Commit graph

565 commits

Author SHA1 Message Date
dependabot[bot]
9249c69295
chore(deps): bump ip-address from 10.2.0 to 10.4.0 in /integration-test/src/jvmTest/typescript (#934)
Bumps [ip-address](https://github.com/beaugunderson/ip-address) from
10.2.0 to 10.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/beaugunderson/ip-address/releases">ip-address's
releases</a>.</em></p>
<blockquote>
<h2>v10.4.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add GitHub Actions CI by <a
href="https://github.com/beaugunderson"><code>@​beaugunderson</code></a>
in <a
href="https://redirect.github.com/beaugunderson/ip-address/pull/213">beaugunderson/ip-address#213</a></li>
<li>Keep the package loadable on node 12, and enforce it by <a
href="https://github.com/beaugunderson"><code>@​beaugunderson</code></a>
in <a
href="https://redirect.github.com/beaugunderson/ip-address/pull/216">beaugunderson/ip-address#216</a></li>
<li>Validate the byte arrays Address6 is given by <a
href="https://github.com/beaugunderson"><code>@​beaugunderson</code></a>
in <a
href="https://redirect.github.com/beaugunderson/ip-address/pull/217">beaugunderson/ip-address#217</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/beaugunderson/ip-address/compare/v10.3.1...v10.4.0">https://github.com/beaugunderson/ip-address/compare/v10.3.1...v10.4.0</a></p>
<h2>v10.3.1</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/beaugunderson/ip-address/compare/v10.3.0...v10.3.1">https://github.com/beaugunderson/ip-address/compare/v10.3.0...v10.3.1</a></p>
<h2>v10.3.0</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/beaugunderson/ip-address/compare/v10.2.2...v10.3.0">https://github.com/beaugunderson/ip-address/compare/v10.2.2...v10.3.0</a></p>
<h2>v10.2.2</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/beaugunderson/ip-address/compare/v10.2.1...v10.2.2">https://github.com/beaugunderson/ip-address/compare/v10.2.1...v10.2.2</a></p>
<h2>v10.2.1</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/beaugunderson/ip-address/compare/v10.2.0...v10.2.1">https://github.com/beaugunderson/ip-address/compare/v10.2.0...v10.2.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fbb8db28f1"><code>fbb8db2</code></a>
10.4.0</li>
<li><a
href="45a2b11ec2"><code>45a2b11</code></a>
Validate the byte arrays Address6 is given (<a
href="https://redirect.github.com/beaugunderson/ip-address/issues/217">#217</a>)</li>
<li><a
href="bac8810b39"><code>bac8810</code></a>
Keep the package loadable on node 12, and enforce it (<a
href="https://redirect.github.com/beaugunderson/ip-address/issues/216">#216</a>)</li>
<li><a
href="9b3d8488d1"><code>9b3d848</code></a>
Add a security policy and a README section on security posture</li>
<li><a
href="e84a7b381d"><code>e84a7b3</code></a>
Order the README API reference Address4, Address6, AddressError</li>
<li><a
href="015160b85e"><code>015160b</code></a>
Collapse each class in the README API reference</li>
<li><a
href="34061a897d"><code>34061a8</code></a>
Pin checkout and setup-node to commits in the release job</li>
<li><a
href="c5fae5d9bd"><code>c5fae5d</code></a>
Pin action-gh-release to a commit and move it to 3.0.2</li>
<li><a
href="e0ef048419"><code>e0ef048</code></a>
Replace CircleCI with GitHub Actions</li>
<li><a
href="5e3ceb779a"><code>5e3ceb7</code></a>
Add GitHub Actions CI across Node 20, 22, 24 and 25 (<a
href="https://redirect.github.com/beaugunderson/ip-address/issues/213">#213</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/beaugunderson/ip-address/compare/v10.2.0...v10.4.0">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for ip-address since your current version.</p>
</details>
<details>
<summary>Install script changes</summary>
<p>This version adds <code>prepare</code> script that runs during
installation. Review the package contents before updating.</p>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 14:27:10 +02:00
dependabot[bot]
4a8ffdfea9
chore(deps): bump the kotlin group across 1 directory with 2 updates (#901)
Bumps the kotlin group with 2 updates in the / directory:
[org.jetbrains.kotlin:kotlin-gradle-plugin](https://github.com/JetBrains/kotlin)
and
[org.jetbrains.kotlin:kotlin-serialization](https://github.com/JetBrains/kotlin).

Updates `org.jetbrains.kotlin:kotlin-gradle-plugin` from 2.4.0 to 2.4.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin:kotlin-gradle-plugin's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.10</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
<h2>Kotlin 2.4.10-RC2</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin:kotlin-gradle-plugin's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.10</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5687445832"><code>5687445</code></a>
Add Changelog for 2.4.10-RC2</li>
<li><a
href="ba30392c45"><code>ba30392</code></a>
[Wasm] Support regenerate unchanged modules flag on KGP</li>
<li><a
href="6307e7310d"><code>6307e73</code></a>
[Wasm] Implement Xwasm-IC-generate-unchanged-modules flag</li>
<li><a
href="39d7aee847"><code>39d7aee</code></a>
Add ChangeLog for 2.4.10-RC2</li>
<li><a
href="a2956bed85"><code>a2956be</code></a>
[Gradle] Update karma.conf.js to use 'require(...)' instead plain
strings</li>
<li><a
href="9b1361ce7a"><code>9b1361c</code></a>
[Gradle] KT-87223: Updated regression test</li>
<li><a
href="a4c153af52"><code>a4c153a</code></a>
[Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat
config</li>
<li><a
href="bc04b90d24"><code>bc04b90</code></a>
Add ChangeLog for 2.4.10-RC</li>
<li><a
href="bbcb94baa2"><code>bbcb94b</code></a>
[CRI] explicitly disable CRI generation for non-JVM targets to avoid
false-po...</li>
<li><a
href="6c2c458f1d"><code>6c2c458</code></a>
Scripting: fix jvmTarget processing from script annotations</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.0...v2.4.10">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.jetbrains.kotlin:kotlin-serialization` from 2.4.0 to 2.4.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin:kotlin-serialization's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.10</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
<h2>Kotlin 2.4.10-RC2</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin:kotlin-serialization's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.10</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5687445832"><code>5687445</code></a>
Add Changelog for 2.4.10-RC2</li>
<li><a
href="ba30392c45"><code>ba30392</code></a>
[Wasm] Support regenerate unchanged modules flag on KGP</li>
<li><a
href="6307e7310d"><code>6307e73</code></a>
[Wasm] Implement Xwasm-IC-generate-unchanged-modules flag</li>
<li><a
href="39d7aee847"><code>39d7aee</code></a>
Add ChangeLog for 2.4.10-RC2</li>
<li><a
href="a2956bed85"><code>a2956be</code></a>
[Gradle] Update karma.conf.js to use 'require(...)' instead plain
strings</li>
<li><a
href="9b1361ce7a"><code>9b1361c</code></a>
[Gradle] KT-87223: Updated regression test</li>
<li><a
href="a4c153af52"><code>a4c153a</code></a>
[Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat
config</li>
<li><a
href="bc04b90d24"><code>bc04b90</code></a>
Add ChangeLog for 2.4.10-RC</li>
<li><a
href="bbcb94baa2"><code>bbcb94b</code></a>
[CRI] explicitly disable CRI generation for non-JVM targets to avoid
false-po...</li>
<li><a
href="6c2c458f1d"><code>6c2c458</code></a>
Scripting: fix jvmTarget processing from script annotations</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.0...v2.4.10">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.jetbrains.kotlin:kotlin-serialization` from 2.4.0 to 2.4.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin:kotlin-serialization's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.10</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
<h2>Kotlin 2.4.10-RC2</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin:kotlin-serialization's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.10</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5687445832"><code>5687445</code></a>
Add Changelog for 2.4.10-RC2</li>
<li><a
href="ba30392c45"><code>ba30392</code></a>
[Wasm] Support regenerate unchanged modules flag on KGP</li>
<li><a
href="6307e7310d"><code>6307e73</code></a>
[Wasm] Implement Xwasm-IC-generate-unchanged-modules flag</li>
<li><a
href="39d7aee847"><code>39d7aee</code></a>
Add ChangeLog for 2.4.10-RC2</li>
<li><a
href="a2956bed85"><code>a2956be</code></a>
[Gradle] Update karma.conf.js to use 'require(...)' instead plain
strings</li>
<li><a
href="9b1361ce7a"><code>9b1361c</code></a>
[Gradle] KT-87223: Updated regression test</li>
<li><a
href="a4c153af52"><code>a4c153a</code></a>
[Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat
config</li>
<li><a
href="bc04b90d24"><code>bc04b90</code></a>
Add ChangeLog for 2.4.10-RC</li>
<li><a
href="bbcb94baa2"><code>bbcb94b</code></a>
[CRI] explicitly disable CRI generation for non-JVM targets to avoid
false-po...</li>
<li><a
href="6c2c458f1d"><code>6c2c458</code></a>
Scripting: fix jvmTarget processing from script annotations</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.0...v2.4.10">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 14:07:06 +02:00
dependabot[bot]
fe9843ded9
chore(deps): bump the all-actions group across 1 directory with 3 updates (#932)
Bumps the all-actions group with 3 updates in the / directory:
[gradle/actions](https://github.com/gradle/actions),
[actions/stale](https://github.com/actions/stale) and
[github/codeql-action](https://github.com/github/codeql-action).

Updates `gradle/actions` from 6 to 6.2.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/actions/releases">gradle/actions's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.0</h2>
<h2>Highlights</h2>
<p>This release brings significant behaviour improvements to
<strong>Enhanced caching</strong>, improvements to the generated Job
Summary, and a number of correctness and security fixes.</p>
<ol>
<li><strong>Improved cache-cleanup mechanism.</strong> Cleanup of stale
files from the Gradle User Home is now faster, and no longer depends on
Gradle or a JVM. It works by inspecting the local file state directly,
removing the Gradle invocation from the post-build step.</li>
<li><strong>More granular, more stable caching.</strong> The local build
cache is stored as a separate cache entry, so it can be restored and
invalidated independently of the main Gradle User Home entry. Transient
Gradle housekeeping files are excluded from the cache, reducing its size
and improving stability.</li>
<li><strong>Hide obsolete Job summaries in PR commments</strong>: When a
new Job summary comment is added to a PR, previous outdated Job
summaries are now hidden.</li>
<li><strong>Improved caching report in the job summary.</strong> The
cache report now uses a single, consistent layout across all cache
states and providers. Provider information is integrated directly into
the report, and per-entry details are available in an expandable
section. (<a
href="https://redirect.github.com/gradle/actions/issues/985">#985</a>)</li>
<li><strong>Correctness and security fixes.</strong> A unique cache key
is now used per run attempt, so re-runs no longer collide; the job
summary shows the cache key string rather than an internal id; and
bundled dependencies have been updated, including a ReDoS fix and a
fast-xml CVE fix.</li>
</ol>
<h2>What's Changed</h2>
<ul>
<li>Remove unnecessary dependency overrides by <a
href="https://github.com/bigdaz"><code>@​bigdaz</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/981">gradle/actions#981</a></li>
<li>Scope CI-integ-test concurrency groups per-branch by <a
href="https://github.com/bigdaz"><code>@​bigdaz</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/983">gradle/actions#983</a></li>
<li>Improve typings by <a
href="https://github.com/Vampire"><code>@​Vampire</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/938">gradle/actions#938</a></li>
<li>Hide obsolete Job summaries by <a
href="https://github.com/SimonMarquis"><code>@​SimonMarquis</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/902">gradle/actions#902</a></li>
<li>CI: add requireable aggregate/no-op checks for branch protection by
<a href="https://github.com/bigdaz"><code>@​bigdaz</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/984">gradle/actions#984</a></li>
<li>Redesign the caching Job Summary by <a
href="https://github.com/bigdaz"><code>@​bigdaz</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/985">gradle/actions#985</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Vampire"><code>@​Vampire</code></a> made
their first contribution in <a
href="https://redirect.github.com/gradle/actions/pull/938">gradle/actions#938</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/gradle/actions/compare/v6.1.1...v6.2.0">https://github.com/gradle/actions/compare/v6.1.1...v6.2.0</a></p>
<h2>v6.1.1</h2>
<p>This release updates various dependency versions, resolving several
reported security vulnerabilities.
No functional changes are included</p>
<h2>What's Changed</h2>
<ul>
<li>Bump Gradle Wrapper from 9.4.1 to 9.5.1 in
/sources/test/init-scripts by <a
href="https://github.com/bot-githubaction"><code>@​bot-githubaction</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/961">gradle/actions#961</a></li>
<li>Bump Gradle Wrapper from 9.4.1 to 9.5.1 in
/.github/workflow-samples/gradle-plugin by <a
href="https://github.com/bot-githubaction"><code>@​bot-githubaction</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/962">gradle/actions#962</a></li>
<li>Bump Gradle Wrapper from 9.4.1 to 9.5.1 in
/.github/workflow-samples/groovy-dsl by <a
href="https://github.com/bot-githubaction"><code>@​bot-githubaction</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/963">gradle/actions#963</a></li>
<li>Bump Gradle Wrapper from 9.4.1 to 9.5.1 in
/.github/workflow-samples/java-toolchain by <a
href="https://github.com/bot-githubaction"><code>@​bot-githubaction</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/964">gradle/actions#964</a></li>
<li>Bump Gradle Wrapper from 9.4.1 to 9.5.1 in
/.github/workflow-samples/kotlin-dsl by <a
href="https://github.com/bot-githubaction"><code>@​bot-githubaction</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/965">gradle/actions#965</a></li>
<li>Update known wrapper checksums by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot]
in <a
href="https://redirect.github.com/gradle/actions/pull/937">gradle/actions#937</a></li>
<li>Bump the github-actions group across 2 directories with 8 updates by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/gradle/actions/pull/976">gradle/actions#976</a></li>
<li>Bump the npm-dependencies group across 1 directory with 14 updates
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/gradle/actions/pull/970">gradle/actions#970</a></li>
<li>Bump references to Develocity Gradle plugin from 4.4.0 to 4.4.2 by
<a
href="https://github.com/bot-githubaction"><code>@​bot-githubaction</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/973">gradle/actions#973</a></li>
<li>Bump the npm-dependencies group in /sources with 5 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/gradle/actions/pull/977">gradle/actions#977</a></li>
<li>Update <code>@​actions/cache</code> and
<code>@​actions/artifact</code>, stop ignoring them in Dependabot by <a
href="https://github.com/bigdaz"><code>@​bigdaz</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/978">gradle/actions#978</a></li>
<li>Resolve npm security vulnerabilities via dependency overrides by <a
href="https://github.com/bigdaz"><code>@​bigdaz</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/980">gradle/actions#980</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/gradle/actions/compare/v6.1.0...v6.1.1">https://github.com/gradle/actions/compare/v6.1.0...v6.1.1</a></p>
<h2>v6.1.0</h2>
<h2>New: Basic Cache Provider</h2>
<p>A new MIT-licensed <strong>Basic Caching</strong> provider is now
available as an alternative to the proprietary <strong>Enhanced
Caching</strong> provided by <code>gradle-actions-caching</code>. Choose
Basic Caching by setting <code>cache-provider: basic</code> on
<code>setup-gradle</code> or <code>dependency-submission</code>
actions.</p>
<ul>
<li>Built on <code>@actions/cache</code> -- fully open source</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b6eebf33f1"><code>b6eebf3</code></a>
[bot] Update dist directory</li>
<li><a
href="9901393644"><code>9901393</code></a>
Remove unnecessary dependency overrides (<a
href="https://redirect.github.com/gradle/actions/issues/981">#981</a>)</li>
<li><a
href="20ce680c89"><code>20ce680</code></a>
Update RELEASING.md</li>
<li><a
href="5e2ebd065d"><code>5e2ebd0</code></a>
[bot] Update dist directory</li>
<li><a
href="9e2c1cc01d"><code>9e2c1cc</code></a>
Resolve npm security vulnerabilities via dependency overrides (<a
href="https://redirect.github.com/gradle/actions/issues/980">#980</a>)</li>
<li><a
href="657f690528"><code>657f690</code></a>
[bot] Update dist directory</li>
<li><a
href="9d6bacde37"><code>9d6bacd</code></a>
Update <code>@​actions/cache</code> and <code>@​actions/artifact</code>,
stop ignoring them in Dependabot...</li>
<li><a
href="79f6b196a7"><code>79f6b19</code></a>
[bot] Update dist directory</li>
<li><a
href="6781648d2b"><code>6781648</code></a>
Bump the npm-dependencies group in /sources with 5 updates (<a
href="https://redirect.github.com/gradle/actions/issues/977">#977</a>)</li>
<li><a
href="a3b40d2308"><code>a3b40d2</code></a>
[bot] Update dist directory</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/actions/compare/v6...v6.2.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/stale` from 10 to 11
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/stale/releases">actions/stale's
releases</a>.</em></p>
<blockquote>
<h2>v11.0.0</h2>
<h2>What's Changed</h2>
<h3>Enhancement</h3>
<ul>
<li>Migrate to ESM and update dependencies by <a
href="https://github-grid.enterprise.slack.com/team/U08CVLQ4JKE"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1350">actions/stale#1350</a></li>
</ul>
<h3>Dependency Update</h3>
<ul>
<li>Override brace-expansion to 5.0.8 to address 24 high-severity
dependency vulnerabilities by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1351">actions/stale#1351</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/stale/compare/v10...v11.0.0">https://github.com/actions/stale/compare/v10...v11.0.0</a></p>
<h2>v10.4.0</h2>
<h2>What's Changed</h2>
<h3>Bug Fix</h3>
<ul>
<li>Fixed <code>only-issue-types</code> validation by <a
href="https://github.com/trueberryless"><code>@​trueberryless</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1338">actions/stale#1338</a></li>
</ul>
<h3>Dependency Updates</h3>
<ul>
<li>Bump undici to 6.27.0 via override, clean up stale license files,
and version to 10.4.0. by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1342">actions/stale#1342</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/trueberryless"><code>@​trueberryless</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/stale/pull/1338">actions/stale#1338</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/stale/compare/v10.3.0...v10.4.0">https://github.com/actions/stale/compare/v10.3.0...v10.4.0</a></p>
<h2>v10.3.0</h2>
<h2>What's Changed</h2>
<h3>Bug Fix</h3>
<ul>
<li>Enhancement: ignore stale labeling events by <a
href="https://github.com/shamoon"><code>@​shamoon</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1311">actions/stale#1311</a></li>
</ul>
<h3>Dependency Updates</h3>
<ul>
<li>Upgrade dependencies (<code>@​actions/core</code>,
<code>@​octokit/plugin-retry</code>, <a
href="https://github.com/typescript-eslint"><code>@​typescript-eslint</code></a>)
by <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1335">actions/stale#1335</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/shamoon"><code>@​shamoon</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/stale/pull/1311">actions/stale#1311</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/stale/compare/v10...v10.3.0">https://github.com/actions/stale/compare/v10...v10.3.0</a></p>
<h2>v10.2.0</h2>
<h2>What's Changed</h2>
<h3>Bug Fix</h3>
<ul>
<li>Fix checking state cache (fix <a
href="https://redirect.github.com/actions/stale/issues/1136">#1136</a>)
and switch to Octokit helper methods by <a
href="https://github.com/itchyny"><code>@​itchyny</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1152">actions/stale#1152</a></li>
</ul>
<h3>Dependency Updates</h3>
<ul>
<li>Upgrade js-yaml from 4.1.0 to 4.1.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1304">actions/stale#1304</a></li>
<li>Upgrade lodash from 4.17.21 to 4.17.23 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1313">actions/stale#1313</a></li>
<li>Upgrade actions/cache from 4.0.3 to 5.0.2 and actions/github from
5.1.1 to 7.0.0 by <a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1312">actions/stale#1312</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/itchyny"><code>@​itchyny</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/stale/pull/1152">actions/stale#1152</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/stale/compare/v10...v10.2.0">https://github.com/actions/stale/compare/v10...v10.2.0</a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/stale/blob/main/CHANGELOG.md">actions/stale's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h1>[10.1.0]</h1>
<h2>What's Changed</h2>
<ul>
<li>Add only-issue-types option to filter issues by type by <a
href="https://github.com/Bibo-Joshi"><code>@​Bibo-Joshi</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1255">actions/stale#1255</a></li>
</ul>
<h1>[10.0.0]</h1>
<h2>What's Changed</h2>
<h2>Breaking Changes</h2>
<ul>
<li>Upgrade to node 24 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1279">actions/stale#1279</a>
Make sure your runner is on version v2.327.1 or later to ensure
compatibility with this release. <a
href="https://github.com/actions/runner/releases/tag/v2.327.1">Release
Notes</a></li>
</ul>
<h2>Enhancement</h2>
<ul>
<li>Introducing sort-by option by <a
href="https://github.com/suyashgaonkar"><code>@​suyashgaonkar</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1254">actions/stale#1254</a></li>
</ul>
<h2>Dependency Upgrades</h2>
<ul>
<li>Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/stale/pull/1186">actions/stale#1186</a></li>
<li>Upgrade undici from 5.28.4 to 5.28.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/stale/pull/1201">actions/stale#1201</a></li>
<li>Upgrade <code>@​action/cache</code> from 4.0.0 to 4.0.2 by <a
href="https://github.com/aparnajyothi-y"><code>@​aparnajyothi-y</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1226">actions/stale#1226</a></li>
<li>Upgrade <code>@​action/cache</code> from 4.0.2 to 4.0.3 by <a
href="https://github.com/suyashgaonkar"><code>@​suyashgaonkar</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1233">actions/stale#1233</a></li>
<li>Upgrade undici from 5.28.5 to 5.29.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/stale/pull/1251">actions/stale#1251</a></li>
<li>Upgrade form-data to bring in fix for critical vulnerability by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/stale/pull/1277">actions/stale#1277</a></li>
</ul>
<h2>Documentation changes</h2>
<ul>
<li>Changelog update for recent releases by <a
href="https://github.com/suyashgaonkar"><code>@​suyashgaonkar</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1224">actions/stale#1224</a></li>
<li>Permissions update in Readme by <a
href="https://github.com/ghadimir"><code>@​ghadimir</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1248">actions/stale#1248</a></li>
</ul>
<h1>[9.1.0]</h1>
<h2>What's Changed</h2>
<ul>
<li>Documentation update by <a
href="https://github.com/Marukome0743"><code>@​Marukome0743</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1116">actions/stale#1116</a></li>
<li>Add workflow file for publishing releases to immutable action
package by <a
href="https://github.com/Jcambass"><code>@​Jcambass</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1179">actions/stale#1179</a></li>
<li>Update undici from 5.28.2 to 5.28.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1150">actions/stale#1150</a></li>
<li>Update actions/checkout from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1091">actions/stale#1091</a></li>
<li>Update actions/publish-action from 0.2.2 to 0.3.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1147">actions/stale#1147</a></li>
<li>Update ts-jest from 29.1.1 to 29.2.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1175">actions/stale#1175</a></li>
<li>Update <code>@​actions/core</code> from 1.10.1 to 1.11.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1191">actions/stale#1191</a></li>
<li>Update <code>@​types/jest</code> from 29.5.11 to 29.5.14 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1193">actions/stale#1193</a></li>
<li>Update <code>@​actions/cache</code> from 3.2.2 to 4.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1194">actions/stale#1194</a></li>
</ul>
<h1>[9.0.0]</h1>
<h2>Breaking Changes</h2>
<ol>
<li>Action is now stateful: If the action ends because of <a
href="https://github.com/actions/stale#operations-per-run">operations-per-run</a>
then the next run will start from the first unprocessed issue skipping
the issues processed during the previous run(s). The state is reset when
all the issues are processed. This should be considered for scheduling
workflow runs.</li>
<li>Version 9 of this action updated the runtime to Node.js 20. All
scripts are now run with Node.js 20 instead of Node.js 16 and are
affected by any breaking changes between Node.js 16 and 20.</li>
</ol>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4391f3da66"><code>4391f3d</code></a>
Fix 24 high severity vulnerabilities by overriding brace-expansion to
5.0.8 (...</li>
<li><a
href="eaf9131fae"><code>eaf9131</code></a>
refactor: update imports to use ES module syntax and improve test
structure (...</li>
<li>See full diff in <a
href="https://github.com/actions/stale/compare/v10...v11">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action` from 4 to 4.37.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.37.4</h2>
<ul>
<li>This version of the CodeQL Action adds support for the
<code>tools</code> input for the <code>codeql-action/init</code> step to
be specified using a <code>github-codeql-tools</code> <a
href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository
property</a>. This feature will gradually be rolled out following the
release of this version. Once rolled out, this allows for the CodeQL CLI
version that is used in GitHub-managed workflows, such as Default Setup,
to be set to a custom value. For example, customers who run into issues
with rate limits when a new CodeQL CLI version is released can set the
value to <code>toolcache</code> to always use the CodeQL CLI version
that is available in the runner toolcache. For Advanced Setup workflows,
the value provided for <code>tools</code> in the workflow definition
always takes precedence unless the value of the repository property
starts with <code>!</code>. <a
href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li>
</ul>
<h2>v4.37.3</h2>
<p>No user facing changes.</p>
<h2>v4.37.2</h2>
<ul>
<li>The new address format for the <code>config-file</code> input that
was introduced in CodeQL Action 4.37.0 is now enabled by default. In
addition to the format described there, the <code>remote=</code> prefix
can now be used to explicitly indicate that the input refers to a remote
file. All previous input formats continue to be accepted as well. <a
href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li>
<li>The CodeQL Action can now make use of <a
href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured
private registries</a> in Default Setup to retrieve CodeQL configuration
files from remote repositories that require authentication. This will
allow customers to store their CodeQL configuration in a single
repository that can then be referenced by Default Setup workflows in
other repositories. We expect to roll this and other, related changes
out to everyone in July. <a
href="https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li>
</ul>
<h2>v4.37.1</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.20.6 and earlier. These versions of
CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise
Server 3.16, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li>
</ul>
<h2>v4.37.0</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li>
<li>In addition to the existing input format, the
<code>config-file</code> input for the <code>codeql-action/init</code>
step will soon support a new <code>[owner/]repo[@ref][:path]</code>
format. All components except the repository name are optional. If
omitted, <code>owner</code> defaults to the same owner as the repository
the analysis is running for, <code>ref</code> to <code>main</code>, and
<code>path</code> to <code>.github/codeql-action.yaml</code>. Support
for this format ships in this version of the CodeQL Action, but will
only be enabled over the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li>
</ul>
<h2>v4.36.3</h2>
<p>No user facing changes.</p>
<h2>v4.36.2</h2>
<ul>
<li>Cache CodeQL CLI version information across Actions steps. <a
href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li>
<li>Reduce requests while waiting for analysis processing by using
exponential backoff when polling SARIF processing status. <a
href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li>
</ul>
<h2>v4.36.1</h2>
<p>No user facing changes.</p>
<h2>v4.36.0</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li>
<li>Add support for SHA-256 Git object IDs. <a
href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li>
</ul>
<h2>v4.35.5</h2>
<ul>
<li>We have improved how the JavaScript bundles for the CodeQL Action
are generated to avoid duplication across bundles and reduce the size of
the repository by around 70%. This should have no effect on the runtime
behaviour of the CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li>
<li>For performance and accuracy reasons, <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a> will now only be enabled on a pull request when
diff-informed analysis is also enabled for that run. If diff-informed
analysis is unavailable (for example, because the PR diff ranges could
not be computed), the action will fall back to a full analysis. <a
href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li>
<li>If multiple inputs are provided for the GitHub-internal
<code>analysis-kinds</code> input, only <code>code-scanning</code> will
be enabled. The <code>analysis-kinds</code> input is experimental, for
GitHub-internal use only, and may change without notice at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li>
<li>Added an experimental change which, when running a Code Scanning
analysis for a PR with <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a> enabled, prefers CodeQL CLI versions that have
a cached overlay-base database for the configured languages. This speeds
up analysis for a repository when there is not yet a cached overlay-base
database for the latest CLI version. We expect to roll this change out
to everyone in May. <a
href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li>
</ul>
<h2>v4.35.4</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li>
</ul>
<h2>v4.35.3</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.19.3 and earlier. These versions of
CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise
Server 3.15, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3837">#3837</a></li>
<li>Configurations for private registries that use Cloudsmith or GCP
OIDC are now accepted. <a
href="https://redirect.github.com/github/codeql-action/pull/3850">#3850</a></li>
<li>Best-effort connection tests for private registries now use
<code>GET</code> requests instead of <code>HEAD</code> for better
compatibility with various registry implementations. For NuGet feeds,
the test is now always performed against the service index. <a
href="https://redirect.github.com/github/codeql-action/pull/3853">#3853</a></li>
<li>Fixed a bug where two diagnostics produced within the same
millisecond could overwrite each other on disk, causing one of them to
be lost. <a
href="https://redirect.github.com/github/codeql-action/pull/3852">#3852</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3">2.25.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3865">#3865</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h2>4.37.4 - 29 Jul 2026</h2>
<ul>
<li>This version of the CodeQL Action adds support for the
<code>tools</code> input for the <code>codeql-action/init</code> step to
be specified using a <code>github-codeql-tools</code> <a
href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository
property</a>. This feature will gradually be rolled out following the
release of this version. Once rolled out, this allows for the CodeQL CLI
version that is used in GitHub-managed workflows, such as Default Setup,
to be set to a custom value. For example, customers who run into issues
with rate limits when a new CodeQL CLI version is released can set the
value to <code>toolcache</code> to always use the CodeQL CLI version
that is available in the runner toolcache. For Advanced Setup workflows,
the value provided for <code>tools</code> in the workflow definition
always takes precedence unless the value of the repository property
starts with <code>!</code>. <a
href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li>
</ul>
<h2>4.37.3 - 22 Jul 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.2 - 21 Jul 2026</h2>
<ul>
<li>The new address format for the <code>config-file</code> input that
was introduced in CodeQL Action 4.37.0 is now enabled by default. In
addition to the format described there, the <code>remote=</code> prefix
can now be used to explicitly indicate that the input refers to a remote
file. All previous input formats continue to be accepted as well. <a
href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li>
<li>The CodeQL Action can now make use of <a
href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured
private registries</a> in Default Setup to retrieve CodeQL configuration
files from remote repositories that require authentication. This will
allow customers to store their CodeQL configuration in a single
repository that can then be referenced by Default Setup workflows in
other repositories. We expect to roll this and other, related changes
out to everyone in July. <a
href="https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li>
</ul>
<h2>4.37.1 - 16 Jul 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.20.6 and earlier. These versions of
CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise
Server 3.16, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li>
</ul>
<h2>4.37.0 - 08 Jul 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li>
<li>In addition to the existing input format, the
<code>config-file</code> input for the <code>codeql-action/init</code>
step will soon support a new <code>[owner/]repo[@ref][:path]</code>
format. All components except the repository name are optional. If
omitted, <code>owner</code> defaults to the same owner as the repository
the analysis is running for, <code>ref</code> to <code>main</code>, and
<code>path</code> to <code>.github/codeql-action.yaml</code>. Support
for this format ships in this version of the CodeQL Action, but will
only be enabled over the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li>
</ul>
<h2>4.36.3 - 01 Jul 2026</h2>
<p>No user facing changes.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="18420e3271"><code>18420e3</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4043">#4043</a>
from github/mbg/ts/changelog</li>
<li><a
href="7e8d8970f0"><code>7e8d897</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4046">#4046</a>
from github/mbg/repo-prop/code-quality</li>
<li><a
href="2d4c474c2c"><code>2d4c474</code></a>
Log <code>!analysisKindSupported</code> case</li>
<li><a
href="98c05a17d3"><code>98c05a1</code></a>
Fix argument validation in <code>rollback-changelog.ts</code></li>
<li><a
href="8289a49271"><code>8289a49</code></a>
Ignore repository property for unsupported analysis kinds</li>
<li><a
href="2a8731cc06"><code>2a8731c</code></a>
Move <code>config-file</code> computation after determining the
<code>analysisKinds</code></li>
<li><a
href="3434fbbc53"><code>3434fbb</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4044">#4044</a>
from github/mbg/ff/promote-toolcache</li>
<li><a
href="3013ac07bd"><code>3013ac0</code></a>
Promote <code>AllowToolcacheInput</code> feature</li>
<li><a
href="74b15aa2c6"><code>74b15aa</code></a>
Install JS deps if needed in <code>post-release-mergeback</code>
workflow</li>
<li><a
href="f00f809405"><code>f00f809</code></a>
Fix checking keys rather than values</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/v4...v4.37.4">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 11:56:24 +02:00
dependabot[bot]
c61a7ca00c
chore(deps): bump mcp-kotlin from 0.14.0 to 0.15.0 in /samples/weather-stdio-server (#929)
Bumps `mcp-kotlin` from 0.14.0 to 0.15.0.
Updates `io.modelcontextprotocol:kotlin-sdk-client` from 0.14.0 to
0.15.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-client's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.modelcontextprotocol:kotlin-sdk-server` from 0.14.0 to
0.15.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-server's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 18:46:44 +02:00
dependabot[bot]
bb716cd44d
chore(deps): bump mcp-kotlin from 0.14.0 to 0.15.0 in /samples/simple-streamable-server (#928)
Bumps `mcp-kotlin` from 0.14.0 to 0.15.0.
Updates `io.modelcontextprotocol:kotlin-sdk-client` from 0.14.0 to
0.15.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-client's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.modelcontextprotocol:kotlin-sdk-server` from 0.14.0 to
0.15.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-server's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 17:31:38 +02:00
dependabot[bot]
b7f280118d
chore(deps): bump mcp-kotlin from 0.14.0 to 0.15.0 in /samples/kotlinlang-mcp-server (#927)
Bumps `mcp-kotlin` from 0.14.0 to 0.15.0.
Updates `io.modelcontextprotocol:kotlin-sdk-server` from 0.14.0 to
0.15.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-server's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.modelcontextprotocol:kotlin-sdk-client` from 0.14.0 to
0.15.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-client's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.modelcontextprotocol:kotlin-sdk-testing` from 0.14.0 to
0.15.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-testing's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 13:39:04 +02:00
dependabot[bot]
47938a056c
chore(deps): bump mcp-kotlin from 0.14.0 to 0.15.0 in /samples/kotlin-mcp-server (#926)
Bumps `mcp-kotlin` from 0.14.0 to 0.15.0.
Updates `io.modelcontextprotocol:kotlin-sdk-client` from 0.14.0 to
0.15.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-client's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.modelcontextprotocol:kotlin-sdk-server` from 0.14.0 to
0.15.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-server's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 13:20:37 +02:00
dependabot[bot]
6c9ca01922
chore(deps): bump io.modelcontextprotocol:kotlin-sdk-client from 0.14.0 to 0.15.0 in /samples/kotlin-mcp-client (#925)
Bumps
[io.modelcontextprotocol:kotlin-sdk-client](https://github.com/modelcontextprotocol/kotlin-sdk)
from 0.14.0 to 0.15.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-client's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 13:03:13 +02:00
dependabot[bot]
cce22c282a
chore(deps): bump ch.qos.logback:logback-classic from 1.6.0 to 1.6.1 in /samples/kotlinlang-mcp-server in the other-dependencies group across 1 directory (#924)
Bumps the other-dependencies group with 1 update in the
/samples/kotlinlang-mcp-server directory:
[ch.qos.logback:logback-classic](https://github.com/qos-ch/logback).

Updates `ch.qos.logback:logback-classic` from 1.6.0 to 1.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/qos-ch/logback/releases">ch.qos.logback:logback-classic's
releases</a>.</em></p>
<blockquote>
<h2>Logback 1.6.1</h2>
<p><strong>2026-07-28 Release of logback version 1.6.1</strong></p>
<p>• In TimeBasedRollingPolicy, when the file option is set, the
intermediate file renamed before asynchronous compression now receives
the target archive name without the compression suffix (e.g.
<code>.gz</code>, <code>.zip</code>, <code>.xz</code>). Previously it
used a nanotime-based <code>.tmp</code> suffix. This makes the file
easier to identify if compression fails during rollover. (See also the
following paragraph.)</p>
<p>• On GZ, ZIP, or XZ compression failure, the original (uncompressed)
log file is no longer deleted. Compression strategies now delete the
source file only after successful compression and emit a warning that
the original was left intact.</p>
<p>• ConsoleAppender with <!-- raw HTML omitted --> now probes JLine's
org.jline.jansi.AnsiConsole first and falls back to the legacy
FuseSource org.fusesource.jansi.AnsiConsole class. This keeps ANSI
coloring working after Jansi moved under the JLine project. The optional
org.jline:jansi-core artifact is declared as a dependency alongside the
existing FuseSource jansi dependency. A preferredJansiClassName property
was added for tests. This issue was reported in <a
href="https://redirect.github.com/qos-ch/logback/issues/1043">issues/1043</a>
by <a href="https://github.com/seonwooj0810">seonwoo_jung</a> who also
provided the relevant PR.</p>
<p>• LayoutWrappingEncoder now reports an error at start() when no
layout is set and guards encode() against a null layout. Previously, a
missing layout (for example after an ignored <!-- raw HTML omitted
-->/<!-- raw HTML omitted -->/<!-- raw HTML omitted --> branch) allowed
the encoder to start and then fail with a NullPointerException on every
event, resulting in silent log loss. This issue was reported in <a
href="https://redirect.github.com/qos-ch/logback/issues/1046">issues/1046</a>
by <a href="https://github.com/seonwooj0810">seonwoo_jung</a> who also
provided the relevant PR.</p>
<p>• FileCollisionAnalyser now detects file collisions involving nested
appenders of SiftingAppender. When the nested file or fileNamePattern
does not textually reference the discriminator key (e.g. ${userId}), a
warning is issued at configuration time naming the appender, the key,
and the shared target. This closes a gap where statically declared file
appenders were checked but sifted nested appenders were not. This
enhancement was contributed in [PR <a
href="https://redirect.github.com/qos-ch/logback/issues/1041">#1041</a>](<a
href="https://redirect.github.com/qos-ch/logback/issues/1041">qos-ch/logback#1041</a>)
by <a href="https://github.com/seonwooj0810">seonwoo_jung</a>.</p>
<p>• More defensive handling in SyslogOutputStream and
SyslogAppenderBase: the close() method now ensures that resources are
closed, writes and flushes check that the underlying resources are in a
valid state and fallback to no-op otherwise.</p>
<p>• A bit-wise identical binary of this version can be reproduced by
building from source code at commit
57759f433000a133088ef0441038963134437fbd associated with the tag
v_1.6.1. The release was built using Java &quot;21&quot; 2023-10-17 LTS
build 21.0.1.+12-LTS-29 under Linux Debian 11.6.</p>
<p>• See <a
href="https://logback.qos.ch/news.html#1.6.1">https://logback.qos.ch/news.html#1.6.1</a>
for the original text.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="57759f4330"><code>57759f4</code></a>
prepare release 1.6.1</li>
<li><a
href="175f99f209"><code>175f99f</code></a>
fix imports</li>
<li><a
href="4b8773ed12"><code>4b8773e</code></a>
add compressionFailureLeavesOriginalFileIntact test for XZ
compression</li>
<li><a
href="cafaf1115f"><code>cafaf11</code></a>
do not delete original file if compression fails</li>
<li><a
href="ee50125b29"><code>ee50125</code></a>
let the temporary file before compression be target file without the .gz
or ....</li>
<li><a
href="5626acc301"><code>5626acc</code></a>
minor refactoring</li>
<li><a
href="d97da4fbc0"><code>d97da4f</code></a>
minor refactoring</li>
<li><a
href="159c045d8f"><code>159c045</code></a>
more defensive coding in SyslogOutputStream and in
SyslogAppenderBase</li>
<li><a
href="9427d6b23d"><code>9427d6b</code></a>
slight refactoring for clarity</li>
<li><a
href="79c4179c0b"><code>79c4179</code></a>
slight refactoring</li>
<li>Additional commits viewable in <a
href="https://github.com/qos-ch/logback/compare/v_1.6.0...v_1.6.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ch.qos.logback:logback-classic&package-manager=gradle&previous-version=1.6.0&new-version=1.6.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 12:23:43 +02:00
dependabot[bot]
b133d7ecdd
chore(deps): bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.1 (#916)
Bumps
[ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from
1.5.38 to 1.6.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/qos-ch/logback/releases">ch.qos.logback:logback-classic's
releases</a>.</em></p>
<blockquote>
<h2>Logback 1.6.1</h2>
<p><strong>2026-07-28 Release of logback version 1.6.1</strong></p>
<p>• In TimeBasedRollingPolicy, when the file option is set, the
intermediate file renamed before asynchronous compression now receives
the target archive name without the compression suffix (e.g.
<code>.gz</code>, <code>.zip</code>, <code>.xz</code>). Previously it
used a nanotime-based <code>.tmp</code> suffix. This makes the file
easier to identify if compression fails during rollover. (See also the
following paragraph.)</p>
<p>• On GZ, ZIP, or XZ compression failure, the original (uncompressed)
log file is no longer deleted. Compression strategies now delete the
source file only after successful compression and emit a warning that
the original was left intact.</p>
<p>• ConsoleAppender with <!-- raw HTML omitted --> now probes JLine's
org.jline.jansi.AnsiConsole first and falls back to the legacy
FuseSource org.fusesource.jansi.AnsiConsole class. This keeps ANSI
coloring working after Jansi moved under the JLine project. The optional
org.jline:jansi-core artifact is declared as a dependency alongside the
existing FuseSource jansi dependency. A preferredJansiClassName property
was added for tests. This issue was reported in <a
href="https://redirect.github.com/qos-ch/logback/issues/1043">issues/1043</a>
by <a href="https://github.com/seonwooj0810">seonwoo_jung</a> who also
provided the relevant PR.</p>
<p>• LayoutWrappingEncoder now reports an error at start() when no
layout is set and guards encode() against a null layout. Previously, a
missing layout (for example after an ignored <!-- raw HTML omitted
-->/<!-- raw HTML omitted -->/<!-- raw HTML omitted --> branch) allowed
the encoder to start and then fail with a NullPointerException on every
event, resulting in silent log loss. This issue was reported in <a
href="https://redirect.github.com/qos-ch/logback/issues/1046">issues/1046</a>
by <a href="https://github.com/seonwooj0810">seonwoo_jung</a> who also
provided the relevant PR.</p>
<p>• FileCollisionAnalyser now detects file collisions involving nested
appenders of SiftingAppender. When the nested file or fileNamePattern
does not textually reference the discriminator key (e.g. ${userId}), a
warning is issued at configuration time naming the appender, the key,
and the shared target. This closes a gap where statically declared file
appenders were checked but sifted nested appenders were not. This
enhancement was contributed in [PR <a
href="https://redirect.github.com/qos-ch/logback/issues/1041">#1041</a>](<a
href="https://redirect.github.com/qos-ch/logback/issues/1041">qos-ch/logback#1041</a>)
by <a href="https://github.com/seonwooj0810">seonwoo_jung</a>.</p>
<p>• More defensive handling in SyslogOutputStream and
SyslogAppenderBase: the close() method now ensures that resources are
closed, writes and flushes check that the underlying resources are in a
valid state and fallback to no-op otherwise.</p>
<p>• A bit-wise identical binary of this version can be reproduced by
building from source code at commit
57759f433000a133088ef0441038963134437fbd associated with the tag
v_1.6.1. The release was built using Java &quot;21&quot; 2023-10-17 LTS
build 21.0.1.+12-LTS-29 under Linux Debian 11.6.</p>
<p>• See <a
href="https://logback.qos.ch/news.html#1.6.1">https://logback.qos.ch/news.html#1.6.1</a>
for the original text.</p>
<h2>Logback 1.6.0</h2>
<p><strong>2026-07-23 Release of logback version 1.6.0</strong></p>
<p>• Removed certain deprecated variables, methods, and classes. For the
list of removed members see <a
href="https://logback.qos.ch/notes/release_1.6.0.txt">release_1.6.0.txt.</a></p>
<p>• In <code>AsyncAppenderBase</code>, the
<code>put(ILoggingEvent)</code> method now has the protected modifier to
allow access from derived classes. This change was requested by Thomas
Skjølberg in <a
href="https://redirect.github.com/qos-ch/logback/pull/1053">pr#1053</a>.</p>
<p>• Bump SLF4J dependency to version 2.0.18.</p>
<p>• <strong>See also the overview of the <a
href="https://logback.qos.ch/news.html#latest_stable">1.6.x
series</a>.</strong></p>
<p>• A bit-wise identical binary of this version can be reproduced by
building from source code at commit
b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag
v_1.6.0. The release was built using Java &quot;21&quot; 2023-10-17 LTS
build 21.0.1.+12-LTS-29 under Linux Debian 11.6.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="57759f4330"><code>57759f4</code></a>
prepare release 1.6.1</li>
<li><a
href="175f99f209"><code>175f99f</code></a>
fix imports</li>
<li><a
href="4b8773ed12"><code>4b8773e</code></a>
add compressionFailureLeavesOriginalFileIntact test for XZ
compression</li>
<li><a
href="cafaf1115f"><code>cafaf11</code></a>
do not delete original file if compression fails</li>
<li><a
href="ee50125b29"><code>ee50125</code></a>
let the temporary file before compression be target file without the .gz
or ....</li>
<li><a
href="5626acc301"><code>5626acc</code></a>
minor refactoring</li>
<li><a
href="d97da4fbc0"><code>d97da4f</code></a>
minor refactoring</li>
<li><a
href="159c045d8f"><code>159c045</code></a>
more defensive coding in SyslogOutputStream and in
SyslogAppenderBase</li>
<li><a
href="9427d6b23d"><code>9427d6b</code></a>
slight refactoring for clarity</li>
<li><a
href="79c4179c0b"><code>79c4179</code></a>
slight refactoring</li>
<li>Additional commits viewable in <a
href="https://github.com/qos-ch/logback/compare/v_1.5.38...v_1.6.1">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-31 13:48:11 +02:00
Pavel Gorgulov
76b8e7d63a
release: 0.15.0 (#918) 0.15.0
Bump version to 0.15.0
2026-07-28 16:41:12 +02:00
Pavel Gorgulov
dab340f9bf
fix(server): drop inert eventStore from stateless Streamable HTTP (#909)
Removes the `eventStore` parameter from `mcpStatelessStreamableHttp`,
where it was never read or written.

closes #908 

## Breaking Changes
Source-breaking only

## Types of changes
- [x] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update

## Checklist
- [x] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [x] My code follows the repository's style guidelines
- [x] New and existing tests pass locally
- [x] I have added appropriate error handling
- [x] I have added or updated documentation as needed
2026-07-28 15:43:24 +02:00
Pavel Gorgulov
24c3cd3a69
fix(server): match Accept header as media ranges (#912)
The header is now parsed into media ranges (`parseHeaderValue` +
`ContentType.match`)

## Breaking Changes
none

## Types of changes
- [x] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update

## Checklist
- [x] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [x] My code follows the repository's style guidelines
- [x] New and existing tests pass locally
- [x] I have added appropriate error handling
- [x] I have added or updated documentation as needed
2026-07-28 14:51:21 +02:00
Andre.Kalberer
7fa438ce00
feat(client): send MCP standard POST headers (#894)
## Problem

SEP-2243 requires Streamable HTTP clients to mirror applicable JSON-RPC
request metadata into standard HTTP headers. The Kotlin client currently
sends `Mcp-Protocol-Version` and session metadata but does not emit
`Mcp-Method` or `Mcp-Name`.

## Solution

- Add `Mcp-Method` for JSON-RPC requests and notifications.
- Add `Mcp-Name` from a string `params.name`, falling back to a string
`params.uri`.
- Omit both headers for JSON-RPC responses.
- Add focused transport tests for name-, URI-, notification-, and
response-based behavior.

## Validation

- `.\gradlew.bat :kotlin-sdk-client:jvmTest --tests
"io.modelcontextprotocol.kotlin.sdk.client.streamable.http.StreamableHttpClientTransportTest"`
- `.\gradlew.bat :kotlin-sdk-client:ktlintCheck
:kotlin-sdk-client:detekt :kotlin-sdk-client:apiCheck`
- `git diff --check`

Closes #787

AI assistance was used while preparing this PR. I reviewed the final
change, ran the validation listed above, and take responsibility for it.

---------

Co-authored-by: Pavel Gorgulov <devcrocod@gmail.com>
2026-07-27 15:29:51 +02:00
dependabot[bot]
94745e617c
chore(deps): bump the kotest group across 1 directory with 3 updates (#915)
Bumps the kotest group with 3 updates in the / directory:
[io.kotest:kotest-assertions-core](https://github.com/kotest/kotest),
[io.kotest:kotest-assertions-json](https://github.com/kotest/kotest) and
[io.kotest:kotest-assertions-ktor](https://github.com/kotest/kotest).

Updates `io.kotest:kotest-assertions-core` from 6.2.2 to 6.2.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-core's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Document Kotest Gradle plugin usage by <a
href="https://github.com/cfcromn"><code>@​cfcromn</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6166">kotest/kotest#6166</a></li>
<li>add Double.atMost by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6175">kotest/kotest#6175</a></li>
<li>add offsetDateTime.shouldHaveSameInstantAsZonedDateTime(other:
ZonedDateTime) by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6173">kotest/kotest#6173</a></li>
<li>match fields of data classes that are data objects by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6177">kotest/kotest#6177</a></li>
<li>complete custom styles DSL by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6179">kotest/kotest#6179</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/cfcromn"><code>@​cfcromn</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6166">kotest/kotest#6166</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/6.2.2...v6.2.3">https://github.com/kotest/kotest/compare/6.2.2...v6.2.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="66dba712ea"><code>66dba71</code></a>
complete custom styles DSL (<a
href="https://redirect.github.com/kotest/kotest/issues/6179">#6179</a>)</li>
<li><a
href="bff05c5395"><code>bff05c5</code></a>
match fields of data classes that are data objects (<a
href="https://redirect.github.com/kotest/kotest/issues/6177">#6177</a>)</li>
<li><a
href="b77203cd08"><code>b77203c</code></a>
add offsetDateTime.shouldHaveSameInstantAsZonedDateTime(other:
ZonedDateTime)...</li>
<li><a
href="5814b418ed"><code>5814b41</code></a>
add Double.atMost (<a
href="https://redirect.github.com/kotest/kotest/issues/6175">#6175</a>)</li>
<li><a
href="9487ab20fa"><code>9487ab2</code></a>
Document Kotest Gradle plugin usage (<a
href="https://redirect.github.com/kotest/kotest/issues/6166">#6166</a>)</li>
<li>See full diff in <a
href="https://github.com/kotest/kotest/compare/6.2.2...6.2.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.kotest:kotest-assertions-json` from 6.2.2 to 6.2.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-json's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Document Kotest Gradle plugin usage by <a
href="https://github.com/cfcromn"><code>@​cfcromn</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6166">kotest/kotest#6166</a></li>
<li>add Double.atMost by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6175">kotest/kotest#6175</a></li>
<li>add offsetDateTime.shouldHaveSameInstantAsZonedDateTime(other:
ZonedDateTime) by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6173">kotest/kotest#6173</a></li>
<li>match fields of data classes that are data objects by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6177">kotest/kotest#6177</a></li>
<li>complete custom styles DSL by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6179">kotest/kotest#6179</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/cfcromn"><code>@​cfcromn</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6166">kotest/kotest#6166</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/6.2.2...v6.2.3">https://github.com/kotest/kotest/compare/6.2.2...v6.2.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="66dba712ea"><code>66dba71</code></a>
complete custom styles DSL (<a
href="https://redirect.github.com/kotest/kotest/issues/6179">#6179</a>)</li>
<li><a
href="bff05c5395"><code>bff05c5</code></a>
match fields of data classes that are data objects (<a
href="https://redirect.github.com/kotest/kotest/issues/6177">#6177</a>)</li>
<li><a
href="b77203cd08"><code>b77203c</code></a>
add offsetDateTime.shouldHaveSameInstantAsZonedDateTime(other:
ZonedDateTime)...</li>
<li><a
href="5814b418ed"><code>5814b41</code></a>
add Double.atMost (<a
href="https://redirect.github.com/kotest/kotest/issues/6175">#6175</a>)</li>
<li><a
href="9487ab20fa"><code>9487ab2</code></a>
Document Kotest Gradle plugin usage (<a
href="https://redirect.github.com/kotest/kotest/issues/6166">#6166</a>)</li>
<li>See full diff in <a
href="https://github.com/kotest/kotest/compare/6.2.2...6.2.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.kotest:kotest-assertions-ktor` from 6.2.2 to 6.2.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-ktor's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Document Kotest Gradle plugin usage by <a
href="https://github.com/cfcromn"><code>@​cfcromn</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6166">kotest/kotest#6166</a></li>
<li>add Double.atMost by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6175">kotest/kotest#6175</a></li>
<li>add offsetDateTime.shouldHaveSameInstantAsZonedDateTime(other:
ZonedDateTime) by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6173">kotest/kotest#6173</a></li>
<li>match fields of data classes that are data objects by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6177">kotest/kotest#6177</a></li>
<li>complete custom styles DSL by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6179">kotest/kotest#6179</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/cfcromn"><code>@​cfcromn</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6166">kotest/kotest#6166</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/6.2.2...v6.2.3">https://github.com/kotest/kotest/compare/6.2.2...v6.2.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="66dba712ea"><code>66dba71</code></a>
complete custom styles DSL (<a
href="https://redirect.github.com/kotest/kotest/issues/6179">#6179</a>)</li>
<li><a
href="bff05c5395"><code>bff05c5</code></a>
match fields of data classes that are data objects (<a
href="https://redirect.github.com/kotest/kotest/issues/6177">#6177</a>)</li>
<li><a
href="b77203cd08"><code>b77203c</code></a>
add offsetDateTime.shouldHaveSameInstantAsZonedDateTime(other:
ZonedDateTime)...</li>
<li><a
href="5814b418ed"><code>5814b41</code></a>
add Double.atMost (<a
href="https://redirect.github.com/kotest/kotest/issues/6175">#6175</a>)</li>
<li><a
href="9487ab20fa"><code>9487ab2</code></a>
Document Kotest Gradle plugin usage (<a
href="https://redirect.github.com/kotest/kotest/issues/6166">#6166</a>)</li>
<li>See full diff in <a
href="https://github.com/kotest/kotest/compare/6.2.2...6.2.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.kotest:kotest-assertions-json` from 6.2.2 to 6.2.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-json's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Document Kotest Gradle plugin usage by <a
href="https://github.com/cfcromn"><code>@​cfcromn</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6166">kotest/kotest#6166</a></li>
<li>add Double.atMost by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6175">kotest/kotest#6175</a></li>
<li>add offsetDateTime.shouldHaveSameInstantAsZonedDateTime(other:
ZonedDateTime) by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6173">kotest/kotest#6173</a></li>
<li>match fields of data classes that are data objects by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6177">kotest/kotest#6177</a></li>
<li>complete custom styles DSL by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6179">kotest/kotest#6179</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/cfcromn"><code>@​cfcromn</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6166">kotest/kotest#6166</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/6.2.2...v6.2.3">https://github.com/kotest/kotest/compare/6.2.2...v6.2.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="66dba712ea"><code>66dba71</code></a>
complete custom styles DSL (<a
href="https://redirect.github.com/kotest/kotest/issues/6179">#6179</a>)</li>
<li><a
href="bff05c5395"><code>bff05c5</code></a>
match fields of data classes that are data objects (<a
href="https://redirect.github.com/kotest/kotest/issues/6177">#6177</a>)</li>
<li><a
href="b77203cd08"><code>b77203c</code></a>
add offsetDateTime.shouldHaveSameInstantAsZonedDateTime(other:
ZonedDateTime)...</li>
<li><a
href="5814b418ed"><code>5814b41</code></a>
add Double.atMost (<a
href="https://redirect.github.com/kotest/kotest/issues/6175">#6175</a>)</li>
<li><a
href="9487ab20fa"><code>9487ab2</code></a>
Document Kotest Gradle plugin usage (<a
href="https://redirect.github.com/kotest/kotest/issues/6166">#6166</a>)</li>
<li>See full diff in <a
href="https://github.com/kotest/kotest/compare/6.2.2...6.2.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.kotest:kotest-assertions-ktor` from 6.2.2 to 6.2.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-ktor's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Document Kotest Gradle plugin usage by <a
href="https://github.com/cfcromn"><code>@​cfcromn</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6166">kotest/kotest#6166</a></li>
<li>add Double.atMost by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6175">kotest/kotest#6175</a></li>
<li>add offsetDateTime.shouldHaveSameInstantAsZonedDateTime(other:
ZonedDateTime) by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6173">kotest/kotest#6173</a></li>
<li>match fields of data classes that are data objects by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6177">kotest/kotest#6177</a></li>
<li>complete custom styles DSL by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6179">kotest/kotest#6179</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/cfcromn"><code>@​cfcromn</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6166">kotest/kotest#6166</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/6.2.2...v6.2.3">https://github.com/kotest/kotest/compare/6.2.2...v6.2.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="66dba712ea"><code>66dba71</code></a>
complete custom styles DSL (<a
href="https://redirect.github.com/kotest/kotest/issues/6179">#6179</a>)</li>
<li><a
href="bff05c5395"><code>bff05c5</code></a>
match fields of data classes that are data objects (<a
href="https://redirect.github.com/kotest/kotest/issues/6177">#6177</a>)</li>
<li><a
href="b77203cd08"><code>b77203c</code></a>
add offsetDateTime.shouldHaveSameInstantAsZonedDateTime(other:
ZonedDateTime)...</li>
<li><a
href="5814b418ed"><code>5814b41</code></a>
add Double.atMost (<a
href="https://redirect.github.com/kotest/kotest/issues/6175">#6175</a>)</li>
<li><a
href="9487ab20fa"><code>9487ab2</code></a>
Document Kotest Gradle plugin usage (<a
href="https://redirect.github.com/kotest/kotest/issues/6166">#6166</a>)</li>
<li>See full diff in <a
href="https://github.com/kotest/kotest/compare/6.2.2...6.2.3">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-27 14:52:31 +02:00
dependabot[bot]
2b494b7637
chore(deps): bump the other-dependencies group across 5 directories with 3 updates (#914)
Bumps the other-dependencies group with 2 updates in the
/samples/kotlin-mcp-client directory:
[com.anthropic:anthropic-java](https://github.com/anthropics/anthropic-sdk-java)
and [com.gradleup.shadow](https://github.com/GradleUp/shadow).
Bumps the other-dependencies group with 1 update in the
/samples/kotlin-mcp-server directory:
[com.gradleup.shadow](https://github.com/GradleUp/shadow).
Bumps the other-dependencies group with 2 updates in the
/samples/kotlinlang-mcp-server directory:
[com.gradleup.shadow](https://github.com/GradleUp/shadow) and
[ch.qos.logback:logback-classic](https://github.com/qos-ch/logback).
Bumps the other-dependencies group with 1 update in the
/samples/simple-streamable-server directory:
[com.gradleup.shadow](https://github.com/GradleUp/shadow).
Bumps the other-dependencies group with 1 update in the
/samples/weather-stdio-server directory:
[com.gradleup.shadow](https://github.com/GradleUp/shadow).

Updates `com.anthropic:anthropic-java` from 2.48.0 to 2.52.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-java/releases">com.anthropic:anthropic-java's
releases</a>.</em></p>
<blockquote>
<h2>v2.52.0</h2>
<h2>2.52.0 (2026-07-24)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.51.0...v2.52.0">v2.51.0...v2.52.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add claude-opus-5 model (<a
href="fb245bd1b9">fb245bd</a>)</li>
<li><strong>api:</strong> add tool addition/removal blocks and
tool_change events (<a
href="fb245bd1b9">fb245bd</a>)</li>
<li><strong>api:</strong> expand client-side fallback credit token types
and add server-side fallbacks default option (<a
href="fb245bd1b9">fb245bd</a>)</li>
</ul>
<h2>v2.51.0</h2>
<h2>2.51.0 (2026-07-23)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.50.0...v2.51.0">v2.50.0...v2.51.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add new stop reason
'model_context_window_exceeded' (<a
href="f4b644ef3b">f4b644e</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>refer to the CLI as <code>ant</code> in NoCredentialsException (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/170">#170</a>)
(<a
href="1bc2be9984">1bc2be9</a>)</li>
</ul>
<h2>v2.50.0</h2>
<h2>2.50.0 (2026-07-22)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.49.1...v2.50.0">v2.49.1...v2.50.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for Managed Agents model effort,
initial session events, and threads delta streaming (<a
href="e31243247e">e312432</a>)</li>
</ul>
<h2>v2.49.1</h2>
<h2>2.49.1 (2026-07-21)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.49.0...v2.49.1">v2.49.0...v2.49.1</a></p>
<h3>Chores</h3>
<ul>
<li><strong>api:</strong> add support for new refusal category (<a
href="40db9c7d5d">40db9c7</a>)</li>
<li><strong>client:</strong> docs updates (<a
href="5b25c27b59">5b25c27</a>)</li>
<li><strong>docs:</strong> small updates (<a
href="99a2a8c368">99a2a8c</a>)</li>
<li><strong>docs:</strong> small updates (<a
href="adc11f5dd1">adc11f5</a>)</li>
<li><strong>internal:</strong> codegen related update (<a
href="9d85f79e55">9d85f79</a>)</li>
</ul>
<h2>v2.49.0</h2>
<h2>2.49.0 (2026-07-16)</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-java/blob/main/CHANGELOG.md">com.anthropic:anthropic-java's
changelog</a>.</em></p>
<blockquote>
<h2>2.52.0 (2026-07-24)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.51.0...v2.52.0">v2.51.0...v2.52.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add claude-opus-5 model (<a
href="fb245bd1b9">fb245bd</a>)</li>
<li><strong>api:</strong> add tool addition/removal blocks and
tool_change events (<a
href="fb245bd1b9">fb245bd</a>)</li>
<li><strong>api:</strong> expand client-side fallback credit token types
and add server-side fallbacks default option (<a
href="fb245bd1b9">fb245bd</a>)</li>
</ul>
<h2>2.51.0 (2026-07-23)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.50.0...v2.51.0">v2.50.0...v2.51.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add new stop reason
'model_context_window_exceeded' (<a
href="f4b644ef3b">f4b644e</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>refer to the CLI as <code>ant</code> in NoCredentialsException (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/170">#170</a>)
(<a
href="1bc2be9984">1bc2be9</a>)</li>
</ul>
<h2>2.50.0 (2026-07-22)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.49.1...v2.50.0">v2.49.1...v2.50.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for Managed Agents model effort,
initial session events, and threads delta streaming (<a
href="e31243247e">e312432</a>)</li>
</ul>
<h2>2.49.1 (2026-07-21)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.49.0...v2.49.1">v2.49.0...v2.49.1</a></p>
<h3>Chores</h3>
<ul>
<li><strong>api:</strong> add support for new refusal category (<a
href="40db9c7d5d">40db9c7</a>)</li>
<li><strong>client:</strong> docs updates (<a
href="5b25c27b59">5b25c27</a>)</li>
<li><strong>docs:</strong> small updates (<a
href="99a2a8c368">99a2a8c</a>)</li>
<li><strong>docs:</strong> small updates (<a
href="adc11f5dd1">adc11f5</a>)</li>
<li><strong>internal:</strong> codegen related update (<a
href="9d85f79e55">9d85f79</a>)</li>
</ul>
<h2>2.49.0 (2026-07-16)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.48.0...v2.49.0">v2.48.0...v2.49.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for dreaming (<a
href="836ee60391">836ee60</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="55ff755b73"><code>55ff755</code></a>
release: 2.52.0</li>
<li><a
href="917b4952ab"><code>917b495</code></a>
feat(api): add claude-opus-5 model</li>
<li><a
href="4124b5e718"><code>4124b5e</code></a>
release: 2.51.0</li>
<li><a
href="684e2a8a07"><code>684e2a8</code></a>
feat(api): add new stop reason 'model_context_window_exceeded'</li>
<li><a
href="2fbb8068e9"><code>2fbb806</code></a>
fix: refer to the CLI as <code>ant</code> in NoCredentialsException (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/170">#170</a>)</li>
<li><a
href="8bfe5afea4"><code>8bfe5af</code></a>
release: 2.50.0</li>
<li><a
href="46da3ef0c7"><code>46da3ef</code></a>
feat(api): add support for Managed Agents model effort, initial session
event...</li>
<li><a
href="abe26411f9"><code>abe2641</code></a>
release: 2.49.1</li>
<li><a
href="847a8c10f7"><code>847a8c1</code></a>
chore(api): add support for new refusal category</li>
<li><a
href="0d9869f1dc"><code>0d9869f</code></a>
chore(internal): codegen related update</li>
<li>Additional commits viewable in <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.48.0...v2.52.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.5.1 to 9.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.6.1</h2>
<h3>Changed</h3>
<ul>
<li>Use <code>GradleException</code> for expected build failures. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2113">#2113</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Preserve repeated lines in R8 rule files when using <code>minimize {
r8 { ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2115">#2115</a>)</li>
</ul>
<h2>9.6.0</h2>
<h3>Added</h3>
<ul>
<li>Extract R8 rules from dependency JARs when using <code>minimize { r8
{ ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2089">#2089</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Rename <code>ShadowDslMarker</code> to <code>ShadowDsl</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2091">#2091</a>)</li>
<li><strong>POTENTIALLY BREAKING:</strong> Apply <code>@ShadowDsl</code>
to <code>ShadowJar</code>, <code>ResourceTransformer</code>,
<code>DependencyFilter</code>, and <code>Relocator</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2090">#2090</a>)<br
/>
This restricts nested DSL configuration blocks from implicitly calling
outer receiver APIs in Kotlin script files.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Validate ZIP entry names to prevent Zip Slip path traversal.</li>
<li>Avoid resolving unused R8 dependency. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2101">#2101</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="185da5db09"><code>185da5d</code></a>
Prepare version 9.6.1</li>
<li><a
href="b309bc549f"><code>b309bc5</code></a>
Extract addIncludedDependencies (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2116">#2116</a>)</li>
<li><a
href="46b35448b8"><code>46b3544</code></a>
Preserve repeated lines in R8 rule files (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2115">#2115</a>)</li>
<li><a
href="c0d4f0d674"><code>c0d4f0d</code></a>
Revert &quot;Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)&quot;</li>
<li><a
href="ff1809f351"><code>ff1809f</code></a>
Use GradleException for expected build failures (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2113">#2113</a>)</li>
<li><a
href="dc0ee64128"><code>dc0ee64</code></a>
Update plugin tapmoc to v0.4.2 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2112">#2112</a>)</li>
<li><a
href="398afcde1c"><code>398afcd</code></a>
Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)</li>
<li><a
href="3ca69d5a40"><code>3ca69d5</code></a>
Gradle 9.7.0-rc-1 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2110">#2110</a>)</li>
<li><a
href="aaaacd230d"><code>aaaacd2</code></a>
Prepare next development version</li>
<li><a
href="fb3666804b"><code>fb36668</code></a>
Prepare version 9.6.0</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.5.1...9.6.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.5.1 to 9.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.6.1</h2>
<h3>Changed</h3>
<ul>
<li>Use <code>GradleException</code> for expected build failures. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2113">#2113</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Preserve repeated lines in R8 rule files when using <code>minimize {
r8 { ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2115">#2115</a>)</li>
</ul>
<h2>9.6.0</h2>
<h3>Added</h3>
<ul>
<li>Extract R8 rules from dependency JARs when using <code>minimize { r8
{ ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2089">#2089</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Rename <code>ShadowDslMarker</code> to <code>ShadowDsl</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2091">#2091</a>)</li>
<li><strong>POTENTIALLY BREAKING:</strong> Apply <code>@ShadowDsl</code>
to <code>ShadowJar</code>, <code>ResourceTransformer</code>,
<code>DependencyFilter</code>, and <code>Relocator</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2090">#2090</a>)<br
/>
This restricts nested DSL configuration blocks from implicitly calling
outer receiver APIs in Kotlin script files.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Validate ZIP entry names to prevent Zip Slip path traversal.</li>
<li>Avoid resolving unused R8 dependency. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2101">#2101</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="185da5db09"><code>185da5d</code></a>
Prepare version 9.6.1</li>
<li><a
href="b309bc549f"><code>b309bc5</code></a>
Extract addIncludedDependencies (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2116">#2116</a>)</li>
<li><a
href="46b35448b8"><code>46b3544</code></a>
Preserve repeated lines in R8 rule files (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2115">#2115</a>)</li>
<li><a
href="c0d4f0d674"><code>c0d4f0d</code></a>
Revert &quot;Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)&quot;</li>
<li><a
href="ff1809f351"><code>ff1809f</code></a>
Use GradleException for expected build failures (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2113">#2113</a>)</li>
<li><a
href="dc0ee64128"><code>dc0ee64</code></a>
Update plugin tapmoc to v0.4.2 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2112">#2112</a>)</li>
<li><a
href="398afcde1c"><code>398afcd</code></a>
Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)</li>
<li><a
href="3ca69d5a40"><code>3ca69d5</code></a>
Gradle 9.7.0-rc-1 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2110">#2110</a>)</li>
<li><a
href="aaaacd230d"><code>aaaacd2</code></a>
Prepare next development version</li>
<li><a
href="fb3666804b"><code>fb36668</code></a>
Prepare version 9.6.0</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.5.1...9.6.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.5.1 to 9.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.6.1</h2>
<h3>Changed</h3>
<ul>
<li>Use <code>GradleException</code> for expected build failures. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2113">#2113</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Preserve repeated lines in R8 rule files when using <code>minimize {
r8 { ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2115">#2115</a>)</li>
</ul>
<h2>9.6.0</h2>
<h3>Added</h3>
<ul>
<li>Extract R8 rules from dependency JARs when using <code>minimize { r8
{ ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2089">#2089</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Rename <code>ShadowDslMarker</code> to <code>ShadowDsl</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2091">#2091</a>)</li>
<li><strong>POTENTIALLY BREAKING:</strong> Apply <code>@ShadowDsl</code>
to <code>ShadowJar</code>, <code>ResourceTransformer</code>,
<code>DependencyFilter</code>, and <code>Relocator</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2090">#2090</a>)<br
/>
This restricts nested DSL configuration blocks from implicitly calling
outer receiver APIs in Kotlin script files.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Validate ZIP entry names to prevent Zip Slip path traversal.</li>
<li>Avoid resolving unused R8 dependency. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2101">#2101</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="185da5db09"><code>185da5d</code></a>
Prepare version 9.6.1</li>
<li><a
href="b309bc549f"><code>b309bc5</code></a>
Extract addIncludedDependencies (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2116">#2116</a>)</li>
<li><a
href="46b35448b8"><code>46b3544</code></a>
Preserve repeated lines in R8 rule files (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2115">#2115</a>)</li>
<li><a
href="c0d4f0d674"><code>c0d4f0d</code></a>
Revert &quot;Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)&quot;</li>
<li><a
href="ff1809f351"><code>ff1809f</code></a>
Use GradleException for expected build failures (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2113">#2113</a>)</li>
<li><a
href="dc0ee64128"><code>dc0ee64</code></a>
Update plugin tapmoc to v0.4.2 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2112">#2112</a>)</li>
<li><a
href="398afcde1c"><code>398afcd</code></a>
Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)</li>
<li><a
href="3ca69d5a40"><code>3ca69d5</code></a>
Gradle 9.7.0-rc-1 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2110">#2110</a>)</li>
<li><a
href="aaaacd230d"><code>aaaacd2</code></a>
Prepare next development version</li>
<li><a
href="fb3666804b"><code>fb36668</code></a>
Prepare version 9.6.0</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.5.1...9.6.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.5.1 to 9.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.6.1</h2>
<h3>Changed</h3>
<ul>
<li>Use <code>GradleException</code> for expected build failures. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2113">#2113</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Preserve repeated lines in R8 rule files when using <code>minimize {
r8 { ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2115">#2115</a>)</li>
</ul>
<h2>9.6.0</h2>
<h3>Added</h3>
<ul>
<li>Extract R8 rules from dependency JARs when using <code>minimize { r8
{ ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2089">#2089</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Rename <code>ShadowDslMarker</code> to <code>ShadowDsl</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2091">#2091</a>)</li>
<li><strong>POTENTIALLY BREAKING:</strong> Apply <code>@ShadowDsl</code>
to <code>ShadowJar</code>, <code>ResourceTransformer</code>,
<code>DependencyFilter</code>, and <code>Relocator</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2090">#2090</a>)<br
/>
This restricts nested DSL configuration blocks from implicitly calling
outer receiver APIs in Kotlin script files.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Validate ZIP entry names to prevent Zip Slip path traversal.</li>
<li>Avoid resolving unused R8 dependency. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2101">#2101</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="185da5db09"><code>185da5d</code></a>
Prepare version 9.6.1</li>
<li><a
href="b309bc549f"><code>b309bc5</code></a>
Extract addIncludedDependencies (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2116">#2116</a>)</li>
<li><a
href="46b35448b8"><code>46b3544</code></a>
Preserve repeated lines in R8 rule files (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2115">#2115</a>)</li>
<li><a
href="c0d4f0d674"><code>c0d4f0d</code></a>
Revert &quot;Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)&quot;</li>
<li><a
href="ff1809f351"><code>ff1809f</code></a>
Use GradleException for expected build failures (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2113">#2113</a>)</li>
<li><a
href="dc0ee64128"><code>dc0ee64</code></a>
Update plugin tapmoc to v0.4.2 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2112">#2112</a>)</li>
<li><a
href="398afcde1c"><code>398afcd</code></a>
Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)</li>
<li><a
href="3ca69d5a40"><code>3ca69d5</code></a>
Gradle 9.7.0-rc-1 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2110">#2110</a>)</li>
<li><a
href="aaaacd230d"><code>aaaacd2</code></a>
Prepare next development version</li>
<li><a
href="fb3666804b"><code>fb36668</code></a>
Prepare version 9.6.0</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.5.1...9.6.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.5.1 to 9.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.6.1</h2>
<h3>Changed</h3>
<ul>
<li>Use <code>GradleException</code> for expected build failures. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2113">#2113</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Preserve repeated lines in R8 rule files when using <code>minimize {
r8 { ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2115">#2115</a>)</li>
</ul>
<h2>9.6.0</h2>
<h3>Added</h3>
<ul>
<li>Extract R8 rules from dependency JARs when using <code>minimize { r8
{ ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2089">#2089</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Rename <code>ShadowDslMarker</code> to <code>ShadowDsl</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2091">#2091</a>)</li>
<li><strong>POTENTIALLY BREAKING:</strong> Apply <code>@ShadowDsl</code>
to <code>ShadowJar</code>, <code>ResourceTransformer</code>,
<code>DependencyFilter</code>, and <code>Relocator</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2090">#2090</a>)<br
/>
This restricts nested DSL configuration blocks from implicitly calling
outer receiver APIs in Kotlin script files.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Validate ZIP entry names to prevent Zip Slip path traversal.</li>
<li>Avoid resolving unused R8 dependency. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2101">#2101</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="185da5db09"><code>185da5d</code></a>
Prepare version 9.6.1</li>
<li><a
href="b309bc549f"><code>b309bc5</code></a>
Extract addIncludedDependencies (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2116">#2116</a>)</li>
<li><a
href="46b35448b8"><code>46b3544</code></a>
Preserve repeated lines in R8 rule files (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2115">#2115</a>)</li>
<li><a
href="c0d4f0d674"><code>c0d4f0d</code></a>
Revert &quot;Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)&quot;</li>
<li><a
href="ff1809f351"><code>ff1809f</code></a>
Use GradleException for expected build failures (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2113">#2113</a>)</li>
<li><a
href="dc0ee64128"><code>dc0ee64</code></a>
Update plugin tapmoc to v0.4.2 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2112">#2112</a>)</li>
<li><a
href="398afcde1c"><code>398afcd</code></a>
Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)</li>
<li><a
href="3ca69d5a40"><code>3ca69d5</code></a>
Gradle 9.7.0-rc-1 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2110">#2110</a>)</li>
<li><a
href="aaaacd230d"><code>aaaacd2</code></a>
Prepare next development version</li>
<li><a
href="fb3666804b"><code>fb36668</code></a>
Prepare version 9.6.0</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.5.1...9.6.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.5.1 to 9.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.6.1</h2>
<h3>Changed</h3>
<ul>
<li>Use <code>GradleException</code> for expected build failures. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2113">#2113</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Preserve repeated lines in R8 rule files when using <code>minimize {
r8 { ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2115">#2115</a>)</li>
</ul>
<h2>9.6.0</h2>
<h3>Added</h3>
<ul>
<li>Extract R8 rules from dependency JARs when using <code>minimize { r8
{ ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2089">#2089</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Rename <code>ShadowDslMarker</code> to <code>ShadowDsl</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2091">#2091</a>)</li>
<li><strong>POTENTIALLY BREAKING:</strong> Apply <code>@ShadowDsl</code>
to <code>ShadowJar</code>, <code>ResourceTransformer</code>,
<code>DependencyFilter</code>, and <code>Relocator</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2090">#2090</a>)<br
/>
This restricts nested DSL configuration blocks from implicitly calling
outer receiver APIs in Kotlin script files.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Validate ZIP entry names to prevent Zip Slip path traversal.</li>
<li>Avoid resolving unused R8 dependency. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2101">#2101</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="185da5db09"><code>185da5d</code></a>
Prepare version 9.6.1</li>
<li><a
href="b309bc549f"><code>b309bc5</code></a>
Extract addIncludedDependencies (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2116">#2116</a>)</li>
<li><a
href="46b35448b8"><code>46b3544</code></a>
Preserve repeated lines in R8 rule files (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2115">#2115</a>)</li>
<li><a
href="c0d4f0d674"><code>c0d4f0d</code></a>
Revert &quot;Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)&quot;</li>
<li><a
href="ff1809f351"><code>ff1809f</code></a>
Use GradleException for expected build failures (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2113">#2113</a>)</li>
<li><a
href="dc0ee64128"><code>dc0ee64</code></a>
Update plugin tapmoc to v0.4.2 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2112">#2112</a>)</li>
<li><a
href="398afcde1c"><code>398afcd</code></a>
Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)</li>
<li><a
href="3ca69d5a40"><code>3ca69d5</code></a>
Gradle 9.7.0-rc-1 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2110">#2110</a>)</li>
<li><a
href="aaaacd230d"><code>aaaacd2</code></a>
Prepare next development version</li>
<li><a
href="fb3666804b"><code>fb36668</code></a>
Prepare version 9.6.0</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.5.1...9.6.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.5.1 to 9.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.6.1</h2>
<h3>Changed</h3>
<ul>
<li>Use <code>GradleException</code> for expected build failures. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2113">#2113</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Preserve repeated lines in R8 rule files when using <code>minimize {
r8 { ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2115">#2115</a>)</li>
</ul>
<h2>9.6.0</h2>
<h3>Added</h3>
<ul>
<li>Extract R8 rules from dependency JARs when using <code>minimize { r8
{ ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2089">#2089</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Rename <code>ShadowDslMarker</code> to <code>ShadowDsl</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2091">#2091</a>)</li>
<li><strong>POTENTIALLY BREAKING:</strong> Apply <code>@ShadowDsl</code>
to <code>ShadowJar</code>, <code>ResourceTransformer</code>,
<code>DependencyFilter</code>, and <code>Relocator</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2090">#2090</a>)<br
/>
This restricts nested DSL configuration blocks from implicitly calling
outer receiver APIs in Kotlin script files.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Validate ZIP entry names to prevent Zip Slip path traversal.</li>
<li>Avoid resolving unused R8 dependency. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2101">#2101</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="185da5db09"><code>185da5d</code></a>
Prepare version 9.6.1</li>
<li><a
href="b309bc549f"><code>b309bc5</code></a>
Extract addIncludedDependencies (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2116">#2116</a>)</li>
<li><a
href="46b35448b8"><code>46b3544</code></a>
Preserve repeated lines in R8 rule files (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2115">#2115</a>)</li>
<li><a
href="c0d4f0d674"><code>c0d4f0d</code></a>
Revert &quot;Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)&quot;</li>
<li><a
href="ff1809f351"><code>ff1809f</code></a>
Use GradleException for expected build failures (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2113">#2113</a>)</li>
<li><a
href="dc0ee64128"><code>dc0ee64</code></a>
Update plugin tapmoc to v0.4.2 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2112">#2112</a>)</li>
<li><a
href="398afcde1c"><code>398afcd</code></a>
Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)</li>
<li><a
href="3ca69d5a40"><code>3ca69d5</code></a>
Gradle 9.7.0-rc-1 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2110">#2110</a>)</li>
<li><a
href="aaaacd230d"><code>aaaacd2</code></a>
Prepare next development version</li>
<li><a
href="fb3666804b"><code>fb36668</code></a>
Prepare version 9.6.0</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.5.1...9.6.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.5.1 to 9.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.6.1</h2>
<h3>Changed</h3>
<ul>
<li>Use <code>GradleException</code> for expected build failures. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2113">#2113</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Preserve repeated lines in R8 rule files when using <code>minimize {
r8 { ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2115">#2115</a>)</li>
</ul>
<h2>9.6.0</h2>
<h3>Added</h3>
<ul>
<li>Extract R8 rules from dependency JARs when using <code>minimize { r8
{ ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2089">#2089</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Rename <code>ShadowDslMarker</code> to <code>ShadowDsl</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2091">#2091</a>)</li>
<li><strong>POTENTIALLY BREAKING:</strong> Apply <code>@ShadowDsl</code>
to <code>ShadowJar</code>, <code>ResourceTransformer</code>,
<code>DependencyFilter</code>, and <code>Relocator</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2090">#2090</a>)<br
/>
This restricts nested DSL configuration blocks from implicitly calling
outer receiver APIs in Kotlin script files.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Validate ZIP entry names to prevent Zip Slip path traversal.</li>
<li>Avoid resolving unused R8 dependency. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2101">#2101</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="185da5db09"><code>185da5d</code></a>
Prepare version 9.6.1</li>
<li><a
href="b309bc549f"><code>b309bc5</code></a>
Extract addIncludedDependencies (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2116">#2116</a>)</li>
<li><a
href="46b35448b8"><code>46b3544</code></a>
Preserve repeated lines in R8 rule files (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2115">#2115</a>)</li>
<li><a
href="c0d4f0d674"><code>c0d4f0d</code></a>
Revert &quot;Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)&quot;</li>
<li><a
href="ff1809f351"><code>ff1809f</code></a>
Use GradleException for expected build failures (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2113">#2113</a>)</li>
<li><a
href="dc0ee64128"><code>dc0ee64</code></a>
Update plugin tapmoc to v0.4.2 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2112">#2112</a>)</li>
<li><a
href="398afcde1c"><code>398afcd</code></a>
Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)</li>
<li><a
href="3ca69d5a40"><code>3ca69d5</code></a>
Gradle 9.7.0-rc-1 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2110">#2110</a>)</li>
<li><a
href="aaaacd230d"><code>aaaacd2</code></a>
Prepare next development version</li>
<li><a
href="fb3666804b"><code>fb36668</code></a>
Prepare version 9.6.0</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.5.1...9.6.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.5.1 to 9.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.6.1</h2>
<h3>Changed</h3>
<ul>
<li>Use <code>GradleException</code> for expected build failures. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2113">#2113</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Preserve repeated lines in R8 rule files when using <code>minimize {
r8 { ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2115">#2115</a>)</li>
</ul>
<h2>9.6.0</h2>
<h3>Added</h3>
<ul>
<li>Extract R8 rules from dependency JARs when using <code>minimize { r8
{ ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2089">#2089</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Rename <code>ShadowDslMarker</code> to <code>ShadowDsl</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2091">#2091</a>)</li>
<li><strong>POTENTIALLY BREAKING:</strong> Apply <code>@ShadowDsl</code>
to <code>ShadowJar</code>, <code>ResourceTransformer</code>,
<code>DependencyFilter</code>, and <code>Relocator</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2090">#2090</a>)<br
/>
This restricts nested DSL configuration blocks from implicitly calling
outer receiver APIs in Kotlin script files.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Validate ZIP entry names to prevent Zip Slip path traversal.</li>
<li>Avoid resolving unused R8 dependency. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2101">#2101</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="185da5db09"><code>185da5d</code></a>
Prepare version 9.6.1</li>
<li><a
href="b309bc549f"><code>b309bc5</code></a>
Extract addIncludedDependencies (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2116">#2116</a>)</li>
<li><a
href="46b35448b8"><code>46b3544</code></a>
Preserve repeated lines in R8 rule files (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2115">#2115</a>)</li>
<li><a
href="c0d4f0d674"><code>c0d4f0d</code></a>
Revert &quot;Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)&quot;</li>
<li><a
href="ff1809f351"><code>ff1809f</code></a>
Use GradleException for expected build failures (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2113">#2113</a>)</li>
<li><a
href="dc0ee64128"><code>dc0ee64</code></a>
Update plugin tapmoc to v0.4.2 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2112">#2112</a>)</li>
<li><a
href="398afcde1c"><code>398afcd</code></a>
Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)</li>
<li><a
href="3ca69d5a40"><code>3ca69d5</code></a>
Gradle 9.7.0-rc-1 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2110">#2110</a>)</li>
<li><a
href="aaaacd230d"><code>aaaacd2</code></a>
Prepare next development version</li>
<li><a
href="fb3666804b"><code>fb36668</code></a>
Prepare version 9.6.0</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.5.1...9.6.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.5.1 to 9.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.6.1</h2>
<h3>Changed</h3>
<ul>
<li>Use <code>GradleException</code> for expected build failures. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2113">#2113</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Preserve repeated lines in R8 rule files when using <code>minimize {
r8 { ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2115">#2115</a>)</li>
</ul>
<h2>9.6.0</h2>
<h3>Added</h3>
<ul>
<li>Extract R8 rules from dependency JARs when using <code>minimize { r8
{ ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2089">#2089</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Rename <code>ShadowDslMarker</code> to <code>ShadowDsl</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2091">#2091</a>)</li>
<li><strong>POTENTIALLY BREAKING:</strong> Apply <code>@ShadowDsl</code>
to <code>ShadowJar</code>, <code>ResourceTransformer</code>,
<code>DependencyFilter</code>, and <code>Relocator</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2090">#2090</a>)<br
/>
This restricts nested DSL configuration blocks from implicitly calling
outer receiver APIs in Kotlin script files.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Validate ZIP entry names to prevent Zip Slip path traversal.</li>
<li>Avoid resolving unused R8 dependency. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2101">#2101</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="185da5db09"><code>185da5d</code></a>
Prepare version 9.6.1</li>
<li><a
href="b309bc549f"><code>b309bc5</code></a>
Extract addIncludedDependencies (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2116">#2116</a>)</li>
<li><a
href="46b35448b8"><code>46b3544</code></a>
Preserve repeated lines in R8 rule files (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2115">#2115</a>)</li>
<li><a
href="c0d4f0d674"><code>c0d4f0d</code></a>
Revert &quot;Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)&quot;</li>
<li><a
href="ff1809f351"><code>ff1809f</code></a>
Use GradleException for expected build failures (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2113">#2113</a>)</li>
<li><a
href="dc0ee64128"><code>dc0ee64</code></a>
Update plugin tapmoc to v0.4.2 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2112">#2112</a>)</li>
<li><a
href="398afcde1c"><code>398afcd</code></a>
Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)</li>
<li><a
href="3ca69d5a40"><code>3ca69d5</code></a>
Gradle 9.7.0-rc-1 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2110">#2110</a>)</li>
<li><a
href="aaaacd230d"><code>aaaacd2</code></a>
Prepare next development version</li>
<li><a
href="fb3666804b"><code>fb36668</code></a>
Prepare version 9.6.0</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.5.1...9.6.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.6.0 to 9.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.6.1</h2>
<h3>Changed</h3>
<ul>
<li>Use <code>GradleException</code> for expected build failures. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2113">#2113</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Preserve repeated lines in R8 rule files when using <code>minimize {
r8 { ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2115">#2115</a>)</li>
</ul>
<h2>9.6.0</h2>
<h3>Added</h3>
<ul>
<li>Extract R8 rules from dependency JARs when using <code>minimize { r8
{ ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2089">#2089</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Rename <code>ShadowDslMarker</code> to <code>ShadowDsl</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2091">#2091</a>)</li>
<li><strong>POTENTIALLY BREAKING:</strong> Apply <code>@ShadowDsl</code>
to <code>ShadowJar</code>, <code>ResourceTransformer</code>,
<code>DependencyFilter</code>, and <code>Relocator</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2090">#2090</a>)<br
/>
This restricts nested DSL configuration blocks from implicitly calling
outer receiver APIs in Kotlin script files.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Validate ZIP entry names to prevent Zip Slip path traversal.</li>
<li>Avoid resolving unused R8 dependency. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2101">#2101</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="185da5db09"><code>185da5d</code></a>
Prepare version 9.6.1</li>
<li><a
href="b309bc549f"><code>b309bc5</code></a>
Extract addIncludedDependencies (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2116">#2116</a>)</li>
<li><a
href="46b35448b8"><code>46b3544</code></a>
Preserve repeated lines in R8 rule files (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2115">#2115</a>)</li>
<li><a
href="c0d4f0d674"><code>c0d4f0d</code></a>
Revert &quot;Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)&quot;</li>
<li><a
href="ff1809f351"><code>ff1809f</code></a>
Use GradleException for expected build failures (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2113">#2113</a>)</li>
<li><a
href="dc0ee64128"><code>dc0ee64</code></a>
Update plugin tapmoc to v0.4.2 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2112">#2112</a>)</li>
<li><a
href="398afcde1c"><code>398afcd</code></a>
Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)</li>
<li><a
href="3ca69d5a40"><code>3ca69d5</code></a>
Gradle 9.7.0-rc-1 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2110">#2110</a>)</li>
<li><a
href="aaaacd230d"><code>aaaacd2</code></a>
Prepare next development version</li>
<li><a
href="fb3666804b"><code>fb36668</code></a>
Prepare version 9.6.0</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.5.1...9.6.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.6.0 to 9.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.6.1</h2>
<h3>Changed</h3>
<ul>
<li>Use <code>GradleException</code> for expected build failures. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2113">#2113</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Preserve repeated lines in R8 rule files when using <code>minimize {
r8 { ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2115">#2115</a>)</li>
</ul>
<h2>9.6.0</h2>
<h3>Added</h3>
<ul>
<li>Extract R8 rules from dependency JARs when using <code>minimize { r8
{ ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2089">#2089</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Rename <code>ShadowDslMarker</code> to <code>ShadowDsl</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2091">#2091</a>)</li>
<li><strong>POTENTIALLY BREAKING:</strong> Apply <code>@ShadowDsl</code>
to <code>ShadowJar</code>, <code>ResourceTransformer</code>,
<code>DependencyFilter</code>, and <code>Relocator</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2090">#2090</a>)<br
/>
This restricts nested DSL configuration blocks from implicitly calling
outer receiver APIs in Kotlin script files.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Validate ZIP entry names to prevent Zip Slip path traversal.</li>
<li>Avoid resolving unused R8 dependency. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2101">#2101</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="185da5db09"><code>185da5d</code></a>
Prepare version 9.6.1</li>
<li><a
href="b309bc549f"><code>b309bc5</code></a>
Extract addIncludedDependencies (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2116">#2116</a>)</li>
<li><a
href="46b35448b8"><code>46b3544</code></a>
Preserve repeated lines in R8 rule files (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2115">#2115</a>)</li>
<li><a
href="c0d4f0d674"><code>c0d4f0d</code></a>
Revert &quot;Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)&quot;</li>
<li><a
href="ff1809f351"><code>ff1809f</code></a>
Use GradleException for expected build failures (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2113">#2113</a>)</li>
<li><a
href="dc0ee64128"><code>dc0ee64</code></a>
Update plugin tapmoc to v0.4.2 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2112">#2112</a>)</li>
<li><a
href="398afcde1c"><code>398afcd</code></a>
Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)</li>
<li><a
href="3ca69d5a40"><code>3ca69d5</code></a>
Gradle 9.7.0-rc-1 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2110">#2110</a>)</li>
<li><a
href="aaaacd230d"><code>aaaacd2</code></a>
Prepare next development version</li>
<li><a
href="fb3666804b"><code>fb36668</code></a>
Prepare version 9.6.0</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.5.1...9.6.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `ch.qos.logback:logback-classic` from 1.5.38 to 1.6.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/qos-ch/logback/releases">ch.qos.logback:logback-classic's
releases</a>.</em></p>
<blockquote>
<h2>Logback 1.6.0</h2>
<p><strong>2026-07-23 Release of logback version 1.6.0</strong></p>
<p>• Removed certain deprecated variables, methods, and classes. For the
list of removed members see <a
href="https://logback.qos.ch/notes/release_1.6.0.txt">release_1.6.0.txt.</a></p>
<p>• In <code>AsyncAppenderBase</code>, the
<code>put(ILoggingEvent)</code> method now has the protected modifier to
allow access from derived classes. This change was requested by Thomas
Skjølberg in <a
href="https://redirect.github.com/qos-ch/logback/pull/1053">pr#1053</a>.</p>
<p>• Bump SLF4J dependency to version 2.0.18.</p>
<p>• <strong>See also the overview of the <a
href="https://logback.qos.ch/news.html#latest_stable">1.6.x
series</a>.</strong></p>
<p>• A bit-wise identical binary of this version can be reproduced by
building from source code at commit
b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag
v_1.6.0. The release was built using Java &quot;21&quot; 2023-10-17 LTS
build 21.0.1.+12-LTS-29 under Linux Debian 11.6.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b07adf3601"><code>b07adf3</code></a>
synronized logback-access with future 2.0.14</li>
<li><a
href="8381cdc3b3"><code>8381cdc</code></a>
prepare release 1.6.0</li>
<li><a
href="15db759d78"><code>15db759</code></a>
notes on removed deprecated classes, methods and variables.</li>
<li><a
href="90ced5a15f"><code>90ced5a</code></a>
revert removal of support for packaing data</li>
<li><a
href="64c5d3fcf9"><code>64c5d3f</code></a>
Packaging data is no longer supported. It was rarely used.</li>
<li><a
href="54740446b2"><code>5474044</code></a>
fix failing tests</li>
<li><a
href="ac484c2fd4"><code>ac484c2</code></a>
in version 1.6.x target JDK 11</li>
<li><a
href="01eaa90c4c"><code>01eaa90</code></a>
start work on version 1.6.0-SNAPSHOT</li>
<li><a
href="d5e658cd30"><code>d5e658c</code></a>
Allow subclasses to use put(ILoggingEvent) by making method access
protected</li>
<li><a
href="94ba1a07ac"><code>94ba1a0</code></a>
improve message in case of version mismatch</li>
<li>Additional commits viewable in <a
href="https://github.com/qos-ch/logback/compare/v_1.5.38...v_1.6.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.6.0 to 9.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.6.1</h2>
<h3>Changed</h3>
<ul>
<li>Use <code>GradleException</code> for expected build failures. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2113">#2113</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Preserve repeated lines in R8 rule files when using <code>minimize {
r8 { ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2115">#2115</a>)</li>
</ul>
<h2>9.6.0</h2>
<h3>Added</h3>
<ul>
<li>Extract R8 rules from dependency JARs when using <code>minimize { r8
{ ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2089">#2089</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Rename <code>ShadowDslMarker</code> to <code>ShadowDsl</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2091">#2091</a>)</li>
<li><strong>POTENTIALLY BREAKING:</strong> Apply <code>@ShadowDsl</code>
to <code>ShadowJar</code>, <code>ResourceTransformer</code>,
<code>DependencyFilter</code>, and <code>Relocator</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2090">#2090</a>)<br
/>
This restricts nested DSL configuration blocks from implicitly calling
outer receiver APIs in Kotlin script files.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Validate ZIP entry names to prevent Zip Slip path traversal.</li>
<li>Avoid resolving unused R8 dependency. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2101">#2101</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="185da5db09"><code>185da5d</code></a>
Prepare version 9.6.1</li>
<li><a
href="b309bc549f"><code>b309bc5</code></a>
Extract addIncludedDependencies (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2116">#2116</a>)</li>
<li><a
href="46b35448b8"><code>46b3544</code></a>
Preserve repeated lines in R8 rule files (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2115">#2115</a>)</li>
<li><a
href="c0d4f0d674"><code>c0d4f0d</code></a>
Revert &quot;Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)&quot;</li>
<li><a
href="ff1809f351"><code>ff1809f</code></a>
Use GradleException for expected build failures (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2113">#2113</a>)</li>
<li><a
href="dc0ee64128"><code>dc0ee64</code></a>
Update plugin tapmoc to v0.4.2 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2112">#2112</a>)</li>
<li><a
href="398afcde1c"><code>398afcd</code></a>
Reland Tapmoc (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2111">#2111</a>)</li>
<li><a
href="3ca69d5a40"><code>3ca69d5</code></a>
Gradle 9.7.0-rc-1 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2110">#2110</a>)</li>
<li><a
href="aaaacd230d"><code>aaaacd2</code></a>
Prepare next development version</li>
<li><a
href="fb3666804b"><code>fb36668</code></a>
Prepare version 9.6.0</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.5.1...9.6.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.6.0 to 9.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.6.1</h2>
<h3>Changed</h3>
<ul>
<li>Use <code>GradleException</code> for expected build failures. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2113">#2113</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Preserve repeated lines in R8 rule files when using <code>minimize {
r8 { ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2115">#2115</a>)</li>
</ul>
<h2>9.6.0</h2>
<h3>Added</h3>
<ul>
<li>Extract R8 rules from dependency JARs when using <code>minimize { r8
{ ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2089">#2089</a>)</li>
</ul>
<h3>Changed</h3...

_Description has been truncated_

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-27 14:09:25 +02:00
Pavel Gorgulov
82fe56e1e8
fix(server): preserve Streamable HTTP response status and body (#911)
Streamable HTTP responses now keep their status when the client accepts
only `text/event-stream`.

## How Has This Been Tested?
New `StreamableHttpResponseDeliveryTest`

## Breaking Changes
None

## Types of changes
- [x] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update

## Checklist
- [x] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [x] My code follows the repository's style guidelines
- [x] New and existing tests pass locally
- [x] I have added appropriate error handling
- [x] I have added or updated documentation as needed
2026-07-27 13:39:49 +02:00
UnscientificJsZhai
a06d699d6c
feat: SSE heartbeat (#761)
## Summary

Adds optional SSE heartbeat configuration for streamable HTTP MCP server
connections.

This lets `Application.mcpStreamableHttp` callers pass Ktor's
`Heartbeat` configuration for SSE streams, including heartbeat period
and event payload. Heartbeats remain disabled by default, preserving the
existing stream behavior unless the new option is explicitly provided.

## Motivation and Context

Some MCP clients need heartbeat messages on SSE connections to keep the
connection alive. Without those heartbeats, the client may proactively
disconnect from the MCP server. MCP server developers need a way to
configure an SSE heartbeat mechanism so they can avoid unexpected client
disconnects.

In my case, my MCP server was consistently disconnected by Gemini CLI. I
worked around the issue with some fallback approaches, but I believe the
best implementation is to add heartbeat support by using Ktor's built-in
API.

## Implementation Notes

- Added a function overload of `Application.mcpStreamableHttp` to
introduce heartbeat parameter `sseHeartbeatConfig: (Heartbeat.() ->
Unit)?`.
- Applied the configuration inside the Ktor `sse { ... }` block before
handling the existing streamable HTTP transport request.
- Updated the server API dump for the new public API surface.

## How Has This Been Tested?

Added `StreamableHttpHeartbeatIntegrationTest` covering:

- Configured GET SSE streams apply the provided heartbeat configuration.
- GET SSE streams do not send default heartbeats when
`sseHeartbeatConfig` is omitted.
- Configured GET SSE streams emit heartbeat events repeatedly.
- Legacy MCP over SSE APIs do not expose the new heartbeat
configuration.

Verified locally with:

```bash
./gradlew :integration-test:jvmTest --tests "io.modelcontextprotocol.kotlin.sdk.integration.streamablehttp.StreamableHttpHeartbeatIntegrationTest"
```

Result: `BUILD SUCCESSFUL`.

## Breaking Changes

None.

This change adds a new `Application.mcpStreamableHttp` overload that
accepts
`sseHeartbeatConfig: (Heartbeat.() -> Unit)?` while keeping the existing
overload
unchanged. Existing callers continue to compile and keep the previous
behavior:
SSE heartbeats are not sent unless the new overload is used with an
explicit
heartbeat configuration.

## Types of changes

- [ ] Bug fix (non-breaking change which fixes an issue)
- [x] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update

## Checklist

- [x] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [x] My code follows the repository's style guidelines
- [x] New and existing tests pass locally
- [x] I have added appropriate error handling
- [x] I have added or updated documentation as needed

## Additional context

Heartbeat behavior is delegated to Ktor's SSE heartbeat support, so
applications can use the same configuration semantics they would use in
native Ktor SSE routes.

Related issue: [SSE needs a heartbeat #344
](https://github.com/modelcontextprotocol/kotlin-sdk/issues/344)

---------

Co-authored-by: Pavel Gorgulov <devcrocod@gmail.com>
2026-07-23 14:37:37 +02:00
King Star
cab669b108
fix: classify malformed request params as invalid params (#886)
## Summary

Classify typed request deserialization failures as JSON-RPC `Invalid
Params`
instead of `Internal error`.

Fixes #830.

## Changes

- translate `SerializationException` from typed request decoding to
`-32602`
- return a stable `Invalid params` message without serialization
internals
- cover malformed `initialize` requests through session and Streamable
HTTP paths

## Scope and risk

The catch is limited to request parameter deserialization after the
JSON-RPC
method has been resolved. Envelope parsing, unknown methods, handler
failures,
and successful requests keep their existing behavior.

## Verification

```bash
./gradlew :integration-test:jvmTest --tests 'io.modelcontextprotocol.kotlin.sdk.server.ServerSessionInitializeTest'
./gradlew :kotlin-sdk-server:jvmTest --tests 'io.modelcontextprotocol.kotlin.sdk.server.StreamableHttpServerTransportTest'
./gradlew :kotlin-sdk-core:jvmTest --tests 'io.modelcontextprotocol.kotlin.sdk.shared.ProtocolTest'
./gradlew ktlintCheck apiCheck
```

Co-authored-by: Pavel Gorgulov <devcrocod@gmail.com>
2026-07-22 18:12:12 +02:00
King Star
b6cb547d58
fix(server): preserve id on duplicate initialize errors (#868)
## Summary

Fixes #866.

## Changes

- Preserve the parsed JSON-RPC request id when Streamable HTTP rejects a
duplicate `initialize` request.
- Keep pre-parse and transport-level rejection paths unchanged when the
request id is not available.
- Extend the duplicate-initialize regression test to assert the error
response id as well as the HTTP status.

## Verification

```bash
./gradlew :kotlin-sdk-server:jvmTest --tests 'io.modelcontextprotocol.kotlin.sdk.server.StreamableHttpServerTransportTest.second initialization request returns JSON-RPC error with request id'
./gradlew :kotlin-sdk-server:jvmTest --tests 'io.modelcontextprotocol.kotlin.sdk.server.StreamableHttpServerTransportTest'
./gradlew :kotlin-sdk-server:jvmTest
./gradlew :kotlin-sdk-server:ktlintCheck :kotlin-sdk-server:detekt
```

Co-authored-by: Pavel Gorgulov <devcrocod@gmail.com>
2026-07-22 15:53:01 +02:00
dependabot[bot]
9308473745
chore(deps): bump fast-uri from 3.1.2 to 3.1.4 in /integration-test/src/jvmTest/typescript (#910)
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to
3.1.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fastify/fast-uri/releases">fast-uri's
releases</a>.</em></p>
<blockquote>
<h2>v3.1.4</h2>
<h2>⚠️ Security Release</h2>
<p>Fix for <a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx">https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx</a></p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4">https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4</a></p>
<h2>v3.1.3</h2>
<h2>⚠️ Security Release</h2>
<ul>
<li>Fixes: <a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6">https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.3">https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6aeece669e"><code>6aeece6</code></a>
Bumped v3.1.4</li>
<li><a
href="2d50fbabc8"><code>2d50fba</code></a>
fix: reject literal backslash in URI authority</li>
<li><a
href="0549fe35b0"><code>0549fe3</code></a>
Bumped v3.1.3</li>
<li><a
href="2a6d357a18"><code>2a6d357</code></a>
Merge commit from fork</li>
<li>See full diff in <a
href="https://github.com/fastify/fast-uri/compare/v3.1.2...v3.1.4">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-22 12:26:55 +02:00
dependabot[bot]
031a90c8a1
chore(deps): bump ip-address and express-rate-limit in /integration-test/src/jvmTest/typescript (#906)
Bumps [ip-address](https://github.com/beaugunderson/ip-address) and
[express-rate-limit](https://github.com/express-rate-limit/express-rate-limit).
These dependencies needed to be updated together.
Updates `ip-address` from 10.1.0 to 10.2.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="80fccaae98"><code>80fccaa</code></a>
10.2.0</li>
<li><a
href="abaeb4d817"><code>abaeb4d</code></a>
Type Address4.addressMinusSuffix as non-nilable (closes <a
href="https://redirect.github.com/beaugunderson/ip-address/issues/143">#143</a>)</li>
<li><a
href="2878c294e1"><code>2878c29</code></a>
Preserve subnet prefix through Address6.to4() (closes <a
href="https://redirect.github.com/beaugunderson/ip-address/issues/123">#123</a>)
(<a
href="https://redirect.github.com/beaugunderson/ip-address/issues/203">#203</a>)</li>
<li><a
href="586666ee9e"><code>586666e</code></a>
Reject trailing junk in Address6.fromURL (closes <a
href="https://redirect.github.com/beaugunderson/ip-address/issues/158">#158</a>)
(<a
href="https://redirect.github.com/beaugunderson/ip-address/issues/202">#202</a>)</li>
<li><a
href="80bc76eddf"><code>80bc76e</code></a>
Validate static factories instead of silently overflowing (<a
href="https://redirect.github.com/beaugunderson/ip-address/issues/201">#201</a>)</li>
<li><a
href="98927be9ef"><code>98927be</code></a>
Clarify isValid() accepts CIDRs with host bits set (<a
href="https://redirect.github.com/beaugunderson/ip-address/issues/81">#81</a>)</li>
<li><a
href="a0eb0732d6"><code>a0eb073</code></a>
Fix getScope() and broaden getType() classification (closes <a
href="https://redirect.github.com/beaugunderson/ip-address/issues/122">#122</a>)
(<a
href="https://redirect.github.com/beaugunderson/ip-address/issues/200">#200</a>)</li>
<li><a
href="ec52105c87"><code>ec52105</code></a>
Add networkForm() for CIDR network-address strings (<a
href="https://redirect.github.com/beaugunderson/ip-address/issues/199">#199</a>)</li>
<li><a
href="a9443a7221"><code>a9443a7</code></a>
Add isMapped4() predicate for IPv4-mapped IPv6 addresses (closes <a
href="https://redirect.github.com/beaugunderson/ip-address/issues/62">#62</a>)
(<a
href="https://redirect.github.com/beaugunderson/ip-address/issues/198">#198</a>)</li>
<li><a
href="f01d74267e"><code>f01d742</code></a>
Add address-property predicates (private, ULA, loopback, link-local,
etc.) (#...</li>
<li>Additional commits viewable in <a
href="https://github.com/beaugunderson/ip-address/compare/v10.1.0...v10.2.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `express-rate-limit` from 8.3.1 to 8.6.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/express-rate-limit/express-rate-limit/releases">express-rate-limit's
releases</a>.</em></p>
<blockquote>
<h2>v8.6.0</h2>
<p>You can view the changelog <a
href="https://express-rate-limit.mintlify.app/reference/changelog">here</a>.</p>
<h2>v8.5.2</h2>
<p>You can view the changelog <a
href="https://express-rate-limit.mintlify.app/reference/changelog">here</a>.</p>
<h2>v8.5.1</h2>
<p>You can view the changelog <a
href="https://express-rate-limit.mintlify.app/reference/changelog">here</a>.</p>
<h2>v8.5.0</h2>
<p>You can view the changelog <a
href="https://express-rate-limit.mintlify.app/reference/changelog">here</a>.</p>
<h2>v8.4.1</h2>
<p>You can view the changelog <a
href="https://express-rate-limit.mintlify.app/reference/changelog">here</a>.</p>
<h2>v8.4.0</h2>
<p>You can view the changelog <a
href="https://express-rate-limit.mintlify.app/reference/changelog">here</a>.</p>
<h2>v8.3.2</h2>
<p>You can view the changelog <a
href="https://express-rate-limit.mintlify.app/reference/changelog">here</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fffb3c4d6e"><code>fffb3c4</code></a>
8.6.0</li>
<li><a
href="f366b2d360"><code>f366b2d</code></a>
docs: debugging guide, time constants, &amp; v8.6.0 changelog (<a
href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/652">#652</a>)</li>
<li><a
href="593ddd2f4f"><code>593ddd2</code></a>
fix: make debug output easier to read (<a
href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/653">#653</a>)</li>
<li><a
href="ef8c1295ff"><code>ef8c129</code></a>
fix: Pin safe version of <code>@​asyncapi/specs</code> dev dep (<a
href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/659">#659</a>)</li>
<li><a
href="7b05e0dbd8"><code>7b05e0d</code></a>
feat: add time constants to support more readable values for windowMs
(<a
href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/655">#655</a>)</li>
<li><a
href="863e730c2f"><code>863e730</code></a>
chore(deps-dev): bump the development-dependencies group with 3 updates
(<a
href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/657">#657</a>)</li>
<li><a
href="e0e711e4c0"><code>e0e711e</code></a>
fix: correct wording in usage documentation for express-rate-limit (<a
href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/656">#656</a>)</li>
<li><a
href="fcd3aa7d5e"><code>fcd3aa7</code></a>
chore(deps-dev): bump the development-dependencies group with 3 updates
(<a
href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/651">#651</a>)</li>
<li><a
href="99d4298bda"><code>99d4298</code></a>
feat: use <code>debug</code> for debug logging (<a
href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/641">#641</a>)</li>
<li><a
href="23e4ddef55"><code>23e4dde</code></a>
feat: Run validations once each (<a
href="https://redirect.github.com/express-rate-limit/express-rate-limit/issues/650">#650</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/express-rate-limit/express-rate-limit/compare/v8.3.1...v8.6.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-22 09:27:20 +02:00
dependabot[bot]
152a1c88ee
chore(deps): bump body-parser from 2.2.2 to 2.3.0 in /integration-test/src/jvmTest/typescript (#907)
Bumps [body-parser](https://github.com/expressjs/body-parser) from 2.2.2
to 2.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/body-parser/releases">body-parser's
releases</a>.</em></p>
<blockquote>
<h2>v2.3.0</h2>
<h2>Important: Security</h2>
<ul>
<li>Security fix for <a
href="https://www.cve.org/CVERecord?id=CVE-2025-13466">CVE-2026-12590</a>
(<a
href="https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6">GHSA-v422-hmwv-36x6</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/681">expressjs/body-parser#681</a></li>
<li>build(deps): bump actions/checkout from 5.0.0 to 6.0.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/682">expressjs/body-parser#682</a></li>
<li>build(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/683">expressjs/body-parser#683</a></li>
<li>build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/685">expressjs/body-parser#685</a></li>
<li>build(deps): bump github/codeql-action from 4.31.2 to 4.31.9 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/684">expressjs/body-parser#684</a></li>
<li>perf(urlencoded): move empty-body guard to avoid extra function
closure by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/body-parser/pull/647">expressjs/body-parser#647</a></li>
<li>Improve ESM compatibility by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/body-parser/pull/697">expressjs/body-parser#697</a></li>
<li>docs: add recommendations for configuring payload limits by <a
href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
<a
href="https://redirect.github.com/expressjs/body-parser/pull/699">expressjs/body-parser#699</a></li>
<li>build(deps): bump actions/setup-node from 6.1.0 to 6.2.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/701">expressjs/body-parser#701</a></li>
<li>build(deps): bump github/codeql-action from 4.31.10 to 4.32.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/702">expressjs/body-parser#702</a></li>
<li>build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/700">expressjs/body-parser#700</a></li>
<li>chore: add explicit type commonjs to package.json by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/body-parser/pull/711">expressjs/body-parser#711</a></li>
<li>deps: update dependencies to latest versions by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/body-parser/pull/708">expressjs/body-parser#708</a></li>
<li>build(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/712">expressjs/body-parser#712</a></li>
<li>build(deps): bump github/codeql-action from 4.32.0 to 4.32.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/713">expressjs/body-parser#713</a></li>
<li>build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/714">expressjs/body-parser#714</a></li>
<li>fix: improve limit option validation by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/body-parser/pull/698">expressjs/body-parser#698</a></li>
<li>build(deps): bump github/codeql-action from 4.32.4 to 4.35.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/719">expressjs/body-parser#719</a></li>
<li>build(deps): bump actions/setup-node from 6.2.0 to 6.3.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/718">expressjs/body-parser#718</a></li>
<li>build(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/717">expressjs/body-parser#717</a></li>
<li>perf: eliminate conditional check in json strict mode hot path by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/body-parser/pull/651">expressjs/body-parser#651</a></li>
<li>ci: add node.js 26 to text matrix by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/body-parser/pull/726">expressjs/body-parser#726</a></li>
<li>build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/725">expressjs/body-parser#725</a></li>
<li>build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/724">expressjs/body-parser#724</a></li>
<li>build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/723">expressjs/body-parser#723</a></li>
<li>Upgrade &quot;content-type&quot; by <a
href="https://github.com/blakeembrey"><code>@​blakeembrey</code></a> in
<a
href="https://redirect.github.com/expressjs/body-parser/pull/728">expressjs/body-parser#728</a></li>
<li>refactor: switch to const/let and enable eslint no-var rule by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/body-parser/pull/729">expressjs/body-parser#729</a></li>
<li>Update outdated reference to MDN docs by <a
href="https://github.com/krzysdz"><code>@​krzysdz</code></a> in <a
href="https://redirect.github.com/expressjs/body-parser/pull/730">expressjs/body-parser#730</a></li>
<li>build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/731">expressjs/body-parser#731</a></li>
<li>build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/732">expressjs/body-parser#732</a></li>
<li>chore: updated deps to latest by <a
href="https://github.com/Phillip9587"><code>@​Phillip9587</code></a> in
<a
href="https://redirect.github.com/expressjs/body-parser/pull/733">expressjs/body-parser#733</a></li>
<li>2.3.0 by <a
href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
in <a
href="https://redirect.github.com/expressjs/body-parser/pull/735">expressjs/body-parser#735</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/krzysdz"><code>@​krzysdz</code></a> made
their first contribution in <a
href="https://redirect.github.com/expressjs/body-parser/pull/730">expressjs/body-parser#730</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/expressjs/body-parser/compare/v2.2.2...v2.3.0">https://github.com/expressjs/body-parser/compare/v2.2.2...v2.3.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/expressjs/body-parser/blob/master/HISTORY.md">body-parser's
changelog</a>.</em></p>
<blockquote>
<h1>2.3.0 / 2026-06-15</h1>
<ul>
<li>Security fix for <a
href="https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6">GHSA-v422-hmwv-36x6</a></li>
<li>fix: use static exports instead of lazy getters to improve ESM
compatibility</li>
<li>feat: add subpath exports for individual parsers</li>
<li>fix: improve <code>limit</code> option validation (<a
href="https://redirect.github.com/expressjs/body-parser/issues/698">#698</a>)
<ul>
<li>Invalid <code>limit</code> values (e.g. unparseable strings or
<code>NaN</code>) now throw instead of being silently ignored, which
previously disabled size limit enforcement</li>
<li><code>null</code> and <code>undefined</code> fall back to the
default 100kb limit</li>
</ul>
</li>
<li>deps:
<ul>
<li>content-type@^2.0.0</li>
<li>http-errors@^2.0.1</li>
<li>iconv-lite^0.7.2</li>
<li>qs@^6.15.2</li>
<li>raw-body@^3.0.2</li>
<li>type-is@^2.1.0</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d0f2ace6c7"><code>d0f2ace</code></a>
2.3.0 (<a
href="https://redirect.github.com/expressjs/body-parser/issues/735">#735</a>)</li>
<li><a
href="7d03f2f9d5"><code>7d03f2f</code></a>
chore: updated deps to latest (<a
href="https://redirect.github.com/expressjs/body-parser/issues/733">#733</a>)</li>
<li><a
href="8024ba7a81"><code>8024ba7</code></a>
build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (<a
href="https://redirect.github.com/expressjs/body-parser/issues/732">#732</a>)</li>
<li><a
href="32b4ed4639"><code>32b4ed4</code></a>
build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 (<a
href="https://redirect.github.com/expressjs/body-parser/issues/731">#731</a>)</li>
<li><a
href="ff0f6b9071"><code>ff0f6b9</code></a>
docs: update outdated reference to MDN docs (<a
href="https://redirect.github.com/expressjs/body-parser/issues/730">#730</a>)</li>
<li><a
href="14d001a9c9"><code>14d001a</code></a>
refactor: switch to const/let and enable eslint no-var rule (<a
href="https://redirect.github.com/expressjs/body-parser/issues/729">#729</a>)</li>
<li><a
href="37f36a2752"><code>37f36a2</code></a>
deps: update content-type and type-is (<a
href="https://redirect.github.com/expressjs/body-parser/issues/728">#728</a>)</li>
<li><a
href="e1c244bf55"><code>e1c244b</code></a>
build(deps): bump github/codeql-action from 4.35.1 to 4.35.3 (<a
href="https://redirect.github.com/expressjs/body-parser/issues/723">#723</a>)</li>
<li><a
href="e01087f521"><code>e01087f</code></a>
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (<a
href="https://redirect.github.com/expressjs/body-parser/issues/724">#724</a>)</li>
<li><a
href="a7698d3028"><code>a7698d3</code></a>
build(deps): bump actions/setup-node from 6.3.0 to 6.4.0 (<a
href="https://redirect.github.com/expressjs/body-parser/issues/725">#725</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/expressjs/body-parser/compare/v2.2.2...v2.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=body-parser&package-manager=npm_and_yarn&previous-version=2.2.2&new-version=2.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/modelcontextprotocol/kotlin-sdk/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-22 01:29:46 +02:00
dependabot[bot]
a7bb0ea73f
chore(deps): bump actions/setup-node from 6 to 7 in the all-actions group across 1 directory (#898)
Bumps the all-actions group with 1 update in the / directory:
[actions/setup-node](https://github.com/actions/setup-node).

Updates `actions/setup-node` from 6 to 7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-node/releases">actions/setup-node's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements:</h3>
<ul>
<li>Add cache-primary-key and cache-matched-key as outputs by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1577">actions/setup-node#1577</a></li>
<li>Migrate to ESM and upgrade dependencies by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1574">actions/setup-node#1574</a></li>
</ul>
<h3>Bug fixes:</h3>
<ul>
<li>Remove dummy NODE_AUTH_TOKEN export by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1558">actions/setup-node#1558</a></li>
<li>Only use <code>mirrorToken</code> in <code>getManifest</code> if
it's provided by <a
href="https://github.com/deiga"><code>@​deiga</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li>
</ul>
<h3>Documentation updates:</h3>
<ul>
<li>Add documentation for publishing to npm with Trusted Publisher
(OIDC) by <a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li>
<li>docs: Update restore-only cache documentation by <a
href="https://github.com/priya-kinthali"><code>@​priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1550">actions/setup-node#1550</a></li>
<li>docs: Update caching recommendations to mitigate cache poisoning
risks by <a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1567">actions/setup-node#1567</a></li>
</ul>
<h3>Dependency update:</h3>
<ul>
<li>Upgrade <code>@​actions/cache</code> to 5.1.0, log cache write
denied by <a
href="https://github.com/jasongin"><code>@​jasongin</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li>
<li><a href="https://github.com/deiga"><code>@​deiga</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li>
<li><a href="https://github.com/jasongin"><code>@​jasongin</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6...v7.0.0">https://github.com/actions/setup-node/compare/v6...v7.0.0</a></p>
<h2>v6.5.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update <code>@​actions/cache</code> to 5.1.0 and add security
overrides for undici and fast-xml-parser by <a
href="https://github.com/HarithaVattikuti"><code>@​HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1579">actions/setup-node#1579</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0">https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0</a></p>
<h2>v6.4.0</h2>
<h2>What's Changed</h2>
<h3>Dependency updates:</h3>
<ul>
<li>Upgrade <a
href="https://github.com/actions"><code>@​actions</code></a>
dependencies by <a
href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1525">actions/setup-node#1525</a></li>
<li>Update Node.js versions in versions.yml and bump package to v6.4.0
by <a
href="https://github.com/priya-kinthali"><code>@​priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1533">actions/setup-node#1533</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Copilot"><code>@​Copilot</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1525">actions/setup-node#1525</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6...v6.4.0">https://github.com/actions/setup-node/compare/v6...v6.4.0</a></p>
<h2>v6.3.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements:</h3>
<ul>
<li>Support parsing <code>devEngines</code> field by <a
href="https://github.com/susnux"><code>@​susnux</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1283">actions/setup-node#1283</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8207627860"><code>8207627</code></a>
Migrate to ESM and upgrade dependencies (<a
href="https://redirect.github.com/actions/setup-node/issues/1574">#1574</a>)</li>
<li><a
href="04be95cf35"><code>04be95c</code></a>
Add cache-primary-key and cache-matched-key as outputs (<a
href="https://redirect.github.com/actions/setup-node/issues/1577">#1577</a>)</li>
<li><a
href="7c2c68d20d"><code>7c2c68d</code></a>
docs: Update caching recommendations to mitigate cache poisoning risks
(<a
href="https://redirect.github.com/actions/setup-node/issues/1567">#1567</a>)</li>
<li><a
href="6a61c0375d"><code>6a61c03</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-node/issues/1569">#1569</a>
from jasongin/update-actions-cache-5.1.0</li>
<li><a
href="30eb73b41d"><code>30eb73b</code></a>
Resolve high-severity audit issues</li>
<li><a
href="4e1a87a501"><code>4e1a87a</code></a>
Update dist</li>
<li><a
href="360237f0c0"><code>360237f</code></a>
Strict equality</li>
<li><a
href="4f8aac5beb"><code>4f8aac5</code></a>
Bump <code>@​actions/cache</code> to 5.1.0, log cache write denied</li>
<li><a
href="f4a67bbeca"><code>f4a67bb</code></a>
Only use <code>mirrorToken</code> in <code>getManifest</code> if it's
provided (<a
href="https://redirect.github.com/actions/setup-node/issues/1548">#1548</a>)</li>
<li><a
href="0355742c94"><code>0355742</code></a>
Remove dummy NODE_AUTH_TOKEN export (<a
href="https://redirect.github.com/actions/setup-node/issues/1558">#1558</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/setup-node/compare/v6...v7">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 20:46:05 +02:00
Pavel Gorgulov
9ef4f80f85
fix(server): reject duplicate feature names on registration (#883)
Reject duplicate feature registration instead of silently overwriting
the existing entry.

## Motivation and Context

`FeatureRegistry.add`/`addAll` silently replaced a feature registered
under the same key and emitted a spurious `list_changed` notification.
Tool/prompt names and resource URIs are unique identifiers in MCP, and
the TypeScript SDK already rejects duplicates at registration time
(`Tool X is already registered`).

- `addTool`/`addPrompt`/`addResource`/`addResourceTemplate` now throw
`IllegalArgumentException` on a duplicate name/URI; the existing
registration stays intact and no notification is emitted.
- `addTools`/`addPrompts`/`addResources` are all-or-nothing: batches
with intra-batch duplicates or conflicts with existing keys are rejected
without registering anything.
- To replace a feature, remove it first (`removeTool` + `addTool`),
matching the TypeScript SDK's remove-then-re-register path. No new
public API.

## How Has This Been Tested?

New `FeatureRegistryTest` unit suite (duplicate rejection, batch
atomicity, no notification on rejection, re-add after remove) plus
integration tests for tools, prompts, resources, and resource templates.
The check also surfaced a real duplicate `addResource` in
`AbstractResourceIntegrationTest`, fixed here. `jvmTest` (all modules),
`apiCheck`, `ktlintCheck`, and `detekt` pass locally.

## Breaking Changes

No public API signature changes (`apiCheck` passes against the existing
dump). Behavioral: registering a duplicate name/URI now throws
`IllegalArgumentException` instead of silently overwriting; remove the
feature first to replace it.

## Types of changes

- [x] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [x] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update

## Checklist

- [x] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [x] My code follows the repository's style guidelines
- [x] New and existing tests pass locally
- [x] I have added appropriate error handling
- [x] I have added or updated documentation as needed
2026-07-21 16:37:21 +00:00
Takuya Akamatsu
737b46f032
feat(server): validate accepted elicitation content against the requested schema (#896)
Validate accepted form-mode elicitation `content` against the
`requestedSchema` on the server, rejecting mismatches with an
`INVALID_PARAMS` error.

fixes #895

<!-- Provide a brief summary of your changes -->

## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->
`createElicitation` returned accepted content to server code as-is. The
specification's
form-mode security guidance says "Servers SHOULD validate received data
matches the requested
schema" ([2025-11-25, Form Mode
Security](https://modelcontextprotocol.io/specification/2025-11-25/client/elicitation#form-mode-security)).
Comparable validation already exists in the TypeScript SDK's
`elicitInput` and Python's `elicit_with_validation` helper. Details and
design notes are in #895.

## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->
New unit tests for the validator and integration tests over an in-memory
client–server pair.

## Breaking Changes
<!-- Will users need to update their code or configurations? -->
No API changes. Behavioral note: an accepted form-mode response that
does not match the requested schema now fails `createElicitation` with
`McpException` (`INVALID_PARAMS`) instead of being returned to the
caller.

## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [x] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update

## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [x] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [x] My code follows the repository's style guidelines
- [x] New and existing tests pass locally
- [x] I have added appropriate error handling
- [x] I have added or updated documentation as needed

Co-authored-by: Pavel Gorgulov <devcrocod@gmail.com>
2026-07-21 18:17:16 +02:00
dependabot[bot]
078e739424
chore(deps): bump org.jetbrains.kotlinx.kover from 0.9.8 to 0.9.9 in the gradle-plugins group across 1 directory (#902)
Bumps the gradle-plugins group with 1 update in the / directory:
[org.jetbrains.kotlinx.kover](https://github.com/Kotlin/kotlinx-kover).

Updates `org.jetbrains.kotlinx.kover` from 0.9.8 to 0.9.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Kotlin/kotlinx-kover/releases">org.jetbrains.kotlinx.kover's
releases</a>.</em></p>
<blockquote>
<h2>0.9.9</h2>
<h2>Kover Gradle Plugin</h2>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://redirect.github.com/Kotlin/kotlinx-kover/issues/818"><code>[#818](https://github.com/Kotlin/kotlinx-kover/issues/818)</code></a>
Fixed Gradle 9.6.0 deprecation warning</li>
<li><a
href="https://redirect.github.com/Kotlin/kotlinx-kover/issues/810"><code>[#810](https://github.com/Kotlin/kotlinx-kover/issues/810)</code></a>
Fix 0% coverage for classes in com.android.* packages</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Kotlin/kotlinx-kover/blob/main/CHANGELOG.md">org.jetbrains.kotlinx.kover's
changelog</a>.</em></p>
<blockquote>
<h1>0.9.9 / 2026-07-17</h1>
<h2>Kover Gradle Plugin</h2>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://redirect.github.com/Kotlin/kotlinx-kover/issues/818"><code>[#818](https://github.com/Kotlin/kotlinx-kover/issues/818)</code></a>
Fixed Gradle 9.6.0 deprecation warning</li>
<li><a
href="https://redirect.github.com/Kotlin/kotlinx-kover/issues/810"><code>[#810](https://github.com/Kotlin/kotlinx-kover/issues/810)</code></a>
Fix 0% coverage for classes in com.android.* packages</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="95de3ac635"><code>95de3ac</code></a>
Release 0.9.9</li>
<li><a
href="135968e328"><code>135968e</code></a>
Fixed Gradle 9.6.0 deprecation warning</li>
<li><a
href="0b7319ec86"><code>0b7319e</code></a>
Applied artifacts validator plugin</li>
<li><a
href="6f712ccc23"><code>6f712cc</code></a>
Fix 0% coverage for classes in com.android.* packages (<a
href="https://redirect.github.com/Kotlin/kotlinx-kover/issues/810">#810</a>)</li>
<li><a
href="c8be110649"><code>c8be110</code></a>
Use local repo for publishing</li>
<li>See full diff in <a
href="https://github.com/Kotlin/kotlinx-kover/compare/v0.9.8...v0.9.9">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 16:49:15 +02:00
dependabot[bot]
0ea42519ed
chore(deps): bump org.jetbrains.kotlin.jvm from 2.4.0 to 2.4.10 in /samples/kotlin-mcp-client (#899)
Bumps [org.jetbrains.kotlin.jvm](https://github.com/JetBrains/kotlin)
from 2.4.0 to 2.4.10.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.jvm's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.10</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
<h2>Kotlin 2.4.10-RC2</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.jvm's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.10</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5687445832"><code>5687445</code></a>
Add Changelog for 2.4.10-RC2</li>
<li><a
href="ba30392c45"><code>ba30392</code></a>
[Wasm] Support regenerate unchanged modules flag on KGP</li>
<li><a
href="6307e7310d"><code>6307e73</code></a>
[Wasm] Implement Xwasm-IC-generate-unchanged-modules flag</li>
<li><a
href="39d7aee847"><code>39d7aee</code></a>
Add ChangeLog for 2.4.10-RC2</li>
<li><a
href="a2956bed85"><code>a2956be</code></a>
[Gradle] Update karma.conf.js to use 'require(...)' instead plain
strings</li>
<li><a
href="9b1361ce7a"><code>9b1361c</code></a>
[Gradle] KT-87223: Updated regression test</li>
<li><a
href="a4c153af52"><code>a4c153a</code></a>
[Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat
config</li>
<li><a
href="bc04b90d24"><code>bc04b90</code></a>
Add ChangeLog for 2.4.10-RC</li>
<li><a
href="bbcb94baa2"><code>bbcb94b</code></a>
[CRI] explicitly disable CRI generation for non-JVM targets to avoid
false-po...</li>
<li><a
href="6c2c458f1d"><code>6c2c458</code></a>
Scripting: fix jvmTarget processing from script annotations</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.0...v2.4.10">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 15:46:44 +02:00
dependabot[bot]
309d88fe1d
chore(deps): bump the other-dependencies group across 2 directories with 3 updates (#897)
Bumps the other-dependencies group with 2 updates in the
/samples/kotlinlang-mcp-server directory:
[ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) and
[com.gradleup.shadow](https://github.com/GradleUp/shadow).
Bumps the other-dependencies group with 2 updates in the
/samples/simple-streamable-server directory:
[com.gradleup.shadow](https://github.com/GradleUp/shadow) and
[org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework).

Updates `ch.qos.logback:logback-classic` from 1.5.37 to 1.5.38
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/qos-ch/logback/releases">ch.qos.logback:logback-classic's
releases</a>.</em></p>
<blockquote>
<h2>Logback 1.5.38</h2>
<p><strong>2026-07-09 Release of logback version 1.5.38</strong></p>
<p>• In <code>HardenedObjectInputStream</code>, fixed a typo preventing
<code>Throwable</code> objects from being white-filtered. This issue was
reported in [PR <a
href="https://redirect.github.com/qos-ch/logback/issues/1045">#1045</a>](<a
href="https://redirect.github.com/qos-ch/logback/pull/1045">qos-ch/logback#1045</a>)
by <a href="https://github.com/t0rchwo0d">t0rchwo0d</a>.</p>
<p>• A bitwise identical binary of this version can be reproduced by
building from source code at commit
d04984a41fce42977466f45a2f076f0ee5cc4207 associated with the tag
v_1.5.38. Release built using Java &quot;21&quot; 2023-10-17 LTS build
21.0.1.+12-LTS-29 under Linux Debian 11.6.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d04984a41f"><code>d04984a</code></a>
prepare release 1.5.38</li>
<li><a
href="4fffda6549"><code>4fffda6</code></a>
updateversion of maven-gpg-plugin</li>
<li><a
href="7ee48a17be"><code>7ee48a1</code></a>
Fixed a typo where java,lang.Throwable was written with a comma instead
of a ...</li>
<li><a
href="84580a24e6"><code>84580a2</code></a>
remove license profile</li>
<li><a
href="f817c8de7d"><code>f817c8d</code></a>
start work on 1.5.28-SNAPSHOT</li>
<li>See full diff in <a
href="https://github.com/qos-ch/logback/compare/v_1.5.37...v_1.5.38">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.5.1 to 9.6.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.6.0</h2>
<h3>Added</h3>
<ul>
<li>Extract R8 rules from dependency JARs when using <code>minimize { r8
{ ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2089">#2089</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Rename <code>ShadowDslMarker</code> to <code>ShadowDsl</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2091">#2091</a>)</li>
<li><strong>POTENTIALLY BREAKING:</strong> Apply <code>@ShadowDsl</code>
to <code>ShadowJar</code>, <code>ResourceTransformer</code>,
<code>DependencyFilter</code>, and <code>Relocator</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2090">#2090</a>)<br
/>
This restricts nested DSL configuration blocks from implicitly calling
outer receiver APIs in Kotlin script files.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Validate ZIP entry names to prevent Zip Slip path traversal.</li>
<li>Avoid resolving unused R8 dependency. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2101">#2101</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fb3666804b"><code>fb36668</code></a>
Prepare version 9.6.0</li>
<li><a
href="9e5c06d226"><code>9e5c06d</code></a>
Test relocation of ModuleMainClass in module-info (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2109">#2109</a>)</li>
<li><a
href="e37770cd4f"><code>e37770c</code></a>
Test relocation of nested class signatures (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2108">#2108</a>)</li>
<li><a
href="74792f7ba4"><code>74792f7</code></a>
Add unit tests for internal components (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2107">#2107</a>)</li>
<li><a
href="b5908197f5"><code>b590819</code></a>
Avoid resolving unused R8 dependency (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2101">#2101</a>)</li>
<li><a
href="1dd8db498c"><code>1dd8db4</code></a>
Update plugin android-lint to v9.3.0 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2104">#2104</a>)</li>
<li><a
href="083a01a712"><code>083a01a</code></a>
Defer shadowR8 configuration (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2100">#2100</a>)</li>
<li><a
href="1ce486dc5c"><code>1ce486d</code></a>
Update kotlin monorepo to v2.4.10 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2103">#2103</a>)</li>
<li><a
href="c89473ef4a"><code>c89473e</code></a>
Test allowing custom ShadowJar without shadowR8 registered (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2102">#2102</a>)</li>
<li><a
href="f23f5c9521"><code>f23f5c9</code></a>
Update dependency org.junit:junit-bom to v6.1.2 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2098">#2098</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.5.1...9.6.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.5.1 to 9.6.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.6.0</h2>
<h3>Added</h3>
<ul>
<li>Extract R8 rules from dependency JARs when using <code>minimize { r8
{ ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2089">#2089</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Rename <code>ShadowDslMarker</code> to <code>ShadowDsl</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2091">#2091</a>)</li>
<li><strong>POTENTIALLY BREAKING:</strong> Apply <code>@ShadowDsl</code>
to <code>ShadowJar</code>, <code>ResourceTransformer</code>,
<code>DependencyFilter</code>, and <code>Relocator</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2090">#2090</a>)<br
/>
This restricts nested DSL configuration blocks from implicitly calling
outer receiver APIs in Kotlin script files.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Validate ZIP entry names to prevent Zip Slip path traversal.</li>
<li>Avoid resolving unused R8 dependency. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2101">#2101</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fb3666804b"><code>fb36668</code></a>
Prepare version 9.6.0</li>
<li><a
href="9e5c06d226"><code>9e5c06d</code></a>
Test relocation of ModuleMainClass in module-info (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2109">#2109</a>)</li>
<li><a
href="e37770cd4f"><code>e37770c</code></a>
Test relocation of nested class signatures (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2108">#2108</a>)</li>
<li><a
href="74792f7ba4"><code>74792f7</code></a>
Add unit tests for internal components (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2107">#2107</a>)</li>
<li><a
href="b5908197f5"><code>b590819</code></a>
Avoid resolving unused R8 dependency (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2101">#2101</a>)</li>
<li><a
href="1dd8db498c"><code>1dd8db4</code></a>
Update plugin android-lint to v9.3.0 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2104">#2104</a>)</li>
<li><a
href="083a01a712"><code>083a01a</code></a>
Defer shadowR8 configuration (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2100">#2100</a>)</li>
<li><a
href="1ce486dc5c"><code>1ce486d</code></a>
Update kotlin monorepo to v2.4.10 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2103">#2103</a>)</li>
<li><a
href="c89473ef4a"><code>c89473e</code></a>
Test allowing custom ShadowJar without shadowR8 registered (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2102">#2102</a>)</li>
<li><a
href="f23f5c9521"><code>f23f5c9</code></a>
Update dependency org.junit:junit-bom to v6.1.2 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2098">#2098</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.5.1...9.6.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.5.1 to 9.6.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.6.0</h2>
<h3>Added</h3>
<ul>
<li>Extract R8 rules from dependency JARs when using <code>minimize { r8
{ ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2089">#2089</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Rename <code>ShadowDslMarker</code> to <code>ShadowDsl</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2091">#2091</a>)</li>
<li><strong>POTENTIALLY BREAKING:</strong> Apply <code>@ShadowDsl</code>
to <code>ShadowJar</code>, <code>ResourceTransformer</code>,
<code>DependencyFilter</code>, and <code>Relocator</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2090">#2090</a>)<br
/>
This restricts nested DSL configuration blocks from implicitly calling
outer receiver APIs in Kotlin script files.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Validate ZIP entry names to prevent Zip Slip path traversal.</li>
<li>Avoid resolving unused R8 dependency. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2101">#2101</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fb3666804b"><code>fb36668</code></a>
Prepare version 9.6.0</li>
<li><a
href="9e5c06d226"><code>9e5c06d</code></a>
Test relocation of ModuleMainClass in module-info (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2109">#2109</a>)</li>
<li><a
href="e37770cd4f"><code>e37770c</code></a>
Test relocation of nested class signatures (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2108">#2108</a>)</li>
<li><a
href="74792f7ba4"><code>74792f7</code></a>
Add unit tests for internal components (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2107">#2107</a>)</li>
<li><a
href="b5908197f5"><code>b590819</code></a>
Avoid resolving unused R8 dependency (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2101">#2101</a>)</li>
<li><a
href="1dd8db498c"><code>1dd8db4</code></a>
Update plugin android-lint to v9.3.0 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2104">#2104</a>)</li>
<li><a
href="083a01a712"><code>083a01a</code></a>
Defer shadowR8 configuration (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2100">#2100</a>)</li>
<li><a
href="1ce486dc5c"><code>1ce486d</code></a>
Update kotlin monorepo to v2.4.10 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2103">#2103</a>)</li>
<li><a
href="c89473ef4a"><code>c89473e</code></a>
Test allowing custom ShadowJar without shadowR8 registered (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2102">#2102</a>)</li>
<li><a
href="f23f5c9521"><code>f23f5c9</code></a>
Update dependency org.junit:junit-bom to v6.1.2 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2098">#2098</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.5.1...9.6.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.junit.jupiter:junit-jupiter` from 6.1.1 to 6.1.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/junit-team/junit-framework/releases">org.junit.jupiter:junit-jupiter's
releases</a>.</em></p>
<blockquote>
<p>JUnit 6.1.2 = Platform 6.1.2 + Jupiter 6.1.2 + Vintage 6.1.2</p>
<p>See <a href="https://docs.junit.org/6.1.2/release-notes.html">Release
Notes</a>.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/junit-team/junit-framework/compare/r6.1.1...r6.1.2">https://github.com/junit-team/junit-framework/compare/r6.1.1...r6.1.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b6854269ee"><code>b685426</code></a>
Release 6.1.2</li>
<li><a
href="ae244a6936"><code>ae244a6</code></a>
Remove blanket outputDirectoryCreator from SuiteEngineTests (<a
href="https://redirect.github.com/junit-team/junit-framework/issues/5793">#5793</a>)</li>
<li><a
href="43bd154163"><code>43bd154</code></a>
Finalize 6.1.2 release notes</li>
<li><a
href="0cd9510637"><code>0cd9510</code></a>
Fix order of release note sections</li>
<li><a
href="a1507cbaf4"><code>a1507cb</code></a>
Add initial 6.1.2 release notes to release notes index</li>
<li><a
href="932664186b"><code>9326641</code></a>
Fix NoTestsDiscoveredException for suites containing only dynamic tests
(<a
href="https://redirect.github.com/junit-team/junit-framework/issues/5839">#5839</a>)</li>
<li><a
href="2ef11234dc"><code>2ef1123</code></a>
Create initial 6.1.2 release notes from template</li>
<li><a
href="83fa9ab372"><code>83fa9ab</code></a>
Back to snapshots for further development</li>
<li>See full diff in <a
href="https://github.com/junit-team/junit-framework/compare/r6.1.1...r6.1.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.5.1 to 9.6.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.6.0</h2>
<h3>Added</h3>
<ul>
<li>Extract R8 rules from dependency JARs when using <code>minimize { r8
{ ... } }</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2089">#2089</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Rename <code>ShadowDslMarker</code> to <code>ShadowDsl</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2091">#2091</a>)</li>
<li><strong>POTENTIALLY BREAKING:</strong> Apply <code>@ShadowDsl</code>
to <code>ShadowJar</code>, <code>ResourceTransformer</code>,
<code>DependencyFilter</code>, and <code>Relocator</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2090">#2090</a>)<br
/>
This restricts nested DSL configuration blocks from implicitly calling
outer receiver APIs in Kotlin script files.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Validate ZIP entry names to prevent Zip Slip path traversal.</li>
<li>Avoid resolving unused R8 dependency. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2101">#2101</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fb3666804b"><code>fb36668</code></a>
Prepare version 9.6.0</li>
<li><a
href="9e5c06d226"><code>9e5c06d</code></a>
Test relocation of ModuleMainClass in module-info (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2109">#2109</a>)</li>
<li><a
href="e37770cd4f"><code>e37770c</code></a>
Test relocation of nested class signatures (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2108">#2108</a>)</li>
<li><a
href="74792f7ba4"><code>74792f7</code></a>
Add unit tests for internal components (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2107">#2107</a>)</li>
<li><a
href="b5908197f5"><code>b590819</code></a>
Avoid resolving unused R8 dependency (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2101">#2101</a>)</li>
<li><a
href="1dd8db498c"><code>1dd8db4</code></a>
Update plugin android-lint to v9.3.0 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2104">#2104</a>)</li>
<li><a
href="083a01a712"><code>083a01a</code></a>
Defer shadowR8 configuration (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2100">#2100</a>)</li>
<li><a
href="1ce486dc5c"><code>1ce486d</code></a>
Update kotlin monorepo to v2.4.10 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2103">#2103</a>)</li>
<li><a
href="c89473ef4a"><code>c89473e</code></a>
Test allowing custom ShadowJar without shadowR8 registered (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2102">#2102</a>)</li>
<li><a
href="f23f5c9521"><code>f23f5c9</code></a>
Update dependency org.junit:junit-bom to v6.1.2 (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2098">#2098</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.5.1...9.6.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 13:58:22 +02:00
Pavel Gorgulov
5cb76fd040
fix(core): clear recently-cancelled request ids on connection close (#892)
Clear the recently-cancelled request id buffer in `doClose` so
connection teardown fully resets per-request bookkeeping.

## Motivation and Context
Follow-up to #884. `doClose` already resets `_responseHandlers`,
`_progressHandlers`, and `inFlightRequestJobs`, but left
`recentlyCancelledRequestIds` populated across a close. This aligns
teardown to clear all Protocol-scoped per-request state.

Not a correctness bug: the buffer is bounded (256) and self-evicting,
request ids are random UUIDs so stale entries cannot false-match a new
connection, and the post-close `onMessage` guard drops late messages
from the old transport before the buffer is consulted. The change
removes the lone asymmetry in `doClose`.

## How Has This Been Tested?
- `./gradlew :kotlin-sdk-core:compileKotlinJvm`
- `./gradlew :kotlin-sdk-core:jvmTest --tests "*ProtocolTest*"`

## Breaking Changes
None.

## Types of changes
- [x] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update

## Checklist
- [x] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [x] My code follows the repository's style guidelines
- [x] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed

## Additional context
`recentlyCancelledRequestIds` is Protocol-scoped (like
`_responseHandlers`/`_progressHandlers`), so it is reset in `doClose`
rather than on the per-connection `Connection` object.
2026-07-16 15:41:46 +02:00
dependabot[bot]
c984bc7a32
chore(deps): bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38 (#890)
Bumps
[ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from
1.5.37 to 1.5.38.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/qos-ch/logback/releases">ch.qos.logback:logback-classic's
releases</a>.</em></p>
<blockquote>
<h2>Logback 1.5.38</h2>
<p><strong>2026-07-09 Release of logback version 1.5.38</strong></p>
<p>• In <code>HardenedObjectInputStream</code>, fixed a typo preventing
<code>Throwable</code> objects from being white-filtered. This issue was
reported in [PR <a
href="https://redirect.github.com/qos-ch/logback/issues/1045">#1045</a>](<a
href="https://redirect.github.com/qos-ch/logback/pull/1045">qos-ch/logback#1045</a>)
by <a href="https://github.com/t0rchwo0d">t0rchwo0d</a>.</p>
<p>• A bitwise identical binary of this version can be reproduced by
building from source code at commit
d04984a41fce42977466f45a2f076f0ee5cc4207 associated with the tag
v_1.5.38. Release built using Java &quot;21&quot; 2023-10-17 LTS build
21.0.1.+12-LTS-29 under Linux Debian 11.6.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d04984a41f"><code>d04984a</code></a>
prepare release 1.5.38</li>
<li><a
href="4fffda6549"><code>4fffda6</code></a>
updateversion of maven-gpg-plugin</li>
<li><a
href="7ee48a17be"><code>7ee48a1</code></a>
Fixed a typo where java,lang.Throwable was written with a comma instead
of a ...</li>
<li><a
href="84580a24e6"><code>84580a2</code></a>
remove license profile</li>
<li><a
href="f817c8de7d"><code>f817c8d</code></a>
start work on 1.5.28-SNAPSHOT</li>
<li>See full diff in <a
href="https://github.com/qos-ch/logback/compare/v_1.5.37...v_1.5.38">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-16 13:39:09 +02:00
dependabot[bot]
e464e69a08
chore(deps): bump io.netty:netty-bom from 4.2.15.Final to 4.2.16.Final in the infrastructure group across 1 directory (#889)
Bumps the infrastructure group with 1 update in the / directory:
[io.netty:netty-bom](https://github.com/netty/netty).

Updates `io.netty:netty-bom` from 4.2.15.Final to 4.2.16.Final
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/netty/netty/releases">io.netty:netty-bom's
releases</a>.</em></p>
<blockquote>
<h2>netty-4.2.16.Final</h2>
<h2>What's Changed</h2>
<ul>
<li>Document Java 9 requirement for io_uring by <a
href="https://github.com/jchambers"><code>@​jchambers</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16904">netty/netty#16904</a></li>
<li>Add BlockHound exception for DnsQueryIdSpace by <a
href="https://github.com/violetagg"><code>@​violetagg</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16896">netty/netty#16896</a></li>
<li>Fix incorrect bounds in error message of
HpackDecoder.setMaxHeaderListSize by <a
href="https://github.com/skyguard1"><code>@​skyguard1</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16901">netty/netty#16901</a></li>
<li>Add epoch-based chunk cache purge with ring buffer for thread-local
reuse by <a
href="https://github.com/franz1981"><code>@​franz1981</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16766">netty/netty#16766</a></li>
<li>Use Splittable/ThreadLocalRandom to generate bulk data in tests by
<a href="https://github.com/chrisvest"><code>@​chrisvest</code></a> in
<a
href="https://redirect.github.com/netty/netty/pull/16808">netty/netty#16808</a></li>
<li>Auto-port 4.2: SingleThreadEventExecutor: document Throwable safety
contract on run() by <a
href="https://github.com/netty-project-bot"><code>@​netty-project-bot</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16909">netty/netty#16909</a></li>
<li>Auto-port 4.2: Make HTTP/2 frame hashCode consistent with equals by
<a
href="https://github.com/netty-project-bot"><code>@​netty-project-bot</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16910">netty/netty#16910</a></li>
<li>Auto-port 4.2: MQTT: Make the decodeProperties early-REPLAY check
actually fire by <a
href="https://github.com/netty-project-bot"><code>@​netty-project-bot</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16919">netty/netty#16919</a></li>
<li>IoUring: fix io_uring datagram writes with non-zero readerIndex by
<a
href="https://github.com/dreamlike-ocean"><code>@​dreamlike-ocean</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16905">netty/netty#16905</a></li>
<li>Exclude internal events from IoHandler.run() return value in epoll,
io_uring and kqueue by <a
href="https://github.com/franz1981"><code>@​franz1981</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16848">netty/netty#16848</a></li>
<li>IoUring: Pass IORING_ENTER_NO_IOWAIT to report accurate CPU usage by
<a href="https://github.com/wineway"><code>@​wineway</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16739">netty/netty#16739</a></li>
<li>Avoid logging exceptions that tests ignore by <a
href="https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16891">netty/netty#16891</a></li>
<li>Reject control characters at the boundary of HTTP method names by <a
href="https://github.com/daguimu"><code>@​daguimu</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16723">netty/netty#16723</a></li>
<li>IoUring: fix TCP Fast Open initial writes with readerIndex and
composites by <a
href="https://github.com/dreamlike-ocean"><code>@​dreamlike-ocean</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16929">netty/netty#16929</a></li>
<li>Try to fix/stabilize a number of flaky tests by <a
href="https://github.com/chrisvest"><code>@​chrisvest</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16934">netty/netty#16934</a></li>
<li>Fix propagation of startTls for client SslContext handlers by <a
href="https://github.com/skyguard1"><code>@​skyguard1</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16931">netty/netty#16931</a></li>
<li>Update to latest tcnative release by <a
href="https://github.com/normanmaurer"><code>@​normanmaurer</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16936">netty/netty#16936</a></li>
<li>Move test to shared testsuite by <a
href="https://github.com/normanmaurer"><code>@​normanmaurer</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16928">netty/netty#16928</a></li>
<li>[Refactor] Useful helper method getOrDefault &amp; cleaner
abstraction by <a
href="https://github.com/sanjomo"><code>@​sanjomo</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16927">netty/netty#16927</a></li>
<li>Make permessage-deflate server window size and memLevel configurable
by <a href="https://github.com/fru1tworld"><code>@​fru1tworld</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16809">netty/netty#16809</a></li>
<li>Return early in DnsQueryContext.writeQuery when the query ID space
is exhausted by <a
href="https://github.com/HwangRock"><code>@​HwangRock</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16950">netty/netty#16950</a></li>
<li>Fix HTTP 2 PUSH_PROMISE stream association validation by <a
href="https://github.com/skyguard1"><code>@​skyguard1</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16952">netty/netty#16952</a></li>
<li>Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by <a
href="https://github.com/daguimu"><code>@​daguimu</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16951">netty/netty#16951</a></li>
<li>Http3FrameCodec handle fragmented payloads when skipping unknown
frames by <a
href="https://github.com/skyguard1"><code>@​skyguard1</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16960">netty/netty#16960</a></li>
<li>Add opt-in validation of mandatory pseudo-header fields for HTTP/2
by <a href="https://github.com/hyperxpro"><code>@​hyperxpro</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16932">netty/netty#16932</a></li>
<li>Strictly validate MQTT UTF-8 Encoded String by <a
href="https://github.com/skyguard1"><code>@​skyguard1</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16939">netty/netty#16939</a></li>
<li>Stop DateFormatter trailing token from running past the parse end by
<a href="https://github.com/daguimu"><code>@​daguimu</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16958">netty/netty#16958</a></li>
<li>IpFilter: Deprecate constructor which use accept by default by <a
href="https://github.com/normanmaurer"><code>@​normanmaurer</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16961">netty/netty#16961</a></li>
<li>Add RFC 10008 QUERY Method support by <a
href="https://github.com/desiderantes"><code>@​desiderantes</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16966">netty/netty#16966</a></li>
<li>Correctly release and fail queued traffic-shaping writes on close by
<a href="https://github.com/skyguard1"><code>@​skyguard1</code></a> in
<a
href="https://redirect.github.com/netty/netty/pull/16959">netty/netty#16959</a></li>
<li>Reject control characters at the boundary of the HTTP version token
by <a href="https://github.com/HwangRock"><code>@​HwangRock</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16971">netty/netty#16971</a></li>
<li>FlowControlHandler: respect auto-read when toggled while dequeueing
by <a href="https://github.com/schiemon"><code>@​schiemon</code></a> in
<a
href="https://redirect.github.com/netty/netty/pull/16949">netty/netty#16949</a></li>
<li>Fix leak in ReferenceCountedOpenSslEngine.addCredential by <a
href="https://github.com/jmcrawford45"><code>@​jmcrawford45</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16979">netty/netty#16979</a></li>
<li>IdleStateHandler: reset firstWriter/ReaderIdleEvent in
resetWriteTimeout/resetReadTimeout by <a
href="https://github.com/husseinvr97"><code>@​husseinvr97</code></a> in
<a
href="https://redirect.github.com/netty/netty/pull/16982">netty/netty#16982</a></li>
<li>Fix typo in AbstractSniHandler Javadoc by <a
href="https://github.com/coderbruis"><code>@​coderbruis</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16988">netty/netty#16988</a></li>
<li>Fix client/server inconsistency in SslCredential support matrix by
<a
href="https://github.com/jmcrawford45"><code>@​jmcrawford45</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16990">netty/netty#16990</a></li>
<li>Reconcile <code>AbstractCoalescingBufferQueue</code> readableBytes
when it drains, and fail stuck HTTP/2 streams instead of spinning empty
DATA frames by <a
href="https://github.com/gavinbunney"><code>@​gavinbunney</code></a> in
<a
href="https://redirect.github.com/netty/netty/pull/16947">netty/netty#16947</a></li>
<li>Use Ticker in Http2MaxRstFrameListener for testability by <a
href="https://github.com/skyguard1"><code>@​skyguard1</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16993">netty/netty#16993</a></li>
<li>Reset UTF-8 decode state on CR in StompSubframeDecoder by <a
href="https://github.com/vasiliy-mikhailov"><code>@​vasiliy-mikhailov</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/16991">netty/netty#16991</a></li>
<li>FastLz: Guard decompression against truncated input by <a
href="https://github.com/yawkat"><code>@​yawkat</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/17000">netty/netty#17000</a></li>
<li>Reject non-token characters in HTTP/2 header names by <a
href="https://github.com/daguimu"><code>@​daguimu</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/16762">netty/netty#16762</a></li>
<li>Auto-port 4.2: Fix SelfSignCertificate initialization in tests by <a
href="https://github.com/netty-project-bot"><code>@​netty-project-bot</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/17029">netty/netty#17029</a></li>
<li>Enable extension of Http3ClientConnectionHandler to support
higher-level protocols such as WebTransport. by <a
href="https://github.com/sanjomo"><code>@​sanjomo</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/17027">netty/netty#17027</a></li>
<li>Implement Adaptive Cumulator by <a
href="https://github.com/shivaspeaks"><code>@​shivaspeaks</code></a> in
<a
href="https://redirect.github.com/netty/netty/pull/16731">netty/netty#16731</a></li>
<li>Allow WebSocket extension negotiation to be disabled per response by
<a href="https://github.com/mkurz"><code>@​mkurz</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/17030">netty/netty#17030</a></li>
<li>Support QPACK sensitivity detector for Never Indexed header fields
by <a href="https://github.com/skyguard1"><code>@​skyguard1</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/17026">netty/netty#17026</a></li>
<li>Fix maxAllocation for brotli-encoded content in
HttpContentDecompressor by <a
href="https://github.com/skyguard1"><code>@​skyguard1</code></a> in <a
href="https://redirect.github.com/netty/netty/pull/17037">netty/netty#17037</a></li>
<li>Pin github actions to reduce risk by <a
href="https://github.com/normanmaurer"><code>@​normanmaurer</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/17043">netty/netty#17043</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3703d79669"><code>3703d79</code></a>
[maven-release-plugin] prepare release netty-4.2.16.Final</li>
<li><a
href="63bbb2ce37"><code>63bbb2c</code></a>
Update rust toolchain - add required parameters</li>
<li><a
href="ac06c1b922"><code>ac06c1b</code></a>
Update rust toolchain</li>
<li><a
href="5b68c61f37"><code>5b68c61</code></a>
Merge branches from forks (<a
href="https://redirect.github.com/netty/netty/issues/17063">#17063</a>)</li>
<li><a
href="de5d27666a"><code>de5d276</code></a>
Update lz4-java to 1.11.1 (<a
href="https://redirect.github.com/netty/netty/issues/17061">#17061</a>)</li>
<li><a
href="da22048fd5"><code>da22048</code></a>
Pin github actions to reduce risk (<a
href="https://redirect.github.com/netty/netty/issues/17043">#17043</a>)</li>
<li><a
href="0332676fd1"><code>0332676</code></a>
Fix maxAllocation for brotli-encoded content in HttpContentDecompressor
(<a
href="https://redirect.github.com/netty/netty/issues/17037">#17037</a>)</li>
<li><a
href="7364401868"><code>7364401</code></a>
Support QPACK sensitivity detector for Never Indexed header fields (<a
href="https://redirect.github.com/netty/netty/issues/17026">#17026</a>)</li>
<li><a
href="06faf183ab"><code>06faf18</code></a>
Allow WebSocket extension negotiation to be disabled per response (<a
href="https://redirect.github.com/netty/netty/issues/17030">#17030</a>)</li>
<li><a
href="bc4b983f59"><code>bc4b983</code></a>
Implement Adaptive Cumulator (<a
href="https://redirect.github.com/netty/netty/issues/16731">#16731</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.2.15.Final...netty-4.2.16.Final">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 23:43:10 +02:00
Klyne Chrysler
dbd34ff327
close stateless streamable http session after request completion (#872)
fixes #786

stateless streamable http endpoint never closed its per request session,
so the session registry and notification subscriptions grew forever. now
the session is closed in a finally block after each request, which
triggers the existing cleanup. also removed the per request
server.onClose logging callback that accumulated on shared servers.

added tests proving sessions are removed after normal and rejected
requests. jvmTest, ktlint, detekt, apiCheck all pass. no public api
changes.

Co-authored-by: Pavel Gorgulov <devcrocod@gmail.com>
2026-07-15 18:38:21 +02:00
dependabot[bot]
8f104268c7
chore(deps): bump the kotest group across 1 directory with 3 updates (#888)
Bumps the kotest group with 3 updates in the / directory:
[io.kotest:kotest-assertions-core](https://github.com/kotest/kotest),
[io.kotest:kotest-assertions-json](https://github.com/kotest/kotest) and
[io.kotest:kotest-assertions-ktor](https://github.com/kotest/kotest).

Updates `io.kotest:kotest-assertions-core` from 6.2.1 to 6.2.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-core's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Document instant-based ZonedDateTime <code>plusOrMinus</code>
comparison by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6159">kotest/kotest#6159</a></li>
<li>Add documentation for OffsetDateTime tolerance matcher by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6161">kotest/kotest#6161</a></li>
<li>Fix typo in proptest config docs by <a
href="https://github.com/axiom"><code>@​axiom</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6155">kotest/kotest#6155</a></li>
<li>disable return-value-checker for releases by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6165">kotest/kotest#6165</a></li>
<li>fix(kotest-framework-engine): Use display-name rendering for ignored
tests in TeamCity listener by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6119">kotest/kotest#6119</a></li>
<li>fix(kotest-assertions-core): Handle null map values in
shouldBeEqualUsingFields by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6112">kotest/kotest#6112</a></li>
<li>Update dependency io.mockk:mockk to v1.14.11 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6163">kotest/kotest#6163</a></li>
<li>fix: attach Fail fast scope tracker for each root test case in
instance per spec mode by <a
href="https://github.com/ashdawngary"><code>@​ashdawngary</code></a> in
<a
href="https://redirect.github.com/kotest/kotest/pull/6160">kotest/kotest#6160</a></li>
<li>Update dependency io.projectreactor.tools:blockhound to
v1.0.17.RELEASE by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6164">kotest/kotest#6164</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6159">kotest/kotest#6159</a></li>
<li><a href="https://github.com/axiom"><code>@​axiom</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6155">kotest/kotest#6155</a></li>
<li><a
href="https://github.com/ashdawngary"><code>@​ashdawngary</code></a>
made their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6160">kotest/kotest#6160</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/v6.2.1...v6.2.2">https://github.com/kotest/kotest/compare/v6.2.1...v6.2.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4e55e4c7e6"><code>4e55e4c</code></a>
Update dependency io.projectreactor.tools:blockhound to v1.0.17.RELEASE
(<a
href="https://redirect.github.com/kotest/kotest/issues/6164">#6164</a>)</li>
<li><a
href="3e0202f2fe"><code>3e0202f</code></a>
fix: attach Fail fast scope tracker for each root test case in instance
per s...</li>
<li><a
href="134c12b785"><code>134c12b</code></a>
Update dependency io.mockk:mockk to v1.14.11 (<a
href="https://redirect.github.com/kotest/kotest/issues/6163">#6163</a>)</li>
<li><a
href="01c7429b21"><code>01c7429</code></a>
fix(kotest-assertions-core): Handle null map values in
shouldBeEqualUsingFiel...</li>
<li><a
href="44887a50bc"><code>44887a5</code></a>
fix(kotest-framework-engine): Use display-name rendering for ignored
tests in...</li>
<li><a
href="b68ef3e27d"><code>b68ef3e</code></a>
disable return-value-checker for releases (<a
href="https://redirect.github.com/kotest/kotest/issues/6165">#6165</a>)</li>
<li><a
href="86a7d93cb9"><code>86a7d93</code></a>
Fix typo in proptest config docs (<a
href="https://redirect.github.com/kotest/kotest/issues/6155">#6155</a>)</li>
<li><a
href="1677bd57ac"><code>1677bd5</code></a>
Add documentation for OffsetDateTime tolerance matcher (<a
href="https://redirect.github.com/kotest/kotest/issues/6161">#6161</a>)</li>
<li><a
href="47f3efce8c"><code>47f3efc</code></a>
Document instant-based ZonedDateTime <code>plusOrMinus</code> comparison
(<a
href="https://redirect.github.com/kotest/kotest/issues/6159">#6159</a>)</li>
<li>See full diff in <a
href="https://github.com/kotest/kotest/compare/6.2.1...6.2.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.kotest:kotest-assertions-json` from 6.2.1 to 6.2.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-json's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Document instant-based ZonedDateTime <code>plusOrMinus</code>
comparison by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6159">kotest/kotest#6159</a></li>
<li>Add documentation for OffsetDateTime tolerance matcher by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6161">kotest/kotest#6161</a></li>
<li>Fix typo in proptest config docs by <a
href="https://github.com/axiom"><code>@​axiom</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6155">kotest/kotest#6155</a></li>
<li>disable return-value-checker for releases by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6165">kotest/kotest#6165</a></li>
<li>fix(kotest-framework-engine): Use display-name rendering for ignored
tests in TeamCity listener by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6119">kotest/kotest#6119</a></li>
<li>fix(kotest-assertions-core): Handle null map values in
shouldBeEqualUsingFields by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6112">kotest/kotest#6112</a></li>
<li>Update dependency io.mockk:mockk to v1.14.11 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6163">kotest/kotest#6163</a></li>
<li>fix: attach Fail fast scope tracker for each root test case in
instance per spec mode by <a
href="https://github.com/ashdawngary"><code>@​ashdawngary</code></a> in
<a
href="https://redirect.github.com/kotest/kotest/pull/6160">kotest/kotest#6160</a></li>
<li>Update dependency io.projectreactor.tools:blockhound to
v1.0.17.RELEASE by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6164">kotest/kotest#6164</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6159">kotest/kotest#6159</a></li>
<li><a href="https://github.com/axiom"><code>@​axiom</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6155">kotest/kotest#6155</a></li>
<li><a
href="https://github.com/ashdawngary"><code>@​ashdawngary</code></a>
made their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6160">kotest/kotest#6160</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/v6.2.1...v6.2.2">https://github.com/kotest/kotest/compare/v6.2.1...v6.2.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4e55e4c7e6"><code>4e55e4c</code></a>
Update dependency io.projectreactor.tools:blockhound to v1.0.17.RELEASE
(<a
href="https://redirect.github.com/kotest/kotest/issues/6164">#6164</a>)</li>
<li><a
href="3e0202f2fe"><code>3e0202f</code></a>
fix: attach Fail fast scope tracker for each root test case in instance
per s...</li>
<li><a
href="134c12b785"><code>134c12b</code></a>
Update dependency io.mockk:mockk to v1.14.11 (<a
href="https://redirect.github.com/kotest/kotest/issues/6163">#6163</a>)</li>
<li><a
href="01c7429b21"><code>01c7429</code></a>
fix(kotest-assertions-core): Handle null map values in
shouldBeEqualUsingFiel...</li>
<li><a
href="44887a50bc"><code>44887a5</code></a>
fix(kotest-framework-engine): Use display-name rendering for ignored
tests in...</li>
<li><a
href="b68ef3e27d"><code>b68ef3e</code></a>
disable return-value-checker for releases (<a
href="https://redirect.github.com/kotest/kotest/issues/6165">#6165</a>)</li>
<li><a
href="86a7d93cb9"><code>86a7d93</code></a>
Fix typo in proptest config docs (<a
href="https://redirect.github.com/kotest/kotest/issues/6155">#6155</a>)</li>
<li><a
href="1677bd57ac"><code>1677bd5</code></a>
Add documentation for OffsetDateTime tolerance matcher (<a
href="https://redirect.github.com/kotest/kotest/issues/6161">#6161</a>)</li>
<li><a
href="47f3efce8c"><code>47f3efc</code></a>
Document instant-based ZonedDateTime <code>plusOrMinus</code> comparison
(<a
href="https://redirect.github.com/kotest/kotest/issues/6159">#6159</a>)</li>
<li>See full diff in <a
href="https://github.com/kotest/kotest/compare/6.2.1...6.2.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.kotest:kotest-assertions-ktor` from 6.2.1 to 6.2.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-ktor's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Document instant-based ZonedDateTime <code>plusOrMinus</code>
comparison by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6159">kotest/kotest#6159</a></li>
<li>Add documentation for OffsetDateTime tolerance matcher by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6161">kotest/kotest#6161</a></li>
<li>Fix typo in proptest config docs by <a
href="https://github.com/axiom"><code>@​axiom</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6155">kotest/kotest#6155</a></li>
<li>disable return-value-checker for releases by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6165">kotest/kotest#6165</a></li>
<li>fix(kotest-framework-engine): Use display-name rendering for ignored
tests in TeamCity listener by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6119">kotest/kotest#6119</a></li>
<li>fix(kotest-assertions-core): Handle null map values in
shouldBeEqualUsingFields by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6112">kotest/kotest#6112</a></li>
<li>Update dependency io.mockk:mockk to v1.14.11 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6163">kotest/kotest#6163</a></li>
<li>fix: attach Fail fast scope tracker for each root test case in
instance per spec mode by <a
href="https://github.com/ashdawngary"><code>@​ashdawngary</code></a> in
<a
href="https://redirect.github.com/kotest/kotest/pull/6160">kotest/kotest#6160</a></li>
<li>Update dependency io.projectreactor.tools:blockhound to
v1.0.17.RELEASE by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6164">kotest/kotest#6164</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6159">kotest/kotest#6159</a></li>
<li><a href="https://github.com/axiom"><code>@​axiom</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6155">kotest/kotest#6155</a></li>
<li><a
href="https://github.com/ashdawngary"><code>@​ashdawngary</code></a>
made their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6160">kotest/kotest#6160</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/v6.2.1...v6.2.2">https://github.com/kotest/kotest/compare/v6.2.1...v6.2.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4e55e4c7e6"><code>4e55e4c</code></a>
Update dependency io.projectreactor.tools:blockhound to v1.0.17.RELEASE
(<a
href="https://redirect.github.com/kotest/kotest/issues/6164">#6164</a>)</li>
<li><a
href="3e0202f2fe"><code>3e0202f</code></a>
fix: attach Fail fast scope tracker for each root test case in instance
per s...</li>
<li><a
href="134c12b785"><code>134c12b</code></a>
Update dependency io.mockk:mockk to v1.14.11 (<a
href="https://redirect.github.com/kotest/kotest/issues/6163">#6163</a>)</li>
<li><a
href="01c7429b21"><code>01c7429</code></a>
fix(kotest-assertions-core): Handle null map values in
shouldBeEqualUsingFiel...</li>
<li><a
href="44887a50bc"><code>44887a5</code></a>
fix(kotest-framework-engine): Use display-name rendering for ignored
tests in...</li>
<li><a
href="b68ef3e27d"><code>b68ef3e</code></a>
disable return-value-checker for releases (<a
href="https://redirect.github.com/kotest/kotest/issues/6165">#6165</a>)</li>
<li><a
href="86a7d93cb9"><code>86a7d93</code></a>
Fix typo in proptest config docs (<a
href="https://redirect.github.com/kotest/kotest/issues/6155">#6155</a>)</li>
<li><a
href="1677bd57ac"><code>1677bd5</code></a>
Add documentation for OffsetDateTime tolerance matcher (<a
href="https://redirect.github.com/kotest/kotest/issues/6161">#6161</a>)</li>
<li><a
href="47f3efce8c"><code>47f3efc</code></a>
Document instant-based ZonedDateTime <code>plusOrMinus</code> comparison
(<a
href="https://redirect.github.com/kotest/kotest/issues/6159">#6159</a>)</li>
<li>See full diff in <a
href="https://github.com/kotest/kotest/compare/6.2.1...6.2.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.kotest:kotest-assertions-json` from 6.2.1 to 6.2.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-json's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Document instant-based ZonedDateTime <code>plusOrMinus</code>
comparison by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6159">kotest/kotest#6159</a></li>
<li>Add documentation for OffsetDateTime tolerance matcher by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6161">kotest/kotest#6161</a></li>
<li>Fix typo in proptest config docs by <a
href="https://github.com/axiom"><code>@​axiom</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6155">kotest/kotest#6155</a></li>
<li>disable return-value-checker for releases by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6165">kotest/kotest#6165</a></li>
<li>fix(kotest-framework-engine): Use display-name rendering for ignored
tests in TeamCity listener by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6119">kotest/kotest#6119</a></li>
<li>fix(kotest-assertions-core): Handle null map values in
shouldBeEqualUsingFields by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6112">kotest/kotest#6112</a></li>
<li>Update dependency io.mockk:mockk to v1.14.11 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6163">kotest/kotest#6163</a></li>
<li>fix: attach Fail fast scope tracker for each root test case in
instance per spec mode by <a
href="https://github.com/ashdawngary"><code>@​ashdawngary</code></a> in
<a
href="https://redirect.github.com/kotest/kotest/pull/6160">kotest/kotest#6160</a></li>
<li>Update dependency io.projectreactor.tools:blockhound to
v1.0.17.RELEASE by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6164">kotest/kotest#6164</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6159">kotest/kotest#6159</a></li>
<li><a href="https://github.com/axiom"><code>@​axiom</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6155">kotest/kotest#6155</a></li>
<li><a
href="https://github.com/ashdawngary"><code>@​ashdawngary</code></a>
made their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6160">kotest/kotest#6160</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/v6.2.1...v6.2.2">https://github.com/kotest/kotest/compare/v6.2.1...v6.2.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4e55e4c7e6"><code>4e55e4c</code></a>
Update dependency io.projectreactor.tools:blockhound to v1.0.17.RELEASE
(<a
href="https://redirect.github.com/kotest/kotest/issues/6164">#6164</a>)</li>
<li><a
href="3e0202f2fe"><code>3e0202f</code></a>
fix: attach Fail fast scope tracker for each root test case in instance
per s...</li>
<li><a
href="134c12b785"><code>134c12b</code></a>
Update dependency io.mockk:mockk to v1.14.11 (<a
href="https://redirect.github.com/kotest/kotest/issues/6163">#6163</a>)</li>
<li><a
href="01c7429b21"><code>01c7429</code></a>
fix(kotest-assertions-core): Handle null map values in
shouldBeEqualUsingFiel...</li>
<li><a
href="44887a50bc"><code>44887a5</code></a>
fix(kotest-framework-engine): Use display-name rendering for ignored
tests in...</li>
<li><a
href="b68ef3e27d"><code>b68ef3e</code></a>
disable return-value-checker for releases (<a
href="https://redirect.github.com/kotest/kotest/issues/6165">#6165</a>)</li>
<li><a
href="86a7d93cb9"><code>86a7d93</code></a>
Fix typo in proptest config docs (<a
href="https://redirect.github.com/kotest/kotest/issues/6155">#6155</a>)</li>
<li><a
href="1677bd57ac"><code>1677bd5</code></a>
Add documentation for OffsetDateTime tolerance matcher (<a
href="https://redirect.github.com/kotest/kotest/issues/6161">#6161</a>)</li>
<li><a
href="47f3efce8c"><code>47f3efc</code></a>
Document instant-based ZonedDateTime <code>plusOrMinus</code> comparison
(<a
href="https://redirect.github.com/kotest/kotest/issues/6159">#6159</a>)</li>
<li>See full diff in <a
href="https://github.com/kotest/kotest/compare/6.2.1...6.2.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.kotest:kotest-assertions-ktor` from 6.2.1 to 6.2.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-ktor's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Document instant-based ZonedDateTime <code>plusOrMinus</code>
comparison by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6159">kotest/kotest#6159</a></li>
<li>Add documentation for OffsetDateTime tolerance matcher by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6161">kotest/kotest#6161</a></li>
<li>Fix typo in proptest config docs by <a
href="https://github.com/axiom"><code>@​axiom</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6155">kotest/kotest#6155</a></li>
<li>disable return-value-checker for releases by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6165">kotest/kotest#6165</a></li>
<li>fix(kotest-framework-engine): Use display-name rendering for ignored
tests in TeamCity listener by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6119">kotest/kotest#6119</a></li>
<li>fix(kotest-assertions-core): Handle null map values in
shouldBeEqualUsingFields by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6112">kotest/kotest#6112</a></li>
<li>Update dependency io.mockk:mockk to v1.14.11 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6163">kotest/kotest#6163</a></li>
<li>fix: attach Fail fast scope tracker for each root test case in
instance per spec mode by <a
href="https://github.com/ashdawngary"><code>@​ashdawngary</code></a> in
<a
href="https://redirect.github.com/kotest/kotest/pull/6160">kotest/kotest#6160</a></li>
<li>Update dependency io.projectreactor.tools:blockhound to
v1.0.17.RELEASE by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6164">kotest/kotest#6164</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> with
<a href="https://github.com/Copilot"><code>@​Copilot</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6159">kotest/kotest#6159</a></li>
<li><a href="https://github.com/axiom"><code>@​axiom</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6155">kotest/kotest#6155</a></li>
<li><a
href="https://github.com/ashdawngary"><code>@​ashdawngary</code></a>
made their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6160">kotest/kotest#6160</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/v6.2.1...v6.2.2">https://github.com/kotest/kotest/compare/v6.2.1...v6.2.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4e55e4c7e6"><code>4e55e4c</code></a>
Update dependency io.projectreactor.tools:blockhound to v1.0.17.RELEASE
(<a
href="https://redirect.github.com/kotest/kotest/issues/6164">#6164</a>)</li>
<li><a
href="3e0202f2fe"><code>3e0202f</code></a>
fix: attach Fail fast scope tracker for each root test case in instance
per s...</li>
<li><a
href="134c12b785"><code>134c12b</code></a>
Update dependency io.mockk:mockk to v1.14.11 (<a
href="https://redirect.github.com/kotest/kotest/issues/6163">#6163</a>)</li>
<li><a
href="01c7429b21"><code>01c7429</code></a>
fix(kotest-assertions-core): Handle null map values in
shouldBeEqualUsingFiel...</li>
<li><a
href="44887a50bc"><code>44887a5</code></a>
fix(kotest-framework-engine): Use display-name rendering for ignored
tests in...</li>
<li><a
href="b68ef3e27d"><code>b68ef3e</code></a>
disable return-value-checker for releases (<a
href="https://redirect.github.com/kotest/kotest/issues/6165">#6165</a>)</li>
<li><a
href="86a7d93cb9"><code>86a7d93</code></a>
Fix typo in proptest config docs (<a
href="https://redirect.github.com/kotest/kotest/issues/6155">#6155</a>)</li>
<li><a
href="1677bd57ac"><code>1677bd5</code></a>
Add documentation for OffsetDateTime tolerance matcher (<a
href="https://redirect.github.com/kotest/kotest/issues/6161">#6161</a>)</li>
<li><a
href="47f3efce8c"><code>47f3efc</code></a>
Document instant-based ZonedDateTime <code>plusOrMinus</code> comparison
(<a
href="https://redirect.github.com/kotest/kotest/issues/6159">#6159</a>)</li>
<li>See full diff in <a
href="https://github.com/kotest/kotest/compare/6.2.1...6.2.2">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 16:51:27 +02:00
dependabot[bot]
76987a211b
chore(deps): bump the all-dependencies group across 1 directory with 3 updates (#891)
Bumps the all-dependencies group with 3 updates in the
/integration-test/src/jvmTest/typescript directory:
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node),
[tsx](https://github.com/privatenumber/tsx) and
[typescript](https://github.com/microsoft/TypeScript).

Updates `@types/node` from 26.1.0 to 26.1.1
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />

Updates `tsx` from 4.23.0 to 4.23.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/privatenumber/tsx/releases">tsx's
releases</a>.</em></p>
<blockquote>
<h2>v4.23.1</h2>
<h2><a
href="https://github.com/privatenumber/tsx/compare/v4.23.0...v4.23.1">4.23.1</a>
(2026-07-13)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>support tsImport after global preload (<a
href="8d4ffc24f3">8d4ffc2</a>)</li>
<li><strong>watch:</strong> avoid clearing piped output (<a
href="95d0672e02">95d0672</a>)</li>
<li><strong>watch:</strong> treat script and dependency paths literally
(<a
href="79fddde523">79fddde</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li>index transform cache lazily (<a
href="e818ad6081">e818ad6</a>)</li>
<li>load esbuild lazily in CLI (<a
href="d0679381b6">d067938</a>)</li>
<li>map Node TypeScript formats directly (<a
href="cdcc6232a3">cdcc623</a>)</li>
<li>use sync module hooks on Node v22.22.3+ (<a
href="f8992f1a50">f8992f1</a>)</li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.23.1"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="79fddde523"><code>79fddde</code></a>
fix(watch): treat script and dependency paths literally</li>
<li><a
href="e818ad6081"><code>e818ad6</code></a>
perf: index transform cache lazily</li>
<li><a
href="cdcc6232a3"><code>cdcc623</code></a>
perf: map Node TypeScript formats directly</li>
<li><a
href="d0679381b6"><code>d067938</code></a>
perf: load esbuild lazily in CLI</li>
<li><a
href="95d0672e02"><code>95d0672</code></a>
fix(watch): avoid clearing piped output</li>
<li><a
href="6fd4607e8a"><code>6fd4607</code></a>
docs: add per-page metadata</li>
<li><a
href="f4176d8c63"><code>f4176d8</code></a>
docs: generate sitemap</li>
<li><a
href="8d4ffc24f3"><code>8d4ffc2</code></a>
fix: support tsImport after global preload</li>
<li><a
href="f0e89b244c"><code>f0e89b2</code></a>
docs: document Node's public type-stripping API vs internal loader
path</li>
<li><a
href="f8992f1a50"><code>f8992f1</code></a>
perf: use sync module hooks on Node v22.22.3+</li>
<li>See full diff in <a
href="https://github.com/privatenumber/tsx/compare/v4.23.0...v4.23.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `typescript` from 6.0.3 to 7.0.2
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/microsoft/TypeScript/commits">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~microsoft1es">microsoft1es</a>, a new
releaser for typescript since your current version.</p>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 14:21:41 +02:00
Pavel Gorgulov
beb3400064
feat(core): concurrent inbound dispatch behind an initialization gate (#884)
Make inbound message handling concurrent after the initialization
handshake, so a slow or peer-awaiting handler no longer blocks other
messages on the same connection

fixes #176, #572 

## Motivation and Context
Inbound messages were processed serially on the transport read loop. One
slow or peer-awaiting request handler (sampling, elicitation, roots)
blocked every later message on that connection, including the responses
and `notifications/cancelled` those handlers depend on which could
deadlock request/response flows.

## How Has This Been Tested?
New and old tests

## Breaking Changes
- after the handshake, inbound handlers may run concurrently (processing
stays serial during initialization). There is no opt-out flag by design,
concurrency is bounded by `maxConcurrentHandlers` /
`maxInFlightHandlers`.
- `ProtocolOptions` / `ClientOptions` / `ServerOptions` gain new
parameters with defaults
- `RequestHandlerExtra` is now a coroutine-context element and is no
longer user-constructible

## Types of changes
- [x] Bug fix (non-breaking change which fixes an issue)
- [x] New feature (non-breaking change which adds functionality)
- [x] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update

## Checklist
- [x] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [x] My code follows the repository's style guidelines
- [x] New and existing tests pass locally
- [x] I have added appropriate error handling
- [x] I have added or updated documentation as needed
2026-07-15 12:33:29 +02:00
Pavel Gorgulov
7937390b47
test: create the server session before connecting the client (#885)
`ChannelTransportTest` connected both sides concurrently, which is racy.

`ChannelTransport` starts delivering inbound messages when its read loop
launches, which happens before `start()` marks the transport
`Operational`. The two run on different dispatchers, so the client's
`initialize` could reach the server read loop first and the session's
`InitializeResult` was then rejected by the send state gate with
`Transport is not ready`. Measured ~3 failures in 600 rounds.

`createSession()` does not await the handshake, so creating the session
first is enough to order the two. This also matches the usage shown in
`createLinkedPair()`'s KDoc.

Not addressed here: the transport itself should not deliver inbound
messages before it is `Operational`. Fixing that needs a
post-`Operational` hook on `AbstractClientTransport` that the read loop
awaits.
2026-07-09 17:03:01 +02:00
dependabot[bot]
905d4f975e
chore(deps): bump the all-dependencies group across 1 directory with 2 updates (#880)
Bumps the all-dependencies group with 2 updates in the
/integration-test/src/jvmTest/typescript directory:
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
and [tsx](https://github.com/privatenumber/tsx).

Updates `@types/node` from 26.0.1 to 26.1.0
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />

Updates `tsx` from 4.22.4 to 4.23.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/privatenumber/tsx/releases">tsx's
releases</a>.</em></p>
<blockquote>
<h2>v4.23.0</h2>
<h1><a
href="https://github.com/privatenumber/tsx/compare/v4.22.5...v4.23.0">4.23.0</a>
(2026-07-03)</h1>
<h3>Bug Fixes</h3>
<ul>
<li>avoid redundant filesystem probes during module resolution (<a
href="257bbbb7eb">257bbbb</a>),
closes <a
href="https://redirect.github.com/privatenumber/tsx/issues/809">privatenumber/tsx#809</a></li>
</ul>
<h3>Features</h3>
<ul>
<li>add multi-scenario startup benchmark suite (<a
href="c178197b10">c178197</a>),
closes <a
href="https://redirect.github.com/privatenumber/tsx/issues/809">privatenumber/tsx#809</a>
<a
href="https://redirect.github.com/privatenumber/tsx/issues/809">#809</a>
<a href="https://github.com/hi/issues/signal">hi#signal</a> <a
href="https://redirect.github.com/privatenumber/tsx/issues/145">privatenumber/tsx#145</a>
<a
href="https://redirect.github.com/privatenumber/tsx/issues/809">#809</a></li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.23.0"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
<h2>v4.22.5</h2>
<h2><a
href="https://github.com/privatenumber/tsx/compare/v4.22.4...v4.22.5">4.22.5</a>
(2026-07-02)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>isolate hook state per async module.register() registration (<a
href="a305f365f0">a305f36</a>)</li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.22.5"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1dfad376d8"><code>1dfad37</code></a>
docs: cite esbuild's extension-resolution model in node notes</li>
<li><a
href="257bbbb7eb"><code>257bbbb</code></a>
fix: avoid redundant filesystem probes during module resolution</li>
<li><a
href="c178197b10"><code>c178197</code></a>
feat: add multi-scenario startup benchmark suite</li>
<li><a
href="51800ac04d"><code>51800ac</code></a>
docs: add Node internals knowledge base (notes/node)</li>
<li><a
href="a305f365f0"><code>a305f36</code></a>
fix: isolate hook state per async module.register() registration</li>
<li><a
href="ca501a9c0f"><code>ca501a9</code></a>
chore: upgrade skills-npm to v1.2.0</li>
<li><a
href="596cd1faae"><code>596cd1f</code></a>
test: cover __dirname, __filename, &amp; require.cache in CJS TS
file</li>
<li><a
href="75d9bf0275"><code>75d9bf0</code></a>
test: lock in lenient ESM for ambiguous and CJS-typed packages</li>
<li><a
href="1472f3ed49"><code>1472f3e</code></a>
test: cover ESM-syntax dependency with omitted &quot;type&quot;
field</li>
<li>See full diff in <a
href="https://github.com/privatenumber/tsx/compare/v4.22.4...v4.23.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-06 13:00:40 +00:00
dependabot[bot]
a265db8cfd
chore(deps): bump mcp-kotlin from 0.13.0 to 0.14.0 in /samples/weather-stdio-server (#879)
Bumps `mcp-kotlin` from 0.13.0 to 0.14.0.
Updates `io.modelcontextprotocol:kotlin-sdk-client` from 0.13.0 to
0.14.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fc7916fdc7"><code>fc7916f</code></a>
release: 0.14.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/867">#867</a>)</li>
<li><a
href="57e546d378"><code>57e546d</code></a>
feat: SEP-1686 Tasks (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/844">#844</a>)</li>
<li><a
href="35da063c23"><code>35da063</code></a>
fix: bound request body size in SSE and Streamable HTTP transports (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/839">#839</a>)</li>
<li><a
href="bbf77bae93"><code>bbf77ba</code></a>
chore(deps): bump <code>@​types/node</code> from 26.0.0 to 26.0.1 in
/integration-test/src/...</li>
<li><a
href="d2b1509147"><code>d2b1509</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
5 up...</li>
<li><a
href="0221b8db3d"><code>0221b8d</code></a>
fix(client): close stdio read sources during shutdown (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/798">#798</a>)</li>
<li><a
href="19db4b04e3"><code>19db4b0</code></a>
fix(client): gate completion/complete on the completions capability (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/846">#846</a>)</li>
<li><a
href="64cf29fea7"><code>64cf29f</code></a>
chore(deps): bump gradle-wrapper from 9.6.0 to 9.6.1 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/856">#856</a>)</li>
<li><a
href="cd91652be1"><code>cd91652</code></a>
fix: validate Origin against localhost by default in DNS rebinding
protection...</li>
<li><a
href="4103b87d69"><code>4103b87</code></a>
chore(deps): bump org.jetbrains.kotlinx:kotlinx-io-core from 0.9.0 to
0.9.1 i...</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.13.0...0.14.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.modelcontextprotocol:kotlin-sdk-server` from 0.13.0 to
0.14.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fc7916fdc7"><code>fc7916f</code></a>
release: 0.14.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/867">#867</a>)</li>
<li><a
href="57e546d378"><code>57e546d</code></a>
feat: SEP-1686 Tasks (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/844">#844</a>)</li>
<li><a
href="35da063c23"><code>35da063</code></a>
fix: bound request body size in SSE and Streamable HTTP transports (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/839">#839</a>)</li>
<li><a
href="bbf77bae93"><code>bbf77ba</code></a>
chore(deps): bump <code>@​types/node</code> from 26.0.0 to 26.0.1 in
/integration-test/src/...</li>
<li><a
href="d2b1509147"><code>d2b1509</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
5 up...</li>
<li><a
href="0221b8db3d"><code>0221b8d</code></a>
fix(client): close stdio read sources during shutdown (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/798">#798</a>)</li>
<li><a
href="19db4b04e3"><code>19db4b0</code></a>
fix(client): gate completion/complete on the completions capability (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/846">#846</a>)</li>
<li><a
href="64cf29fea7"><code>64cf29f</code></a>
chore(deps): bump gradle-wrapper from 9.6.0 to 9.6.1 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/856">#856</a>)</li>
<li><a
href="cd91652be1"><code>cd91652</code></a>
fix: validate Origin against localhost by default in DNS rebinding
protection...</li>
<li><a
href="4103b87d69"><code>4103b87</code></a>
chore(deps): bump org.jetbrains.kotlinx:kotlinx-io-core from 0.9.0 to
0.9.1 i...</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.13.0...0.14.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-06 14:39:33 +02:00
dependabot[bot]
91f7390a95
chore(deps): bump the other-dependencies group across 5 directories with 2 updates (#882)
Bumps the other-dependencies group with 2 updates in the
/samples/kotlin-mcp-client directory:
[com.anthropic:anthropic-java](https://github.com/anthropics/anthropic-sdk-java)
and [com.gradleup.shadow](https://github.com/GradleUp/shadow).
Bumps the other-dependencies group with 1 update in the
/samples/kotlin-mcp-server directory:
[com.gradleup.shadow](https://github.com/GradleUp/shadow).
Bumps the other-dependencies group with 1 update in the
/samples/kotlinlang-mcp-server directory:
[com.gradleup.shadow](https://github.com/GradleUp/shadow).
Bumps the other-dependencies group with 1 update in the
/samples/simple-streamable-server directory:
[com.gradleup.shadow](https://github.com/GradleUp/shadow).
Bumps the other-dependencies group with 1 update in the
/samples/weather-stdio-server directory:
[com.gradleup.shadow](https://github.com/GradleUp/shadow).

Updates `com.anthropic:anthropic-java` from 2.45.0 to 2.48.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-java/releases">com.anthropic:anthropic-java's
releases</a>.</em></p>
<blockquote>
<h2>v2.48.0</h2>
<h2>2.48.0 (2026-07-02)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.47.1...v2.48.0">v2.47.1...v2.48.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add agent-memory-2026-07-22 beta header (<a
href="66038797a7">6603879</a>)</li>
</ul>
<h2>v2.47.1</h2>
<h2>2.47.1 (2026-07-01)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.47.0...v2.47.1">v2.47.0...v2.47.1</a></p>
<h3>Chores</h3>
<ul>
<li><strong>api:</strong> remove some nonfunctional types from the SDKs
(<a
href="2f92a48d5e">2f92a48</a>)</li>
</ul>
<h2>v2.47.0</h2>
<h2>2.47.0 (2026-06-30)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.46.0...v2.47.0">v2.46.0...v2.47.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for Managed Agents event delta
streaming, agent overrides, reverse pagination, vault credential
injection scoping, and agent and deployment webhook events (<a
href="5eed04b793">5eed04b</a>)</li>
</ul>
<h2>v2.46.0</h2>
<h2>2.46.0 (2026-06-30)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.45.0...v2.46.0">v2.45.0...v2.46.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for claude-sonnet-5 (<a
href="444f0543f9">444f054</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-java/blob/main/CHANGELOG.md">com.anthropic:anthropic-java's
changelog</a>.</em></p>
<blockquote>
<h2>2.48.0 (2026-07-02)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.47.1...v2.48.0">v2.47.1...v2.48.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add agent-memory-2026-07-22 beta header (<a
href="66038797a7">6603879</a>)</li>
</ul>
<h2>2.47.1 (2026-07-01)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.47.0...v2.47.1">v2.47.0...v2.47.1</a></p>
<h3>Chores</h3>
<ul>
<li><strong>api:</strong> remove some nonfunctional types from the SDKs
(<a
href="2f92a48d5e">2f92a48</a>)</li>
</ul>
<h2>2.47.0 (2026-06-30)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.46.0...v2.47.0">v2.46.0...v2.47.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for Managed Agents event delta
streaming, agent overrides, reverse pagination, vault credential
injection scoping, and agent and deployment webhook events (<a
href="5eed04b793">5eed04b</a>)</li>
</ul>
<h2>2.46.0 (2026-06-30)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.45.0...v2.46.0">v2.45.0...v2.46.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add support for claude-sonnet-5 (<a
href="444f0543f9">444f054</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="db3e617c03"><code>db3e617</code></a>
release: 2.48.0</li>
<li><a
href="a462333473"><code>a462333</code></a>
feat(api): add agent-memory-2026-07-22 beta header</li>
<li><a
href="3c6c77bf91"><code>3c6c77b</code></a>
release: 2.47.1</li>
<li><a
href="0d315e614b"><code>0d315e6</code></a>
chore(api): remove some nonfunctional types from the SDKs</li>
<li><a
href="20934479a8"><code>2093447</code></a>
release: 2.47.0</li>
<li><a
href="4bf9078cbe"><code>4bf9078</code></a>
feat(api): add support for Managed Agents event delta streaming, agent
overri...</li>
<li><a
href="1c9486b338"><code>1c9486b</code></a>
codegen metadata</li>
<li><a
href="fab7574db5"><code>fab7574</code></a>
release: 2.46.0</li>
<li><a
href="f0b5297f2d"><code>f0b5297</code></a>
feat(api): add support for claude-sonnet-5</li>
<li>See full diff in <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.45.0...v2.48.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.4.3 to 9.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.5.1</h2>
<h3>Fixed</h3>
<ul>
<li>Fix eager calls for <code>toolchainSpec</code> in Kotlin DSL.<br />
This fixes the regression when using <code>toolchain</code> without
<code>targetCompatibility</code> in Kotlin DSL.</li>
</ul>
<h2>9.5.0</h2>
<h3>Added</h3>
<ul>
<li>Check <code>DuplicatesStrategy</code> for merging transformers. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2026">#2026</a>)<br
/>
This will log warnings when an incompatible
<code>DuplicatesStrategy</code> (e.g., <code>EXCLUDE</code>) is applied
in Gradle configuration for built-in
<code>ResourceTransformer</code>s.</li>
<li>Add <code>KotlinModuleMetadataTransformer</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)</li>
<li>Add R8 as an opt-in <code>minimize { r8 { ... } }</code> tool for
shrinking the final shadowed JAR. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2077">#2077</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Bump min Gradle requirement to 9.2.0. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2057">#2057</a>)</li>
<li>Remove <code>afterEvaluate</code> when adding variants. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2056">#2056</a>)</li>
<li>Deprecate <code>enableKotlinModuleRemapping</code> for
<code>ShadowJar</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)<br
/>
Apply <code>KotlinModuleMetadataTransformer</code> explicitly to support
relocating inside Kotlin module metadata files.</li>
<li>Deprecate everything under <code>ShadowCopyAction</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2083">#2083</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix the conflicts when using <code>afterEvaluate</code> with other
plugins. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2055">#2055</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c33612d2e1"><code>c33612d</code></a>
Prepare version 9.5.1</li>
<li><a
href="485e4121d9"><code>485e412</code></a>
Fix eager calls for toolchainSpec in Kotlin DSL (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2087">#2087</a>)</li>
<li><a
href="d062fa23f9"><code>d062fa2</code></a>
Fix DuplicatesStrategyCheckerTest resource loading on Windows (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2085">#2085</a>)</li>
<li><a
href="e71a2c1c62"><code>e71a2c1</code></a>
Add description for shadow configuration (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2084">#2084</a>)</li>
<li><a
href="7ba43b066e"><code>7ba43b0</code></a>
Prepare next development version</li>
<li><a
href="6e00cb7101"><code>6e00cb7</code></a>
Prepare version 9.5.0</li>
<li><a
href="ca039099f0"><code>ca03909</code></a>
Deprecate everything under ShadowCopyAction (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2083">#2083</a>)</li>
<li><a
href="7d7da274d0"><code>7d7da27</code></a>
Revert &quot;Mark CONSTANT_TIME_FOR_ZIP_ENTRIES as const (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2074">#2074</a>)&quot;</li>
<li><a
href="da18cc00a6"><code>da18cc0</code></a>
Deprecate enableKotlinModuleRemapping for ShadowJar (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2073">#2073</a>)</li>
<li><a
href="ec6e55a659"><code>ec6e55a</code></a>
Replace system properties with buildConfig consts (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2082">#2082</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.4.3...9.5.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.4.3 to 9.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.5.1</h2>
<h3>Fixed</h3>
<ul>
<li>Fix eager calls for <code>toolchainSpec</code> in Kotlin DSL.<br />
This fixes the regression when using <code>toolchain</code> without
<code>targetCompatibility</code> in Kotlin DSL.</li>
</ul>
<h2>9.5.0</h2>
<h3>Added</h3>
<ul>
<li>Check <code>DuplicatesStrategy</code> for merging transformers. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2026">#2026</a>)<br
/>
This will log warnings when an incompatible
<code>DuplicatesStrategy</code> (e.g., <code>EXCLUDE</code>) is applied
in Gradle configuration for built-in
<code>ResourceTransformer</code>s.</li>
<li>Add <code>KotlinModuleMetadataTransformer</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)</li>
<li>Add R8 as an opt-in <code>minimize { r8 { ... } }</code> tool for
shrinking the final shadowed JAR. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2077">#2077</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Bump min Gradle requirement to 9.2.0. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2057">#2057</a>)</li>
<li>Remove <code>afterEvaluate</code> when adding variants. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2056">#2056</a>)</li>
<li>Deprecate <code>enableKotlinModuleRemapping</code> for
<code>ShadowJar</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)<br
/>
Apply <code>KotlinModuleMetadataTransformer</code> explicitly to support
relocating inside Kotlin module metadata files.</li>
<li>Deprecate everything under <code>ShadowCopyAction</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2083">#2083</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix the conflicts when using <code>afterEvaluate</code> with other
plugins. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2055">#2055</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c33612d2e1"><code>c33612d</code></a>
Prepare version 9.5.1</li>
<li><a
href="485e4121d9"><code>485e412</code></a>
Fix eager calls for toolchainSpec in Kotlin DSL (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2087">#2087</a>)</li>
<li><a
href="d062fa23f9"><code>d062fa2</code></a>
Fix DuplicatesStrategyCheckerTest resource loading on Windows (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2085">#2085</a>)</li>
<li><a
href="e71a2c1c62"><code>e71a2c1</code></a>
Add description for shadow configuration (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2084">#2084</a>)</li>
<li><a
href="7ba43b066e"><code>7ba43b0</code></a>
Prepare next development version</li>
<li><a
href="6e00cb7101"><code>6e00cb7</code></a>
Prepare version 9.5.0</li>
<li><a
href="ca039099f0"><code>ca03909</code></a>
Deprecate everything under ShadowCopyAction (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2083">#2083</a>)</li>
<li><a
href="7d7da274d0"><code>7d7da27</code></a>
Revert &quot;Mark CONSTANT_TIME_FOR_ZIP_ENTRIES as const (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2074">#2074</a>)&quot;</li>
<li><a
href="da18cc00a6"><code>da18cc0</code></a>
Deprecate enableKotlinModuleRemapping for ShadowJar (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2073">#2073</a>)</li>
<li><a
href="ec6e55a659"><code>ec6e55a</code></a>
Replace system properties with buildConfig consts (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2082">#2082</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.4.3...9.5.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.4.3 to 9.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.5.1</h2>
<h3>Fixed</h3>
<ul>
<li>Fix eager calls for <code>toolchainSpec</code> in Kotlin DSL.<br />
This fixes the regression when using <code>toolchain</code> without
<code>targetCompatibility</code> in Kotlin DSL.</li>
</ul>
<h2>9.5.0</h2>
<h3>Added</h3>
<ul>
<li>Check <code>DuplicatesStrategy</code> for merging transformers. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2026">#2026</a>)<br
/>
This will log warnings when an incompatible
<code>DuplicatesStrategy</code> (e.g., <code>EXCLUDE</code>) is applied
in Gradle configuration for built-in
<code>ResourceTransformer</code>s.</li>
<li>Add <code>KotlinModuleMetadataTransformer</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)</li>
<li>Add R8 as an opt-in <code>minimize { r8 { ... } }</code> tool for
shrinking the final shadowed JAR. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2077">#2077</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Bump min Gradle requirement to 9.2.0. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2057">#2057</a>)</li>
<li>Remove <code>afterEvaluate</code> when adding variants. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2056">#2056</a>)</li>
<li>Deprecate <code>enableKotlinModuleRemapping</code> for
<code>ShadowJar</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)<br
/>
Apply <code>KotlinModuleMetadataTransformer</code> explicitly to support
relocating inside Kotlin module metadata files.</li>
<li>Deprecate everything under <code>ShadowCopyAction</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2083">#2083</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix the conflicts when using <code>afterEvaluate</code> with other
plugins. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2055">#2055</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c33612d2e1"><code>c33612d</code></a>
Prepare version 9.5.1</li>
<li><a
href="485e4121d9"><code>485e412</code></a>
Fix eager calls for toolchainSpec in Kotlin DSL (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2087">#2087</a>)</li>
<li><a
href="d062fa23f9"><code>d062fa2</code></a>
Fix DuplicatesStrategyCheckerTest resource loading on Windows (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2085">#2085</a>)</li>
<li><a
href="e71a2c1c62"><code>e71a2c1</code></a>
Add description for shadow configuration (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2084">#2084</a>)</li>
<li><a
href="7ba43b066e"><code>7ba43b0</code></a>
Prepare next development version</li>
<li><a
href="6e00cb7101"><code>6e00cb7</code></a>
Prepare version 9.5.0</li>
<li><a
href="ca039099f0"><code>ca03909</code></a>
Deprecate everything under ShadowCopyAction (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2083">#2083</a>)</li>
<li><a
href="7d7da274d0"><code>7d7da27</code></a>
Revert &quot;Mark CONSTANT_TIME_FOR_ZIP_ENTRIES as const (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2074">#2074</a>)&quot;</li>
<li><a
href="da18cc00a6"><code>da18cc0</code></a>
Deprecate enableKotlinModuleRemapping for ShadowJar (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2073">#2073</a>)</li>
<li><a
href="ec6e55a659"><code>ec6e55a</code></a>
Replace system properties with buildConfig consts (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2082">#2082</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.4.3...9.5.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.4.3 to 9.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.5.1</h2>
<h3>Fixed</h3>
<ul>
<li>Fix eager calls for <code>toolchainSpec</code> in Kotlin DSL.<br />
This fixes the regression when using <code>toolchain</code> without
<code>targetCompatibility</code> in Kotlin DSL.</li>
</ul>
<h2>9.5.0</h2>
<h3>Added</h3>
<ul>
<li>Check <code>DuplicatesStrategy</code> for merging transformers. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2026">#2026</a>)<br
/>
This will log warnings when an incompatible
<code>DuplicatesStrategy</code> (e.g., <code>EXCLUDE</code>) is applied
in Gradle configuration for built-in
<code>ResourceTransformer</code>s.</li>
<li>Add <code>KotlinModuleMetadataTransformer</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)</li>
<li>Add R8 as an opt-in <code>minimize { r8 { ... } }</code> tool for
shrinking the final shadowed JAR. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2077">#2077</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Bump min Gradle requirement to 9.2.0. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2057">#2057</a>)</li>
<li>Remove <code>afterEvaluate</code> when adding variants. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2056">#2056</a>)</li>
<li>Deprecate <code>enableKotlinModuleRemapping</code> for
<code>ShadowJar</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)<br
/>
Apply <code>KotlinModuleMetadataTransformer</code> explicitly to support
relocating inside Kotlin module metadata files.</li>
<li>Deprecate everything under <code>ShadowCopyAction</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2083">#2083</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix the conflicts when using <code>afterEvaluate</code> with other
plugins. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2055">#2055</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c33612d2e1"><code>c33612d</code></a>
Prepare version 9.5.1</li>
<li><a
href="485e4121d9"><code>485e412</code></a>
Fix eager calls for toolchainSpec in Kotlin DSL (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2087">#2087</a>)</li>
<li><a
href="d062fa23f9"><code>d062fa2</code></a>
Fix DuplicatesStrategyCheckerTest resource loading on Windows (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2085">#2085</a>)</li>
<li><a
href="e71a2c1c62"><code>e71a2c1</code></a>
Add description for shadow configuration (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2084">#2084</a>)</li>
<li><a
href="7ba43b066e"><code>7ba43b0</code></a>
Prepare next development version</li>
<li><a
href="6e00cb7101"><code>6e00cb7</code></a>
Prepare version 9.5.0</li>
<li><a
href="ca039099f0"><code>ca03909</code></a>
Deprecate everything under ShadowCopyAction (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2083">#2083</a>)</li>
<li><a
href="7d7da274d0"><code>7d7da27</code></a>
Revert &quot;Mark CONSTANT_TIME_FOR_ZIP_ENTRIES as const (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2074">#2074</a>)&quot;</li>
<li><a
href="da18cc00a6"><code>da18cc0</code></a>
Deprecate enableKotlinModuleRemapping for ShadowJar (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2073">#2073</a>)</li>
<li><a
href="ec6e55a659"><code>ec6e55a</code></a>
Replace system properties with buildConfig consts (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2082">#2082</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.4.3...9.5.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.4.3 to 9.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.5.1</h2>
<h3>Fixed</h3>
<ul>
<li>Fix eager calls for <code>toolchainSpec</code> in Kotlin DSL.<br />
This fixes the regression when using <code>toolchain</code> without
<code>targetCompatibility</code> in Kotlin DSL.</li>
</ul>
<h2>9.5.0</h2>
<h3>Added</h3>
<ul>
<li>Check <code>DuplicatesStrategy</code> for merging transformers. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2026">#2026</a>)<br
/>
This will log warnings when an incompatible
<code>DuplicatesStrategy</code> (e.g., <code>EXCLUDE</code>) is applied
in Gradle configuration for built-in
<code>ResourceTransformer</code>s.</li>
<li>Add <code>KotlinModuleMetadataTransformer</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)</li>
<li>Add R8 as an opt-in <code>minimize { r8 { ... } }</code> tool for
shrinking the final shadowed JAR. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2077">#2077</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Bump min Gradle requirement to 9.2.0. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2057">#2057</a>)</li>
<li>Remove <code>afterEvaluate</code> when adding variants. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2056">#2056</a>)</li>
<li>Deprecate <code>enableKotlinModuleRemapping</code> for
<code>ShadowJar</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)<br
/>
Apply <code>KotlinModuleMetadataTransformer</code> explicitly to support
relocating inside Kotlin module metadata files.</li>
<li>Deprecate everything under <code>ShadowCopyAction</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2083">#2083</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix the conflicts when using <code>afterEvaluate</code> with other
plugins. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2055">#2055</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c33612d2e1"><code>c33612d</code></a>
Prepare version 9.5.1</li>
<li><a
href="485e4121d9"><code>485e412</code></a>
Fix eager calls for toolchainSpec in Kotlin DSL (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2087">#2087</a>)</li>
<li><a
href="d062fa23f9"><code>d062fa2</code></a>
Fix DuplicatesStrategyCheckerTest resource loading on Windows (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2085">#2085</a>)</li>
<li><a
href="e71a2c1c62"><code>e71a2c1</code></a>
Add description for shadow configuration (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2084">#2084</a>)</li>
<li><a
href="7ba43b066e"><code>7ba43b0</code></a>
Prepare next development version</li>
<li><a
href="6e00cb7101"><code>6e00cb7</code></a>
Prepare version 9.5.0</li>
<li><a
href="ca039099f0"><code>ca03909</code></a>
Deprecate everything under ShadowCopyAction (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2083">#2083</a>)</li>
<li><a
href="7d7da274d0"><code>7d7da27</code></a>
Revert &quot;Mark CONSTANT_TIME_FOR_ZIP_ENTRIES as const (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2074">#2074</a>)&quot;</li>
<li><a
href="da18cc00a6"><code>da18cc0</code></a>
Deprecate enableKotlinModuleRemapping for ShadowJar (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2073">#2073</a>)</li>
<li><a
href="ec6e55a659"><code>ec6e55a</code></a>
Replace system properties with buildConfig consts (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2082">#2082</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.4.3...9.5.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.4.3 to 9.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.5.1</h2>
<h3>Fixed</h3>
<ul>
<li>Fix eager calls for <code>toolchainSpec</code> in Kotlin DSL.<br />
This fixes the regression when using <code>toolchain</code> without
<code>targetCompatibility</code> in Kotlin DSL.</li>
</ul>
<h2>9.5.0</h2>
<h3>Added</h3>
<ul>
<li>Check <code>DuplicatesStrategy</code> for merging transformers. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2026">#2026</a>)<br
/>
This will log warnings when an incompatible
<code>DuplicatesStrategy</code> (e.g., <code>EXCLUDE</code>) is applied
in Gradle configuration for built-in
<code>ResourceTransformer</code>s.</li>
<li>Add <code>KotlinModuleMetadataTransformer</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)</li>
<li>Add R8 as an opt-in <code>minimize { r8 { ... } }</code> tool for
shrinking the final shadowed JAR. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2077">#2077</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Bump min Gradle requirement to 9.2.0. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2057">#2057</a>)</li>
<li>Remove <code>afterEvaluate</code> when adding variants. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2056">#2056</a>)</li>
<li>Deprecate <code>enableKotlinModuleRemapping</code> for
<code>ShadowJar</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)<br
/>
Apply <code>KotlinModuleMetadataTransformer</code> explicitly to support
relocating inside Kotlin module metadata files.</li>
<li>Deprecate everything under <code>ShadowCopyAction</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2083">#2083</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix the conflicts when using <code>afterEvaluate</code> with other
plugins. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2055">#2055</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c33612d2e1"><code>c33612d</code></a>
Prepare version 9.5.1</li>
<li><a
href="485e4121d9"><code>485e412</code></a>
Fix eager calls for toolchainSpec in Kotlin DSL (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2087">#2087</a>)</li>
<li><a
href="d062fa23f9"><code>d062fa2</code></a>
Fix DuplicatesStrategyCheckerTest resource loading on Windows (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2085">#2085</a>)</li>
<li><a
href="e71a2c1c62"><code>e71a2c1</code></a>
Add description for shadow configuration (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2084">#2084</a>)</li>
<li><a
href="7ba43b066e"><code>7ba43b0</code></a>
Prepare next development version</li>
<li><a
href="6e00cb7101"><code>6e00cb7</code></a>
Prepare version 9.5.0</li>
<li><a
href="ca039099f0"><code>ca03909</code></a>
Deprecate everything under ShadowCopyAction (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2083">#2083</a>)</li>
<li><a
href="7d7da274d0"><code>7d7da27</code></a>
Revert &quot;Mark CONSTANT_TIME_FOR_ZIP_ENTRIES as const (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2074">#2074</a>)&quot;</li>
<li><a
href="da18cc00a6"><code>da18cc0</code></a>
Deprecate enableKotlinModuleRemapping for ShadowJar (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2073">#2073</a>)</li>
<li><a
href="ec6e55a659"><code>ec6e55a</code></a>
Replace system properties with buildConfig consts (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2082">#2082</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.4.3...9.5.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.4.3 to 9.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.5.1</h2>
<h3>Fixed</h3>
<ul>
<li>Fix eager calls for <code>toolchainSpec</code> in Kotlin DSL.<br />
This fixes the regression when using <code>toolchain</code> without
<code>targetCompatibility</code> in Kotlin DSL.</li>
</ul>
<h2>9.5.0</h2>
<h3>Added</h3>
<ul>
<li>Check <code>DuplicatesStrategy</code> for merging transformers. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2026">#2026</a>)<br
/>
This will log warnings when an incompatible
<code>DuplicatesStrategy</code> (e.g., <code>EXCLUDE</code>) is applied
in Gradle configuration for built-in
<code>ResourceTransformer</code>s.</li>
<li>Add <code>KotlinModuleMetadataTransformer</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)</li>
<li>Add R8 as an opt-in <code>minimize { r8 { ... } }</code> tool for
shrinking the final shadowed JAR. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2077">#2077</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Bump min Gradle requirement to 9.2.0. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2057">#2057</a>)</li>
<li>Remove <code>afterEvaluate</code> when adding variants. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2056">#2056</a>)</li>
<li>Deprecate <code>enableKotlinModuleRemapping</code> for
<code>ShadowJar</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)<br
/>
Apply <code>KotlinModuleMetadataTransformer</code> explicitly to support
relocating inside Kotlin module metadata files.</li>
<li>Deprecate everything under <code>ShadowCopyAction</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2083">#2083</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix the conflicts when using <code>afterEvaluate</code> with other
plugins. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2055">#2055</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c33612d2e1"><code>c33612d</code></a>
Prepare version 9.5.1</li>
<li><a
href="485e4121d9"><code>485e412</code></a>
Fix eager calls for toolchainSpec in Kotlin DSL (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2087">#2087</a>)</li>
<li><a
href="d062fa23f9"><code>d062fa2</code></a>
Fix DuplicatesStrategyCheckerTest resource loading on Windows (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2085">#2085</a>)</li>
<li><a
href="e71a2c1c62"><code>e71a2c1</code></a>
Add description for shadow configuration (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2084">#2084</a>)</li>
<li><a
href="7ba43b066e"><code>7ba43b0</code></a>
Prepare next development version</li>
<li><a
href="6e00cb7101"><code>6e00cb7</code></a>
Prepare version 9.5.0</li>
<li><a
href="ca039099f0"><code>ca03909</code></a>
Deprecate everything under ShadowCopyAction (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2083">#2083</a>)</li>
<li><a
href="7d7da274d0"><code>7d7da27</code></a>
Revert &quot;Mark CONSTANT_TIME_FOR_ZIP_ENTRIES as const (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2074">#2074</a>)&quot;</li>
<li><a
href="da18cc00a6"><code>da18cc0</code></a>
Deprecate enableKotlinModuleRemapping for ShadowJar (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2073">#2073</a>)</li>
<li><a
href="ec6e55a659"><code>ec6e55a</code></a>
Replace system properties with buildConfig consts (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2082">#2082</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.4.3...9.5.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.4.3 to 9.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.5.1</h2>
<h3>Fixed</h3>
<ul>
<li>Fix eager calls for <code>toolchainSpec</code> in Kotlin DSL.<br />
This fixes the regression when using <code>toolchain</code> without
<code>targetCompatibility</code> in Kotlin DSL.</li>
</ul>
<h2>9.5.0</h2>
<h3>Added</h3>
<ul>
<li>Check <code>DuplicatesStrategy</code> for merging transformers. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2026">#2026</a>)<br
/>
This will log warnings when an incompatible
<code>DuplicatesStrategy</code> (e.g., <code>EXCLUDE</code>) is applied
in Gradle configuration for built-in
<code>ResourceTransformer</code>s.</li>
<li>Add <code>KotlinModuleMetadataTransformer</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)</li>
<li>Add R8 as an opt-in <code>minimize { r8 { ... } }</code> tool for
shrinking the final shadowed JAR. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2077">#2077</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Bump min Gradle requirement to 9.2.0. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2057">#2057</a>)</li>
<li>Remove <code>afterEvaluate</code> when adding variants. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2056">#2056</a>)</li>
<li>Deprecate <code>enableKotlinModuleRemapping</code> for
<code>ShadowJar</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)<br
/>
Apply <code>KotlinModuleMetadataTransformer</code> explicitly to support
relocating inside Kotlin module metadata files.</li>
<li>Deprecate everything under <code>ShadowCopyAction</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2083">#2083</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix the conflicts when using <code>afterEvaluate</code> with other
plugins. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2055">#2055</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c33612d2e1"><code>c33612d</code></a>
Prepare version 9.5.1</li>
<li><a
href="485e4121d9"><code>485e412</code></a>
Fix eager calls for toolchainSpec in Kotlin DSL (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2087">#2087</a>)</li>
<li><a
href="d062fa23f9"><code>d062fa2</code></a>
Fix DuplicatesStrategyCheckerTest resource loading on Windows (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2085">#2085</a>)</li>
<li><a
href="e71a2c1c62"><code>e71a2c1</code></a>
Add description for shadow configuration (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2084">#2084</a>)</li>
<li><a
href="7ba43b066e"><code>7ba43b0</code></a>
Prepare next development version</li>
<li><a
href="6e00cb7101"><code>6e00cb7</code></a>
Prepare version 9.5.0</li>
<li><a
href="ca039099f0"><code>ca03909</code></a>
Deprecate everything under ShadowCopyAction (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2083">#2083</a>)</li>
<li><a
href="7d7da274d0"><code>7d7da27</code></a>
Revert &quot;Mark CONSTANT_TIME_FOR_ZIP_ENTRIES as const (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2074">#2074</a>)&quot;</li>
<li><a
href="da18cc00a6"><code>da18cc0</code></a>
Deprecate enableKotlinModuleRemapping for ShadowJar (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2073">#2073</a>)</li>
<li><a
href="ec6e55a659"><code>ec6e55a</code></a>
Replace system properties with buildConfig consts (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2082">#2082</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.4.3...9.5.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.4.3 to 9.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.5.1</h2>
<h3>Fixed</h3>
<ul>
<li>Fix eager calls for <code>toolchainSpec</code> in Kotlin DSL.<br />
This fixes the regression when using <code>toolchain</code> without
<code>targetCompatibility</code> in Kotlin DSL.</li>
</ul>
<h2>9.5.0</h2>
<h3>Added</h3>
<ul>
<li>Check <code>DuplicatesStrategy</code> for merging transformers. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2026">#2026</a>)<br
/>
This will log warnings when an incompatible
<code>DuplicatesStrategy</code> (e.g., <code>EXCLUDE</code>) is applied
in Gradle configuration for built-in
<code>ResourceTransformer</code>s.</li>
<li>Add <code>KotlinModuleMetadataTransformer</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)</li>
<li>Add R8 as an opt-in <code>minimize { r8 { ... } }</code> tool for
shrinking the final shadowed JAR. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2077">#2077</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Bump min Gradle requirement to 9.2.0. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2057">#2057</a>)</li>
<li>Remove <code>afterEvaluate</code> when adding variants. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2056">#2056</a>)</li>
<li>Deprecate <code>enableKotlinModuleRemapping</code> for
<code>ShadowJar</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)<br
/>
Apply <code>KotlinModuleMetadataTransformer</code> explicitly to support
relocating inside Kotlin module metadata files.</li>
<li>Deprecate everything under <code>ShadowCopyAction</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2083">#2083</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix the conflicts when using <code>afterEvaluate</code> with other
plugins. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2055">#2055</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c33612d2e1"><code>c33612d</code></a>
Prepare version 9.5.1</li>
<li><a
href="485e4121d9"><code>485e412</code></a>
Fix eager calls for toolchainSpec in Kotlin DSL (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2087">#2087</a>)</li>
<li><a
href="d062fa23f9"><code>d062fa2</code></a>
Fix DuplicatesStrategyCheckerTest resource loading on Windows (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2085">#2085</a>)</li>
<li><a
href="e71a2c1c62"><code>e71a2c1</code></a>
Add description for shadow configuration (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2084">#2084</a>)</li>
<li><a
href="7ba43b066e"><code>7ba43b0</code></a>
Prepare next development version</li>
<li><a
href="6e00cb7101"><code>6e00cb7</code></a>
Prepare version 9.5.0</li>
<li><a
href="ca039099f0"><code>ca03909</code></a>
Deprecate everything under ShadowCopyAction (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2083">#2083</a>)</li>
<li><a
href="7d7da274d0"><code>7d7da27</code></a>
Revert &quot;Mark CONSTANT_TIME_FOR_ZIP_ENTRIES as const (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2074">#2074</a>)&quot;</li>
<li><a
href="da18cc00a6"><code>da18cc0</code></a>
Deprecate enableKotlinModuleRemapping for ShadowJar (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2073">#2073</a>)</li>
<li><a
href="ec6e55a659"><code>ec6e55a</code></a>
Replace system properties with buildConfig consts (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2082">#2082</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.4.3...9.5.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.4.3 to 9.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.5.1</h2>
<h3>Fixed</h3>
<ul>
<li>Fix eager calls for <code>toolchainSpec</code> in Kotlin DSL.<br />
This fixes the regression when using <code>toolchain</code> without
<code>targetCompatibility</code> in Kotlin DSL.</li>
</ul>
<h2>9.5.0</h2>
<h3>Added</h3>
<ul>
<li>Check <code>DuplicatesStrategy</code> for merging transformers. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2026">#2026</a>)<br
/>
This will log warnings when an incompatible
<code>DuplicatesStrategy</code> (e.g., <code>EXCLUDE</code>) is applied
in Gradle configuration for built-in
<code>ResourceTransformer</code>s.</li>
<li>Add <code>KotlinModuleMetadataTransformer</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)</li>
<li>Add R8 as an opt-in <code>minimize { r8 { ... } }</code> tool for
shrinking the final shadowed JAR. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2077">#2077</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Bump min Gradle requirement to 9.2.0. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2057">#2057</a>)</li>
<li>Remove <code>afterEvaluate</code> when adding variants. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2056">#2056</a>)</li>
<li>Deprecate <code>enableKotlinModuleRemapping</code> for
<code>ShadowJar</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)<br
/>
Apply <code>KotlinModuleMetadataTransformer</code> explicitly to support
relocating inside Kotlin module metadata files.</li>
<li>Deprecate everything under <code>ShadowCopyAction</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2083">#2083</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix the conflicts when using <code>afterEvaluate</code> with other
plugins. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2055">#2055</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c33612d2e1"><code>c33612d</code></a>
Prepare version 9.5.1</li>
<li><a
href="485e4121d9"><code>485e412</code></a>
Fix eager calls for toolchainSpec in Kotlin DSL (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2087">#2087</a>)</li>
<li><a
href="d062fa23f9"><code>d062fa2</code></a>
Fix DuplicatesStrategyCheckerTest resource loading on Windows (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2085">#2085</a>)</li>
<li><a
href="e71a2c1c62"><code>e71a2c1</code></a>
Add description for shadow configuration (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2084">#2084</a>)</li>
<li><a
href="7ba43b066e"><code>7ba43b0</code></a>
Prepare next development version</li>
<li><a
href="6e00cb7101"><code>6e00cb7</code></a>
Prepare version 9.5.0</li>
<li><a
href="ca039099f0"><code>ca03909</code></a>
Deprecate everything under ShadowCopyAction (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2083">#2083</a>)</li>
<li><a
href="7d7da274d0"><code>7d7da27</code></a>
Revert &quot;Mark CONSTANT_TIME_FOR_ZIP_ENTRIES as const (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2074">#2074</a>)&quot;</li>
<li><a
href="da18cc00a6"><code>da18cc0</code></a>
Deprecate enableKotlinModuleRemapping for ShadowJar (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2073">#2073</a>)</li>
<li><a
href="ec6e55a659"><code>ec6e55a</code></a>
Replace system properties with buildConfig consts (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2082">#2082</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.4.3...9.5.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.4.3 to 9.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.5.1</h2>
<h3>Fixed</h3>
<ul>
<li>Fix eager calls for <code>toolchainSpec</code> in Kotlin DSL.<br />
This fixes the regression when using <code>toolchain</code> without
<code>targetCompatibility</code> in Kotlin DSL.</li>
</ul>
<h2>9.5.0</h2>
<h3>Added</h3>
<ul>
<li>Check <code>DuplicatesStrategy</code> for merging transformers. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2026">#2026</a>)<br
/>
This will log warnings when an incompatible
<code>DuplicatesStrategy</code> (e.g., <code>EXCLUDE</code>) is applied
in Gradle configuration for built-in
<code>ResourceTransformer</code>s.</li>
<li>Add <code>KotlinModuleMetadataTransformer</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)</li>
<li>Add R8 as an opt-in <code>minimize { r8 { ... } }</code> tool for
shrinking the final shadowed JAR. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2077">#2077</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Bump min Gradle requirement to 9.2.0. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2057">#2057</a>)</li>
<li>Remove <code>afterEvaluate</code> when adding variants. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2056">#2056</a>)</li>
<li>Deprecate <code>enableKotlinModuleRemapping</code> for
<code>ShadowJar</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)<br
/>
Apply <code>KotlinModuleMetadataTransformer</code> explicitly to support
relocating inside Kotlin module metadata files.</li>
<li>Deprecate everything under <code>ShadowCopyAction</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2083">#2083</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix the conflicts when using <code>afterEvaluate</code> with other
plugins. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2055">#2055</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c33612d2e1"><code>c33612d</code></a>
Prepare version 9.5.1</li>
<li><a
href="485e4121d9"><code>485e412</code></a>
Fix eager calls for toolchainSpec in Kotlin DSL (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2087">#2087</a>)</li>
<li><a
href="d062fa23f9"><code>d062fa2</code></a>
Fix DuplicatesStrategyCheckerTest resource loading on Windows (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2085">#2085</a>)</li>
<li><a
href="e71a2c1c62"><code>e71a2c1</code></a>
Add description for shadow configuration (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2084">#2084</a>)</li>
<li><a
href="7ba43b066e"><code>7ba43b0</code></a>
Prepare next development version</li>
<li><a
href="6e00cb7101"><code>6e00cb7</code></a>
Prepare version 9.5.0</li>
<li><a
href="ca039099f0"><code>ca03909</code></a>
Deprecate everything under ShadowCopyAction (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2083">#2083</a>)</li>
<li><a
href="7d7da274d0"><code>7d7da27</code></a>
Revert &quot;Mark CONSTANT_TIME_FOR_ZIP_ENTRIES as const (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2074">#2074</a>)&quot;</li>
<li><a
href="da18cc00a6"><code>da18cc0</code></a>
Deprecate enableKotlinModuleRemapping for ShadowJar (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2073">#2073</a>)</li>
<li><a
href="ec6e55a659"><code>ec6e55a</code></a>
Replace system properties with buildConfig consts (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2082">#2082</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.4.3...9.5.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.4.3 to 9.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.5.1</h2>
<h3>Fixed</h3>
<ul>
<li>Fix eager calls for <code>toolchainSpec</code> in Kotlin DSL.<br />
This fixes the regression when using <code>toolchain</code> without
<code>targetCompatibility</code> in Kotlin DSL.</li>
</ul>
<h2>9.5.0</h2>
<h3>Added</h3>
<ul>
<li>Check <code>DuplicatesStrategy</code> for merging transformers. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2026">#2026</a>)<br
/>
This will log warnings when an incompatible
<code>DuplicatesStrategy</code> (e.g., <code>EXCLUDE</code>) is applied
in Gradle configuration for built-in
<code>ResourceTransformer</code>s.</li>
<li>Add <code>KotlinModuleMetadataTransformer</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)</li>
<li>Add R8 as an opt-in <code>minimize { r8 { ... } }</code> tool for
shrinking the final shadowed JAR. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2077">#2077</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Bump min Gradle requirement to 9.2.0. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2057">#2057</a>)</li>
<li>Remove <code>afterEvaluate</code> when adding variants. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2056">#2056</a>)</li>
<li>Deprecate <code>enableKotlinModuleRemapping</code> for
<code>ShadowJar</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)<br
/>
Apply <code>KotlinModuleMetadataTransformer</code> explicitly to support
relocating inside Kotlin module metadata files.</li>
<li>Deprecate everything under <code>ShadowCopyAction</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2083">#2083</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix the conflicts when using <code>afterEvaluate</code> with other
plugins. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2055">#2055</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c33612d2e1"><code>c33612d</code></a>
Prepare version 9.5.1</li>
<li><a
href="485e4121d9"><code>485e412</code></a>
Fix eager calls for toolchainSpec in Kotlin DSL (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2087">#2087</a>)</li>
<li><a
href="d062fa23f9"><code>d062fa2</code></a>
Fix DuplicatesStrategyCheckerTest resource loading on Windows (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2085">#2085</a>)</li>
<li><a
href="e71a2c1c62"><code>e71a2c1</code></a>
Add description for shadow configuration (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2084">#2084</a>)</li>
<li><a
href="7ba43b066e"><code>7ba43b0</code></a>
Prepare next development version</li>
<li><a
href="6e00cb7101"><code>6e00cb7</code></a>
Prepare version 9.5.0</li>
<li><a
href="ca039099f0"><code>ca03909</code></a>
Deprecate everything under ShadowCopyAction (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2083">#2083</a>)</li>
<li><a
href="7d7da274d0"><code>7d7da27</code></a>
Revert &quot;Mark CONSTANT_TIME_FOR_ZIP_ENTRIES as const (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2074">#2074</a>)&quot;</li>
<li><a
href="da18cc00a6"><code>da18cc0</code></a>
Deprecate enableKotlinModuleRemapping for ShadowJar (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2073">#2073</a>)</li>
<li><a
href="ec6e55a659"><code>ec6e55a</code></a>
Replace system properties with buildConfig consts (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2082">#2082</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/GradleUp/shadow/compare/9.4.3...9.5.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.gradleup.shadow` from 9.4.3 to 9.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/GradleUp/shadow/releases">com.gradleup.shadow's
releases</a>.</em></p>
<blockquote>
<h2>9.5.1</h2>
<h3>Fixed</h3>
<ul>
<li>Fix eager calls for <code>toolchainSpec</code> in Kotlin DSL.<br />
This fixes the regression when using <code>toolchain</code> without
<code>targetCompatibility</code> in Kotlin DSL.</li>
</ul>
<h2>9.5.0</h2>
<h3>Added</h3>
<ul>
<li>Check <code>DuplicatesStrategy</code> for merging transformers. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2026">#2026</a>)<br
/>
This will log warnings when an incompatible
<code>DuplicatesStrategy</code> (e.g., <code>EXCLUDE</code>) is applied
in Gradle configuration for built-in
<code>ResourceTransformer</code>s.</li>
<li>Add <code>KotlinModuleMetadataTransformer</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)</li>
<li>Add R8 as an opt-in <code>minimize { r8 { ... } }</code> tool for
shrinking the final shadowed JAR. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2077">#2077</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Bump min Gradle requirement to 9.2.0. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2057">#2057</a>)</li>
<li>Remove <code>afterEvaluate</code> when adding variants. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2056">#2056</a>)</li>
<li>Deprecate <code>enableKotlinModuleRemapping</code> for
<code>ShadowJar</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2073">#2073</a>)<br
/>
Apply <code>KotlinModuleMetadataTransformer</code> explicitly to support
relocating inside Kotlin module metadata files.</li>
<li>Deprecate everything under <code>ShadowCopyAction</code>. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2083">#2083</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix the conflicts when using <code>afterEvaluate</code> with other
plugins. (<a
href="https://redirect.github.com/GradleUp/shadow/pull/2055">#2055</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c33612d2e1"><code>c33612d</code></a>
Prepare version 9.5.1</li>
<li><a
href="485e4121d9"><code>485e412</code></a>
Fix eager calls for toolchainSpec in Kotlin DSL (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2087">#2087</a>)</li>
<li><a
href="d062fa23f9"><code>d062fa2</code></a>
Fix DuplicatesStrategyCheckerTest resource loading on Windows (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2085">#2085</a>)</li>
<li><a
href="e71a2c1c62"><code>e71a2c1</code></a>
Add description for shadow configuration (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2084">#2084</a>)</li>
<li><a
href="7ba43b066e"><code>7ba43b0</code></a>
Prepare next development version</li>
<li><a
href="6e00cb7101"><code>6e00cb7</code></a>
Prepare version 9.5.0</li>
<li><a
href="ca039099f0"><code>ca03909</code></a>
Deprecate everything under ShadowCopyAction (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2083">#2083</a>)</li>
<li><a
href="7d7da274d0"><code>7d7da27</code></a>
Revert &quot;Mark CONSTANT_TIME_FOR_ZIP_ENTRIES as const (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2074">#2074</a>)&quot;</li>
<li><a
href="da18cc00a6"><code>da18cc0</code></a>
Deprecate enableKotlinModuleRemapping for ShadowJar (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2073">#2073</a>)</li>
<li><a
href="ec6e55a659"><code>ec6e55a</code></a>
Replace system properties with buildConfig consts (<a
href="https://redirect.github.com/GradleUp/shadow/issues/2082">#2082</a>)</li>
<li>Additional commits viewable in <a href="ht...

_Description has been truncated_

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-06 14:09:53 +02:00
dependabot[bot]
7ea602a5bf
chore(deps): bump mcp-kotlin from 0.13.0 to 0.14.0 in /samples/simple-streamable-server (#878)
Bumps `mcp-kotlin` from 0.13.0 to 0.14.0.
Updates `io.modelcontextprotocol:kotlin-sdk-client` from 0.13.0 to
0.14.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fc7916fdc7"><code>fc7916f</code></a>
release: 0.14.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/867">#867</a>)</li>
<li><a
href="57e546d378"><code>57e546d</code></a>
feat: SEP-1686 Tasks (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/844">#844</a>)</li>
<li><a
href="35da063c23"><code>35da063</code></a>
fix: bound request body size in SSE and Streamable HTTP transports (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/839">#839</a>)</li>
<li><a
href="bbf77bae93"><code>bbf77ba</code></a>
chore(deps): bump <code>@​types/node</code> from 26.0.0 to 26.0.1 in
/integration-test/src/...</li>
<li><a
href="d2b1509147"><code>d2b1509</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
5 up...</li>
<li><a
href="0221b8db3d"><code>0221b8d</code></a>
fix(client): close stdio read sources during shutdown (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/798">#798</a>)</li>
<li><a
href="19db4b04e3"><code>19db4b0</code></a>
fix(client): gate completion/complete on the completions capability (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/846">#846</a>)</li>
<li><a
href="64cf29fea7"><code>64cf29f</code></a>
chore(deps): bump gradle-wrapper from 9.6.0 to 9.6.1 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/856">#856</a>)</li>
<li><a
href="cd91652be1"><code>cd91652</code></a>
fix: validate Origin against localhost by default in DNS rebinding
protection...</li>
<li><a
href="4103b87d69"><code>4103b87</code></a>
chore(deps): bump org.jetbrains.kotlinx:kotlinx-io-core from 0.9.0 to
0.9.1 i...</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.13.0...0.14.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.modelcontextprotocol:kotlin-sdk-server` from 0.13.0 to
0.14.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fc7916fdc7"><code>fc7916f</code></a>
release: 0.14.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/867">#867</a>)</li>
<li><a
href="57e546d378"><code>57e546d</code></a>
feat: SEP-1686 Tasks (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/844">#844</a>)</li>
<li><a
href="35da063c23"><code>35da063</code></a>
fix: bound request body size in SSE and Streamable HTTP transports (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/839">#839</a>)</li>
<li><a
href="bbf77bae93"><code>bbf77ba</code></a>
chore(deps): bump <code>@​types/node</code> from 26.0.0 to 26.0.1 in
/integration-test/src/...</li>
<li><a
href="d2b1509147"><code>d2b1509</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
5 up...</li>
<li><a
href="0221b8db3d"><code>0221b8d</code></a>
fix(client): close stdio read sources during shutdown (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/798">#798</a>)</li>
<li><a
href="19db4b04e3"><code>19db4b0</code></a>
fix(client): gate completion/complete on the completions capability (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/846">#846</a>)</li>
<li><a
href="64cf29fea7"><code>64cf29f</code></a>
chore(deps): bump gradle-wrapper from 9.6.0 to 9.6.1 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/856">#856</a>)</li>
<li><a
href="cd91652be1"><code>cd91652</code></a>
fix: validate Origin against localhost by default in DNS rebinding
protection...</li>
<li><a
href="4103b87d69"><code>4103b87</code></a>
chore(deps): bump org.jetbrains.kotlinx:kotlinx-io-core from 0.9.0 to
0.9.1 i...</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.13.0...0.14.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-06 13:29:38 +02:00
dependabot[bot]
14c848db41
chore(deps): bump mcp-kotlin from 0.13.0 to 0.14.0 in /samples/kotlinlang-mcp-server (#877)
Bumps `mcp-kotlin` from 0.13.0 to 0.14.0.
Updates `io.modelcontextprotocol:kotlin-sdk-server` from 0.13.0 to
0.14.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fc7916fdc7"><code>fc7916f</code></a>
release: 0.14.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/867">#867</a>)</li>
<li><a
href="57e546d378"><code>57e546d</code></a>
feat: SEP-1686 Tasks (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/844">#844</a>)</li>
<li><a
href="35da063c23"><code>35da063</code></a>
fix: bound request body size in SSE and Streamable HTTP transports (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/839">#839</a>)</li>
<li><a
href="bbf77bae93"><code>bbf77ba</code></a>
chore(deps): bump <code>@​types/node</code> from 26.0.0 to 26.0.1 in
/integration-test/src/...</li>
<li><a
href="d2b1509147"><code>d2b1509</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
5 up...</li>
<li><a
href="0221b8db3d"><code>0221b8d</code></a>
fix(client): close stdio read sources during shutdown (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/798">#798</a>)</li>
<li><a
href="19db4b04e3"><code>19db4b0</code></a>
fix(client): gate completion/complete on the completions capability (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/846">#846</a>)</li>
<li><a
href="64cf29fea7"><code>64cf29f</code></a>
chore(deps): bump gradle-wrapper from 9.6.0 to 9.6.1 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/856">#856</a>)</li>
<li><a
href="cd91652be1"><code>cd91652</code></a>
fix: validate Origin against localhost by default in DNS rebinding
protection...</li>
<li><a
href="4103b87d69"><code>4103b87</code></a>
chore(deps): bump org.jetbrains.kotlinx:kotlinx-io-core from 0.9.0 to
0.9.1 i...</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.13.0...0.14.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.modelcontextprotocol:kotlin-sdk-client` from 0.13.0 to
0.14.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fc7916fdc7"><code>fc7916f</code></a>
release: 0.14.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/867">#867</a>)</li>
<li><a
href="57e546d378"><code>57e546d</code></a>
feat: SEP-1686 Tasks (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/844">#844</a>)</li>
<li><a
href="35da063c23"><code>35da063</code></a>
fix: bound request body size in SSE and Streamable HTTP transports (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/839">#839</a>)</li>
<li><a
href="bbf77bae93"><code>bbf77ba</code></a>
chore(deps): bump <code>@​types/node</code> from 26.0.0 to 26.0.1 in
/integration-test/src/...</li>
<li><a
href="d2b1509147"><code>d2b1509</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
5 up...</li>
<li><a
href="0221b8db3d"><code>0221b8d</code></a>
fix(client): close stdio read sources during shutdown (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/798">#798</a>)</li>
<li><a
href="19db4b04e3"><code>19db4b0</code></a>
fix(client): gate completion/complete on the completions capability (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/846">#846</a>)</li>
<li><a
href="64cf29fea7"><code>64cf29f</code></a>
chore(deps): bump gradle-wrapper from 9.6.0 to 9.6.1 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/856">#856</a>)</li>
<li><a
href="cd91652be1"><code>cd91652</code></a>
fix: validate Origin against localhost by default in DNS rebinding
protection...</li>
<li><a
href="4103b87d69"><code>4103b87</code></a>
chore(deps): bump org.jetbrains.kotlinx:kotlinx-io-core from 0.9.0 to
0.9.1 i...</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.13.0...0.14.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.modelcontextprotocol:kotlin-sdk-testing` from 0.13.0 to
0.14.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fc7916fdc7"><code>fc7916f</code></a>
release: 0.14.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/867">#867</a>)</li>
<li><a
href="57e546d378"><code>57e546d</code></a>
feat: SEP-1686 Tasks (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/844">#844</a>)</li>
<li><a
href="35da063c23"><code>35da063</code></a>
fix: bound request body size in SSE and Streamable HTTP transports (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/839">#839</a>)</li>
<li><a
href="bbf77bae93"><code>bbf77ba</code></a>
chore(deps): bump <code>@​types/node</code> from 26.0.0 to 26.0.1 in
/integration-test/src/...</li>
<li><a
href="d2b1509147"><code>d2b1509</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
5 up...</li>
<li><a
href="0221b8db3d"><code>0221b8d</code></a>
fix(client): close stdio read sources during shutdown (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/798">#798</a>)</li>
<li><a
href="19db4b04e3"><code>19db4b0</code></a>
fix(client): gate completion/complete on the completions capability (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/846">#846</a>)</li>
<li><a
href="64cf29fea7"><code>64cf29f</code></a>
chore(deps): bump gradle-wrapper from 9.6.0 to 9.6.1 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/856">#856</a>)</li>
<li><a
href="cd91652be1"><code>cd91652</code></a>
fix: validate Origin against localhost by default in DNS rebinding
protection...</li>
<li><a
href="4103b87d69"><code>4103b87</code></a>
chore(deps): bump org.jetbrains.kotlinx:kotlinx-io-core from 0.9.0 to
0.9.1 i...</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.13.0...0.14.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-06 13:29:15 +02:00
dependabot[bot]
04e6d56fd6
chore(deps): bump mcp-kotlin from 0.13.0 to 0.14.0 in /samples/kotlin-mcp-server (#876)
Bumps `mcp-kotlin` from 0.13.0 to 0.14.0.
Updates `io.modelcontextprotocol:kotlin-sdk-client` from 0.13.0 to
0.14.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fc7916fdc7"><code>fc7916f</code></a>
release: 0.14.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/867">#867</a>)</li>
<li><a
href="57e546d378"><code>57e546d</code></a>
feat: SEP-1686 Tasks (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/844">#844</a>)</li>
<li><a
href="35da063c23"><code>35da063</code></a>
fix: bound request body size in SSE and Streamable HTTP transports (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/839">#839</a>)</li>
<li><a
href="bbf77bae93"><code>bbf77ba</code></a>
chore(deps): bump <code>@​types/node</code> from 26.0.0 to 26.0.1 in
/integration-test/src/...</li>
<li><a
href="d2b1509147"><code>d2b1509</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
5 up...</li>
<li><a
href="0221b8db3d"><code>0221b8d</code></a>
fix(client): close stdio read sources during shutdown (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/798">#798</a>)</li>
<li><a
href="19db4b04e3"><code>19db4b0</code></a>
fix(client): gate completion/complete on the completions capability (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/846">#846</a>)</li>
<li><a
href="64cf29fea7"><code>64cf29f</code></a>
chore(deps): bump gradle-wrapper from 9.6.0 to 9.6.1 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/856">#856</a>)</li>
<li><a
href="cd91652be1"><code>cd91652</code></a>
fix: validate Origin against localhost by default in DNS rebinding
protection...</li>
<li><a
href="4103b87d69"><code>4103b87</code></a>
chore(deps): bump org.jetbrains.kotlinx:kotlinx-io-core from 0.9.0 to
0.9.1 i...</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.13.0...0.14.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.modelcontextprotocol:kotlin-sdk-server` from 0.13.0 to
0.14.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fc7916fdc7"><code>fc7916f</code></a>
release: 0.14.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/867">#867</a>)</li>
<li><a
href="57e546d378"><code>57e546d</code></a>
feat: SEP-1686 Tasks (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/844">#844</a>)</li>
<li><a
href="35da063c23"><code>35da063</code></a>
fix: bound request body size in SSE and Streamable HTTP transports (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/839">#839</a>)</li>
<li><a
href="bbf77bae93"><code>bbf77ba</code></a>
chore(deps): bump <code>@​types/node</code> from 26.0.0 to 26.0.1 in
/integration-test/src/...</li>
<li><a
href="d2b1509147"><code>d2b1509</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
5 up...</li>
<li><a
href="0221b8db3d"><code>0221b8d</code></a>
fix(client): close stdio read sources during shutdown (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/798">#798</a>)</li>
<li><a
href="19db4b04e3"><code>19db4b0</code></a>
fix(client): gate completion/complete on the completions capability (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/846">#846</a>)</li>
<li><a
href="64cf29fea7"><code>64cf29f</code></a>
chore(deps): bump gradle-wrapper from 9.6.0 to 9.6.1 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/856">#856</a>)</li>
<li><a
href="cd91652be1"><code>cd91652</code></a>
fix: validate Origin against localhost by default in DNS rebinding
protection...</li>
<li><a
href="4103b87d69"><code>4103b87</code></a>
chore(deps): bump org.jetbrains.kotlinx:kotlinx-io-core from 0.9.0 to
0.9.1 i...</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.13.0...0.14.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-06 13:28:48 +02:00
dependabot[bot]
ea3940ce47
chore(deps): bump io.modelcontextprotocol:kotlin-sdk-client from 0.13.0 to 0.14.0 in /samples/kotlin-mcp-client (#875)
Bumps
[io.modelcontextprotocol:kotlin-sdk-client](https://github.com/modelcontextprotocol/kotlin-sdk)
from 0.13.0 to 0.14.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fc7916fdc7"><code>fc7916f</code></a>
release: 0.14.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/867">#867</a>)</li>
<li><a
href="57e546d378"><code>57e546d</code></a>
feat: SEP-1686 Tasks (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/844">#844</a>)</li>
<li><a
href="35da063c23"><code>35da063</code></a>
fix: bound request body size in SSE and Streamable HTTP transports (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/839">#839</a>)</li>
<li><a
href="bbf77bae93"><code>bbf77ba</code></a>
chore(deps): bump <code>@​types/node</code> from 26.0.0 to 26.0.1 in
/integration-test/src/...</li>
<li><a
href="d2b1509147"><code>d2b1509</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
5 up...</li>
<li><a
href="0221b8db3d"><code>0221b8d</code></a>
fix(client): close stdio read sources during shutdown (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/798">#798</a>)</li>
<li><a
href="19db4b04e3"><code>19db4b0</code></a>
fix(client): gate completion/complete on the completions capability (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/846">#846</a>)</li>
<li><a
href="64cf29fea7"><code>64cf29f</code></a>
chore(deps): bump gradle-wrapper from 9.6.0 to 9.6.1 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/856">#856</a>)</li>
<li><a
href="cd91652be1"><code>cd91652</code></a>
fix: validate Origin against localhost by default in DNS rebinding
protection...</li>
<li><a
href="4103b87d69"><code>4103b87</code></a>
chore(deps): bump org.jetbrains.kotlinx:kotlinx-io-core from 0.9.0 to
0.9.1 i...</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.13.0...0.14.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-06 12:39:14 +02:00
dependabot[bot]
19091d3528
chore(deps): bump org.jetbrains.kotlinx:kotlinx-collections-immutable from 0.5.0 to 0.5.1 in the kotlinx group (#873)
Bumps the kotlinx group with 1 update:
[org.jetbrains.kotlinx:kotlinx-collections-immutable](https://github.com/Kotlin/kotlinx.collections.immutable).

Updates `org.jetbrains.kotlinx:kotlinx-collections-immutable` from 0.5.0
to 0.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Kotlin/kotlinx.collections.immutable/releases">org.jetbrains.kotlinx:kotlinx-collections-immutable's
releases</a>.</em></p>
<blockquote>
<h2>v0.5.1</h2>
<ul>
<li>Fixed <code>PersistentOrderedMapBuilder</code> returning a
previously built map from <code>build()</code> after updating an entry
value through <code>MutableMap.MutableEntry.setValue</code> <a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/pull/253">#253</a>,
<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/pull/274">#274</a></li>
<li>Fixed an assertion failure in
<code>PersistentOrderedSetBuilder.build()</code> after interleaved
<code>build</code> and <code>remove</code>/<code>removeAll</code> calls
<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/pull/251">#251</a></li>
<li>Provided a JPMS module descriptor for the JVM artifact — module
<code>kotlinx.collections.immutable</code> compiled into
<code>META-INF/versions/9</code>, the artifact stays Java 8-compatible
<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/pull/268">#268</a></li>
</ul>
<p><strong>Full changelog</strong>: <a
href="https://github.com/Kotlin/kotlinx.collections.immutable/compare/v0.5.0...v0.5.1">https://github.com/Kotlin/kotlinx.collections.immutable/compare/v0.5.0...v0.5.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Kotlin/kotlinx.collections.immutable/blob/master/CHANGELOG.md">org.jetbrains.kotlinx:kotlinx-collections-immutable's
changelog</a>.</em></p>
<blockquote>
<h2>0.5.1</h2>
<ul>
<li>Fixed <code>PersistentOrderedMapBuilder</code> returning a
previously built map from <code>build()</code> after updating an entry
value through <code>MutableMap.MutableEntry.setValue</code> <a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/pull/253">#253</a>,
<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/pull/274">#274</a></li>
<li>Fixed an assertion failure in
<code>PersistentOrderedSetBuilder.build()</code> after interleaved
<code>build</code> and <code>remove</code>/<code>removeAll</code> calls
<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/pull/251">#251</a></li>
<li>Provided a JPMS module descriptor for the JVM artifact — module
<code>kotlinx.collections.immutable</code> compiled into
<code>META-INF/versions/9</code>, the artifact stays Java 8-compatible
<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/pull/268">#268</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ad741d1c6c"><code>ad741d1</code></a>
Release v0.5.1</li>
<li><a
href="cb4cf67eab"><code>cb4cf67</code></a>
Applied artifacts validator plugin (<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/271">#271</a>)</li>
<li><a
href="e9ca796210"><code>e9ca796</code></a>
Restore the direct links write in the ordered map builder entry (<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/274">#274</a>)</li>
<li><a
href="6822eed716"><code>6822eed</code></a>
Fix the pull request exclusion in the VCS trigger branch filter (<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/276">#276</a>)</li>
<li><a
href="8201f28555"><code>8201f28</code></a>
Surface pull request branches on CI for manually started builds (<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/273">#273</a>)</li>
<li><a
href="f3dec4fb08"><code>f3dec4f</code></a>
Fix ordered set builder cache after removeAll (<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/251">#251</a>)</li>
<li><a
href="96bf012218"><code>96bf012</code></a>
Provide a JPMS module descriptor for the JVM artifact (<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/268">#268</a>)</li>
<li><a
href="81382a18cf"><code>81382a1</code></a>
Migrate ABI validation to the Kotlin Gradle plugin (<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/264">#264</a>)</li>
<li><a
href="694d34b9d8"><code>694d34b</code></a>
Invalidate ordered map builder after entry value updates (<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/253">#253</a>)</li>
<li><a
href="1d6fda3dd9"><code>1d6fda3</code></a>
Fix the method-rename examples in the 0.5.0 changelog entry (<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/266">#266</a>)</li>
<li>See full diff in <a
href="https://github.com/Kotlin/kotlinx.collections.immutable/compare/v0.5.0...v0.5.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.jetbrains.kotlinx:kotlinx-collections-immutable&package-manager=gradle&previous-version=0.5.0&new-version=0.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-06 12:13:30 +02:00
dependabot[bot]
420b64d1bb
chore(deps): bump the kotlin group across 1 directory with 2 updates (#834)
Bumps the kotlin group with 2 updates in the / directory:
[org.jetbrains.kotlin:kotlin-gradle-plugin](https://github.com/JetBrains/kotlin)
and
[org.jetbrains.kotlin:kotlin-serialization](https://github.com/JetBrains/kotlin).

Updates `org.jetbrains.kotlin:kotlin-gradle-plugin` from 2.3.21 to 2.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin:kotlin-gradle-plugin's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.0</h2>
<h2>Changelog</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83867"><code>KT-83867</code></a>
OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ
repo</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83723"><code>KT-83723</code></a>
[Analysis API] Enable experimental KDoc resolver by default</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83388"><code>KT-83388</code></a>
Analysis API: properly support KMP in KotlinPackageProvider</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65683"><code>KT-65683</code></a>
Analysis API: Dangling file session creation causes a
<code>computeIfAbsent</code> contract violation</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-78946"><code>KT-78946</code></a>
Evaluation of variable with local class in type parameter leads to
InventNamesForLocalClasses exception</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-68260"><code>KT-68260</code></a>
K2 AA: InvalidFirElementTypeException “For CALLABLE_REFERENCE_EXPRESSION
with text <code>::lam1</code>, unexpected element of type: no element
found” with illegal callable reference call</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70896"><code>KT-70896</code></a>
AA: False positive deprecation warning with override of built-in method
in JDK mapped class</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84711"><code>KT-84711</code></a>
K2 IDE sometimes loses FIR plugin-generated declarations after file
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84625"><code>KT-84625</code></a>
Analysis API: collectDesignationPath fails for nested classes inside
plugin-generated top-level classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84596"><code>KT-84596</code></a>
Improve K2 Jooq completion performance</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84525"><code>KT-84525</code></a>
KaValueParameterSymbol#getHasSynthesizedName returns false for
FirDeclarationOrigin.SubstitutionOverride.DeclarationSite</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83546"><code>KT-83546</code></a>
Kotlin analysis reach ClsCustomNavigationPolicy</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84259"><code>KT-84259</code></a>
Move CommonDefaultImportsProvider to the frontend independent
module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82945"><code>KT-82945</code></a>
Analysis API: KotlinIllegalArgumentExceptionWithAttachments: Expected
FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-71135"><code>KT-71135</code></a>
AA: exception from sealed inheritors checker when
<code>analyzeCopy</code></li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83905"><code>KT-83905</code></a>
Analysis API: Improve UX with test data</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84913"><code>KT-84913</code></a>
Extract compiler classes used by the PSI &amp; Analysis API to a
separate module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-64986"><code>KT-64986</code></a>
Analysis API: Implement Analysis API tests for different KMP
Platforms</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84776"><code>KT-84776</code></a>
The test data manager misses the redundancy check in the update
mode</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84962"><code>KT-84962</code></a>
The test data manager misses -ea flag</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84388"><code>KT-84388</code></a>
Preserve the EOF status in the test data manager to avoid extra
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84362"><code>KT-84362</code></a>
Analysis API tests produce many warnings due to &quot;not yet loaded
registry&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84279"><code>KT-84279</code></a>
Test Data Manager fails on a clean build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83913"><code>KT-83913</code></a>
Exclude compiler-based Analysis API tests from Git tracking</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80379"><code>KT-80379</code></a>
Extract per-module test generators for AA tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84120"><code>KT-84120</code></a>
Move CLI modules out of kotlin-compiler-fe10-for-ide</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83200"><code>KT-83200</code></a>
Track external dependencies of the Analysis API modules</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82434"><code>KT-82434</code></a>
Light classes should prefer enum entries to properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84200"><code>KT-84200</code></a>
SLC: return type is not boxed for delegated methods with generic
original method</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-72451"><code>KT-72451</code></a>
&quot;CCE: class PsiPrimitiveType cannot be cast to class
PsiClassType&quot; with same-named enum class and typealias</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin:kotlin-gradle-plugin's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.0</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83867"><code>KT-83867</code></a>
OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ
repo</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83723"><code>KT-83723</code></a>
[Analysis API] Enable experimental KDoc resolver by default</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83388"><code>KT-83388</code></a>
Analysis API: properly support KMP in KotlinPackageProvider</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65683"><code>KT-65683</code></a>
Analysis API: Dangling file session creation causes a
<code>computeIfAbsent</code> contract violation</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-78946"><code>KT-78946</code></a>
Evaluation of variable with local class in type parameter leads to
InventNamesForLocalClasses exception</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-68260"><code>KT-68260</code></a>
K2 AA: InvalidFirElementTypeException “For CALLABLE_REFERENCE_EXPRESSION
with text <code>::lam1</code>, unexpected element of type: no element
found” with illegal callable reference call</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70896"><code>KT-70896</code></a>
AA: False positive deprecation warning with override of built-in method
in JDK mapped class</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84711"><code>KT-84711</code></a>
K2 IDE sometimes loses FIR plugin-generated declarations after file
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84625"><code>KT-84625</code></a>
Analysis API: collectDesignationPath fails for nested classes inside
plugin-generated top-level classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84596"><code>KT-84596</code></a>
Improve K2 Jooq completion performance</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84525"><code>KT-84525</code></a>
KaValueParameterSymbol#getHasSynthesizedName returns false for
FirDeclarationOrigin.SubstitutionOverride.DeclarationSite</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83546"><code>KT-83546</code></a>
Kotlin analysis reach ClsCustomNavigationPolicy</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84259"><code>KT-84259</code></a>
Move CommonDefaultImportsProvider to the frontend independent
module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82945"><code>KT-82945</code></a>
Analysis API: KotlinIllegalArgumentExceptionWithAttachments: Expected
FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-71135"><code>KT-71135</code></a>
AA: exception from sealed inheritors checker when
<code>analyzeCopy</code></li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83905"><code>KT-83905</code></a>
Analysis API: Improve UX with test data</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84913"><code>KT-84913</code></a>
Extract compiler classes used by the PSI &amp; Analysis API to a
separate module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-64986"><code>KT-64986</code></a>
Analysis API: Implement Analysis API tests for different KMP
Platforms</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84776"><code>KT-84776</code></a>
The test data manager misses the redundancy check in the update
mode</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84962"><code>KT-84962</code></a>
The test data manager misses -ea flag</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84388"><code>KT-84388</code></a>
Preserve the EOF status in the test data manager to avoid extra
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84362"><code>KT-84362</code></a>
Analysis API tests produce many warnings due to &quot;not yet loaded
registry&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84279"><code>KT-84279</code></a>
Test Data Manager fails on a clean build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83913"><code>KT-83913</code></a>
Exclude compiler-based Analysis API tests from Git tracking</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80379"><code>KT-80379</code></a>
Extract per-module test generators for AA tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84120"><code>KT-84120</code></a>
Move CLI modules out of kotlin-compiler-fe10-for-ide</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83200"><code>KT-83200</code></a>
Track external dependencies of the Analysis API modules</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82434"><code>KT-82434</code></a>
Light classes should prefer enum entries to properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84200"><code>KT-84200</code></a>
SLC: return type is not boxed for delegated methods with generic
original method</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-72451"><code>KT-72451</code></a>
&quot;CCE: class PsiPrimitiveType cannot be cast to class
PsiClassType&quot; with same-named enum class and typealias</li>
</ul>
<h3>Analysis API. PSI</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="add726ca8c"><code>add726c</code></a>
Add ChangeLog for 2.4.0-RC2</li>
<li><a
href="69a4a81ef2"><code>69a4a81</code></a>
[Wasm] Add binaryen per-file arguments</li>
<li><a
href="8907c635d4"><code>8907c63</code></a>
[KGP] Suppress duplicate compiler warning output when --warning-mode=all
is a...</li>
<li><a
href="f9bef128ea"><code>f9bef12</code></a>
[KGP] Add failing test for duplicate compiler warning output via
Problems API</li>
<li><a
href="7fe49c227a"><code>7fe49c2</code></a>
KT-86268: Use 2.4.0 toolchain for abiValidation with older CVs</li>
<li><a
href="13d25e2c58"><code>13d25e2</code></a>
KT-86268: Regression test added</li>
<li><a
href="f7d1a76541"><code>f7d1a76</code></a>
[JKlib] Fix JAR deserializer configuration.</li>
<li><a
href="5cec663aff"><code>5cec663</code></a>
[JKlib] Wire up JvmBuiltInClassDescriptorFactory</li>
<li><a
href="ef146114de"><code>ef14611</code></a>
Make the default stability of non-final classes <code>Unknown</code>
instead of <code>Stable</code></li>
<li><a
href="d76473afd2"><code>d76473a</code></a>
[Gradle] Fix GeneralNativeIT.shouldAllowToOverrideDownloadUrl test
failures</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.3.21...v2.4.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.jetbrains.kotlin:kotlin-serialization` from 2.3.21 to 2.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin:kotlin-serialization's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.0</h2>
<h2>Changelog</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83867"><code>KT-83867</code></a>
OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ
repo</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83723"><code>KT-83723</code></a>
[Analysis API] Enable experimental KDoc resolver by default</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83388"><code>KT-83388</code></a>
Analysis API: properly support KMP in KotlinPackageProvider</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65683"><code>KT-65683</code></a>
Analysis API: Dangling file session creation causes a
<code>computeIfAbsent</code> contract violation</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-78946"><code>KT-78946</code></a>
Evaluation of variable with local class in type parameter leads to
InventNamesForLocalClasses exception</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-68260"><code>KT-68260</code></a>
K2 AA: InvalidFirElementTypeException “For CALLABLE_REFERENCE_EXPRESSION
with text <code>::lam1</code>, unexpected element of type: no element
found” with illegal callable reference call</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70896"><code>KT-70896</code></a>
AA: False positive deprecation warning with override of built-in method
in JDK mapped class</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84711"><code>KT-84711</code></a>
K2 IDE sometimes loses FIR plugin-generated declarations after file
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84625"><code>KT-84625</code></a>
Analysis API: collectDesignationPath fails for nested classes inside
plugin-generated top-level classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84596"><code>KT-84596</code></a>
Improve K2 Jooq completion performance</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84525"><code>KT-84525</code></a>
KaValueParameterSymbol#getHasSynthesizedName returns false for
FirDeclarationOrigin.SubstitutionOverride.DeclarationSite</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83546"><code>KT-83546</code></a>
Kotlin analysis reach ClsCustomNavigationPolicy</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84259"><code>KT-84259</code></a>
Move CommonDefaultImportsProvider to the frontend independent
module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82945"><code>KT-82945</code></a>
Analysis API: KotlinIllegalArgumentExceptionWithAttachments: Expected
FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-71135"><code>KT-71135</code></a>
AA: exception from sealed inheritors checker when
<code>analyzeCopy</code></li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83905"><code>KT-83905</code></a>
Analysis API: Improve UX with test data</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84913"><code>KT-84913</code></a>
Extract compiler classes used by the PSI &amp; Analysis API to a
separate module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-64986"><code>KT-64986</code></a>
Analysis API: Implement Analysis API tests for different KMP
Platforms</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84776"><code>KT-84776</code></a>
The test data manager misses the redundancy check in the update
mode</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84962"><code>KT-84962</code></a>
The test data manager misses -ea flag</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84388"><code>KT-84388</code></a>
Preserve the EOF status in the test data manager to avoid extra
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84362"><code>KT-84362</code></a>
Analysis API tests produce many warnings due to &quot;not yet loaded
registry&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84279"><code>KT-84279</code></a>
Test Data Manager fails on a clean build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83913"><code>KT-83913</code></a>
Exclude compiler-based Analysis API tests from Git tracking</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80379"><code>KT-80379</code></a>
Extract per-module test generators for AA tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84120"><code>KT-84120</code></a>
Move CLI modules out of kotlin-compiler-fe10-for-ide</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83200"><code>KT-83200</code></a>
Track external dependencies of the Analysis API modules</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82434"><code>KT-82434</code></a>
Light classes should prefer enum entries to properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84200"><code>KT-84200</code></a>
SLC: return type is not boxed for delegated methods with generic
original method</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-72451"><code>KT-72451</code></a>
&quot;CCE: class PsiPrimitiveType cannot be cast to class
PsiClassType&quot; with same-named enum class and typealias</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin:kotlin-serialization's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.0</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83867"><code>KT-83867</code></a>
OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ
repo</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83723"><code>KT-83723</code></a>
[Analysis API] Enable experimental KDoc resolver by default</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83388"><code>KT-83388</code></a>
Analysis API: properly support KMP in KotlinPackageProvider</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65683"><code>KT-65683</code></a>
Analysis API: Dangling file session creation causes a
<code>computeIfAbsent</code> contract violation</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-78946"><code>KT-78946</code></a>
Evaluation of variable with local class in type parameter leads to
InventNamesForLocalClasses exception</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-68260"><code>KT-68260</code></a>
K2 AA: InvalidFirElementTypeException “For CALLABLE_REFERENCE_EXPRESSION
with text <code>::lam1</code>, unexpected element of type: no element
found” with illegal callable reference call</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70896"><code>KT-70896</code></a>
AA: False positive deprecation warning with override of built-in method
in JDK mapped class</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84711"><code>KT-84711</code></a>
K2 IDE sometimes loses FIR plugin-generated declarations after file
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84625"><code>KT-84625</code></a>
Analysis API: collectDesignationPath fails for nested classes inside
plugin-generated top-level classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84596"><code>KT-84596</code></a>
Improve K2 Jooq completion performance</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84525"><code>KT-84525</code></a>
KaValueParameterSymbol#getHasSynthesizedName returns false for
FirDeclarationOrigin.SubstitutionOverride.DeclarationSite</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83546"><code>KT-83546</code></a>
Kotlin analysis reach ClsCustomNavigationPolicy</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84259"><code>KT-84259</code></a>
Move CommonDefaultImportsProvider to the frontend independent
module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82945"><code>KT-82945</code></a>
Analysis API: KotlinIllegalArgumentExceptionWithAttachments: Expected
FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-71135"><code>KT-71135</code></a>
AA: exception from sealed inheritors checker when
<code>analyzeCopy</code></li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83905"><code>KT-83905</code></a>
Analysis API: Improve UX with test data</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84913"><code>KT-84913</code></a>
Extract compiler classes used by the PSI &amp; Analysis API to a
separate module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-64986"><code>KT-64986</code></a>
Analysis API: Implement Analysis API tests for different KMP
Platforms</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84776"><code>KT-84776</code></a>
The test data manager misses the redundancy check in the update
mode</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84962"><code>KT-84962</code></a>
The test data manager misses -ea flag</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84388"><code>KT-84388</code></a>
Preserve the EOF status in the test data manager to avoid extra
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84362"><code>KT-84362</code></a>
Analysis API tests produce many warnings due to &quot;not yet loaded
registry&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84279"><code>KT-84279</code></a>
Test Data Manager fails on a clean build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83913"><code>KT-83913</code></a>
Exclude compiler-based Analysis API tests from Git tracking</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80379"><code>KT-80379</code></a>
Extract per-module test generators for AA tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84120"><code>KT-84120</code></a>
Move CLI modules out of kotlin-compiler-fe10-for-ide</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83200"><code>KT-83200</code></a>
Track external dependencies of the Analysis API modules</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82434"><code>KT-82434</code></a>
Light classes should prefer enum entries to properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84200"><code>KT-84200</code></a>
SLC: return type is not boxed for delegated methods with generic
original method</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-72451"><code>KT-72451</code></a>
&quot;CCE: class PsiPrimitiveType cannot be cast to class
PsiClassType&quot; with same-named enum class and typealias</li>
</ul>
<h3>Analysis API. PSI</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="add726ca8c"><code>add726c</code></a>
Add ChangeLog for 2.4.0-RC2</li>
<li><a
href="69a4a81ef2"><code>69a4a81</code></a>
[Wasm] Add binaryen per-file arguments</li>
<li><a
href="8907c635d4"><code>8907c63</code></a>
[KGP] Suppress duplicate compiler warning output when --warning-mode=all
is a...</li>
<li><a
href="f9bef128ea"><code>f9bef12</code></a>
[KGP] Add failing test for duplicate compiler warning output via
Problems API</li>
<li><a
href="7fe49c227a"><code>7fe49c2</code></a>
KT-86268: Use 2.4.0 toolchain for abiValidation with older CVs</li>
<li><a
href="13d25e2c58"><code>13d25e2</code></a>
KT-86268: Regression test added</li>
<li><a
href="f7d1a76541"><code>f7d1a76</code></a>
[JKlib] Fix JAR deserializer configuration.</li>
<li><a
href="5cec663aff"><code>5cec663</code></a>
[JKlib] Wire up JvmBuiltInClassDescriptorFactory</li>
<li><a
href="ef146114de"><code>ef14611</code></a>
Make the default stability of non-final classes <code>Unknown</code>
instead of <code>Stable</code></li>
<li><a
href="d76473afd2"><code>d76473a</code></a>
[Gradle] Fix GeneralNativeIT.shouldAllowToOverrideDownloadUrl test
failures</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.3.21...v2.4.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.jetbrains.kotlin:kotlin-serialization` from 2.3.21 to 2.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin:kotlin-serialization's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.0</h2>
<h2>Changelog</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83867"><code>KT-83867</code></a>
OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ
repo</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83723"><code>KT-83723</code></a>
[Analysis API] Enable experimental KDoc resolver by default</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83388"><code>KT-83388</code></a>
Analysis API: properly support KMP in KotlinPackageProvider</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65683"><code>KT-65683</code></a>
Analysis API: Dangling file session creation causes a
<code>computeIfAbsent</code> contract violation</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-78946"><code>KT-78946</code></a>
Evaluation of variable with local class in type parameter leads to
InventNamesForLocalClasses exception</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-68260"><code>KT-68260</code></a>
K2 AA: InvalidFirElementTypeException “For CALLABLE_REFERENCE_EXPRESSION
with text <code>::lam1</code>, unexpected element of type: no element
found” with illegal callable reference call</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70896"><code>KT-70896</code></a>
AA: False positive deprecation warning with override of built-in method
in JDK mapped class</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84711"><code>KT-84711</code></a>
K2 IDE sometimes loses FIR plugin-generated declarations after file
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84625"><code>KT-84625</code></a>
Analysis API: collectDesignationPath fails for nested classes inside
plugin-generated top-level classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84596"><code>KT-84596</code></a>
Improve K2 Jooq completion performance</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84525"><code>KT-84525</code></a>
KaValueParameterSymbol#getHasSynthesizedName returns false for
FirDeclarationOrigin.SubstitutionOverride.DeclarationSite</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83546"><code>KT-83546</code></a>
Kotlin analysis reach ClsCustomNavigationPolicy</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84259"><code>KT-84259</code></a>
Move CommonDefaultImportsProvider to the frontend independent
module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82945"><code>KT-82945</code></a>
Analysis API: KotlinIllegalArgumentExceptionWithAttachments: Expected
FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-71135"><code>KT-71135</code></a>
AA: exception from sealed inheritors checker when
<code>analyzeCopy</code></li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83905"><code>KT-83905</code></a>
Analysis API: Improve UX with test data</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84913"><code>KT-84913</code></a>
Extract compiler classes used by the PSI &amp; Analysis API to a
separate module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-64986"><code>KT-64986</code></a>
Analysis API: Implement Analysis API tests for different KMP
Platforms</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84776"><code>KT-84776</code></a>
The test data manager misses the redundancy check in the update
mode</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84962"><code>KT-84962</code></a>
The test data manager misses -ea flag</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84388"><code>KT-84388</code></a>
Preserve the EOF status in the test data manager to avoid extra
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84362"><code>KT-84362</code></a>
Analysis API tests produce many warnings due to &quot;not yet loaded
registry&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84279"><code>KT-84279</code></a>
Test Data Manager fails on a clean build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83913"><code>KT-83913</code></a>
Exclude compiler-based Analysis API tests from Git tracking</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80379"><code>KT-80379</code></a>
Extract per-module test generators for AA tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84120"><code>KT-84120</code></a>
Move CLI modules out of kotlin-compiler-fe10-for-ide</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83200"><code>KT-83200</code></a>
Track external dependencies of the Analysis API modules</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82434"><code>KT-82434</code></a>
Light classes should prefer enum entries to properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84200"><code>KT-84200</code></a>
SLC: return type is not boxed for delegated methods with generic
original method</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-72451"><code>KT-72451</code></a>
&quot;CCE: class PsiPrimitiveType cannot be cast to class
PsiClassType&quot; with same-named enum class and typealias</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin:kotlin-serialization's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.0</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83867"><code>KT-83867</code></a>
OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ
repo</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83723"><code>KT-83723</code></a>
[Analysis API] Enable experimental KDoc resolver by default</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83388"><code>KT-83388</code></a>
Analysis API: properly support KMP in KotlinPackageProvider</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65683"><code>KT-65683</code></a>
Analysis API: Dangling file session creation causes a
<code>computeIfAbsent</code> contract violation</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-78946"><code>KT-78946</code></a>
Evaluation of variable with local class in type parameter leads to
InventNamesForLocalClasses exception</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-68260"><code>KT-68260</code></a>
K2 AA: InvalidFirElementTypeException “For CALLABLE_REFERENCE_EXPRESSION
with text <code>::lam1</code>, unexpected element of type: no element
found” with illegal callable reference call</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70896"><code>KT-70896</code></a>
AA: False positive deprecation warning with override of built-in method
in JDK mapped class</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84711"><code>KT-84711</code></a>
K2 IDE sometimes loses FIR plugin-generated declarations after file
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84625"><code>KT-84625</code></a>
Analysis API: collectDesignationPath fails for nested classes inside
plugin-generated top-level classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84596"><code>KT-84596</code></a>
Improve K2 Jooq completion performance</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84525"><code>KT-84525</code></a>
KaValueParameterSymbol#getHasSynthesizedName returns false for
FirDeclarationOrigin.SubstitutionOverride.DeclarationSite</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83546"><code>KT-83546</code></a>
Kotlin analysis reach ClsCustomNavigationPolicy</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84259"><code>KT-84259</code></a>
Move CommonDefaultImportsProvider to the frontend independent
module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82945"><code>KT-82945</code></a>
Analysis API: KotlinIllegalArgumentExceptionWithAttachments: Expected
FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-71135"><code>KT-71135</code></a>
AA: exception from sealed inheritors checker when
<code>analyzeCopy</code></li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83905"><code>KT-83905</code></a>
Analysis API: Improve UX with test data</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84913"><code>KT-84913</code></a>
Extract compiler classes used by the PSI &amp; Analysis API to a
separate module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-64986"><code>KT-64986</code></a>
Analysis API: Implement Analysis API tests for different KMP
Platforms</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84776"><code>KT-84776</code></a>
The test data manager misses the redundancy check in the update
mode</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84962"><code>KT-84962</code></a>
The test data manager misses -ea flag</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84388"><code>KT-84388</code></a>
Preserve the EOF status in the test data manager to avoid extra
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84362"><code>KT-84362</code></a>
Analysis API tests produce many warnings due to &quot;not yet loaded
registry&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84279"><code>KT-84279</code></a>
Test Data Manager fails on a clean build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83913"><code>KT-83913</code></a>
Exclude compiler-based Analysis API tests from Git tracking</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80379"><code>KT-80379</code></a>
Extract per-module test generators for AA tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84120"><code>KT-84120</code></a>
Move CLI modules out of kotlin-compiler-fe10-for-ide</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83200"><code>KT-83200</code></a>
Track external dependencies of the Analysis API modules</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82434"><code>KT-82434</code></a>
Light classes should prefer enum entries to properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84200"><code>KT-84200</code></a>
SLC: return type is not boxed for delegated methods with generic
original method</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-72451"><code>KT-72451</code></a>
&quot;CCE: class PsiPrimitiveType cannot be cast to class
PsiClassType&quot; with same-named enum class and typealias</li>
</ul>
<h3>Analysis API. PSI</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="add726ca8c"><code>add726c</code></a>
Add ChangeLog for 2.4.0-RC2</li>
<li><a
href="69a4a81ef2"><code>69a4a81</code></a>
[Wasm] Add binaryen per-file arguments</li>
<li><a
href="8907c635d4"><code>8907c63</code></a>
[KGP] Suppress duplicate compiler warning output when --warning-mode=all
is a...</li>
<li><a
href="f9bef128ea"><code>f9bef12</code></a>
[KGP] Add failing test for duplicate compiler warning output via
Problems API</li>
<li><a
href="7fe49c227a"><code>7fe49c2</code></a>
KT-86268: Use 2.4.0 toolchain for abiValidation with older CVs</li>
<li><a
href="13d25e2c58"><code>13d25e2</code></a>
KT-86268: Regression test added</li>
<li><a
href="f7d1a76541"><code>f7d1a76</code></a>
[JKlib] Fix JAR deserializer configuration.</li>
<li><a
href="5cec663aff"><code>5cec663</code></a>
[JKlib] Wire up JvmBuiltInClassDescriptorFactory</li>
<li><a
href="ef146114de"><code>ef14611</code></a>
Make the default stability of non-final classes <code>Unknown</code>
instead of <code>Stable</code></li>
<li><a
href="d76473afd2"><code>d76473a</code></a>
[Gradle] Fix GeneralNativeIT.shouldAllowToOverrideDownloadUrl test
failures</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.3.21...v2.4.0">compare
view</a></li>
</ul>
</details>
<br />

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: devcrocod <devcrocod@gmail.com>
2026-07-03 13:16:58 +02:00
dependabot[bot]
4531a4c846
chore(deps): bump dev.detekt:detekt-gradle-plugin from 2.0.0-alpha.3 to 2.0.0-alpha.5 (#849)
Bumps
[dev.detekt:detekt-gradle-plugin](https://github.com/detekt/detekt) from
2.0.0-alpha.3 to 2.0.0-alpha.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/detekt/detekt/releases">dev.detekt:detekt-gradle-plugin's
releases</a>.</em></p>
<blockquote>
<h2>v2.0.0-alpha.5</h2>
<h2>2.0.0-alpha.5 - 2026-06-17</h2>
<p>This is a hotfix release for <code>2.0.0-alpha.4</code> where we
fixed 2 bugs that were preventing detekt from running correctly.</p>
<h3>Changelog</h3>
<ul>
<li>fix: stop leaking ktlint-repackage as a transitive dependency - <a
href="https://redirect.github.com/detekt/detekt/pull/9391">#9391</a></li>
<li>fix: exclude gradle-public-api from published POM - <a
href="https://redirect.github.com/detekt/detekt/pull/9408">#9408</a></li>
<li>Stop accepting unsupported API or language versions passed to CLI -
<a
href="https://redirect.github.com/detekt/detekt/pull/9410">#9410</a></li>
</ul>
<h2>v2.0.0-alpha.4</h2>
<h2>2.0.0-alpha.4 - 2026-06-13</h2>
<p>This is an alpha release of Detekt 2.0.0. Is built against Kotlin
2.4.0, Gradle 9.5.1, AGP 9.2.1 and is tested against JDK 25.</p>
<h3>Notable Changes</h3>
<ul>
<li>Support Kotlin 2.4.0 - <a
href="https://redirect.github.com/detekt/detekt/pull/9218">#9218</a></li>
<li>Add new rule <code>LeakingSessionBoundType</code> - <a
href="https://redirect.github.com/detekt/detekt/pull/9242">#9242</a></li>
<li>Apply the <code>indent_style</code> configuration to all the ktlint
wrapper rules (previsouly this was applied only to the
<code>Indentation</code> rule) - <a
href="https://redirect.github.com/detekt/detekt/pull/9315">#9315</a></li>
</ul>
<h3>Breaking Changes</h3>
<ul>
<li>Expose Glob-to-Regex functions in <code>psi-utils</code> - <a
href="https://redirect.github.com/detekt/detekt/pull/9340">#9340</a></li>
<li>Make <code>Detektion</code> immutable - <a
href="https://redirect.github.com/detekt/detekt/pull/8583">#8583</a></li>
</ul>
<h3>Changelog</h3>
<ul>
<li>fix: prevent ArrayPrimitive crash on unresolved types - <a
href="https://redirect.github.com/detekt/detekt/pull/9364">#9364</a></li>
<li>Update ktlint documentation links - <a
href="https://redirect.github.com/detekt/detekt/pull/9354">#9354</a></li>
<li>Fix PrintStackTrace nested call detection - <a
href="https://redirect.github.com/detekt/detekt/pull/9352">#9352</a></li>
<li>Fix unused import false positive for companion object member
extension properties - <a
href="https://redirect.github.com/detekt/detekt/pull/9349">#9349</a></li>
<li>Accept punctuation after a link - <a
href="https://redirect.github.com/detekt/detekt/pull/9341">#9341</a></li>
<li>Fixes UnnecessaryFullyQualifiedName false positive with explicit
import shadowing - <a
href="https://redirect.github.com/detekt/detekt/pull/9329">#9329</a></li>
<li>docs: fix KMP type resolution task names - <a
href="https://redirect.github.com/detekt/detekt/pull/9316">#9316</a></li>
<li>Stop publishing ktlint-repackage - <a
href="https://redirect.github.com/detekt/detekt/pull/9314">#9314</a></li>
<li>Stop exposing ktlint's StandardRule to detekt-rules-ktlint-wrapper
consumers - <a
href="https://redirect.github.com/detekt/detekt/pull/9313">#9313</a></li>
<li>Include ktlint-repackage in ktlint-wrapper JAR - <a
href="https://redirect.github.com/detekt/detekt/pull/9312">#9312</a></li>
<li>Declare DGP compatibility with Gradle's configuration cache - <a
href="https://redirect.github.com/detekt/detekt/pull/9311">#9311</a></li>
<li>Forward languageVersionSettings to KotlinAnalysisApiEngine.compile -
<a
href="https://redirect.github.com/detekt/detekt/pull/9305">#9305</a></li>
<li>docs: add ForbiddenImport configuration example - <a
href="https://redirect.github.com/detekt/detekt/pull/9302">#9302</a></li>
<li>Fix <code>UnnecessaryFullyQualifiedName</code> clashes with kotlin
package name - <a
href="https://redirect.github.com/detekt/detekt/pull/9289">#9289</a></li>
<li>Remove excludeImportStatements from Deprecation rule - <a
href="https://redirect.github.com/detekt/detekt/pull/9287">#9287</a></li>
<li>Improve repackaging of Analysis API dependencies - <a
href="https://redirect.github.com/detekt/detekt/pull/9285">#9285</a></li>
<li>MaxChainedCallsOnSameLine - Fix AA type leaks - <a
href="https://redirect.github.com/detekt/detekt/pull/9261">#9261</a></li>
<li>SuspendFunSwallowedCancellation - Fix AA type leaks - <a
href="https://redirect.github.com/detekt/detekt/pull/9256">#9256</a></li>
<li>feat: Add exhaustive option to OutdatedDocumentation rule, also
improve error messages - <a
href="https://redirect.github.com/detekt/detekt/pull/9255">#9255</a></li>
<li>Excluding generated sources by default - <a
href="https://redirect.github.com/detekt/detekt/pull/9251">#9251</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9c6ced6339"><code>9c6ced6</code></a>
Stop accepting unsupported API or language versions passed to CLI (<a
href="https://redirect.github.com/detekt/detekt/issues/9410">#9410</a>)</li>
<li><a
href="44526f4564"><code>44526f4</code></a>
fix: exclude gradle-public-api from published POM (<a
href="https://redirect.github.com/detekt/detekt/issues/9408">#9408</a>)</li>
<li><a
href="6bad2e8a81"><code>6bad2e8</code></a>
fix: stop leaking ktlint-repackage as a transitive dependency (<a
href="https://redirect.github.com/detekt/detekt/issues/9391">#9391</a>)</li>
<li><a
href="fd5683e47a"><code>fd5683e</code></a>
Update dependency path-to-regexp to v0.2.5 (<a
href="https://redirect.github.com/detekt/detekt/issues/9397">#9397</a>)</li>
<li><a
href="7865b27e71"><code>7865b27</code></a>
fix: resolve npm security vulnerabilities in website and bots
dependencies (#...</li>
<li><a
href="bb582d5e6a"><code>bb582d5</code></a>
Unbreak snapshot publishing (<a
href="https://redirect.github.com/detekt/detekt/issues/9394">#9394</a>)</li>
<li><a
href="69866dd873"><code>69866dd</code></a>
Update caniuse browser definitions (<a
href="https://redirect.github.com/detekt/detekt/issues/9393">#9393</a>)</li>
<li><a
href="bfd3b5d4ef"><code>bfd3b5d</code></a>
Add Docs for 2.0.0-alpha.4 (<a
href="https://redirect.github.com/detekt/detekt/issues/9388">#9388</a>)</li>
<li><a
href="60300b2d43"><code>60300b2</code></a>
Switch to vanniktech/gradle-maven-publish-plugin for publishing (<a
href="https://redirect.github.com/detekt/detekt/issues/9357">#9357</a>)</li>
<li><a
href="63e0777f45"><code>63e0777</code></a>
Update gradle/actions digest to 3f131e8 (<a
href="https://redirect.github.com/detekt/detekt/issues/9386">#9386</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/detekt/detekt/compare/v2.0.0-alpha.3...v2.0.0-alpha.5">compare
view</a></li>
</ul>
</details>
<br />

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: devcrocod <devcrocod@gmail.com>
2026-07-02 22:37:39 +02:00
dependabot[bot]
1866effd07
chore(deps): bump the ktor group across 1 directory with 15 updates (#832)
Bumps the ktor group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [io.ktor:ktor-client-apache5](https://github.com/ktorio/ktor) |
`3.4.3` | `3.5.1` |
| [io.ktor:ktor-client-auth](https://github.com/ktorio/ktor) | `3.4.3` |
`3.5.1` |
| [io.ktor:ktor-client-core](https://github.com/ktorio/ktor) | `3.4.3` |
`3.5.1` |
| [io.ktor:ktor-client-logging](https://github.com/ktorio/ktor) |
`3.4.3` | `3.5.1` |
|
[io.ktor:ktor-server-content-negotiation](https://github.com/ktorio/ktor)
| `3.4.3` | `3.5.1` |
|
[io.ktor:ktor-client-content-negotiation](https://github.com/ktorio/ktor)
| `3.4.3` | `3.5.1` |
|
[io.ktor:ktor-serialization-kotlinx-json](https://github.com/ktorio/ktor)
| `3.4.3` | `3.5.1` |
| [io.ktor:ktor-server-auth](https://github.com/ktorio/ktor) | `3.4.3` |
`3.5.1` |
| [io.ktor:ktor-server-core](https://github.com/ktorio/ktor) | `3.4.3` |
`3.5.1` |
| [io.ktor:ktor-server-sse](https://github.com/ktorio/ktor) | `3.4.3` |
`3.5.1` |
| [io.ktor:ktor-server-websockets](https://github.com/ktorio/ktor) |
`3.4.3` | `3.5.1` |
| [io.ktor:ktor-client-mock](https://github.com/ktorio/ktor) | `3.4.3` |
`3.5.1` |
| [io.ktor:ktor-server-test-host](https://github.com/ktorio/ktor) |
`3.4.3` | `3.5.1` |
| [io.ktor:ktor-client-cio](https://github.com/ktorio/ktor) | `3.4.3` |
`3.5.1` |
| [io.ktor:ktor-server-cio](https://github.com/ktorio/ktor) | `3.4.3` |
`3.5.1` |


Updates `io.ktor:ktor-client-apache5` from 3.4.3 to 3.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/releases">io.ktor:ktor-client-apache5's
releases</a>.</em></p>
<blockquote>
<h2>3.5.1</h2>
<blockquote>
<p>Published 25 June 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9492">KTOR-9492</a>
OpenAPI plugin: handle requireXxx functions in compiler plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9569">KTOR-9569</a> Add
more details for KDoc of BearerAuthConfig.sendWithoutRequest</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9571">KTOR-9571</a> Add
KDoc for BearerAuthConfig.realm</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9570">KTOR-9570</a> Add
Kdoc for BearerAuthConfig.refreshTokens</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9646">KTOR-9646</a> Fix
Kotlin 2.4.0 compiler plugin breaking changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9591">KTOR-9591</a>
OpenAPI: <code>@JsonClassDiscriminator</code> on sealed types is ignored
when generating OpenAPI discriminator schema</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9597">KTOR-9597</a>
OpenAPI: Schema name collisions because<code>@SerialName</code> of
sealed subtypes is used as <code>components.schemas</code> key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9601">KTOR-9601</a>
OpenAPI: nullable <a
href="https://github.com/JvmInline"><code>@​JvmInline</code></a> value
class loses nullability in generated schema</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9620">KTOR-9620</a> Some
issues related to digest authentication in 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9623">KTOR-9623</a>
Digest Auth: server must respond with one WWW-Authenticate header for
each supported algorithm</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9624">KTOR-9624</a>
Digest Auth: &quot;Unsupported charset in digest authentication
header&quot; for a charset name in lowercase</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9630">KTOR-9630</a>
Digest Auth: The plugin sends incorrect nonce when server responds with
multiple WWW-Authenticate headers</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9565">KTOR-9565</a>
WebRTC: Peer stops receiving messages after a while on iOS</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9610">KTOR-9610</a>
WebRtcPeerConnection::close causes ClosedReceiveChannelException for
other peer</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9633">KTOR-9633</a>
WebRTC statistics fetching race condition</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9603">KTOR-9603</a>
Structured concurrency is violated in WebRTC tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9639">KTOR-9639</a>
Darwin: WebSocket client crashes the process when a PONG arrives after
the session is closed</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9575">KTOR-9575</a>
Darwin: findCharset(&quot;UTF-16&quot;) maps to
NSUTF16LittleEndianStringEncoding causing decoding failure for UTF-16
content with BOM</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9661">KTOR-9661</a>
HttpCache: InvalidCacheStateException is thrown on 304 when no cached
entry matches varyKeys</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9673">KTOR-9673</a>
Caching always missing with Content Negotiation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9596">KTOR-9596</a>
HttpTimeout: HttpRequestTimeoutException on any request with runTest and
request timeout defined since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9632">KTOR-9632</a>
HttpRequestBuilder.timeout call removes capabilities set in
DefaultRequest</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9252">KTOR-9252</a>
ContentEncoding: Incomplete gzip response causes client/server to hang
indefinitely</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9670">KTOR-9670</a>
Compression: The plugin ignores Accept-Encoding q=0 and most-specific
matching</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9614">KTOR-9614</a> Zstd
Compression: &quot;Destination buffer is too small&quot; exception for a
particular sequence of bytes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9636">KTOR-9636</a> CORS
plugin drops OPTIONS preflight requests when allowSameOrigin is on</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9659">KTOR-9659</a> CORS
is skipped when the Origin header contains an IPv6 address</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9574">KTOR-9574</a>
ContentNegotiation: The charset of <code>Accept-Charset</code> header is
used for response deserialization</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9606">KTOR-9606</a>
KotlinxSerializationConverter: it fails to deserialize an empty channel
closed with a delay</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9617">KTOR-9617</a>
OutputStreamContent and WriterContent can exhaust Dispatchers.IO</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9629">KTOR-9629</a>
RawSourceChannel: coroutine cancellation is not propagated to the
RawSource</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8870">KTOR-8870</a>
File.readChannel: do not close a non-opened file and ignore closing
exceptions</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9460">KTOR-9460</a>
Curl: Can't build shared library with Ktor 3.4.2</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9607">KTOR-9607</a>
Crash on Android 7: NoSuchMethodError getInstanceStrong() since
3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9595">KTOR-9595</a> CIO:
The engine imports <code>node:net</code> statically and breaks
wasmJsBrowser webpack build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9615">KTOR-9615</a>
Apache5: The underlying request is not aborted when coroutine Job is
cancelled</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8443">KTOR-8443</a>
RoutingBuilder.contentType does not use parameters when matching</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9425">KTOR-9425</a>
SessionTransportTransformerEncrypt init block uses wrong IV size for
AES-256 (regression of KTOR-661)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9621">KTOR-9621</a>
RateLimit plugin is bypassed when the nested authenticate block rejects
the request</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8766">KTOR-8766</a> DI:
The close method is called twice on cleanup of AutoCloseable</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8695">KTOR-8695</a>
GMTDate() being offset by 369 years on Windows</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9589">KTOR-9589</a>
Duplicate PROPERTY_SETTER target in <code>@InternalAPI</code>
annotation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/blob/main/CHANGELOG.md">io.ktor:ktor-client-apache5's
changelog</a>.</em></p>
<blockquote>
<h1>3.5.1</h1>
<blockquote>
<p>Published 25 June 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9492">KTOR-9492</a>
OpenAPI plugin: handle requireXxx functions in compiler plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9569">KTOR-9569</a> Add
more details for KDoc of BearerAuthConfig.sendWithoutRequest</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9571">KTOR-9571</a> Add
KDoc for BearerAuthConfig.realm</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9570">KTOR-9570</a> Add
Kdoc for BearerAuthConfig.refreshTokens</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9646">KTOR-9646</a> Fix
Kotlin 2.4.0 compiler plugin breaking changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9591">KTOR-9591</a>
OpenAPI: <code>@JsonClassDiscriminator</code> on sealed types is ignored
when generating OpenAPI discriminator schema</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9597">KTOR-9597</a>
OpenAPI: Schema name collisions because<code>@SerialName</code> of
sealed subtypes is used as <code>components.schemas</code> key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9601">KTOR-9601</a>
OpenAPI: nullable <a
href="https://github.com/JvmInline"><code>@​JvmInline</code></a> value
class loses nullability in generated schema</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9620">KTOR-9620</a> Some
issues related to digest authentication in 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9623">KTOR-9623</a>
Digest Auth: server must respond with one WWW-Authenticate header for
each supported algorithm</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9624">KTOR-9624</a>
Digest Auth: &quot;Unsupported charset in digest authentication
header&quot; for a charset name in lowercase</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9630">KTOR-9630</a>
Digest Auth: The plugin sends incorrect nonce when server responds with
multiple WWW-Authenticate headers</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9565">KTOR-9565</a>
WebRTC: Peer stops receiving messages after a while on iOS</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9610">KTOR-9610</a>
WebRtcPeerConnection::close causes ClosedReceiveChannelException for
other peer</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9633">KTOR-9633</a>
WebRTC statistics fetching race condition</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9603">KTOR-9603</a>
Structured concurrency is violated in WebRTC tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9639">KTOR-9639</a>
Darwin: WebSocket client crashes the process when a PONG arrives after
the session is closed</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9575">KTOR-9575</a>
Darwin: findCharset(&quot;UTF-16&quot;) maps to
NSUTF16LittleEndianStringEncoding causing decoding failure for UTF-16
content with BOM</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9661">KTOR-9661</a>
HttpCache: InvalidCacheStateException is thrown on 304 when no cached
entry matches varyKeys</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9673">KTOR-9673</a>
Caching always missing with Content Negotiation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9596">KTOR-9596</a>
HttpTimeout: HttpRequestTimeoutException on any request with runTest and
request timeout defined since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9632">KTOR-9632</a>
HttpRequestBuilder.timeout call removes capabilities set in
DefaultRequest</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9252">KTOR-9252</a>
ContentEncoding: Incomplete gzip response causes client/server to hang
indefinitely</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9670">KTOR-9670</a>
Compression: The plugin ignores Accept-Encoding q=0 and most-specific
matching</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9614">KTOR-9614</a> Zstd
Compression: &quot;Destination buffer is too small&quot; exception for a
particular sequence of bytes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9636">KTOR-9636</a> CORS
plugin drops OPTIONS preflight requests when allowSameOrigin is on</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9659">KTOR-9659</a> CORS
is skipped when the Origin header contains an IPv6 address</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9574">KTOR-9574</a>
ContentNegotiation: The charset of <code>Accept-Charset</code> header is
used for response deserialization</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9606">KTOR-9606</a>
KotlinxSerializationConverter: it fails to deserialize an empty channel
closed with a delay</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9617">KTOR-9617</a>
OutputStreamContent and WriterContent can exhaust Dispatchers.IO</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9629">KTOR-9629</a>
RawSourceChannel: coroutine cancellation is not propagated to the
RawSource</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8870">KTOR-8870</a>
File.readChannel: do not close a non-opened file and ignore closing
exceptions</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9460">KTOR-9460</a>
Curl: Can't build shared library with Ktor 3.4.2</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9607">KTOR-9607</a>
Crash on Android 7: NoSuchMethodError getInstanceStrong() since
3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9595">KTOR-9595</a> CIO:
The engine imports <code>node:net</code> statically and breaks
wasmJsBrowser webpack build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9615">KTOR-9615</a>
Apache5: The underlying request is not aborted when coroutine Job is
cancelled</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8443">KTOR-8443</a>
RoutingBuilder.contentType does not use parameters when matching</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9425">KTOR-9425</a>
SessionTransportTransformerEncrypt init block uses wrong IV size for
AES-256 (regression of KTOR-661)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9621">KTOR-9621</a>
RateLimit plugin is bypassed when the nested authenticate block rejects
the request</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8766">KTOR-8766</a> DI:
The close method is called twice on cleanup of AutoCloseable</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8695">KTOR-8695</a>
GMTDate() being offset by 369 years on Windows</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9589">KTOR-9589</a>
Duplicate PROPERTY_SETTER target in <a
href="https://github.com/InternalAPI"><code>@​InternalAPI</code></a>
annotation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5ba9d6fdf1"><code>5ba9d6f</code></a>
Release 3.5.1 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5719">#5719</a>)</li>
<li><a
href="a4f145d16d"><code>a4f145d</code></a>
KTOR-9661 HttpCache: InvalidCacheStateException is thrown on 304 when…
(<a
href="https://redirect.github.com/ktorio/ktor/issues/5701">#5701</a>)</li>
<li><a
href="2caf27824c"><code>2caf278</code></a>
Fix failing :ktor-io:compileDarwinMainKotlinMetadata (<a
href="https://redirect.github.com/ktorio/ktor/issues/5716">#5716</a>)</li>
<li><a
href="257de90b60"><code>257de90</code></a>
KTOR-8766 Fix multiple invocations of close from DI</li>
<li><a
href="e77a16813c"><code>e77a168</code></a>
Fix cache misses with content negotiation 3x (<a
href="https://redirect.github.com/ktorio/ktor/issues/5714">#5714</a>)</li>
<li><a
href="ed22950b63"><code>ed22950</code></a>
Make huge post test less huge</li>
<li><a
href="f329069ed4"><code>f329069</code></a>
Update dependency com.github.luben:zstd-jni to v1.5.7-11</li>
<li><a
href="6ecd072937"><code>6ecd072</code></a>
Update dependency io.swagger.parser.v3:swagger-parser to v2.1.44</li>
<li><a
href="a0534cd2e6"><code>a0534cd</code></a>
Update dependency io.pebbletemplates:pebble to v4.1.2</li>
<li><a
href="8647e53f4b"><code>8647e53</code></a>
Update dependency com.typesafe:config to v1.4.9</li>
<li>Additional commits viewable in <a
href="https://github.com/ktorio/ktor/compare/3.4.3...3.5.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.ktor:ktor-client-auth` from 3.4.3 to 3.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/releases">io.ktor:ktor-client-auth's
releases</a>.</em></p>
<blockquote>
<h2>3.5.1</h2>
<blockquote>
<p>Published 25 June 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9492">KTOR-9492</a>
OpenAPI plugin: handle requireXxx functions in compiler plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9569">KTOR-9569</a> Add
more details for KDoc of BearerAuthConfig.sendWithoutRequest</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9571">KTOR-9571</a> Add
KDoc for BearerAuthConfig.realm</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9570">KTOR-9570</a> Add
Kdoc for BearerAuthConfig.refreshTokens</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9646">KTOR-9646</a> Fix
Kotlin 2.4.0 compiler plugin breaking changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9591">KTOR-9591</a>
OpenAPI: <code>@JsonClassDiscriminator</code> on sealed types is ignored
when generating OpenAPI discriminator schema</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9597">KTOR-9597</a>
OpenAPI: Schema name collisions because<code>@SerialName</code> of
sealed subtypes is used as <code>components.schemas</code> key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9601">KTOR-9601</a>
OpenAPI: nullable <a
href="https://github.com/JvmInline"><code>@​JvmInline</code></a> value
class loses nullability in generated schema</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9620">KTOR-9620</a> Some
issues related to digest authentication in 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9623">KTOR-9623</a>
Digest Auth: server must respond with one WWW-Authenticate header for
each supported algorithm</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9624">KTOR-9624</a>
Digest Auth: &quot;Unsupported charset in digest authentication
header&quot; for a charset name in lowercase</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9630">KTOR-9630</a>
Digest Auth: The plugin sends incorrect nonce when server responds with
multiple WWW-Authenticate headers</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9565">KTOR-9565</a>
WebRTC: Peer stops receiving messages after a while on iOS</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9610">KTOR-9610</a>
WebRtcPeerConnection::close causes ClosedReceiveChannelException for
other peer</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9633">KTOR-9633</a>
WebRTC statistics fetching race condition</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9603">KTOR-9603</a>
Structured concurrency is violated in WebRTC tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9639">KTOR-9639</a>
Darwin: WebSocket client crashes the process when a PONG arrives after
the session is closed</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9575">KTOR-9575</a>
Darwin: findCharset(&quot;UTF-16&quot;) maps to
NSUTF16LittleEndianStringEncoding causing decoding failure for UTF-16
content with BOM</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9661">KTOR-9661</a>
HttpCache: InvalidCacheStateException is thrown on 304 when no cached
entry matches varyKeys</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9673">KTOR-9673</a>
Caching always missing with Content Negotiation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9596">KTOR-9596</a>
HttpTimeout: HttpRequestTimeoutException on any request with runTest and
request timeout defined since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9632">KTOR-9632</a>
HttpRequestBuilder.timeout call removes capabilities set in
DefaultRequest</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9252">KTOR-9252</a>
ContentEncoding: Incomplete gzip response causes client/server to hang
indefinitely</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9670">KTOR-9670</a>
Compression: The plugin ignores Accept-Encoding q=0 and most-specific
matching</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9614">KTOR-9614</a> Zstd
Compression: &quot;Destination buffer is too small&quot; exception for a
particular sequence of bytes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9636">KTOR-9636</a> CORS
plugin drops OPTIONS preflight requests when allowSameOrigin is on</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9659">KTOR-9659</a> CORS
is skipped when the Origin header contains an IPv6 address</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9574">KTOR-9574</a>
ContentNegotiation: The charset of <code>Accept-Charset</code> header is
used for response deserialization</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9606">KTOR-9606</a>
KotlinxSerializationConverter: it fails to deserialize an empty channel
closed with a delay</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9617">KTOR-9617</a>
OutputStreamContent and WriterContent can exhaust Dispatchers.IO</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9629">KTOR-9629</a>
RawSourceChannel: coroutine cancellation is not propagated to the
RawSource</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8870">KTOR-8870</a>
File.readChannel: do not close a non-opened file and ignore closing
exceptions</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9460">KTOR-9460</a>
Curl: Can't build shared library with Ktor 3.4.2</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9607">KTOR-9607</a>
Crash on Android 7: NoSuchMethodError getInstanceStrong() since
3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9595">KTOR-9595</a> CIO:
The engine imports <code>node:net</code> statically and breaks
wasmJsBrowser webpack build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9615">KTOR-9615</a>
Apache5: The underlying request is not aborted when coroutine Job is
cancelled</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8443">KTOR-8443</a>
RoutingBuilder.contentType does not use parameters when matching</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9425">KTOR-9425</a>
SessionTransportTransformerEncrypt init block uses wrong IV size for
AES-256 (regression of KTOR-661)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9621">KTOR-9621</a>
RateLimit plugin is bypassed when the nested authenticate block rejects
the request</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8766">KTOR-8766</a> DI:
The close method is called twice on cleanup of AutoCloseable</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8695">KTOR-8695</a>
GMTDate() being offset by 369 years on Windows</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9589">KTOR-9589</a>
Duplicate PROPERTY_SETTER target in <code>@InternalAPI</code>
annotation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/blob/main/CHANGELOG.md">io.ktor:ktor-client-auth's
changelog</a>.</em></p>
<blockquote>
<h1>3.5.1</h1>
<blockquote>
<p>Published 25 June 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9492">KTOR-9492</a>
OpenAPI plugin: handle requireXxx functions in compiler plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9569">KTOR-9569</a> Add
more details for KDoc of BearerAuthConfig.sendWithoutRequest</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9571">KTOR-9571</a> Add
KDoc for BearerAuthConfig.realm</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9570">KTOR-9570</a> Add
Kdoc for BearerAuthConfig.refreshTokens</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9646">KTOR-9646</a> Fix
Kotlin 2.4.0 compiler plugin breaking changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9591">KTOR-9591</a>
OpenAPI: <code>@JsonClassDiscriminator</code> on sealed types is ignored
when generating OpenAPI discriminator schema</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9597">KTOR-9597</a>
OpenAPI: Schema name collisions because<code>@SerialName</code> of
sealed subtypes is used as <code>components.schemas</code> key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9601">KTOR-9601</a>
OpenAPI: nullable <a
href="https://github.com/JvmInline"><code>@​JvmInline</code></a> value
class loses nullability in generated schema</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9620">KTOR-9620</a> Some
issues related to digest authentication in 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9623">KTOR-9623</a>
Digest Auth: server must respond with one WWW-Authenticate header for
each supported algorithm</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9624">KTOR-9624</a>
Digest Auth: &quot;Unsupported charset in digest authentication
header&quot; for a charset name in lowercase</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9630">KTOR-9630</a>
Digest Auth: The plugin sends incorrect nonce when server responds with
multiple WWW-Authenticate headers</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9565">KTOR-9565</a>
WebRTC: Peer stops receiving messages after a while on iOS</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9610">KTOR-9610</a>
WebRtcPeerConnection::close causes ClosedReceiveChannelException for
other peer</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9633">KTOR-9633</a>
WebRTC statistics fetching race condition</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9603">KTOR-9603</a>
Structured concurrency is violated in WebRTC tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9639">KTOR-9639</a>
Darwin: WebSocket client crashes the process when a PONG arrives after
the session is closed</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9575">KTOR-9575</a>
Darwin: findCharset(&quot;UTF-16&quot;) maps to
NSUTF16LittleEndianStringEncoding causing decoding failure for UTF-16
content with BOM</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9661">KTOR-9661</a>
HttpCache: InvalidCacheStateException is thrown on 304 when no cached
entry matches varyKeys</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9673">KTOR-9673</a>
Caching always missing with Content Negotiation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9596">KTOR-9596</a>
HttpTimeout: HttpRequestTimeoutException on any request with runTest and
request timeout defined since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9632">KTOR-9632</a>
HttpRequestBuilder.timeout call removes capabilities set in
DefaultRequest</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9252">KTOR-9252</a>
ContentEncoding: Incomplete gzip response causes client/server to hang
indefinitely</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9670">KTOR-9670</a>
Compression: The plugin ignores Accept-Encoding q=0 and most-specific
matching</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9614">KTOR-9614</a> Zstd
Compression: &quot;Destination buffer is too small&quot; exception for a
particular sequence of bytes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9636">KTOR-9636</a> CORS
plugin drops OPTIONS preflight requests when allowSameOrigin is on</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9659">KTOR-9659</a> CORS
is skipped when the Origin header contains an IPv6 address</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9574">KTOR-9574</a>
ContentNegotiation: The charset of <code>Accept-Charset</code> header is
used for response deserialization</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9606">KTOR-9606</a>
KotlinxSerializationConverter: it fails to deserialize an empty channel
closed with a delay</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9617">KTOR-9617</a>
OutputStreamContent and WriterContent can exhaust Dispatchers.IO</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9629">KTOR-9629</a>
RawSourceChannel: coroutine cancellation is not propagated to the
RawSource</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8870">KTOR-8870</a>
File.readChannel: do not close a non-opened file and ignore closing
exceptions</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9460">KTOR-9460</a>
Curl: Can't build shared library with Ktor 3.4.2</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9607">KTOR-9607</a>
Crash on Android 7: NoSuchMethodError getInstanceStrong() since
3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9595">KTOR-9595</a> CIO:
The engine imports <code>node:net</code> statically and breaks
wasmJsBrowser webpack build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9615">KTOR-9615</a>
Apache5: The underlying request is not aborted when coroutine Job is
cancelled</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8443">KTOR-8443</a>
RoutingBuilder.contentType does not use parameters when matching</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9425">KTOR-9425</a>
SessionTransportTransformerEncrypt init block uses wrong IV size for
AES-256 (regression of KTOR-661)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9621">KTOR-9621</a>
RateLimit plugin is bypassed when the nested authenticate block rejects
the request</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8766">KTOR-8766</a> DI:
The close method is called twice on cleanup of AutoCloseable</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8695">KTOR-8695</a>
GMTDate() being offset by 369 years on Windows</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9589">KTOR-9589</a>
Duplicate PROPERTY_SETTER target in <a
href="https://github.com/InternalAPI"><code>@​InternalAPI</code></a>
annotation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5ba9d6fdf1"><code>5ba9d6f</code></a>
Release 3.5.1 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5719">#5719</a>)</li>
<li><a
href="a4f145d16d"><code>a4f145d</code></a>
KTOR-9661 HttpCache: InvalidCacheStateException is thrown on 304 when…
(<a
href="https://redirect.github.com/ktorio/ktor/issues/5701">#5701</a>)</li>
<li><a
href="2caf27824c"><code>2caf278</code></a>
Fix failing :ktor-io:compileDarwinMainKotlinMetadata (<a
href="https://redirect.github.com/ktorio/ktor/issues/5716">#5716</a>)</li>
<li><a
href="257de90b60"><code>257de90</code></a>
KTOR-8766 Fix multiple invocations of close from DI</li>
<li><a
href="e77a16813c"><code>e77a168</code></a>
Fix cache misses with content negotiation 3x (<a
href="https://redirect.github.com/ktorio/ktor/issues/5714">#5714</a>)</li>
<li><a
href="ed22950b63"><code>ed22950</code></a>
Make huge post test less huge</li>
<li><a
href="f329069ed4"><code>f329069</code></a>
Update dependency com.github.luben:zstd-jni to v1.5.7-11</li>
<li><a
href="6ecd072937"><code>6ecd072</code></a>
Update dependency io.swagger.parser.v3:swagger-parser to v2.1.44</li>
<li><a
href="a0534cd2e6"><code>a0534cd</code></a>
Update dependency io.pebbletemplates:pebble to v4.1.2</li>
<li><a
href="8647e53f4b"><code>8647e53</code></a>
Update dependency com.typesafe:config to v1.4.9</li>
<li>Additional commits viewable in <a
href="https://github.com/ktorio/ktor/compare/3.4.3...3.5.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.ktor:ktor-client-core` from 3.4.3 to 3.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/releases">io.ktor:ktor-client-core's
releases</a>.</em></p>
<blockquote>
<h2>3.5.1</h2>
<blockquote>
<p>Published 25 June 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9492">KTOR-9492</a>
OpenAPI plugin: handle requireXxx functions in compiler plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9569">KTOR-9569</a> Add
more details for KDoc of BearerAuthConfig.sendWithoutRequest</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9571">KTOR-9571</a> Add
KDoc for BearerAuthConfig.realm</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9570">KTOR-9570</a> Add
Kdoc for BearerAuthConfig.refreshTokens</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9646">KTOR-9646</a> Fix
Kotlin 2.4.0 compiler plugin breaking changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9591">KTOR-9591</a>
OpenAPI: <code>@JsonClassDiscriminator</code> on sealed types is ignored
when generating OpenAPI discriminator schema</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9597">KTOR-9597</a>
OpenAPI: Schema name collisions because<code>@SerialName</code> of
sealed subtypes is used as <code>components.schemas</code> key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9601">KTOR-9601</a>
OpenAPI: nullable <a
href="https://github.com/JvmInline"><code>@​JvmInline</code></a> value
class loses nullability in generated schema</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9620">KTOR-9620</a> Some
issues related to digest authentication in 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9623">KTOR-9623</a>
Digest Auth: server must respond with one WWW-Authenticate header for
each supported algorithm</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9624">KTOR-9624</a>
Digest Auth: &quot;Unsupported charset in digest authentication
header&quot; for a charset name in lowercase</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9630">KTOR-9630</a>
Digest Auth: The plugin sends incorrect nonce when server responds with
multiple WWW-Authenticate headers</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9565">KTOR-9565</a>
WebRTC: Peer stops receiving messages after a while on iOS</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9610">KTOR-9610</a>
WebRtcPeerConnection::close causes ClosedReceiveChannelException for
other peer</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9633">KTOR-9633</a>
WebRTC statistics fetching race condition</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9603">KTOR-9603</a>
Structured concurrency is violated in WebRTC tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9639">KTOR-9639</a>
Darwin: WebSocket client crashes the process when a PONG arrives after
the session is closed</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9575">KTOR-9575</a>
Darwin: findCharset(&quot;UTF-16&quot;) maps to
NSUTF16LittleEndianStringEncoding causing decoding failure for UTF-16
content with BOM</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9661">KTOR-9661</a>
HttpCache: InvalidCacheStateException is thrown on 304 when no cached
entry matches varyKeys</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9673">KTOR-9673</a>
Caching always missing with Content Negotiation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9596">KTOR-9596</a>
HttpTimeout: HttpRequestTimeoutException on any request with runTest and
request timeout defined since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9632">KTOR-9632</a>
HttpRequestBuilder.timeout call removes capabilities set in
DefaultRequest</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9252">KTOR-9252</a>
ContentEncoding: Incomplete gzip response causes client/server to hang
indefinitely</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9670">KTOR-9670</a>
Compression: The plugin ignores Accept-Encoding q=0 and most-specific
matching</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9614">KTOR-9614</a> Zstd
Compression: &quot;Destination buffer is too small&quot; exception for a
particular sequence of bytes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9636">KTOR-9636</a> CORS
plugin drops OPTIONS preflight requests when allowSameOrigin is on</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9659">KTOR-9659</a> CORS
is skipped when the Origin header contains an IPv6 address</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9574">KTOR-9574</a>
ContentNegotiation: The charset of <code>Accept-Charset</code> header is
used for response deserialization</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9606">KTOR-9606</a>
KotlinxSerializationConverter: it fails to deserialize an empty channel
closed with a delay</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9617">KTOR-9617</a>
OutputStreamContent and WriterContent can exhaust Dispatchers.IO</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9629">KTOR-9629</a>
RawSourceChannel: coroutine cancellation is not propagated to the
RawSource</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8870">KTOR-8870</a>
File.readChannel: do not close a non-opened file and ignore closing
exceptions</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9460">KTOR-9460</a>
Curl: Can't build shared library with Ktor 3.4.2</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9607">KTOR-9607</a>
Crash on Android 7: NoSuchMethodError getInstanceStrong() since
3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9595">KTOR-9595</a> CIO:
The engine imports <code>node:net</code> statically and breaks
wasmJsBrowser webpack build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9615">KTOR-9615</a>
Apache5: The underlying request is not aborted when coroutine Job is
cancelled</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8443">KTOR-8443</a>
RoutingBuilder.contentType does not use parameters when matching</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9425">KTOR-9425</a>
SessionTransportTransformerEncrypt init block uses wrong IV size for
AES-256 (regression of KTOR-661)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9621">KTOR-9621</a>
RateLimit plugin is bypassed when the nested authenticate block rejects
the request</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8766">KTOR-8766</a> DI:
The close method is called twice on cleanup of AutoCloseable</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8695">KTOR-8695</a>
GMTDate() being offset by 369 years on Windows</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9589">KTOR-9589</a>
Duplicate PROPERTY_SETTER target in <code>@InternalAPI</code>
annotation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/blob/main/CHANGELOG.md">io.ktor:ktor-client-core's
changelog</a>.</em></p>
<blockquote>
<h1>3.5.1</h1>
<blockquote>
<p>Published 25 June 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9492">KTOR-9492</a>
OpenAPI plugin: handle requireXxx functions in compiler plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9569">KTOR-9569</a> Add
more details for KDoc of BearerAuthConfig.sendWithoutRequest</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9571">KTOR-9571</a> Add
KDoc for BearerAuthConfig.realm</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9570">KTOR-9570</a> Add
Kdoc for BearerAuthConfig.refreshTokens</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9646">KTOR-9646</a> Fix
Kotlin 2.4.0 compiler plugin breaking changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9591">KTOR-9591</a>
OpenAPI: <code>@JsonClassDiscriminator</code> on sealed types is ignored
when generating OpenAPI discriminator schema</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9597">KTOR-9597</a>
OpenAPI: Schema name collisions because<code>@SerialName</code> of
sealed subtypes is used as <code>components.schemas</code> key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9601">KTOR-9601</a>
OpenAPI: nullable <a
href="https://github.com/JvmInline"><code>@​JvmInline</code></a> value
class loses nullability in generated schema</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9620">KTOR-9620</a> Some
issues related to digest authentication in 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9623">KTOR-9623</a>
Digest Auth: server must respond with one WWW-Authenticate header for
each supported algorithm</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9624">KTOR-9624</a>
Digest Auth: &quot;Unsupported charset in digest authentication
header&quot; for a charset name in lowercase</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9630">KTOR-9630</a>
Digest Auth: The plugin sends incorrect nonce when server responds with
multiple WWW-Authenticate headers</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9565">KTOR-9565</a>
WebRTC: Peer stops receiving messages after a while on iOS</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9610">KTOR-9610</a>
WebRtcPeerConnection::close causes ClosedReceiveChannelException for
other peer</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9633">KTOR-9633</a>
WebRTC statistics fetching race condition</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9603">KTOR-9603</a>
Structured concurrency is violated in WebRTC tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9639">KTOR-9639</a>
Darwin: WebSocket client crashes the process when a PONG arrives after
the session is closed</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9575">KTOR-9575</a>
Darwin: findCharset(&quot;UTF-16&quot;) maps to
NSUTF16LittleEndianStringEncoding causing decoding failure for UTF-16
content with BOM</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9661">KTOR-9661</a>
HttpCache: InvalidCacheStateException is thrown on 304 when no cached
entry matches varyKeys</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9673">KTOR-9673</a>
Caching always missing with Content Negotiation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9596">KTOR-9596</a>
HttpTimeout: HttpRequestTimeoutException on any request with runTest and
request timeout defined since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9632">KTOR-9632</a>
HttpRequestBuilder.timeout call removes capabilities set in
DefaultRequest</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9252">KTOR-9252</a>
ContentEncoding: Incomplete gzip response causes client/server to hang
indefinitely</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9670">KTOR-9670</a>
Compression: The plugin ignores Accept-Encoding q=0 and most-specific
matching</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9614">KTOR-9614</a> Zstd
Compression: &quot;Destination buffer is too small&quot; exception for a
particular sequence of bytes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9636">KTOR-9636</a> CORS
plugin drops OPTIONS preflight requests when allowSameOrigin is on</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9659">KTOR-9659</a> CORS
is skipped when the Origin header contains an IPv6 address</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9574">KTOR-9574</a>
ContentNegotiation: The charset of <code>Accept-Charset</code> header is
used for response deserialization</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9606">KTOR-9606</a>
KotlinxSerializationConverter: it fails to deserialize an empty channel
closed with a delay</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9617">KTOR-9617</a>
OutputStreamContent and WriterContent can exhaust Dispatchers.IO</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9629">KTOR-9629</a>
RawSourceChannel: coroutine cancellation is not propagated to the
RawSource</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8870">KTOR-8870</a>
File.readChannel: do not close a non-opened file and ignore closing
exceptions</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9460">KTOR-9460</a>
Curl: Can't build shared library with Ktor 3.4.2</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9607">KTOR-9607</a>
Crash on Android 7: NoSuchMethodError getInstanceStrong() since
3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9595">KTOR-9595</a> CIO:
The engine imports <code>node:net</code> statically and breaks
wasmJsBrowser webpack build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9615">KTOR-9615</a>
Apache5: The underlying request is not aborted when coroutine Job is
cancelled</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8443">KTOR-8443</a>
RoutingBuilder.contentType does not use parameters when matching</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9425">KTOR-9425</a>
SessionTransportTransformerEncrypt init block uses wrong IV size for
AES-256 (regression of KTOR-661)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9621">KTOR-9621</a>
RateLimit plugin is bypassed when the nested authenticate block rejects
the request</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8766">KTOR-8766</a> DI:
The close method is called twice on cleanup of AutoCloseable</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8695">KTOR-8695</a>
GMTDate() being offset by 369 years on Windows</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9589">KTOR-9589</a>
Duplicate PROPERTY_SETTER target in <a
href="https://github.com/InternalAPI"><code>@​InternalAPI</code></a>
annotation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5ba9d6fdf1"><code>5ba9d6f</code></a>
Release 3.5.1 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5719">#5719</a>)</li>
<li><a
href="a4f145d16d"><code>a4f145d</code></a>
KTOR-9661 HttpCache: InvalidCacheStateException is thrown on 304 when…
(<a
href="https://redirect.github.com/ktorio/ktor/issues/5701">#5701</a>)</li>
<li><a
href="2caf27824c"><code>2caf278</code></a>
Fix failing :ktor-io:compileDarwinMainKotlinMetadata (<a
href="https://redirect.github.com/ktorio/ktor/issues/5716">#5716</a>)</li>
<li><a
href="257de90b60"><code>257de90</code></a>
KTOR-8766 Fix multiple invocations of close from DI</li>
<li><a
href="e77a16813c"><code>e77a168</code></a>
Fix cache misses with content negotiation 3x (<a
href="https://redirect.github.com/ktorio/ktor/issues/5714">#5714</a>)</li>
<li><a
href="ed22950b63"><code>ed22950</code></a>
Make huge post test less huge</li>
<li><a
href="f329069ed4"><code>f329069</code></a>
Update dependency com.github.luben:zstd-jni to v1.5.7-11</li>
<li><a
href="6ecd072937"><code>6ecd072</code></a>
Update dependency io.swagger.parser.v3:swagger-parser to v2.1.44</li>
<li><a
href="a0534cd2e6"><code>a0534cd</code></a>
Update dependency io.pebbletemplates:pebble to v4.1.2</li>
<li><a
href="8647e53f4b"><code>8647e53</code></a>
Update dependency com.typesafe:config to v1.4.9</li>
<li>Additional commits viewable in <a
href="https://github.com/ktorio/ktor/compare/3.4.3...3.5.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.ktor:ktor-client-logging` from 3.4.3 to 3.5.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/releases">io.ktor:ktor-client-logging's
releases</a>.</em></p>
<blockquote>
<h2>3.5.1</h2>
<blockquote>
<p>Published 25 June 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9492">KTOR-9492</a>
OpenAPI plugin: handle requireXxx functions in compiler plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9569">KTOR-9569</a> Add
more details for KDoc of BearerAuthConfig.sendWithoutRequest</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9571">KTOR-9571</a> Add
KDoc for BearerAuthConfig.realm</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9570">KTOR-9570</a> Add
Kdoc for BearerAuthConfig.refreshTokens</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9646">KTOR-9646</a> Fix
Kotlin 2.4.0 compiler plugin breaking changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9591">KTOR-9591</a>
OpenAPI: <code>@JsonClassDiscriminator</code> on sealed types is ignored
when generating OpenAPI discriminator schema</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9597">KTOR-9597</a>
OpenAPI: Schema name collisions because<code>@SerialName</code> of
sealed subtypes is used as <code>components.schemas</code> key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9601">KTOR-9601</a>
OpenAPI: nullable <a
href="https://github.com/JvmInline"><code>@​JvmInline</code></a> value
class loses nullability in generated schema</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9620">KTOR-9620</a> Some
issues related to digest authentication in 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9623">KTOR-9623</a>
Digest Auth: server must respond with one WWW-Authenticate header for
each supported algorithm</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9624">KTOR-9624</a>
Digest Auth: &quot;Unsupported charset in digest authentication
header&quot; for a charset name in lowercase</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9630">KTOR-9630</a>
Digest Auth: The plugin sends incorrect nonce when server responds with
multiple WWW-Authenticate headers</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9565">KTOR-9565</a>
WebRTC: Peer stops receiving messages after a while on iOS</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9610">KTOR-9610</a>
WebRtcPeerConnection::close causes ClosedReceiveChannelException for
other peer</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9633">KTOR-9633</a>
WebRTC statistics fetching race condition</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9603">KTOR-9603</a>
Structured concurrency is violated in WebRTC tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9639">KTOR-9639</a>
Darwin: WebSocket client crashes the process when a PONG arrives after
the session is closed</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9575">KTOR-9575</a>
Darwin: findCharset(&quot;UTF-16&quot;) maps to
NSUTF16LittleEndianStringEncoding causing decoding failure for UTF-16
content with BOM</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9661">KTOR-9661</a>
HttpCache: InvalidCacheStateException is thrown on 304 when no cached
entry matches varyKeys</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9673">KTOR-9673</a>
Caching always missing with Content Negotiation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9596">KTOR-9596</a>
HttpTimeout: HttpRequestTimeoutException on any request with runTest and
request timeout defined since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9632">KTOR-9632</a>
HttpRequestBuilder.timeout call removes capabilities set in
DefaultRequest</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9252">KTOR-9252</a>
ContentEncoding: Incomplete gzip response causes client/server to hang
indefinitely</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9670">KTOR-9670</a>
Compression: The plugin ignores Accept-Encoding q=0 and most-specific
matching</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9614">KTOR-9614</a> Zstd
Compression: &quot;Destination buffer is too small&quot; exception for a
particular sequence of bytes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9636">KTOR-9636</a> CORS
plugin drops OPTIONS preflight requests when allowSameOrigin is on</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9659">KTOR-9659</a> CORS
is skipped when the Origin header contains an IPv6 address</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9574">KTOR-9574</a>
ContentNegotiation: The charset of <code>Accept-Charset</code> header is
used for response deserialization</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9606">KTOR-9606</a>
KotlinxSerializationConverter: it fails to deserialize an empty channel
closed with a delay</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9617">KTOR-9617</a>
OutputStreamContent and WriterContent can exhaust Dispatchers.IO</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9629">KTOR-9629</a>
RawSourceChannel: coroutine cancellation is not propagated to the
RawSource</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8870">KTOR-8870</a>
File.readChannel: do not close a non-opened file and ignore closing
exceptions</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9460">KTOR-9460</a>
Curl: Can't build shared library with Ktor 3.4.2</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9607">KTOR-9607</a>
Crash on Android 7: NoSuchMethodError getInstanceStrong() since
3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9595">KTOR-9595</a> CIO:
The engine imports <code>node:net</code> statically and breaks
wasmJsBrowser webpack build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9615">KTOR-9615</a>
Apache5: The underlying request is not aborted when coroutine Job is
cancelled</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8443">KTOR-8443</a>
RoutingBuilder.contentType does not use parameters when matching</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9425">KTOR-9425</a>
SessionTransportTransformerEncrypt init block uses wrong IV size for
AES-256 (regression of KTOR-661)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9621">KTOR-9621</a>
RateLimit plugin is bypassed when the nested authenticate block rejects
the request</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8766">KTOR-8766</a> DI:
The close method is called twice on cleanup of AutoCloseable</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8695">KTOR-8695</a>
GMTDate() being offset by 369 years on Windows</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9589">KTOR-9589</a>
Duplicate PROPERTY_SETTER target in <code>@InternalAPI</code>
annotation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/blob/main/CHANGELOG.md">io.ktor:ktor-client-logging's
changelog</a>.</em></p>
<blockquote>
<h1>3.5.1</h1>
<blockquote>
<p>Published 25 June 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9492">KTOR-9492</a>
OpenAPI plugin: handle requireXxx functions in compiler plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9569">KTOR-9569</a> Add
more details for KDoc of BearerAuthConfig.sendWithoutRequest</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9571">KTOR-9571</a> Add
KDoc for BearerAuthConfig.realm</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9570">KTOR-9570</a> Add
Kdoc for BearerAuthConfig.refreshTokens</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9646">KTOR-9646</a> Fix
Kotlin 2.4.0 compiler plugin breaking changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9591">KTOR-9591</a>
OpenAPI: <code>@JsonClassDiscriminator</code> on sealed types is ignored
when generating OpenAPI discriminator schema</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9597">KTOR-9597</a>
OpenAPI: Schema name collisions because<code>@SerialName</code> of
sealed subtypes is used as <code>components.schemas</code> key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9601">KTOR-9601</a>
OpenAPI: nullable <a
href="https://github.com/JvmInline"><code>@​JvmInline</code></a> value
class loses nullability in generated schema</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9620">KTOR-9620</a> Some
issues related to digest authentication in 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9623">KTOR-9623</a>
Digest Auth: server must respond with one WWW-Authenticate header for
each supported algorithm</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9624">KTOR-9624</a>
Digest Auth: &quot;Unsupported charset in digest authentication
header&quot; for a charset name in lowercase</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9630">KTOR-9630</a>
Digest Auth: The plugin sends incorrect nonce when server responds with
multiple WWW-Authenticate headers</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9565">KTOR-9565</a>
WebRTC: Peer stops receiving messages after a while on iOS</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9610">KTOR-9610</a>
WebRtcPeerConnection::close causes ClosedReceiveChannelException for
other peer</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9633">KTOR-9633</a>
WebRTC statistics fetching race condition</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9603">KTOR-9603</a>
Structured concurrency is violated in WebRTC tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9639">KTOR-9639</a>
Darwin: WebSocket client crashes the process when a PONG arrives after
the session is closed</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9575">KTOR-9575</a>
Darwin: findCharset(&quot;UTF-16&quot;) maps to
NSUTF16LittleEndianStringEncoding causing decoding failure for UTF-16
content with BOM</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9661">KTOR-9661</a>
HttpCache: InvalidCacheStateException is thrown on 304 when no cached
entry matches varyKeys</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9673">KTOR-9673</a>
Caching always missing with Content Negotiation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9596">KTOR-9596</a>
HttpTimeout: HttpRequestTimeoutException on any request with runTest and
request timeout defined since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9632">KTOR-9632</a>
HttpRequestBuilder.timeout call removes capabilities set in
DefaultRequest</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9252">KTOR-9252</a>
ContentEncoding: Incomplete gzip response causes client/server to hang
indefinitely</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9670">KTOR-9670</a>
Compression: The plugin ignores Accept-Encoding q=0 and most-specific
matching</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9614">KTOR-9614</a> Zstd
Compression: &quot;Destination buffer is too small&quot; exception for a
particular sequence of bytes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9636">KTOR-9636</a> CORS
plugin drops OPTIONS preflight requests when allowSameOrigin is on</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9659">KTOR-9659</a> CORS
is skipped when the Origin header contains an IPv6 address</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9574">KTOR-9574</a>
ContentNegotiation: The charset of <code>Accept-Charset</code> header is
used for response deserialization</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9606">KTOR-9606</a>
KotlinxSerializationConverter: it fails to deserialize an empty channel
closed with a delay</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9617">KTOR-9617</a>
OutputStreamContent and WriterContent can exhaust Dispatchers.IO</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9629">KTOR-9629</a>
RawSourceChannel: coroutine cancellation is not propagated ...

_Description has been truncated_

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 22:04:38 +02:00
dependabot[bot]
594ed4aa86
chore(deps): bump kotlin from 2.3.21 to 2.4.0 in /samples/kotlin-mcp-server (#822)
Bumps `kotlin` from 2.3.21 to 2.4.0.
Updates `org.jetbrains.kotlin.jvm` from 2.3.21 to 2.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.jvm's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.0</h2>
<h2>Changelog</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83867"><code>KT-83867</code></a>
OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ
repo</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83723"><code>KT-83723</code></a>
[Analysis API] Enable experimental KDoc resolver by default</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83388"><code>KT-83388</code></a>
Analysis API: properly support KMP in KotlinPackageProvider</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65683"><code>KT-65683</code></a>
Analysis API: Dangling file session creation causes a
<code>computeIfAbsent</code> contract violation</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-78946"><code>KT-78946</code></a>
Evaluation of variable with local class in type parameter leads to
InventNamesForLocalClasses exception</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-68260"><code>KT-68260</code></a>
K2 AA: InvalidFirElementTypeException “For CALLABLE_REFERENCE_EXPRESSION
with text <code>::lam1</code>, unexpected element of type: no element
found” with illegal callable reference call</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70896"><code>KT-70896</code></a>
AA: False positive deprecation warning with override of built-in method
in JDK mapped class</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84711"><code>KT-84711</code></a>
K2 IDE sometimes loses FIR plugin-generated declarations after file
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84625"><code>KT-84625</code></a>
Analysis API: collectDesignationPath fails for nested classes inside
plugin-generated top-level classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84596"><code>KT-84596</code></a>
Improve K2 Jooq completion performance</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84525"><code>KT-84525</code></a>
KaValueParameterSymbol#getHasSynthesizedName returns false for
FirDeclarationOrigin.SubstitutionOverride.DeclarationSite</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83546"><code>KT-83546</code></a>
Kotlin analysis reach ClsCustomNavigationPolicy</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84259"><code>KT-84259</code></a>
Move CommonDefaultImportsProvider to the frontend independent
module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82945"><code>KT-82945</code></a>
Analysis API: KotlinIllegalArgumentExceptionWithAttachments: Expected
FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-71135"><code>KT-71135</code></a>
AA: exception from sealed inheritors checker when
<code>analyzeCopy</code></li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83905"><code>KT-83905</code></a>
Analysis API: Improve UX with test data</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84913"><code>KT-84913</code></a>
Extract compiler classes used by the PSI &amp; Analysis API to a
separate module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-64986"><code>KT-64986</code></a>
Analysis API: Implement Analysis API tests for different KMP
Platforms</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84776"><code>KT-84776</code></a>
The test data manager misses the redundancy check in the update
mode</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84962"><code>KT-84962</code></a>
The test data manager misses -ea flag</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84388"><code>KT-84388</code></a>
Preserve the EOF status in the test data manager to avoid extra
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84362"><code>KT-84362</code></a>
Analysis API tests produce many warnings due to &quot;not yet loaded
registry&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84279"><code>KT-84279</code></a>
Test Data Manager fails on a clean build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83913"><code>KT-83913</code></a>
Exclude compiler-based Analysis API tests from Git tracking</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80379"><code>KT-80379</code></a>
Extract per-module test generators for AA tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84120"><code>KT-84120</code></a>
Move CLI modules out of kotlin-compiler-fe10-for-ide</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83200"><code>KT-83200</code></a>
Track external dependencies of the Analysis API modules</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82434"><code>KT-82434</code></a>
Light classes should prefer enum entries to properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84200"><code>KT-84200</code></a>
SLC: return type is not boxed for delegated methods with generic
original method</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-72451"><code>KT-72451</code></a>
&quot;CCE: class PsiPrimitiveType cannot be cast to class
PsiClassType&quot; with same-named enum class and typealias</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.jvm's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.0</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83867"><code>KT-83867</code></a>
OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ
repo</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83723"><code>KT-83723</code></a>
[Analysis API] Enable experimental KDoc resolver by default</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83388"><code>KT-83388</code></a>
Analysis API: properly support KMP in KotlinPackageProvider</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65683"><code>KT-65683</code></a>
Analysis API: Dangling file session creation causes a
<code>computeIfAbsent</code> contract violation</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-78946"><code>KT-78946</code></a>
Evaluation of variable with local class in type parameter leads to
InventNamesForLocalClasses exception</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-68260"><code>KT-68260</code></a>
K2 AA: InvalidFirElementTypeException “For CALLABLE_REFERENCE_EXPRESSION
with text <code>::lam1</code>, unexpected element of type: no element
found” with illegal callable reference call</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70896"><code>KT-70896</code></a>
AA: False positive deprecation warning with override of built-in method
in JDK mapped class</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84711"><code>KT-84711</code></a>
K2 IDE sometimes loses FIR plugin-generated declarations after file
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84625"><code>KT-84625</code></a>
Analysis API: collectDesignationPath fails for nested classes inside
plugin-generated top-level classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84596"><code>KT-84596</code></a>
Improve K2 Jooq completion performance</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84525"><code>KT-84525</code></a>
KaValueParameterSymbol#getHasSynthesizedName returns false for
FirDeclarationOrigin.SubstitutionOverride.DeclarationSite</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83546"><code>KT-83546</code></a>
Kotlin analysis reach ClsCustomNavigationPolicy</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84259"><code>KT-84259</code></a>
Move CommonDefaultImportsProvider to the frontend independent
module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82945"><code>KT-82945</code></a>
Analysis API: KotlinIllegalArgumentExceptionWithAttachments: Expected
FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-71135"><code>KT-71135</code></a>
AA: exception from sealed inheritors checker when
<code>analyzeCopy</code></li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83905"><code>KT-83905</code></a>
Analysis API: Improve UX with test data</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84913"><code>KT-84913</code></a>
Extract compiler classes used by the PSI &amp; Analysis API to a
separate module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-64986"><code>KT-64986</code></a>
Analysis API: Implement Analysis API tests for different KMP
Platforms</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84776"><code>KT-84776</code></a>
The test data manager misses the redundancy check in the update
mode</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84962"><code>KT-84962</code></a>
The test data manager misses -ea flag</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84388"><code>KT-84388</code></a>
Preserve the EOF status in the test data manager to avoid extra
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84362"><code>KT-84362</code></a>
Analysis API tests produce many warnings due to &quot;not yet loaded
registry&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84279"><code>KT-84279</code></a>
Test Data Manager fails on a clean build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83913"><code>KT-83913</code></a>
Exclude compiler-based Analysis API tests from Git tracking</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80379"><code>KT-80379</code></a>
Extract per-module test generators for AA tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84120"><code>KT-84120</code></a>
Move CLI modules out of kotlin-compiler-fe10-for-ide</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83200"><code>KT-83200</code></a>
Track external dependencies of the Analysis API modules</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82434"><code>KT-82434</code></a>
Light classes should prefer enum entries to properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84200"><code>KT-84200</code></a>
SLC: return type is not boxed for delegated methods with generic
original method</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-72451"><code>KT-72451</code></a>
&quot;CCE: class PsiPrimitiveType cannot be cast to class
PsiClassType&quot; with same-named enum class and typealias</li>
</ul>
<h3>Analysis API. PSI</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="add726ca8c"><code>add726c</code></a>
Add ChangeLog for 2.4.0-RC2</li>
<li><a
href="69a4a81ef2"><code>69a4a81</code></a>
[Wasm] Add binaryen per-file arguments</li>
<li><a
href="8907c635d4"><code>8907c63</code></a>
[KGP] Suppress duplicate compiler warning output when --warning-mode=all
is a...</li>
<li><a
href="f9bef128ea"><code>f9bef12</code></a>
[KGP] Add failing test for duplicate compiler warning output via
Problems API</li>
<li><a
href="7fe49c227a"><code>7fe49c2</code></a>
KT-86268: Use 2.4.0 toolchain for abiValidation with older CVs</li>
<li><a
href="13d25e2c58"><code>13d25e2</code></a>
KT-86268: Regression test added</li>
<li><a
href="f7d1a76541"><code>f7d1a76</code></a>
[JKlib] Fix JAR deserializer configuration.</li>
<li><a
href="5cec663aff"><code>5cec663</code></a>
[JKlib] Wire up JvmBuiltInClassDescriptorFactory</li>
<li><a
href="ef146114de"><code>ef14611</code></a>
Make the default stability of non-final classes <code>Unknown</code>
instead of <code>Stable</code></li>
<li><a
href="d76473afd2"><code>d76473a</code></a>
[Gradle] Fix GeneralNativeIT.shouldAllowToOverrideDownloadUrl test
failures</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.3.21...v2.4.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.jetbrains.kotlin.plugin.serialization` from 2.3.21 to 2.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.plugin.serialization's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.0</h2>
<h2>Changelog</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83867"><code>KT-83867</code></a>
OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ
repo</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83723"><code>KT-83723</code></a>
[Analysis API] Enable experimental KDoc resolver by default</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83388"><code>KT-83388</code></a>
Analysis API: properly support KMP in KotlinPackageProvider</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65683"><code>KT-65683</code></a>
Analysis API: Dangling file session creation causes a
<code>computeIfAbsent</code> contract violation</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-78946"><code>KT-78946</code></a>
Evaluation of variable with local class in type parameter leads to
InventNamesForLocalClasses exception</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-68260"><code>KT-68260</code></a>
K2 AA: InvalidFirElementTypeException “For CALLABLE_REFERENCE_EXPRESSION
with text <code>::lam1</code>, unexpected element of type: no element
found” with illegal callable reference call</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70896"><code>KT-70896</code></a>
AA: False positive deprecation warning with override of built-in method
in JDK mapped class</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84711"><code>KT-84711</code></a>
K2 IDE sometimes loses FIR plugin-generated declarations after file
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84625"><code>KT-84625</code></a>
Analysis API: collectDesignationPath fails for nested classes inside
plugin-generated top-level classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84596"><code>KT-84596</code></a>
Improve K2 Jooq completion performance</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84525"><code>KT-84525</code></a>
KaValueParameterSymbol#getHasSynthesizedName returns false for
FirDeclarationOrigin.SubstitutionOverride.DeclarationSite</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83546"><code>KT-83546</code></a>
Kotlin analysis reach ClsCustomNavigationPolicy</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84259"><code>KT-84259</code></a>
Move CommonDefaultImportsProvider to the frontend independent
module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82945"><code>KT-82945</code></a>
Analysis API: KotlinIllegalArgumentExceptionWithAttachments: Expected
FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-71135"><code>KT-71135</code></a>
AA: exception from sealed inheritors checker when
<code>analyzeCopy</code></li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83905"><code>KT-83905</code></a>
Analysis API: Improve UX with test data</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84913"><code>KT-84913</code></a>
Extract compiler classes used by the PSI &amp; Analysis API to a
separate module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-64986"><code>KT-64986</code></a>
Analysis API: Implement Analysis API tests for different KMP
Platforms</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84776"><code>KT-84776</code></a>
The test data manager misses the redundancy check in the update
mode</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84962"><code>KT-84962</code></a>
The test data manager misses -ea flag</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84388"><code>KT-84388</code></a>
Preserve the EOF status in the test data manager to avoid extra
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84362"><code>KT-84362</code></a>
Analysis API tests produce many warnings due to &quot;not yet loaded
registry&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84279"><code>KT-84279</code></a>
Test Data Manager fails on a clean build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83913"><code>KT-83913</code></a>
Exclude compiler-based Analysis API tests from Git tracking</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80379"><code>KT-80379</code></a>
Extract per-module test generators for AA tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84120"><code>KT-84120</code></a>
Move CLI modules out of kotlin-compiler-fe10-for-ide</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83200"><code>KT-83200</code></a>
Track external dependencies of the Analysis API modules</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82434"><code>KT-82434</code></a>
Light classes should prefer enum entries to properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84200"><code>KT-84200</code></a>
SLC: return type is not boxed for delegated methods with generic
original method</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-72451"><code>KT-72451</code></a>
&quot;CCE: class PsiPrimitiveType cannot be cast to class
PsiClassType&quot; with same-named enum class and typealias</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.plugin.serialization's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.0</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83867"><code>KT-83867</code></a>
OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ
repo</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83723"><code>KT-83723</code></a>
[Analysis API] Enable experimental KDoc resolver by default</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83388"><code>KT-83388</code></a>
Analysis API: properly support KMP in KotlinPackageProvider</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65683"><code>KT-65683</code></a>
Analysis API: Dangling file session creation causes a
<code>computeIfAbsent</code> contract violation</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-78946"><code>KT-78946</code></a>
Evaluation of variable with local class in type parameter leads to
InventNamesForLocalClasses exception</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-68260"><code>KT-68260</code></a>
K2 AA: InvalidFirElementTypeException “For CALLABLE_REFERENCE_EXPRESSION
with text <code>::lam1</code>, unexpected element of type: no element
found” with illegal callable reference call</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70896"><code>KT-70896</code></a>
AA: False positive deprecation warning with override of built-in method
in JDK mapped class</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84711"><code>KT-84711</code></a>
K2 IDE sometimes loses FIR plugin-generated declarations after file
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84625"><code>KT-84625</code></a>
Analysis API: collectDesignationPath fails for nested classes inside
plugin-generated top-level classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84596"><code>KT-84596</code></a>
Improve K2 Jooq completion performance</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84525"><code>KT-84525</code></a>
KaValueParameterSymbol#getHasSynthesizedName returns false for
FirDeclarationOrigin.SubstitutionOverride.DeclarationSite</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83546"><code>KT-83546</code></a>
Kotlin analysis reach ClsCustomNavigationPolicy</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84259"><code>KT-84259</code></a>
Move CommonDefaultImportsProvider to the frontend independent
module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82945"><code>KT-82945</code></a>
Analysis API: KotlinIllegalArgumentExceptionWithAttachments: Expected
FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-71135"><code>KT-71135</code></a>
AA: exception from sealed inheritors checker when
<code>analyzeCopy</code></li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83905"><code>KT-83905</code></a>
Analysis API: Improve UX with test data</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84913"><code>KT-84913</code></a>
Extract compiler classes used by the PSI &amp; Analysis API to a
separate module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-64986"><code>KT-64986</code></a>
Analysis API: Implement Analysis API tests for different KMP
Platforms</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84776"><code>KT-84776</code></a>
The test data manager misses the redundancy check in the update
mode</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84962"><code>KT-84962</code></a>
The test data manager misses -ea flag</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84388"><code>KT-84388</code></a>
Preserve the EOF status in the test data manager to avoid extra
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84362"><code>KT-84362</code></a>
Analysis API tests produce many warnings due to &quot;not yet loaded
registry&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84279"><code>KT-84279</code></a>
Test Data Manager fails on a clean build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83913"><code>KT-83913</code></a>
Exclude compiler-based Analysis API tests from Git tracking</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80379"><code>KT-80379</code></a>
Extract per-module test generators for AA tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84120"><code>KT-84120</code></a>
Move CLI modules out of kotlin-compiler-fe10-for-ide</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83200"><code>KT-83200</code></a>
Track external dependencies of the Analysis API modules</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82434"><code>KT-82434</code></a>
Light classes should prefer enum entries to properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84200"><code>KT-84200</code></a>
SLC: return type is not boxed for delegated methods with generic
original method</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-72451"><code>KT-72451</code></a>
&quot;CCE: class PsiPrimitiveType cannot be cast to class
PsiClassType&quot; with same-named enum class and typealias</li>
</ul>
<h3>Analysis API. PSI</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="add726ca8c"><code>add726c</code></a>
Add ChangeLog for 2.4.0-RC2</li>
<li><a
href="69a4a81ef2"><code>69a4a81</code></a>
[Wasm] Add binaryen per-file arguments</li>
<li><a
href="8907c635d4"><code>8907c63</code></a>
[KGP] Suppress duplicate compiler warning output when --warning-mode=all
is a...</li>
<li><a
href="f9bef128ea"><code>f9bef12</code></a>
[KGP] Add failing test for duplicate compiler warning output via
Problems API</li>
<li><a
href="7fe49c227a"><code>7fe49c2</code></a>
KT-86268: Use 2.4.0 toolchain for abiValidation with older CVs</li>
<li><a
href="13d25e2c58"><code>13d25e2</code></a>
KT-86268: Regression test added</li>
<li><a
href="f7d1a76541"><code>f7d1a76</code></a>
[JKlib] Fix JAR deserializer configuration.</li>
<li><a
href="5cec663aff"><code>5cec663</code></a>
[JKlib] Wire up JvmBuiltInClassDescriptorFactory</li>
<li><a
href="ef146114de"><code>ef14611</code></a>
Make the default stability of non-final classes <code>Unknown</code>
instead of <code>Stable</code></li>
<li><a
href="d76473afd2"><code>d76473a</code></a>
[Gradle] Fix GeneralNativeIT.shouldAllowToOverrideDownloadUrl test
failures</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.3.21...v2.4.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 18:43:12 +00:00
dependabot[bot]
e8ebf19a32
chore(deps): bump kotlin from 2.3.21 to 2.4.0 in /samples/simple-streamable-server (#827)
Bumps `kotlin` from 2.3.21 to 2.4.0.
Updates `org.jetbrains.kotlin.jvm` from 2.3.21 to 2.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.jvm's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.0</h2>
<h2>Changelog</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83867"><code>KT-83867</code></a>
OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ
repo</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83723"><code>KT-83723</code></a>
[Analysis API] Enable experimental KDoc resolver by default</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83388"><code>KT-83388</code></a>
Analysis API: properly support KMP in KotlinPackageProvider</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65683"><code>KT-65683</code></a>
Analysis API: Dangling file session creation causes a
<code>computeIfAbsent</code> contract violation</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-78946"><code>KT-78946</code></a>
Evaluation of variable with local class in type parameter leads to
InventNamesForLocalClasses exception</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-68260"><code>KT-68260</code></a>
K2 AA: InvalidFirElementTypeException “For CALLABLE_REFERENCE_EXPRESSION
with text <code>::lam1</code>, unexpected element of type: no element
found” with illegal callable reference call</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70896"><code>KT-70896</code></a>
AA: False positive deprecation warning with override of built-in method
in JDK mapped class</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84711"><code>KT-84711</code></a>
K2 IDE sometimes loses FIR plugin-generated declarations after file
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84625"><code>KT-84625</code></a>
Analysis API: collectDesignationPath fails for nested classes inside
plugin-generated top-level classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84596"><code>KT-84596</code></a>
Improve K2 Jooq completion performance</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84525"><code>KT-84525</code></a>
KaValueParameterSymbol#getHasSynthesizedName returns false for
FirDeclarationOrigin.SubstitutionOverride.DeclarationSite</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83546"><code>KT-83546</code></a>
Kotlin analysis reach ClsCustomNavigationPolicy</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84259"><code>KT-84259</code></a>
Move CommonDefaultImportsProvider to the frontend independent
module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82945"><code>KT-82945</code></a>
Analysis API: KotlinIllegalArgumentExceptionWithAttachments: Expected
FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-71135"><code>KT-71135</code></a>
AA: exception from sealed inheritors checker when
<code>analyzeCopy</code></li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83905"><code>KT-83905</code></a>
Analysis API: Improve UX with test data</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84913"><code>KT-84913</code></a>
Extract compiler classes used by the PSI &amp; Analysis API to a
separate module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-64986"><code>KT-64986</code></a>
Analysis API: Implement Analysis API tests for different KMP
Platforms</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84776"><code>KT-84776</code></a>
The test data manager misses the redundancy check in the update
mode</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84962"><code>KT-84962</code></a>
The test data manager misses -ea flag</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84388"><code>KT-84388</code></a>
Preserve the EOF status in the test data manager to avoid extra
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84362"><code>KT-84362</code></a>
Analysis API tests produce many warnings due to &quot;not yet loaded
registry&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84279"><code>KT-84279</code></a>
Test Data Manager fails on a clean build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83913"><code>KT-83913</code></a>
Exclude compiler-based Analysis API tests from Git tracking</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80379"><code>KT-80379</code></a>
Extract per-module test generators for AA tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84120"><code>KT-84120</code></a>
Move CLI modules out of kotlin-compiler-fe10-for-ide</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83200"><code>KT-83200</code></a>
Track external dependencies of the Analysis API modules</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82434"><code>KT-82434</code></a>
Light classes should prefer enum entries to properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84200"><code>KT-84200</code></a>
SLC: return type is not boxed for delegated methods with generic
original method</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-72451"><code>KT-72451</code></a>
&quot;CCE: class PsiPrimitiveType cannot be cast to class
PsiClassType&quot; with same-named enum class and typealias</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.jvm's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.0</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83867"><code>KT-83867</code></a>
OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ
repo</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83723"><code>KT-83723</code></a>
[Analysis API] Enable experimental KDoc resolver by default</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83388"><code>KT-83388</code></a>
Analysis API: properly support KMP in KotlinPackageProvider</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65683"><code>KT-65683</code></a>
Analysis API: Dangling file session creation causes a
<code>computeIfAbsent</code> contract violation</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-78946"><code>KT-78946</code></a>
Evaluation of variable with local class in type parameter leads to
InventNamesForLocalClasses exception</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-68260"><code>KT-68260</code></a>
K2 AA: InvalidFirElementTypeException “For CALLABLE_REFERENCE_EXPRESSION
with text <code>::lam1</code>, unexpected element of type: no element
found” with illegal callable reference call</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70896"><code>KT-70896</code></a>
AA: False positive deprecation warning with override of built-in method
in JDK mapped class</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84711"><code>KT-84711</code></a>
K2 IDE sometimes loses FIR plugin-generated declarations after file
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84625"><code>KT-84625</code></a>
Analysis API: collectDesignationPath fails for nested classes inside
plugin-generated top-level classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84596"><code>KT-84596</code></a>
Improve K2 Jooq completion performance</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84525"><code>KT-84525</code></a>
KaValueParameterSymbol#getHasSynthesizedName returns false for
FirDeclarationOrigin.SubstitutionOverride.DeclarationSite</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83546"><code>KT-83546</code></a>
Kotlin analysis reach ClsCustomNavigationPolicy</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84259"><code>KT-84259</code></a>
Move CommonDefaultImportsProvider to the frontend independent
module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82945"><code>KT-82945</code></a>
Analysis API: KotlinIllegalArgumentExceptionWithAttachments: Expected
FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-71135"><code>KT-71135</code></a>
AA: exception from sealed inheritors checker when
<code>analyzeCopy</code></li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83905"><code>KT-83905</code></a>
Analysis API: Improve UX with test data</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84913"><code>KT-84913</code></a>
Extract compiler classes used by the PSI &amp; Analysis API to a
separate module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-64986"><code>KT-64986</code></a>
Analysis API: Implement Analysis API tests for different KMP
Platforms</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84776"><code>KT-84776</code></a>
The test data manager misses the redundancy check in the update
mode</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84962"><code>KT-84962</code></a>
The test data manager misses -ea flag</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84388"><code>KT-84388</code></a>
Preserve the EOF status in the test data manager to avoid extra
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84362"><code>KT-84362</code></a>
Analysis API tests produce many warnings due to &quot;not yet loaded
registry&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84279"><code>KT-84279</code></a>
Test Data Manager fails on a clean build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83913"><code>KT-83913</code></a>
Exclude compiler-based Analysis API tests from Git tracking</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80379"><code>KT-80379</code></a>
Extract per-module test generators for AA tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84120"><code>KT-84120</code></a>
Move CLI modules out of kotlin-compiler-fe10-for-ide</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83200"><code>KT-83200</code></a>
Track external dependencies of the Analysis API modules</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82434"><code>KT-82434</code></a>
Light classes should prefer enum entries to properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84200"><code>KT-84200</code></a>
SLC: return type is not boxed for delegated methods with generic
original method</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-72451"><code>KT-72451</code></a>
&quot;CCE: class PsiPrimitiveType cannot be cast to class
PsiClassType&quot; with same-named enum class and typealias</li>
</ul>
<h3>Analysis API. PSI</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="add726ca8c"><code>add726c</code></a>
Add ChangeLog for 2.4.0-RC2</li>
<li><a
href="69a4a81ef2"><code>69a4a81</code></a>
[Wasm] Add binaryen per-file arguments</li>
<li><a
href="8907c635d4"><code>8907c63</code></a>
[KGP] Suppress duplicate compiler warning output when --warning-mode=all
is a...</li>
<li><a
href="f9bef128ea"><code>f9bef12</code></a>
[KGP] Add failing test for duplicate compiler warning output via
Problems API</li>
<li><a
href="7fe49c227a"><code>7fe49c2</code></a>
KT-86268: Use 2.4.0 toolchain for abiValidation with older CVs</li>
<li><a
href="13d25e2c58"><code>13d25e2</code></a>
KT-86268: Regression test added</li>
<li><a
href="f7d1a76541"><code>f7d1a76</code></a>
[JKlib] Fix JAR deserializer configuration.</li>
<li><a
href="5cec663aff"><code>5cec663</code></a>
[JKlib] Wire up JvmBuiltInClassDescriptorFactory</li>
<li><a
href="ef146114de"><code>ef14611</code></a>
Make the default stability of non-final classes <code>Unknown</code>
instead of <code>Stable</code></li>
<li><a
href="d76473afd2"><code>d76473a</code></a>
[Gradle] Fix GeneralNativeIT.shouldAllowToOverrideDownloadUrl test
failures</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.3.21...v2.4.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.jetbrains.kotlin.plugin.serialization` from 2.3.21 to 2.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.plugin.serialization's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.0</h2>
<h2>Changelog</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83867"><code>KT-83867</code></a>
OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ
repo</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83723"><code>KT-83723</code></a>
[Analysis API] Enable experimental KDoc resolver by default</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83388"><code>KT-83388</code></a>
Analysis API: properly support KMP in KotlinPackageProvider</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65683"><code>KT-65683</code></a>
Analysis API: Dangling file session creation causes a
<code>computeIfAbsent</code> contract violation</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-78946"><code>KT-78946</code></a>
Evaluation of variable with local class in type parameter leads to
InventNamesForLocalClasses exception</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-68260"><code>KT-68260</code></a>
K2 AA: InvalidFirElementTypeException “For CALLABLE_REFERENCE_EXPRESSION
with text <code>::lam1</code>, unexpected element of type: no element
found” with illegal callable reference call</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70896"><code>KT-70896</code></a>
AA: False positive deprecation warning with override of built-in method
in JDK mapped class</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84711"><code>KT-84711</code></a>
K2 IDE sometimes loses FIR plugin-generated declarations after file
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84625"><code>KT-84625</code></a>
Analysis API: collectDesignationPath fails for nested classes inside
plugin-generated top-level classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84596"><code>KT-84596</code></a>
Improve K2 Jooq completion performance</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84525"><code>KT-84525</code></a>
KaValueParameterSymbol#getHasSynthesizedName returns false for
FirDeclarationOrigin.SubstitutionOverride.DeclarationSite</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83546"><code>KT-83546</code></a>
Kotlin analysis reach ClsCustomNavigationPolicy</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84259"><code>KT-84259</code></a>
Move CommonDefaultImportsProvider to the frontend independent
module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82945"><code>KT-82945</code></a>
Analysis API: KotlinIllegalArgumentExceptionWithAttachments: Expected
FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-71135"><code>KT-71135</code></a>
AA: exception from sealed inheritors checker when
<code>analyzeCopy</code></li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83905"><code>KT-83905</code></a>
Analysis API: Improve UX with test data</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84913"><code>KT-84913</code></a>
Extract compiler classes used by the PSI &amp; Analysis API to a
separate module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-64986"><code>KT-64986</code></a>
Analysis API: Implement Analysis API tests for different KMP
Platforms</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84776"><code>KT-84776</code></a>
The test data manager misses the redundancy check in the update
mode</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84962"><code>KT-84962</code></a>
The test data manager misses -ea flag</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84388"><code>KT-84388</code></a>
Preserve the EOF status in the test data manager to avoid extra
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84362"><code>KT-84362</code></a>
Analysis API tests produce many warnings due to &quot;not yet loaded
registry&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84279"><code>KT-84279</code></a>
Test Data Manager fails on a clean build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83913"><code>KT-83913</code></a>
Exclude compiler-based Analysis API tests from Git tracking</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80379"><code>KT-80379</code></a>
Extract per-module test generators for AA tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84120"><code>KT-84120</code></a>
Move CLI modules out of kotlin-compiler-fe10-for-ide</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83200"><code>KT-83200</code></a>
Track external dependencies of the Analysis API modules</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82434"><code>KT-82434</code></a>
Light classes should prefer enum entries to properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84200"><code>KT-84200</code></a>
SLC: return type is not boxed for delegated methods with generic
original method</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-72451"><code>KT-72451</code></a>
&quot;CCE: class PsiPrimitiveType cannot be cast to class
PsiClassType&quot; with same-named enum class and typealias</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.plugin.serialization's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.0</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83867"><code>KT-83867</code></a>
OVERLOAD_RESOLUTION_AMBIGUITY false positive with assertEquals in IJ
repo</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83723"><code>KT-83723</code></a>
[Analysis API] Enable experimental KDoc resolver by default</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83388"><code>KT-83388</code></a>
Analysis API: properly support KMP in KotlinPackageProvider</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65683"><code>KT-65683</code></a>
Analysis API: Dangling file session creation causes a
<code>computeIfAbsent</code> contract violation</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-78946"><code>KT-78946</code></a>
Evaluation of variable with local class in type parameter leads to
InventNamesForLocalClasses exception</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-68260"><code>KT-68260</code></a>
K2 AA: InvalidFirElementTypeException “For CALLABLE_REFERENCE_EXPRESSION
with text <code>::lam1</code>, unexpected element of type: no element
found” with illegal callable reference call</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70896"><code>KT-70896</code></a>
AA: False positive deprecation warning with override of built-in method
in JDK mapped class</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84711"><code>KT-84711</code></a>
K2 IDE sometimes loses FIR plugin-generated declarations after file
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84625"><code>KT-84625</code></a>
Analysis API: collectDesignationPath fails for nested classes inside
plugin-generated top-level classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84596"><code>KT-84596</code></a>
Improve K2 Jooq completion performance</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84525"><code>KT-84525</code></a>
KaValueParameterSymbol#getHasSynthesizedName returns false for
FirDeclarationOrigin.SubstitutionOverride.DeclarationSite</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83546"><code>KT-83546</code></a>
Kotlin analysis reach ClsCustomNavigationPolicy</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84259"><code>KT-84259</code></a>
Move CommonDefaultImportsProvider to the frontend independent
module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82945"><code>KT-82945</code></a>
Analysis API: KotlinIllegalArgumentExceptionWithAttachments: Expected
FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-71135"><code>KT-71135</code></a>
AA: exception from sealed inheritors checker when
<code>analyzeCopy</code></li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83905"><code>KT-83905</code></a>
Analysis API: Improve UX with test data</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84913"><code>KT-84913</code></a>
Extract compiler classes used by the PSI &amp; Analysis API to a
separate module</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-64986"><code>KT-64986</code></a>
Analysis API: Implement Analysis API tests for different KMP
Platforms</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84776"><code>KT-84776</code></a>
The test data manager misses the redundancy check in the update
mode</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84962"><code>KT-84962</code></a>
The test data manager misses -ea flag</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84388"><code>KT-84388</code></a>
Preserve the EOF status in the test data manager to avoid extra
changes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84362"><code>KT-84362</code></a>
Analysis API tests produce many warnings due to &quot;not yet loaded
registry&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84279"><code>KT-84279</code></a>
Test Data Manager fails on a clean build</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83913"><code>KT-83913</code></a>
Exclude compiler-based Analysis API tests from Git tracking</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80379"><code>KT-80379</code></a>
Extract per-module test generators for AA tests</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84120"><code>KT-84120</code></a>
Move CLI modules out of kotlin-compiler-fe10-for-ide</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83200"><code>KT-83200</code></a>
Track external dependencies of the Analysis API modules</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-82434"><code>KT-82434</code></a>
Light classes should prefer enum entries to properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84200"><code>KT-84200</code></a>
SLC: return type is not boxed for delegated methods with generic
original method</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-72451"><code>KT-72451</code></a>
&quot;CCE: class PsiPrimitiveType cannot be cast to class
PsiClassType&quot; with same-named enum class and typealias</li>
</ul>
<h3>Analysis API. PSI</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="add726ca8c"><code>add726c</code></a>
Add ChangeLog for 2.4.0-RC2</li>
<li><a
href="69a4a81ef2"><code>69a4a81</code></a>
[Wasm] Add binaryen per-file arguments</li>
<li><a
href="8907c635d4"><code>8907c63</code></a>
[KGP] Suppress duplicate compiler warning output when --warning-mode=all
is a...</li>
<li><a
href="f9bef128ea"><code>f9bef12</code></a>
[KGP] Add failing test for duplicate compiler warning output via
Problems API</li>
<li><a
href="7fe49c227a"><code>7fe49c2</code></a>
KT-86268: Use 2.4.0 toolchain for abiValidation with older CVs</li>
<li><a
href="13d25e2c58"><code>13d25e2</code></a>
KT-86268: Regression test added</li>
<li><a
href="f7d1a76541"><code>f7d1a76</code></a>
[JKlib] Fix JAR deserializer configuration.</li>
<li><a
href="5cec663aff"><code>5cec663</code></a>
[JKlib] Wire up JvmBuiltInClassDescriptorFactory</li>
<li><a
href="ef146114de"><code>ef14611</code></a>
Make the default stability of non-final classes <code>Unknown</code>
instead of <code>Stable</code></li>
<li><a
href="d76473afd2"><code>d76473a</code></a>
[Gradle] Fix GeneralNativeIT.shouldAllowToOverrideDownloadUrl test
failures</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.3.21...v2.4.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 20:22:33 +02:00