from a JVM field to a property. This avoids a crash
  running Okio in a Gradle 8.x plugin. This change is not binary-compatible.

v3.14.0

2025-06-28

• Upgrade: [kotlinx-datetime 0.7.0][datetime_0_7_0]. This impacts the okio-fakefilesystem
  artifact only. This is a binary-incompatible backwards-incompatible change that cannot co-exist
  with previous releases of okio-fakefilesystem! If you observe a NoSuchMethodError calling
  FakeFileSystem.init, update the calling code to this release (or newer) and recompile. We don't
  like imposing backwards-incompatible changes like this on you and do so regretfully.

v3.13.0

2025-06-13

• New: okio.Socket interface. This is a first step towards low-level streaming networking support
  for Kotlin/Multiplatform. This release provides two JVM-only implementations: asOkioSocket()
  adapts a java.net.Socket to our new interface, and inMemorySocketPair() returns a pair of
  mutually-connected sockets. We also anticipate that this interface will be a useful abstraction
  for proxies and tunnels.
• New: In-development snapshots are now published to the [Central Portal Snapshots repository].

v3.12.0

2025-05-27

• New: Support an optional end index when searching with BufferedSource.indexOf().
• Fix: Don't do unnecessary work in BufferedSource.rangeEquals().
• Upgrade: [Kotlin 2.1.21][kotlin_2_1_21].

v3.11.0

2025-04-09

• Fix: Clear the deflater's byte array reference
• New: Faster implementation of String.decodeHex() on Kotlin/JS.
• New: Declare EXACTLY_ONCE execution for blocks like Closeable.use {} and FileSystem.read {}.
• Upgrade: [Kotlin 2.1.20][kotlin_2_1_20].

v3.10.2

Compare Source

2025-01-08

• Fix: okio-nodefilesystem artifact is no longer empty.

v3.10.1

Compare Source

2025-01-07

• New: FileSystem.close() may prevent future access and/or clean up associated resources depending on the backing implementation. FakeFileSystem will prevent future operations once closed.
• InputStreams created from BufferedSource.inputStream() now have a more efficient version of InputStream.transferTo() which reduces memory copies.
• okio-nodefilesystem is no longer publised as a JS project, but a Kotlin multiplatform project with only a JS target. This change should not affect consumers in any way, and is motivated by the Kotlin Gradle plugin deprecating the JS-only plugin. Please use 3.10.2 to ensure this change actually does not affect your builds.

v3.10.0

Compare Source

2025-01-06

This version is equivalent to the subsequent 3.10.1, but it did not fully publish to Maven Central due to infrastructure problems.

v3.9.1

2024-09-12

• Fix: Support paths containing a single dot (".") in Path.relativeTo.
• Fix: Do not read from the upstream source when a 0-byte read is requested.
• Fix: Update kotlinx.datetime to 0.6.0 to correct a Gradle module metadata problem with 0.5.0.
  Note: this artifact is only used in 'okio-fakefilesystem' and 'okio-nodefilesystem' and not in the Okio core.

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.