Compare commits

..
Author SHA1 Message Date
dependabot[bot]
ae44babacc
chore(deps): bump kotlin from 2.4.10 to 2.4.20 in /samples/simple-streamable-server (#996)
Some checks failed
Build / Build (Linux Tests) (push) Has been cancelled
Build / Build (iOS Simulator tests) (push) Has been cancelled
Build / Knit (push) Has been cancelled
Conformance Tests / Conformance Server Tests (push) Has been cancelled
Conformance Tests / Conformance Client Tests: elicitation-sep1034-client-defaults (push) Has been cancelled
Conformance Tests / Conformance Client Tests: initialize (push) Has been cancelled
Conformance Tests / Conformance Client Tests: sse-retry (push) Has been cancelled
Conformance Tests / Conformance Client Tests: tools_call (push) Has been cancelled
Conformance Tests / Conformance Auth Tests (push) Has been cancelled
Conformance Tests / Conformance Auth Scenario: auth/client-credentials-basic (push) Has been cancelled
Conformance Tests / Conformance Auth Scenario: auth/client-credentials-jwt (push) Has been cancelled
Conformance Tests / Conformance Auth Scenario: auth/cross-app-access-complete-flow (push) Has been cancelled
Build Samples / Build Sample (kotlin-mcp-client) (push) Has been cancelled
Build Samples / Build Sample (kotlin-mcp-server) (push) Has been cancelled
Build Samples / Build Sample (simple-streamable-server) (push) Has been cancelled
Build Samples / Build Sample (weather-stdio-server) (push) Has been cancelled
Build / Build Sample: kotlin-mcp-client (push) Has been cancelled
Build / Build Sample: kotlin-mcp-server (push) Has been cancelled
Build / Build Sample: simple-streamable-server (push) Has been cancelled
Build / Build Sample: weather-stdio-server (push) Has been cancelled
Bumps `kotlin` from 2.4.10 to 2.4.20.
Updates `org.jetbrains.kotlin.jvm` from 2.4.10 to 2.4.20
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.jvm's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.20</h2>
<h2>Changelog</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86546"><code>KT-86546</code></a>
Check suspicious when over ConeKotlinType in
ConeTypeCompatibilityChecker</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85418"><code>KT-85418</code></a>
Implement an API for accessing deserialized file annotations in Analysis
API</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-74448"><code>KT-74448</code></a>
K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt,
kotlinx.coroutines</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85856"><code>KT-85856</code></a>
containingSymbol of constructor property differs for local and non-local
classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65417"><code>KT-65417</code></a>
K2 IDE: KTOR false positive expect-actual matching error on enum class
because of implicit clone() in non-JVM source sets</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-76457"><code>KT-76457</code></a>
K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a
JVM counterpart” on evaluating inline fun from common module inside
jvm</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70552"><code>KT-70552</code></a>
No expects for actual</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69727"><code>KT-69727</code></a>
K2 IDE. Wrong error in the editor on calling <code>clone</code> function
of actual enum instance in non-jvm platform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69726"><code>KT-69726</code></a>
FP errors on declaring <code>fun clone()</code> in actual enum in
not-jvm source-set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86014"><code>KT-86014</code></a>
Types are broken after remove parameter through change signature</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86363"><code>KT-86363</code></a>
KotlinIllegalArgumentExceptionWithAttachments: No dangling modifier
found on companion blocks</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86147"><code>KT-86147</code></a>
Drop <code>kotlin.parallel.resolve.under.global.lock</code> registry
key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85543"><code>KT-85543</code></a>
Avoid lazy resolve for the contracts phase if no constracts might be
resolved</li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84914"><code>KT-84914</code></a>
Do not publish analysis-api-test-framework</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86986"><code>KT-86986</code></a>
<code>kotlin-compiler-common-for-ide</code> bundles unrelated Analysis
API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86186"><code>KT-86186</code></a>
Analysis API: Codebase tests run twice in some analysis modules — pick a
single JUnit runner and migrate</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85360"><code>KT-85360</code></a>
Drop kotlin-compiler-testdata-for-ide artifact</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85585"><code>KT-85585</code></a>
Simplify the dependencies graph for the Analysis API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85381"><code>KT-85381</code></a>
Remove tests for the FE10 implementation</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<h4>New Features</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84645"><code>KT-84645</code></a>
Support resolving to companion block members &amp; extensions from Java
(light classes)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80775"><code>KT-80775</code></a>
Support PsiClass#getRecordComponents in light classes</li>
</ul>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-57537"><code>KT-57537</code></a>
SLC: propagate default parameter value from (<code>@JvmOverloads</code>)
<code>expect</code> declarations to <code>actual</code>
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85040"><code>KT-85040</code></a>
[Analysis API] Improve Java / Kotlin interop in KMP projects</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87301"><code>KT-87301</code></a>
SymbolLightAccessorMethod#isValid returns false for delegated
properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87171"><code>KT-87171</code></a>
SLC: non-mapped Kotlin collection supertype is dropped from supertype
list</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87250"><code>KT-87250</code></a>
JvmExposeBoxed: light classes shouldn't be autogenerated for private
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70428"><code>KT-70428</code></a>
AA: good code is red when a Java class extends a Kotlin class
implementing MutableList by delegation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-63568"><code>KT-63568</code></a>
Symbol Light Classes:
KtAnnotationApplicationWithArgumentsInfo.normalizedArguments() may work
incorrectly when psi is not set</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.jvm's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.20</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86546"><code>KT-86546</code></a>
Check suspicious when over ConeKotlinType in
ConeTypeCompatibilityChecker</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85418"><code>KT-85418</code></a>
Implement an API for accessing deserialized file annotations in Analysis
API</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-74448"><code>KT-74448</code></a>
K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt,
kotlinx.coroutines</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85856"><code>KT-85856</code></a>
containingSymbol of constructor property differs for local and non-local
classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65417"><code>KT-65417</code></a>
K2 IDE: KTOR false positive expect-actual matching error on enum class
because of implicit clone() in non-JVM source sets</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-76457"><code>KT-76457</code></a>
K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a
JVM counterpart” on evaluating inline fun from common module inside
jvm</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70552"><code>KT-70552</code></a>
No expects for actual</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69727"><code>KT-69727</code></a>
K2 IDE. Wrong error in the editor on calling <code>clone</code> function
of actual enum instance in non-jvm platform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69726"><code>KT-69726</code></a>
FP errors on declaring <code>fun clone()</code> in actual enum in
not-jvm source-set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86014"><code>KT-86014</code></a>
Types are broken after remove parameter through change signature</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86363"><code>KT-86363</code></a>
KotlinIllegalArgumentExceptionWithAttachments: No dangling modifier
found on companion blocks</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86147"><code>KT-86147</code></a>
Drop <code>kotlin.parallel.resolve.under.global.lock</code> registry
key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85543"><code>KT-85543</code></a>
Avoid lazy resolve for the contracts phase if no constracts might be
resolved</li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84914"><code>KT-84914</code></a>
Do not publish analysis-api-test-framework</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86986"><code>KT-86986</code></a>
<code>kotlin-compiler-common-for-ide</code> bundles unrelated Analysis
API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86186"><code>KT-86186</code></a>
Analysis API: Codebase tests run twice in some analysis modules — pick a
single JUnit runner and migrate</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85360"><code>KT-85360</code></a>
Drop kotlin-compiler-testdata-for-ide artifact</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85585"><code>KT-85585</code></a>
Simplify the dependencies graph for the Analysis API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85381"><code>KT-85381</code></a>
Remove tests for the FE10 implementation</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<h4>New Features</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84645"><code>KT-84645</code></a>
Support resolving to companion block members &amp; extensions from Java
(light classes)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80775"><code>KT-80775</code></a>
Support PsiClass#getRecordComponents in light classes</li>
</ul>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-57537"><code>KT-57537</code></a>
SLC: propagate default parameter value from (<code>@JvmOverloads</code>)
<code>expect</code> declarations to <code>actual</code>
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85040"><code>KT-85040</code></a>
[Analysis API] Improve Java / Kotlin interop in KMP projects</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87301"><code>KT-87301</code></a>
SymbolLightAccessorMethod#isValid returns false for delegated
properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87171"><code>KT-87171</code></a>
SLC: non-mapped Kotlin collection supertype is dropped from supertype
list</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87250"><code>KT-87250</code></a>
JvmExposeBoxed: light classes shouldn't be autogenerated for private
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70428"><code>KT-70428</code></a>
AA: good code is red when a Java class extends a Kotlin class
implementing MutableList by delegation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-63568"><code>KT-63568</code></a>
Symbol Light Classes:
KtAnnotationApplicationWithArgumentsInfo.normalizedArguments() may work
incorrectly when psi is not set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-36740"><code>KT-36740</code></a>
MPP: False-positive incompatible types in .java when using expect-class
returned by non-expect member from common when actual is actual
typealias</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="890ac1d94f"><code>890ac1d</code></a>
Add Changelog for 2.4.20-RC3</li>
<li><a
href="8860aed4ae"><code>8860aed</code></a>
🍒 [FIR] Fix suspend conversion when expected type is nullable (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7769">#7769</a>)</li>
<li><a
href="ab5bcd9428"><code>ab5bcd9</code></a>
Edit ChangeLog for 2.4.20-RC2</li>
<li><a
href="9464edc097"><code>9464edc</code></a>
Add ChangeLog for 2.4.20-RC2</li>
<li><a
href="0261e43b78"><code>0261e43</code></a>
Cherry-pick &quot;Fix <code>asBodyAndResultVar</code> call in
`visitInlinedLambdaInComposable...</li>
<li><a
href="0763513670"><code>0763513</code></a>
[box-tests] Workaround for klib compatibility tests (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7626">#7626</a>)</li>
<li><a
href="045aec6647"><code>045aec6</code></a>
[Wasm] Append scripts from webpack.config.d in the end of the file (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7615">#7615</a>)</li>
<li><a
href="cd7173bf0b"><code>cd7173b</code></a>
🍒 [2.4.20] [K/JS] Keep associated obj annotation only if getInstance
survives...</li>
<li><a
href="d36a2ffbcc"><code>d36a2ff</code></a>
CastsOptimizationPass: break aliases cycles (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7578">#7578</a>)</li>
<li><a
href="8664983b34"><code>8664983</code></a>
[CLI] Restore custom IC search scope creation</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.10...v2.4.20">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.jetbrains.kotlin.plugin.serialization` from 2.4.10 to
2.4.20
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.plugin.serialization's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.20</h2>
<h2>Changelog</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86546"><code>KT-86546</code></a>
Check suspicious when over ConeKotlinType in
ConeTypeCompatibilityChecker</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85418"><code>KT-85418</code></a>
Implement an API for accessing deserialized file annotations in Analysis
API</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-74448"><code>KT-74448</code></a>
K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt,
kotlinx.coroutines</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85856"><code>KT-85856</code></a>
containingSymbol of constructor property differs for local and non-local
classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65417"><code>KT-65417</code></a>
K2 IDE: KTOR false positive expect-actual matching error on enum class
because of implicit clone() in non-JVM source sets</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-76457"><code>KT-76457</code></a>
K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a
JVM counterpart” on evaluating inline fun from common module inside
jvm</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70552"><code>KT-70552</code></a>
No expects for actual</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69727"><code>KT-69727</code></a>
K2 IDE. Wrong error in the editor on calling <code>clone</code> function
of actual enum instance in non-jvm platform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69726"><code>KT-69726</code></a>
FP errors on declaring <code>fun clone()</code> in actual enum in
not-jvm source-set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86014"><code>KT-86014</code></a>
Types are broken after remove parameter through change signature</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86363"><code>KT-86363</code></a>
KotlinIllegalArgumentExceptionWithAttachments: No dangling modifier
found on companion blocks</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86147"><code>KT-86147</code></a>
Drop <code>kotlin.parallel.resolve.under.global.lock</code> registry
key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85543"><code>KT-85543</code></a>
Avoid lazy resolve for the contracts phase if no constracts might be
resolved</li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84914"><code>KT-84914</code></a>
Do not publish analysis-api-test-framework</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86986"><code>KT-86986</code></a>
<code>kotlin-compiler-common-for-ide</code> bundles unrelated Analysis
API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86186"><code>KT-86186</code></a>
Analysis API: Codebase tests run twice in some analysis modules — pick a
single JUnit runner and migrate</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85360"><code>KT-85360</code></a>
Drop kotlin-compiler-testdata-for-ide artifact</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85585"><code>KT-85585</code></a>
Simplify the dependencies graph for the Analysis API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85381"><code>KT-85381</code></a>
Remove tests for the FE10 implementation</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<h4>New Features</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84645"><code>KT-84645</code></a>
Support resolving to companion block members &amp; extensions from Java
(light classes)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80775"><code>KT-80775</code></a>
Support PsiClass#getRecordComponents in light classes</li>
</ul>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-57537"><code>KT-57537</code></a>
SLC: propagate default parameter value from (<code>@JvmOverloads</code>)
<code>expect</code> declarations to <code>actual</code>
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85040"><code>KT-85040</code></a>
[Analysis API] Improve Java / Kotlin interop in KMP projects</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87301"><code>KT-87301</code></a>
SymbolLightAccessorMethod#isValid returns false for delegated
properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87171"><code>KT-87171</code></a>
SLC: non-mapped Kotlin collection supertype is dropped from supertype
list</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87250"><code>KT-87250</code></a>
JvmExposeBoxed: light classes shouldn't be autogenerated for private
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70428"><code>KT-70428</code></a>
AA: good code is red when a Java class extends a Kotlin class
implementing MutableList by delegation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-63568"><code>KT-63568</code></a>
Symbol Light Classes:
KtAnnotationApplicationWithArgumentsInfo.normalizedArguments() may work
incorrectly when psi is not set</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.plugin.serialization's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.20</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86546"><code>KT-86546</code></a>
Check suspicious when over ConeKotlinType in
ConeTypeCompatibilityChecker</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85418"><code>KT-85418</code></a>
Implement an API for accessing deserialized file annotations in Analysis
API</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-74448"><code>KT-74448</code></a>
K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt,
kotlinx.coroutines</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85856"><code>KT-85856</code></a>
containingSymbol of constructor property differs for local and non-local
classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65417"><code>KT-65417</code></a>
K2 IDE: KTOR false positive expect-actual matching error on enum class
because of implicit clone() in non-JVM source sets</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-76457"><code>KT-76457</code></a>
K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a
JVM counterpart” on evaluating inline fun from common module inside
jvm</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70552"><code>KT-70552</code></a>
No expects for actual</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69727"><code>KT-69727</code></a>
K2 IDE. Wrong error in the editor on calling <code>clone</code> function
of actual enum instance in non-jvm platform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69726"><code>KT-69726</code></a>
FP errors on declaring <code>fun clone()</code> in actual enum in
not-jvm source-set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86014"><code>KT-86014</code></a>
Types are broken after remove parameter through change signature</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86363"><code>KT-86363</code></a>
KotlinIllegalArgumentExceptionWithAttachments: No dangling modifier
found on companion blocks</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86147"><code>KT-86147</code></a>
Drop <code>kotlin.parallel.resolve.under.global.lock</code> registry
key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85543"><code>KT-85543</code></a>
Avoid lazy resolve for the contracts phase if no constracts might be
resolved</li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84914"><code>KT-84914</code></a>
Do not publish analysis-api-test-framework</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86986"><code>KT-86986</code></a>
<code>kotlin-compiler-common-for-ide</code> bundles unrelated Analysis
API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86186"><code>KT-86186</code></a>
Analysis API: Codebase tests run twice in some analysis modules — pick a
single JUnit runner and migrate</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85360"><code>KT-85360</code></a>
Drop kotlin-compiler-testdata-for-ide artifact</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85585"><code>KT-85585</code></a>
Simplify the dependencies graph for the Analysis API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85381"><code>KT-85381</code></a>
Remove tests for the FE10 implementation</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<h4>New Features</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84645"><code>KT-84645</code></a>
Support resolving to companion block members &amp; extensions from Java
(light classes)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80775"><code>KT-80775</code></a>
Support PsiClass#getRecordComponents in light classes</li>
</ul>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-57537"><code>KT-57537</code></a>
SLC: propagate default parameter value from (<code>@JvmOverloads</code>)
<code>expect</code> declarations to <code>actual</code>
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85040"><code>KT-85040</code></a>
[Analysis API] Improve Java / Kotlin interop in KMP projects</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87301"><code>KT-87301</code></a>
SymbolLightAccessorMethod#isValid returns false for delegated
properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87171"><code>KT-87171</code></a>
SLC: non-mapped Kotlin collection supertype is dropped from supertype
list</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87250"><code>KT-87250</code></a>
JvmExposeBoxed: light classes shouldn't be autogenerated for private
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70428"><code>KT-70428</code></a>
AA: good code is red when a Java class extends a Kotlin class
implementing MutableList by delegation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-63568"><code>KT-63568</code></a>
Symbol Light Classes:
KtAnnotationApplicationWithArgumentsInfo.normalizedArguments() may work
incorrectly when psi is not set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-36740"><code>KT-36740</code></a>
MPP: False-positive incompatible types in .java when using expect-class
returned by non-expect member from common when actual is actual
typealias</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="890ac1d94f"><code>890ac1d</code></a>
Add Changelog for 2.4.20-RC3</li>
<li><a
href="8860aed4ae"><code>8860aed</code></a>
🍒 [FIR] Fix suspend conversion when expected type is nullable (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7769">#7769</a>)</li>
<li><a
href="ab5bcd9428"><code>ab5bcd9</code></a>
Edit ChangeLog for 2.4.20-RC2</li>
<li><a
href="9464edc097"><code>9464edc</code></a>
Add ChangeLog for 2.4.20-RC2</li>
<li><a
href="0261e43b78"><code>0261e43</code></a>
Cherry-pick &quot;Fix <code>asBodyAndResultVar</code> call in
`visitInlinedLambdaInComposable...</li>
<li><a
href="0763513670"><code>0763513</code></a>
[box-tests] Workaround for klib compatibility tests (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7626">#7626</a>)</li>
<li><a
href="045aec6647"><code>045aec6</code></a>
[Wasm] Append scripts from webpack.config.d in the end of the file (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7615">#7615</a>)</li>
<li><a
href="cd7173bf0b"><code>cd7173b</code></a>
🍒 [2.4.20] [K/JS] Keep associated obj annotation only if getInstance
survives...</li>
<li><a
href="d36a2ffbcc"><code>d36a2ff</code></a>
CastsOptimizationPass: break aliases cycles (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7578">#7578</a>)</li>
<li><a
href="8664983b34"><code>8664983</code></a>
[CLI] Restore custom IC search scope creation</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.10...v2.4.20">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-18 14:04:06 +02:00
dependabot[bot]
1d04427cff
chore(deps): bump kotlin from 2.4.10 to 2.4.20 in /samples/weather-stdio-server (#997)
Bumps `kotlin` from 2.4.10 to 2.4.20.
Updates `org.jetbrains.kotlin.jvm` from 2.4.10 to 2.4.20
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.jvm's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.20</h2>
<h2>Changelog</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86546"><code>KT-86546</code></a>
Check suspicious when over ConeKotlinType in
ConeTypeCompatibilityChecker</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85418"><code>KT-85418</code></a>
Implement an API for accessing deserialized file annotations in Analysis
API</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-74448"><code>KT-74448</code></a>
K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt,
kotlinx.coroutines</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85856"><code>KT-85856</code></a>
containingSymbol of constructor property differs for local and non-local
classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65417"><code>KT-65417</code></a>
K2 IDE: KTOR false positive expect-actual matching error on enum class
because of implicit clone() in non-JVM source sets</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-76457"><code>KT-76457</code></a>
K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a
JVM counterpart” on evaluating inline fun from common module inside
jvm</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70552"><code>KT-70552</code></a>
No expects for actual</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69727"><code>KT-69727</code></a>
K2 IDE. Wrong error in the editor on calling <code>clone</code> function
of actual enum instance in non-jvm platform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69726"><code>KT-69726</code></a>
FP errors on declaring <code>fun clone()</code> in actual enum in
not-jvm source-set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86014"><code>KT-86014</code></a>
Types are broken after remove parameter through change signature</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86363"><code>KT-86363</code></a>
KotlinIllegalArgumentExceptionWithAttachments: No dangling modifier
found on companion blocks</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86147"><code>KT-86147</code></a>
Drop <code>kotlin.parallel.resolve.under.global.lock</code> registry
key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85543"><code>KT-85543</code></a>
Avoid lazy resolve for the contracts phase if no constracts might be
resolved</li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84914"><code>KT-84914</code></a>
Do not publish analysis-api-test-framework</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86986"><code>KT-86986</code></a>
<code>kotlin-compiler-common-for-ide</code> bundles unrelated Analysis
API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86186"><code>KT-86186</code></a>
Analysis API: Codebase tests run twice in some analysis modules — pick a
single JUnit runner and migrate</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85360"><code>KT-85360</code></a>
Drop kotlin-compiler-testdata-for-ide artifact</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85585"><code>KT-85585</code></a>
Simplify the dependencies graph for the Analysis API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85381"><code>KT-85381</code></a>
Remove tests for the FE10 implementation</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<h4>New Features</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84645"><code>KT-84645</code></a>
Support resolving to companion block members &amp; extensions from Java
(light classes)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80775"><code>KT-80775</code></a>
Support PsiClass#getRecordComponents in light classes</li>
</ul>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-57537"><code>KT-57537</code></a>
SLC: propagate default parameter value from (<code>@JvmOverloads</code>)
<code>expect</code> declarations to <code>actual</code>
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85040"><code>KT-85040</code></a>
[Analysis API] Improve Java / Kotlin interop in KMP projects</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87301"><code>KT-87301</code></a>
SymbolLightAccessorMethod#isValid returns false for delegated
properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87171"><code>KT-87171</code></a>
SLC: non-mapped Kotlin collection supertype is dropped from supertype
list</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87250"><code>KT-87250</code></a>
JvmExposeBoxed: light classes shouldn't be autogenerated for private
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70428"><code>KT-70428</code></a>
AA: good code is red when a Java class extends a Kotlin class
implementing MutableList by delegation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-63568"><code>KT-63568</code></a>
Symbol Light Classes:
KtAnnotationApplicationWithArgumentsInfo.normalizedArguments() may work
incorrectly when psi is not set</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.jvm's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.20</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86546"><code>KT-86546</code></a>
Check suspicious when over ConeKotlinType in
ConeTypeCompatibilityChecker</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85418"><code>KT-85418</code></a>
Implement an API for accessing deserialized file annotations in Analysis
API</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-74448"><code>KT-74448</code></a>
K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt,
kotlinx.coroutines</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85856"><code>KT-85856</code></a>
containingSymbol of constructor property differs for local and non-local
classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65417"><code>KT-65417</code></a>
K2 IDE: KTOR false positive expect-actual matching error on enum class
because of implicit clone() in non-JVM source sets</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-76457"><code>KT-76457</code></a>
K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a
JVM counterpart” on evaluating inline fun from common module inside
jvm</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70552"><code>KT-70552</code></a>
No expects for actual</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69727"><code>KT-69727</code></a>
K2 IDE. Wrong error in the editor on calling <code>clone</code> function
of actual enum instance in non-jvm platform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69726"><code>KT-69726</code></a>
FP errors on declaring <code>fun clone()</code> in actual enum in
not-jvm source-set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86014"><code>KT-86014</code></a>
Types are broken after remove parameter through change signature</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86363"><code>KT-86363</code></a>
KotlinIllegalArgumentExceptionWithAttachments: No dangling modifier
found on companion blocks</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86147"><code>KT-86147</code></a>
Drop <code>kotlin.parallel.resolve.under.global.lock</code> registry
key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85543"><code>KT-85543</code></a>
Avoid lazy resolve for the contracts phase if no constracts might be
resolved</li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84914"><code>KT-84914</code></a>
Do not publish analysis-api-test-framework</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86986"><code>KT-86986</code></a>
<code>kotlin-compiler-common-for-ide</code> bundles unrelated Analysis
API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86186"><code>KT-86186</code></a>
Analysis API: Codebase tests run twice in some analysis modules — pick a
single JUnit runner and migrate</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85360"><code>KT-85360</code></a>
Drop kotlin-compiler-testdata-for-ide artifact</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85585"><code>KT-85585</code></a>
Simplify the dependencies graph for the Analysis API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85381"><code>KT-85381</code></a>
Remove tests for the FE10 implementation</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<h4>New Features</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84645"><code>KT-84645</code></a>
Support resolving to companion block members &amp; extensions from Java
(light classes)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80775"><code>KT-80775</code></a>
Support PsiClass#getRecordComponents in light classes</li>
</ul>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-57537"><code>KT-57537</code></a>
SLC: propagate default parameter value from (<code>@JvmOverloads</code>)
<code>expect</code> declarations to <code>actual</code>
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85040"><code>KT-85040</code></a>
[Analysis API] Improve Java / Kotlin interop in KMP projects</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87301"><code>KT-87301</code></a>
SymbolLightAccessorMethod#isValid returns false for delegated
properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87171"><code>KT-87171</code></a>
SLC: non-mapped Kotlin collection supertype is dropped from supertype
list</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87250"><code>KT-87250</code></a>
JvmExposeBoxed: light classes shouldn't be autogenerated for private
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70428"><code>KT-70428</code></a>
AA: good code is red when a Java class extends a Kotlin class
implementing MutableList by delegation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-63568"><code>KT-63568</code></a>
Symbol Light Classes:
KtAnnotationApplicationWithArgumentsInfo.normalizedArguments() may work
incorrectly when psi is not set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-36740"><code>KT-36740</code></a>
MPP: False-positive incompatible types in .java when using expect-class
returned by non-expect member from common when actual is actual
typealias</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="890ac1d94f"><code>890ac1d</code></a>
Add Changelog for 2.4.20-RC3</li>
<li><a
href="8860aed4ae"><code>8860aed</code></a>
🍒 [FIR] Fix suspend conversion when expected type is nullable (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7769">#7769</a>)</li>
<li><a
href="ab5bcd9428"><code>ab5bcd9</code></a>
Edit ChangeLog for 2.4.20-RC2</li>
<li><a
href="9464edc097"><code>9464edc</code></a>
Add ChangeLog for 2.4.20-RC2</li>
<li><a
href="0261e43b78"><code>0261e43</code></a>
Cherry-pick &quot;Fix <code>asBodyAndResultVar</code> call in
`visitInlinedLambdaInComposable...</li>
<li><a
href="0763513670"><code>0763513</code></a>
[box-tests] Workaround for klib compatibility tests (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7626">#7626</a>)</li>
<li><a
href="045aec6647"><code>045aec6</code></a>
[Wasm] Append scripts from webpack.config.d in the end of the file (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7615">#7615</a>)</li>
<li><a
href="cd7173bf0b"><code>cd7173b</code></a>
🍒 [2.4.20] [K/JS] Keep associated obj annotation only if getInstance
survives...</li>
<li><a
href="d36a2ffbcc"><code>d36a2ff</code></a>
CastsOptimizationPass: break aliases cycles (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7578">#7578</a>)</li>
<li><a
href="8664983b34"><code>8664983</code></a>
[CLI] Restore custom IC search scope creation</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.10...v2.4.20">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.jetbrains.kotlin.plugin.serialization` from 2.4.10 to
2.4.20
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.plugin.serialization's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.20</h2>
<h2>Changelog</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86546"><code>KT-86546</code></a>
Check suspicious when over ConeKotlinType in
ConeTypeCompatibilityChecker</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85418"><code>KT-85418</code></a>
Implement an API for accessing deserialized file annotations in Analysis
API</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-74448"><code>KT-74448</code></a>
K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt,
kotlinx.coroutines</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85856"><code>KT-85856</code></a>
containingSymbol of constructor property differs for local and non-local
classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65417"><code>KT-65417</code></a>
K2 IDE: KTOR false positive expect-actual matching error on enum class
because of implicit clone() in non-JVM source sets</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-76457"><code>KT-76457</code></a>
K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a
JVM counterpart” on evaluating inline fun from common module inside
jvm</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70552"><code>KT-70552</code></a>
No expects for actual</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69727"><code>KT-69727</code></a>
K2 IDE. Wrong error in the editor on calling <code>clone</code> function
of actual enum instance in non-jvm platform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69726"><code>KT-69726</code></a>
FP errors on declaring <code>fun clone()</code> in actual enum in
not-jvm source-set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86014"><code>KT-86014</code></a>
Types are broken after remove parameter through change signature</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86363"><code>KT-86363</code></a>
KotlinIllegalArgumentExceptionWithAttachments: No dangling modifier
found on companion blocks</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86147"><code>KT-86147</code></a>
Drop <code>kotlin.parallel.resolve.under.global.lock</code> registry
key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85543"><code>KT-85543</code></a>
Avoid lazy resolve for the contracts phase if no constracts might be
resolved</li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84914"><code>KT-84914</code></a>
Do not publish analysis-api-test-framework</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86986"><code>KT-86986</code></a>
<code>kotlin-compiler-common-for-ide</code> bundles unrelated Analysis
API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86186"><code>KT-86186</code></a>
Analysis API: Codebase tests run twice in some analysis modules — pick a
single JUnit runner and migrate</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85360"><code>KT-85360</code></a>
Drop kotlin-compiler-testdata-for-ide artifact</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85585"><code>KT-85585</code></a>
Simplify the dependencies graph for the Analysis API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85381"><code>KT-85381</code></a>
Remove tests for the FE10 implementation</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<h4>New Features</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84645"><code>KT-84645</code></a>
Support resolving to companion block members &amp; extensions from Java
(light classes)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80775"><code>KT-80775</code></a>
Support PsiClass#getRecordComponents in light classes</li>
</ul>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-57537"><code>KT-57537</code></a>
SLC: propagate default parameter value from (<code>@JvmOverloads</code>)
<code>expect</code> declarations to <code>actual</code>
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85040"><code>KT-85040</code></a>
[Analysis API] Improve Java / Kotlin interop in KMP projects</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87301"><code>KT-87301</code></a>
SymbolLightAccessorMethod#isValid returns false for delegated
properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87171"><code>KT-87171</code></a>
SLC: non-mapped Kotlin collection supertype is dropped from supertype
list</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87250"><code>KT-87250</code></a>
JvmExposeBoxed: light classes shouldn't be autogenerated for private
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70428"><code>KT-70428</code></a>
AA: good code is red when a Java class extends a Kotlin class
implementing MutableList by delegation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-63568"><code>KT-63568</code></a>
Symbol Light Classes:
KtAnnotationApplicationWithArgumentsInfo.normalizedArguments() may work
incorrectly when psi is not set</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.plugin.serialization's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.20</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86546"><code>KT-86546</code></a>
Check suspicious when over ConeKotlinType in
ConeTypeCompatibilityChecker</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85418"><code>KT-85418</code></a>
Implement an API for accessing deserialized file annotations in Analysis
API</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-74448"><code>KT-74448</code></a>
K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt,
kotlinx.coroutines</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85856"><code>KT-85856</code></a>
containingSymbol of constructor property differs for local and non-local
classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65417"><code>KT-65417</code></a>
K2 IDE: KTOR false positive expect-actual matching error on enum class
because of implicit clone() in non-JVM source sets</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-76457"><code>KT-76457</code></a>
K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a
JVM counterpart” on evaluating inline fun from common module inside
jvm</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70552"><code>KT-70552</code></a>
No expects for actual</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69727"><code>KT-69727</code></a>
K2 IDE. Wrong error in the editor on calling <code>clone</code> function
of actual enum instance in non-jvm platform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69726"><code>KT-69726</code></a>
FP errors on declaring <code>fun clone()</code> in actual enum in
not-jvm source-set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86014"><code>KT-86014</code></a>
Types are broken after remove parameter through change signature</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86363"><code>KT-86363</code></a>
KotlinIllegalArgumentExceptionWithAttachments: No dangling modifier
found on companion blocks</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86147"><code>KT-86147</code></a>
Drop <code>kotlin.parallel.resolve.under.global.lock</code> registry
key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85543"><code>KT-85543</code></a>
Avoid lazy resolve for the contracts phase if no constracts might be
resolved</li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84914"><code>KT-84914</code></a>
Do not publish analysis-api-test-framework</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86986"><code>KT-86986</code></a>
<code>kotlin-compiler-common-for-ide</code> bundles unrelated Analysis
API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86186"><code>KT-86186</code></a>
Analysis API: Codebase tests run twice in some analysis modules — pick a
single JUnit runner and migrate</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85360"><code>KT-85360</code></a>
Drop kotlin-compiler-testdata-for-ide artifact</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85585"><code>KT-85585</code></a>
Simplify the dependencies graph for the Analysis API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85381"><code>KT-85381</code></a>
Remove tests for the FE10 implementation</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<h4>New Features</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84645"><code>KT-84645</code></a>
Support resolving to companion block members &amp; extensions from Java
(light classes)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80775"><code>KT-80775</code></a>
Support PsiClass#getRecordComponents in light classes</li>
</ul>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-57537"><code>KT-57537</code></a>
SLC: propagate default parameter value from (<code>@JvmOverloads</code>)
<code>expect</code> declarations to <code>actual</code>
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85040"><code>KT-85040</code></a>
[Analysis API] Improve Java / Kotlin interop in KMP projects</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87301"><code>KT-87301</code></a>
SymbolLightAccessorMethod#isValid returns false for delegated
properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87171"><code>KT-87171</code></a>
SLC: non-mapped Kotlin collection supertype is dropped from supertype
list</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87250"><code>KT-87250</code></a>
JvmExposeBoxed: light classes shouldn't be autogenerated for private
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70428"><code>KT-70428</code></a>
AA: good code is red when a Java class extends a Kotlin class
implementing MutableList by delegation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-63568"><code>KT-63568</code></a>
Symbol Light Classes:
KtAnnotationApplicationWithArgumentsInfo.normalizedArguments() may work
incorrectly when psi is not set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-36740"><code>KT-36740</code></a>
MPP: False-positive incompatible types in .java when using expect-class
returned by non-expect member from common when actual is actual
typealias</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="890ac1d94f"><code>890ac1d</code></a>
Add Changelog for 2.4.20-RC3</li>
<li><a
href="8860aed4ae"><code>8860aed</code></a>
🍒 [FIR] Fix suspend conversion when expected type is nullable (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7769">#7769</a>)</li>
<li><a
href="ab5bcd9428"><code>ab5bcd9</code></a>
Edit ChangeLog for 2.4.20-RC2</li>
<li><a
href="9464edc097"><code>9464edc</code></a>
Add ChangeLog for 2.4.20-RC2</li>
<li><a
href="0261e43b78"><code>0261e43</code></a>
Cherry-pick &quot;Fix <code>asBodyAndResultVar</code> call in
`visitInlinedLambdaInComposable...</li>
<li><a
href="0763513670"><code>0763513</code></a>
[box-tests] Workaround for klib compatibility tests (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7626">#7626</a>)</li>
<li><a
href="045aec6647"><code>045aec6</code></a>
[Wasm] Append scripts from webpack.config.d in the end of the file (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7615">#7615</a>)</li>
<li><a
href="cd7173bf0b"><code>cd7173b</code></a>
🍒 [2.4.20] [K/JS] Keep associated obj annotation only if getInstance
survives...</li>
<li><a
href="d36a2ffbcc"><code>d36a2ff</code></a>
CastsOptimizationPass: break aliases cycles (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7578">#7578</a>)</li>
<li><a
href="8664983b34"><code>8664983</code></a>
[CLI] Restore custom IC search scope creation</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.10...v2.4.20">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-17 17:58:02 +02:00
dependabot[bot]
8b0badb883
chore(deps): bump kotlin from 2.4.10 to 2.4.20 in /samples/kotlinlang-mcp-server (#995)
Bumps `kotlin` from 2.4.10 to 2.4.20.
Updates `org.jetbrains.kotlin.jvm` from 2.4.10 to 2.4.20
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.jvm's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.20</h2>
<h2>Changelog</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86546"><code>KT-86546</code></a>
Check suspicious when over ConeKotlinType in
ConeTypeCompatibilityChecker</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85418"><code>KT-85418</code></a>
Implement an API for accessing deserialized file annotations in Analysis
API</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-74448"><code>KT-74448</code></a>
K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt,
kotlinx.coroutines</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85856"><code>KT-85856</code></a>
containingSymbol of constructor property differs for local and non-local
classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65417"><code>KT-65417</code></a>
K2 IDE: KTOR false positive expect-actual matching error on enum class
because of implicit clone() in non-JVM source sets</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-76457"><code>KT-76457</code></a>
K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a
JVM counterpart” on evaluating inline fun from common module inside
jvm</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70552"><code>KT-70552</code></a>
No expects for actual</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69727"><code>KT-69727</code></a>
K2 IDE. Wrong error in the editor on calling <code>clone</code> function
of actual enum instance in non-jvm platform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69726"><code>KT-69726</code></a>
FP errors on declaring <code>fun clone()</code> in actual enum in
not-jvm source-set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86014"><code>KT-86014</code></a>
Types are broken after remove parameter through change signature</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86363"><code>KT-86363</code></a>
KotlinIllegalArgumentExceptionWithAttachments: No dangling modifier
found on companion blocks</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86147"><code>KT-86147</code></a>
Drop <code>kotlin.parallel.resolve.under.global.lock</code> registry
key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85543"><code>KT-85543</code></a>
Avoid lazy resolve for the contracts phase if no constracts might be
resolved</li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84914"><code>KT-84914</code></a>
Do not publish analysis-api-test-framework</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86986"><code>KT-86986</code></a>
<code>kotlin-compiler-common-for-ide</code> bundles unrelated Analysis
API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86186"><code>KT-86186</code></a>
Analysis API: Codebase tests run twice in some analysis modules — pick a
single JUnit runner and migrate</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85360"><code>KT-85360</code></a>
Drop kotlin-compiler-testdata-for-ide artifact</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85585"><code>KT-85585</code></a>
Simplify the dependencies graph for the Analysis API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85381"><code>KT-85381</code></a>
Remove tests for the FE10 implementation</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<h4>New Features</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84645"><code>KT-84645</code></a>
Support resolving to companion block members &amp; extensions from Java
(light classes)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80775"><code>KT-80775</code></a>
Support PsiClass#getRecordComponents in light classes</li>
</ul>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-57537"><code>KT-57537</code></a>
SLC: propagate default parameter value from (<code>@JvmOverloads</code>)
<code>expect</code> declarations to <code>actual</code>
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85040"><code>KT-85040</code></a>
[Analysis API] Improve Java / Kotlin interop in KMP projects</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87301"><code>KT-87301</code></a>
SymbolLightAccessorMethod#isValid returns false for delegated
properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87171"><code>KT-87171</code></a>
SLC: non-mapped Kotlin collection supertype is dropped from supertype
list</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87250"><code>KT-87250</code></a>
JvmExposeBoxed: light classes shouldn't be autogenerated for private
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70428"><code>KT-70428</code></a>
AA: good code is red when a Java class extends a Kotlin class
implementing MutableList by delegation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-63568"><code>KT-63568</code></a>
Symbol Light Classes:
KtAnnotationApplicationWithArgumentsInfo.normalizedArguments() may work
incorrectly when psi is not set</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.jvm's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.20</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86546"><code>KT-86546</code></a>
Check suspicious when over ConeKotlinType in
ConeTypeCompatibilityChecker</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85418"><code>KT-85418</code></a>
Implement an API for accessing deserialized file annotations in Analysis
API</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-74448"><code>KT-74448</code></a>
K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt,
kotlinx.coroutines</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85856"><code>KT-85856</code></a>
containingSymbol of constructor property differs for local and non-local
classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65417"><code>KT-65417</code></a>
K2 IDE: KTOR false positive expect-actual matching error on enum class
because of implicit clone() in non-JVM source sets</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-76457"><code>KT-76457</code></a>
K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a
JVM counterpart” on evaluating inline fun from common module inside
jvm</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70552"><code>KT-70552</code></a>
No expects for actual</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69727"><code>KT-69727</code></a>
K2 IDE. Wrong error in the editor on calling <code>clone</code> function
of actual enum instance in non-jvm platform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69726"><code>KT-69726</code></a>
FP errors on declaring <code>fun clone()</code> in actual enum in
not-jvm source-set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86014"><code>KT-86014</code></a>
Types are broken after remove parameter through change signature</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86363"><code>KT-86363</code></a>
KotlinIllegalArgumentExceptionWithAttachments: No dangling modifier
found on companion blocks</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86147"><code>KT-86147</code></a>
Drop <code>kotlin.parallel.resolve.under.global.lock</code> registry
key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85543"><code>KT-85543</code></a>
Avoid lazy resolve for the contracts phase if no constracts might be
resolved</li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84914"><code>KT-84914</code></a>
Do not publish analysis-api-test-framework</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86986"><code>KT-86986</code></a>
<code>kotlin-compiler-common-for-ide</code> bundles unrelated Analysis
API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86186"><code>KT-86186</code></a>
Analysis API: Codebase tests run twice in some analysis modules — pick a
single JUnit runner and migrate</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85360"><code>KT-85360</code></a>
Drop kotlin-compiler-testdata-for-ide artifact</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85585"><code>KT-85585</code></a>
Simplify the dependencies graph for the Analysis API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85381"><code>KT-85381</code></a>
Remove tests for the FE10 implementation</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<h4>New Features</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84645"><code>KT-84645</code></a>
Support resolving to companion block members &amp; extensions from Java
(light classes)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80775"><code>KT-80775</code></a>
Support PsiClass#getRecordComponents in light classes</li>
</ul>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-57537"><code>KT-57537</code></a>
SLC: propagate default parameter value from (<code>@JvmOverloads</code>)
<code>expect</code> declarations to <code>actual</code>
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85040"><code>KT-85040</code></a>
[Analysis API] Improve Java / Kotlin interop in KMP projects</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87301"><code>KT-87301</code></a>
SymbolLightAccessorMethod#isValid returns false for delegated
properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87171"><code>KT-87171</code></a>
SLC: non-mapped Kotlin collection supertype is dropped from supertype
list</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87250"><code>KT-87250</code></a>
JvmExposeBoxed: light classes shouldn't be autogenerated for private
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70428"><code>KT-70428</code></a>
AA: good code is red when a Java class extends a Kotlin class
implementing MutableList by delegation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-63568"><code>KT-63568</code></a>
Symbol Light Classes:
KtAnnotationApplicationWithArgumentsInfo.normalizedArguments() may work
incorrectly when psi is not set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-36740"><code>KT-36740</code></a>
MPP: False-positive incompatible types in .java when using expect-class
returned by non-expect member from common when actual is actual
typealias</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="890ac1d94f"><code>890ac1d</code></a>
Add Changelog for 2.4.20-RC3</li>
<li><a
href="8860aed4ae"><code>8860aed</code></a>
🍒 [FIR] Fix suspend conversion when expected type is nullable (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7769">#7769</a>)</li>
<li><a
href="ab5bcd9428"><code>ab5bcd9</code></a>
Edit ChangeLog for 2.4.20-RC2</li>
<li><a
href="9464edc097"><code>9464edc</code></a>
Add ChangeLog for 2.4.20-RC2</li>
<li><a
href="0261e43b78"><code>0261e43</code></a>
Cherry-pick &quot;Fix <code>asBodyAndResultVar</code> call in
`visitInlinedLambdaInComposable...</li>
<li><a
href="0763513670"><code>0763513</code></a>
[box-tests] Workaround for klib compatibility tests (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7626">#7626</a>)</li>
<li><a
href="045aec6647"><code>045aec6</code></a>
[Wasm] Append scripts from webpack.config.d in the end of the file (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7615">#7615</a>)</li>
<li><a
href="cd7173bf0b"><code>cd7173b</code></a>
🍒 [2.4.20] [K/JS] Keep associated obj annotation only if getInstance
survives...</li>
<li><a
href="d36a2ffbcc"><code>d36a2ff</code></a>
CastsOptimizationPass: break aliases cycles (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7578">#7578</a>)</li>
<li><a
href="8664983b34"><code>8664983</code></a>
[CLI] Restore custom IC search scope creation</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.10...v2.4.20">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.jetbrains.kotlin.plugin.serialization` from 2.4.10 to
2.4.20
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.plugin.serialization's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.20</h2>
<h2>Changelog</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86546"><code>KT-86546</code></a>
Check suspicious when over ConeKotlinType in
ConeTypeCompatibilityChecker</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85418"><code>KT-85418</code></a>
Implement an API for accessing deserialized file annotations in Analysis
API</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-74448"><code>KT-74448</code></a>
K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt,
kotlinx.coroutines</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85856"><code>KT-85856</code></a>
containingSymbol of constructor property differs for local and non-local
classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65417"><code>KT-65417</code></a>
K2 IDE: KTOR false positive expect-actual matching error on enum class
because of implicit clone() in non-JVM source sets</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-76457"><code>KT-76457</code></a>
K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a
JVM counterpart” on evaluating inline fun from common module inside
jvm</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70552"><code>KT-70552</code></a>
No expects for actual</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69727"><code>KT-69727</code></a>
K2 IDE. Wrong error in the editor on calling <code>clone</code> function
of actual enum instance in non-jvm platform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69726"><code>KT-69726</code></a>
FP errors on declaring <code>fun clone()</code> in actual enum in
not-jvm source-set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86014"><code>KT-86014</code></a>
Types are broken after remove parameter through change signature</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86363"><code>KT-86363</code></a>
KotlinIllegalArgumentExceptionWithAttachments: No dangling modifier
found on companion blocks</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86147"><code>KT-86147</code></a>
Drop <code>kotlin.parallel.resolve.under.global.lock</code> registry
key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85543"><code>KT-85543</code></a>
Avoid lazy resolve for the contracts phase if no constracts might be
resolved</li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84914"><code>KT-84914</code></a>
Do not publish analysis-api-test-framework</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86986"><code>KT-86986</code></a>
<code>kotlin-compiler-common-for-ide</code> bundles unrelated Analysis
API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86186"><code>KT-86186</code></a>
Analysis API: Codebase tests run twice in some analysis modules — pick a
single JUnit runner and migrate</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85360"><code>KT-85360</code></a>
Drop kotlin-compiler-testdata-for-ide artifact</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85585"><code>KT-85585</code></a>
Simplify the dependencies graph for the Analysis API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85381"><code>KT-85381</code></a>
Remove tests for the FE10 implementation</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<h4>New Features</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84645"><code>KT-84645</code></a>
Support resolving to companion block members &amp; extensions from Java
(light classes)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80775"><code>KT-80775</code></a>
Support PsiClass#getRecordComponents in light classes</li>
</ul>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-57537"><code>KT-57537</code></a>
SLC: propagate default parameter value from (<code>@JvmOverloads</code>)
<code>expect</code> declarations to <code>actual</code>
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85040"><code>KT-85040</code></a>
[Analysis API] Improve Java / Kotlin interop in KMP projects</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87301"><code>KT-87301</code></a>
SymbolLightAccessorMethod#isValid returns false for delegated
properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87171"><code>KT-87171</code></a>
SLC: non-mapped Kotlin collection supertype is dropped from supertype
list</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87250"><code>KT-87250</code></a>
JvmExposeBoxed: light classes shouldn't be autogenerated for private
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70428"><code>KT-70428</code></a>
AA: good code is red when a Java class extends a Kotlin class
implementing MutableList by delegation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-63568"><code>KT-63568</code></a>
Symbol Light Classes:
KtAnnotationApplicationWithArgumentsInfo.normalizedArguments() may work
incorrectly when psi is not set</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.plugin.serialization's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.20</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86546"><code>KT-86546</code></a>
Check suspicious when over ConeKotlinType in
ConeTypeCompatibilityChecker</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85418"><code>KT-85418</code></a>
Implement an API for accessing deserialized file annotations in Analysis
API</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-74448"><code>KT-74448</code></a>
K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt,
kotlinx.coroutines</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85856"><code>KT-85856</code></a>
containingSymbol of constructor property differs for local and non-local
classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65417"><code>KT-65417</code></a>
K2 IDE: KTOR false positive expect-actual matching error on enum class
because of implicit clone() in non-JVM source sets</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-76457"><code>KT-76457</code></a>
K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a
JVM counterpart” on evaluating inline fun from common module inside
jvm</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70552"><code>KT-70552</code></a>
No expects for actual</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69727"><code>KT-69727</code></a>
K2 IDE. Wrong error in the editor on calling <code>clone</code> function
of actual enum instance in non-jvm platform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69726"><code>KT-69726</code></a>
FP errors on declaring <code>fun clone()</code> in actual enum in
not-jvm source-set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86014"><code>KT-86014</code></a>
Types are broken after remove parameter through change signature</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86363"><code>KT-86363</code></a>
KotlinIllegalArgumentExceptionWithAttachments: No dangling modifier
found on companion blocks</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86147"><code>KT-86147</code></a>
Drop <code>kotlin.parallel.resolve.under.global.lock</code> registry
key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85543"><code>KT-85543</code></a>
Avoid lazy resolve for the contracts phase if no constracts might be
resolved</li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84914"><code>KT-84914</code></a>
Do not publish analysis-api-test-framework</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86986"><code>KT-86986</code></a>
<code>kotlin-compiler-common-for-ide</code> bundles unrelated Analysis
API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86186"><code>KT-86186</code></a>
Analysis API: Codebase tests run twice in some analysis modules — pick a
single JUnit runner and migrate</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85360"><code>KT-85360</code></a>
Drop kotlin-compiler-testdata-for-ide artifact</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85585"><code>KT-85585</code></a>
Simplify the dependencies graph for the Analysis API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85381"><code>KT-85381</code></a>
Remove tests for the FE10 implementation</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<h4>New Features</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84645"><code>KT-84645</code></a>
Support resolving to companion block members &amp; extensions from Java
(light classes)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80775"><code>KT-80775</code></a>
Support PsiClass#getRecordComponents in light classes</li>
</ul>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-57537"><code>KT-57537</code></a>
SLC: propagate default parameter value from (<code>@JvmOverloads</code>)
<code>expect</code> declarations to <code>actual</code>
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85040"><code>KT-85040</code></a>
[Analysis API] Improve Java / Kotlin interop in KMP projects</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87301"><code>KT-87301</code></a>
SymbolLightAccessorMethod#isValid returns false for delegated
properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87171"><code>KT-87171</code></a>
SLC: non-mapped Kotlin collection supertype is dropped from supertype
list</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87250"><code>KT-87250</code></a>
JvmExposeBoxed: light classes shouldn't be autogenerated for private
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70428"><code>KT-70428</code></a>
AA: good code is red when a Java class extends a Kotlin class
implementing MutableList by delegation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-63568"><code>KT-63568</code></a>
Symbol Light Classes:
KtAnnotationApplicationWithArgumentsInfo.normalizedArguments() may work
incorrectly when psi is not set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-36740"><code>KT-36740</code></a>
MPP: False-positive incompatible types in .java when using expect-class
returned by non-expect member from common when actual is actual
typealias</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="890ac1d94f"><code>890ac1d</code></a>
Add Changelog for 2.4.20-RC3</li>
<li><a
href="8860aed4ae"><code>8860aed</code></a>
🍒 [FIR] Fix suspend conversion when expected type is nullable (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7769">#7769</a>)</li>
<li><a
href="ab5bcd9428"><code>ab5bcd9</code></a>
Edit ChangeLog for 2.4.20-RC2</li>
<li><a
href="9464edc097"><code>9464edc</code></a>
Add ChangeLog for 2.4.20-RC2</li>
<li><a
href="0261e43b78"><code>0261e43</code></a>
Cherry-pick &quot;Fix <code>asBodyAndResultVar</code> call in
`visitInlinedLambdaInComposable...</li>
<li><a
href="0763513670"><code>0763513</code></a>
[box-tests] Workaround for klib compatibility tests (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7626">#7626</a>)</li>
<li><a
href="045aec6647"><code>045aec6</code></a>
[Wasm] Append scripts from webpack.config.d in the end of the file (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7615">#7615</a>)</li>
<li><a
href="cd7173bf0b"><code>cd7173b</code></a>
🍒 [2.4.20] [K/JS] Keep associated obj annotation only if getInstance
survives...</li>
<li><a
href="d36a2ffbcc"><code>d36a2ff</code></a>
CastsOptimizationPass: break aliases cycles (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7578">#7578</a>)</li>
<li><a
href="8664983b34"><code>8664983</code></a>
[CLI] Restore custom IC search scope creation</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.10...v2.4.20">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-17 17:26:51 +02:00
dependabot[bot]
e9b976198b
chore(deps): bump the other-dependencies group across 4 directories with 2 updates (#988)
Bumps the other-dependencies group with 2 updates in the
/samples/kotlin-mcp-client directory:
[com.anthropic:anthropic-java](https://github.com/anthropics/anthropic-sdk-java)
and org.slf4j:slf4j-simple.
Bumps the other-dependencies group with 1 update in the
/samples/kotlin-mcp-server directory: org.slf4j:slf4j-simple.
Bumps the other-dependencies group with 1 update in the
/samples/simple-streamable-server directory: org.slf4j:slf4j-simple.
Bumps the other-dependencies group with 1 update in the
/samples/weather-stdio-server directory: org.slf4j:slf4j-simple.

Updates `com.anthropic:anthropic-java` from 2.60.0 to 2.62.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-java/releases">com.anthropic:anthropic-java's
releases</a>.</em></p>
<blockquote>
<h2>v2.62.0</h2>
<h2>2.62.0 (2026-09-10)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.61.0...v2.62.0">v2.61.0...v2.62.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add auto mode tool permissions for Managed
Agents (<a
href="e373feae15">e373fea</a>)</li>
<li><strong>api:</strong> add content_too_large web_fetch tool error
code (<a
href="96451dee56">96451de</a>)</li>
<li><strong>api:</strong> add the user-profiles-2026-09-04 beta value
and external_user_details to user profiles (<a
href="eb8c5b8900">eb8c5b8</a>)</li>
<li><strong>api:</strong> support mounting public GitHub repositories
without an authorization_token in Managed Agents sessions (<a
href="2e1c9edbd4">2e1c9ed</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li><strong>streaming:</strong> append tool input JSON in place (<a
href="d330f8bc51">d330f8b</a>)</li>
<li><strong>streaming:</strong> buffer text deltas instead of rebuilding
blocks per delta (<a
href="2bf8f70acd">2bf8f70</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li><strong>docs:</strong> correct the environment scope field
description (<a
href="788877064e">7888770</a>)</li>
<li><strong>internal:</strong> cap formatter JVM heap at 1 GiB (<a
href="9b7b5a8b9a">9b7b5a8</a>)</li>
<li><strong>internal:</strong> restore package version (<a
href="28151f2eab">28151f2</a>)</li>
<li><strong>internal:</strong> restore package version (<a
href="6044d632e6">6044d63</a>)</li>
<li><strong>internal:</strong> stop stamping the package version into
generated files (<a
href="ee275adad3">ee275ad</a>)</li>
<li><strong>tests:</strong> restore empty test package marker files (<a
href="3e2284c0b3">3e2284c</a>)</li>
</ul>
<h2>v2.61.0</h2>
<h2>2.61.0 (2026-09-04)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.60.0...v2.61.0">v2.60.0...v2.61.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add Claude Tag category and user breakdowns to
usage reports (<a
href="7caaeb9fde">7caaeb9</a>)</li>
<li><strong>api:</strong> add named types for organization compliance
settings state (<a
href="9576c86dce">9576c86</a>)</li>
<li><strong>api:</strong> add workspace_id request option for
multi-workspace credentials (<a
href="cf7f13ccc1">cf7f13c</a>)</li>
<li><strong>api:</strong> raise Managed Agents vault refresh token limit
to 8192 chars (<a
href="d0c2286eda">d0c2286</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>api:</strong> remove response text block maxLength
constraint (<a
href="b6225ce280">b6225ce</a>)</li>
<li><strong>client:</strong> read union common properties from raw JSON
for unknown variants (<a
href="3d2f38fe74">3d2f38f</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li><strong>api:</strong> accept anthropic-version on Claude Enterprise
admin endpoints (<a
href="165fa6b5aa">165fa6b</a>)</li>
<li><strong>api:</strong> declare specific error statuses instead of a
generic 4XX response (<a
href="e0dc35b2c5">e0dc35b</a>)</li>
<li><strong>api:</strong> update authentication parameters on spend
limit create and delete (<a
href="d054f6cfe4">d054f6c</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-java/blob/main/CHANGELOG.md">com.anthropic:anthropic-java's
changelog</a>.</em></p>
<blockquote>
<h2>2.62.0 (2026-09-10)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.61.0...v2.62.0">v2.61.0...v2.62.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add auto mode tool permissions for Managed
Agents (<a
href="e373feae15">e373fea</a>)</li>
<li><strong>api:</strong> add content_too_large web_fetch tool error
code (<a
href="96451dee56">96451de</a>)</li>
<li><strong>api:</strong> add the user-profiles-2026-09-04 beta value
and external_user_details to user profiles (<a
href="eb8c5b8900">eb8c5b8</a>)</li>
<li><strong>api:</strong> support mounting public GitHub repositories
without an authorization_token in Managed Agents sessions (<a
href="2e1c9edbd4">2e1c9ed</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<ul>
<li><strong>streaming:</strong> append tool input JSON in place (<a
href="d330f8bc51">d330f8b</a>)</li>
<li><strong>streaming:</strong> buffer text deltas instead of rebuilding
blocks per delta (<a
href="2bf8f70acd">2bf8f70</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li><strong>docs:</strong> correct the environment scope field
description (<a
href="788877064e">7888770</a>)</li>
<li><strong>internal:</strong> cap formatter JVM heap at 1 GiB (<a
href="9b7b5a8b9a">9b7b5a8</a>)</li>
<li><strong>internal:</strong> restore package version (<a
href="28151f2eab">28151f2</a>)</li>
<li><strong>internal:</strong> restore package version (<a
href="6044d632e6">6044d63</a>)</li>
<li><strong>internal:</strong> stop stamping the package version into
generated files (<a
href="ee275adad3">ee275ad</a>)</li>
<li><strong>tests:</strong> restore empty test package marker files (<a
href="3e2284c0b3">3e2284c</a>)</li>
</ul>
<h2>2.61.0 (2026-09-04)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.60.0...v2.61.0">v2.60.0...v2.61.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add Claude Tag category and user breakdowns to
usage reports (<a
href="7caaeb9fde">7caaeb9</a>)</li>
<li><strong>api:</strong> add named types for organization compliance
settings state (<a
href="9576c86dce">9576c86</a>)</li>
<li><strong>api:</strong> add workspace_id request option for
multi-workspace credentials (<a
href="cf7f13ccc1">cf7f13c</a>)</li>
<li><strong>api:</strong> raise Managed Agents vault refresh token limit
to 8192 chars (<a
href="d0c2286eda">d0c2286</a>)</li>
<li><strong>client:</strong> keep vault credential secrets out of
Terraform state with write-only arguments (<a
href="7556952191">7556952</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>api:</strong> remove response text block maxLength
constraint (<a
href="b6225ce280">b6225ce</a>)</li>
<li><strong>client:</strong> raise a clear error when an httpx object is
passed instead of an httpx2 one (<a
href="130d7af1c6">130d7af</a>)</li>
<li><strong>client:</strong> read union common properties from raw JSON
for unknown variants (<a
href="3d2f38fe74">3d2f38f</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li><strong>api:</strong> accept anthropic-version on Claude Enterprise
admin endpoints (<a
href="165fa6b5aa">165fa6b</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="88a17532c5"><code>88a1753</code></a>
Merge pull request <a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/400">#400</a>
from anthropics/release-please--branches--main--chang...</li>
<li><a
href="6964f0722f"><code>6964f07</code></a>
release: 2.62.0</li>
<li><a
href="e373feae15"><code>e373fea</code></a>
feat(api): add auto mode tool permissions for Managed Agents</li>
<li><a
href="2e1c9edbd4"><code>2e1c9ed</code></a>
feat(api): support mounting public GitHub repositories without an
authorizati...</li>
<li><a
href="eb8c5b8900"><code>eb8c5b8</code></a>
feat(api): add the user-profiles-2026-09-04 beta value and
external_user_deta...</li>
<li><a
href="2bf8f70acd"><code>2bf8f70</code></a>
perf(streaming): buffer text deltas instead of rebuilding blocks per
delta</li>
<li><a
href="d330f8bc51"><code>d330f8b</code></a>
perf(streaming): append tool input JSON in place</li>
<li><a
href="788877064e"><code>7888770</code></a>
chore(docs): correct the environment scope field description</li>
<li><a
href="9b7b5a8b9a"><code>9b7b5a8</code></a>
chore(internal): cap formatter JVM heap at 1 GiB</li>
<li><a
href="96451dee56"><code>96451de</code></a>
feat(api): add content_too_large web_fetch tool error code</li>
<li>Additional commits viewable in <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.60.0...v2.62.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-17 16:34:29 +02:00
dependabot[bot]
e40ed0c7d7
chore(deps): bump the infrastructure group across 1 directory with 2 updates (#993)
Bumps the infrastructure group with 2 updates in the / directory:
[io.netty:netty-bom](https://github.com/netty/netty) and
org.slf4j:slf4j-simple.

Updates `io.netty:netty-bom` from 4.2.16.Final to 4.2.18.Final
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/netty/netty/releases">io.netty:netty-bom's
releases</a>.</em></p>
<blockquote>
<h2>netty-4.2.18.Final</h2>
<h2>Security fixes</h2>
<ul>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-rmcw-9fcq-wjq7">CVE-2026-XXXXX</a>
: unbounded resource usage in <code>io.netty:netty-codec-http</code>
(SPDY)</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-pvjx-v7vp-62vq">CVE-2026-XXXXX</a>
: unbounded resource usage in <code>io.netty:netty-codec-http</code>
(HTTP/1.1)</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-8352-h356-c9qh">CVE-2026-XXXXX</a>
: denial of service vector in
<code>io.netty:netty-codec-http2</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-jj3c-mwvr-9g52">CVE-2026-XXXXX</a>
: improper certificate validation in
<code>io.netty:netty-handler-ssl-ocsp</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-ghg5-c4jg-8q5j">CVE-2026-XXXXX</a>
: memory leak in <code>io.netty:netty-codec-stomp</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-2g37-3h88-55hc">CVE-2026-XXXXX</a>
: unbounded resource usage in
<code>io.netty:netty-codec-http</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-q9pg-8h3j-8hvm">CVE-2026-XXXXX</a>
: improper header validation in
<code>io.netty:netty-codec-http3</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-hmf3-49g9-g7qq">CVE-2026-XXXXX</a>
: denial of service vector in
<code>io.netty:netty-codec-stomp</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-wxrh-4rgq-pjcg">CVE-2026-XXXXX</a>
: parser desync/response smuggling in
<code>io.netty:netty-codec-memcache</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-495p-pchh-r4mc">CVE-2026-XXXXX</a>
: unbounded resource usage in
<code>io.netty:netty-codec-http3</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-v5p2-hmgx-3xrx">CVE-2026-XXXXX</a>
: unbounded resource usage in
<code>io.netty:netty-codec-http3</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-f64r-x647-cg8w">CVE-2026-XXXXX</a>
: unbounded resource usage in
<code>io.netty:netty-codec-http3</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-hcvj-94mj-jp5c">CVE-2026-XXXXX</a>
: improper header validation in
<code>io.netty:netty-codec-http</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-pq4x-537v-r54q">CVE-2026-XXXXX</a>
: unbounded resource usage in
<code>io.netty:netty-codec-smtp</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-j58c-g352-8h4p">CVE-2026-XXXXX</a>
: memory leak in <code>io.netty:netty-codec-haproxy</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-h75q-xqrh-59rf">CVE-2026-XXXXX</a>
: request smuggling in <code>io.netty:netty-codec-http</code>
(RTSP)</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-rq4j-fc47-9698">CVE-2026-XXXXX</a>
: request smuggling in <code>io.netty:netty-codec-http</code>
(HTTP/1)</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-45h4-vhwh-fmhg">CVE-2026-XXXXX</a>
: improper header validation in
<code>io.netty:netty-codec-http2</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-jgph-cgq3-c627">CVE-2026-XXXXX</a>
: improper header validation in <code>io.netty:netty-codec-http</code>
(HTTP/1)</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-hfr2-x62w-v49h">CVE-2026-XXXXX</a>
: improper header validation in
<code>io.netty:netty-codec-http3</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-w6j8-x45j-w75f">CVE-2026-XXXXX</a>
: improper header validation in <code>io.netty:netty-codec-http3</code>
and in <code>io.netty:netty-codec-http2</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-cg2g-fxr4-mg8m">CVE-2026-XXXXX</a>
: improper header validation in
<code>io.netty:netty-codec-http2</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-mj35-3qqm-q387">CVE-2026-XXXXX</a>
: improper hostname verification in
<code>io.netty:netty-codec-classes-quic</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-r4xx-7fpg-j8xg">CVE-2026-XXXXX</a>
: unbounded resource usage in
<code>io.netty:netty-codec-redis</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-3jrc-fchc-59pw">CVE-2026-XXXXX</a>
: improper header validation in <code>io.netty:netty-codec-http</code>
(HTTP/1.1)</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-j4mg-hqgv-34qc">CVE-2026-XXXXX</a>
: request smuggling vector in <code>io.netty:netty-codec-http</code>
(HTTP/1.1)</li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-jqf3-r9ww-c5x8">CVE-2026-XXXXX</a>
: unbounded resource usage in
<code>io.netty:netty-codec-mqtt</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-5vh9-c45f-rf7p">CVE-2026-XXXXX</a>
: improper CRLF neutralization in
<code>io.netty:netty-codec-smtp</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-jhjp-5q4f-8wr2">CVE-2026-XXXXX</a>
: improper certificate validation in
<code>io.netty:netty-handler-ssl-ocsp</code></li>
<li><a
href="https://github.com/netty/netty/security/advisories/GHSA-8whp-c7w8-2m72">CVE-2026-XXXXX</a>
: improper header validation in
<code>io.netty:netty-codec-http2</code></li>
</ul>
<h2>Compatibility Notes</h2>
<p>A number of security fixes have added additional validation and
impose new resource usage limits, which may cause existing workloads to
fail or be rejected. We recommend that you test your systems thoroughly
as part of your Netty upgrade.</p>
<p>Two specific changes are worth calling out:</p>
<p><strong>QUIC now explicitly requires
<code>X509ExtendedTrustManager</code> when hostname verification is
enabled.</strong>
Previously, when configuring QUIC with an endpoint identification
algorithm and an <code>X509TrustManager</code>, hostname verification
would be silently skipped.
This is now considered a misconfiguration and an exception will be
thrown.</p>
<p><strong>HTTP/2 header <em>value</em> validation is now enabled by
default.</strong>
HTTP/2 header <em>name</em> validation has always been enabled by
default, with an option to disable it, but HTTP/2 header <em>value</em>
validation has been disabled by default until now. Configuration options
still exist to disable this, but validation of HTTP header names and
values are now both opt-in by default rather than opt-out.</p>
<h2>What's Changed</h2>
<ul>
<li>Use X509ExtendedTrustManager in SSLErrorTest by <a
href="https://github.com/normanmaurer"><code>@​normanmaurer</code></a>
in <a
href="https://redirect.github.com/netty/netty/pull/17221">netty/netty#17221</a></li>
<li>Update setup-testlens to v1.9.4 by <a
href="https://github.com/marcphilipp"><code>@​marcphilipp</code></a> in
<a
href="https://redirect.github.com/netty/netty/pull/17223">netty/netty#17223</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2521f49443"><code>2521f49</code></a>
[maven-release-plugin] prepare release netty-4.2.18.Final</li>
<li><a
href="6fd53272cb"><code>6fd5327</code></a>
HTTP/1 absolute-form Host mismatch is translated to HTTP/3 :authority,
overri...</li>
<li><a
href="c44a052228"><code>c44a052</code></a>
SPDY: SpdySessionHandler must limit the concurrent streams</li>
<li><a
href="374d965d6f"><code>374d965</code></a>
HTTP: Limit the maximum number of concurrent pipelined requests</li>
<li><a
href="7e8b325cd2"><code>7e8b325</code></a>
HTTP/2: Limit HPACK encoding table size</li>
<li><a
href="e3ebf70348"><code>e3ebf70</code></a>
OCSP: Correctly handle that <code>nextUpdate</code> is optional</li>
<li><a
href="5388535e1d"><code>5388535</code></a>
STOMP: Correctly release partial content on handler removal</li>
<li><a
href="3a80f5a3b1"><code>3a80f5a</code></a>
WebSockets: Enforce a limit for the max pipelined requests in
WebSocketServer...</li>
<li><a
href="1b6ea48c89"><code>1b6ea48</code></a>
HTTP3: Correctly handle &quot;:authority&quot; and &quot;host&quot;
headers</li>
<li><a
href="3630659c81"><code>3630659</code></a>
STOMP codec content-length long-to-int truncation causes infinite decode
loop...</li>
<li>Additional commits viewable in <a
href="https://github.com/netty/netty/compare/netty-4.2.16.Final...netty-4.2.18.Final">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-17 16:15:30 +02:00
dependabot[bot]
d5ff46eda8
chore(deps): bump the kotest group across 1 directory with 3 updates (#992)
Bumps the kotest group with 3 updates in the / directory:
[io.kotest:kotest-assertions-core](https://github.com/kotest/kotest),
[io.kotest:kotest-assertions-json](https://github.com/kotest/kotest) and
[io.kotest:kotest-assertions-ktor](https://github.com/kotest/kotest).

Updates `io.kotest:kotest-assertions-core` from 6.2.4 to 6.2.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-core's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.5</h2>
<h2>What's Changed</h2>
<ul>
<li>skill version update PR upon release by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6213">kotest/kotest#6213</a></li>
<li>use a singleton strategy for getConfigurationFactory of Kotest
legacy producers + ensure the same config is reused for gradle producers
by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6216">kotest/kotest#6216</a></li>
<li>Use <code>withEdtSafeAnalysis</code> to improve safe analysis for
spec and style… by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6215">kotest/kotest#6215</a></li>
<li>Make the <code>shouldBeSingleton</code> block overloads infix by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6223">kotest/kotest#6223</a></li>
<li>Bound the short/byte/uShort/uByte shrinkers by the generator range
by <a href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in
<a
href="https://redirect.github.com/kotest/kotest/pull/6224">kotest/kotest#6224</a></li>
<li>Alex/make default extension registry thread safe by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6199">kotest/kotest#6199</a></li>
<li>add back jsoup assertions by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6226">kotest/kotest#6226</a></li>
<li>Fix Android StackWalker compatibility by <a
href="https://github.com/cfcromn"><code>@​cfcromn</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6222">kotest/kotest#6222</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/6.2.4...v6.2.5">https://github.com/kotest/kotest/compare/6.2.4...v6.2.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="41df99d60c"><code>41df99d</code></a>
Fix Android StackWalker compatibility (<a
href="https://redirect.github.com/kotest/kotest/issues/6222">#6222</a>)</li>
<li><a
href="8655ca73f2"><code>8655ca7</code></a>
add back jsoup assertions (<a
href="https://redirect.github.com/kotest/kotest/issues/6226">#6226</a>)</li>
<li><a
href="e2271eb187"><code>e2271eb</code></a>
Alex/make default extension registry thread safe (<a
href="https://redirect.github.com/kotest/kotest/issues/6199">#6199</a>)</li>
<li><a
href="fdca609841"><code>fdca609</code></a>
Bound the short/byte/uShort/uByte shrinkers by the generator range (<a
href="https://redirect.github.com/kotest/kotest/issues/6224">#6224</a>)</li>
<li><a
href="56301a629b"><code>56301a6</code></a>
Make the <code>shouldBeSingleton</code> block overloads infix (<a
href="https://redirect.github.com/kotest/kotest/issues/6223">#6223</a>)</li>
<li><a
href="dfee83ac08"><code>dfee83a</code></a>
Use <code>withEdtSafeAnalysis</code> to improve safe analysis for spec
and style… (<a
href="https://redirect.github.com/kotest/kotest/issues/6215">#6215</a>)</li>
<li><a
href="c44d1c3caa"><code>c44d1c3</code></a>
use a singleton strategy for getConfigurationFactory of Kotest legacy
produce...</li>
<li><a
href="b74611b017"><code>b74611b</code></a>
skill version update PR upon release (<a
href="https://redirect.github.com/kotest/kotest/issues/6213">#6213</a>)</li>
<li><a
href="0d3c09a362"><code>0d3c09a</code></a>
6.2.4 claude marketplace manual update</li>
<li>See full diff in <a
href="https://github.com/kotest/kotest/compare/6.2.4...6.2.5">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.kotest:kotest-assertions-json` from 6.2.4 to 6.2.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-json's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.5</h2>
<h2>What's Changed</h2>
<ul>
<li>skill version update PR upon release by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6213">kotest/kotest#6213</a></li>
<li>use a singleton strategy for getConfigurationFactory of Kotest
legacy producers + ensure the same config is reused for gradle producers
by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6216">kotest/kotest#6216</a></li>
<li>Use <code>withEdtSafeAnalysis</code> to improve safe analysis for
spec and style… by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6215">kotest/kotest#6215</a></li>
<li>Make the <code>shouldBeSingleton</code> block overloads infix by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6223">kotest/kotest#6223</a></li>
<li>Bound the short/byte/uShort/uByte shrinkers by the generator range
by <a href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in
<a
href="https://redirect.github.com/kotest/kotest/pull/6224">kotest/kotest#6224</a></li>
<li>Alex/make default extension registry thread safe by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6199">kotest/kotest#6199</a></li>
<li>add back jsoup assertions by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6226">kotest/kotest#6226</a></li>
<li>Fix Android StackWalker compatibility by <a
href="https://github.com/cfcromn"><code>@​cfcromn</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6222">kotest/kotest#6222</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/6.2.4...v6.2.5">https://github.com/kotest/kotest/compare/6.2.4...v6.2.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="41df99d60c"><code>41df99d</code></a>
Fix Android StackWalker compatibility (<a
href="https://redirect.github.com/kotest/kotest/issues/6222">#6222</a>)</li>
<li><a
href="8655ca73f2"><code>8655ca7</code></a>
add back jsoup assertions (<a
href="https://redirect.github.com/kotest/kotest/issues/6226">#6226</a>)</li>
<li><a
href="e2271eb187"><code>e2271eb</code></a>
Alex/make default extension registry thread safe (<a
href="https://redirect.github.com/kotest/kotest/issues/6199">#6199</a>)</li>
<li><a
href="fdca609841"><code>fdca609</code></a>
Bound the short/byte/uShort/uByte shrinkers by the generator range (<a
href="https://redirect.github.com/kotest/kotest/issues/6224">#6224</a>)</li>
<li><a
href="56301a629b"><code>56301a6</code></a>
Make the <code>shouldBeSingleton</code> block overloads infix (<a
href="https://redirect.github.com/kotest/kotest/issues/6223">#6223</a>)</li>
<li><a
href="dfee83ac08"><code>dfee83a</code></a>
Use <code>withEdtSafeAnalysis</code> to improve safe analysis for spec
and style… (<a
href="https://redirect.github.com/kotest/kotest/issues/6215">#6215</a>)</li>
<li><a
href="c44d1c3caa"><code>c44d1c3</code></a>
use a singleton strategy for getConfigurationFactory of Kotest legacy
produce...</li>
<li><a
href="b74611b017"><code>b74611b</code></a>
skill version update PR upon release (<a
href="https://redirect.github.com/kotest/kotest/issues/6213">#6213</a>)</li>
<li><a
href="0d3c09a362"><code>0d3c09a</code></a>
6.2.4 claude marketplace manual update</li>
<li>See full diff in <a
href="https://github.com/kotest/kotest/compare/6.2.4...6.2.5">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.kotest:kotest-assertions-ktor` from 6.2.4 to 6.2.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-ktor's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.5</h2>
<h2>What's Changed</h2>
<ul>
<li>skill version update PR upon release by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6213">kotest/kotest#6213</a></li>
<li>use a singleton strategy for getConfigurationFactory of Kotest
legacy producers + ensure the same config is reused for gradle producers
by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6216">kotest/kotest#6216</a></li>
<li>Use <code>withEdtSafeAnalysis</code> to improve safe analysis for
spec and style… by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6215">kotest/kotest#6215</a></li>
<li>Make the <code>shouldBeSingleton</code> block overloads infix by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6223">kotest/kotest#6223</a></li>
<li>Bound the short/byte/uShort/uByte shrinkers by the generator range
by <a href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in
<a
href="https://redirect.github.com/kotest/kotest/pull/6224">kotest/kotest#6224</a></li>
<li>Alex/make default extension registry thread safe by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6199">kotest/kotest#6199</a></li>
<li>add back jsoup assertions by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6226">kotest/kotest#6226</a></li>
<li>Fix Android StackWalker compatibility by <a
href="https://github.com/cfcromn"><code>@​cfcromn</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6222">kotest/kotest#6222</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/6.2.4...v6.2.5">https://github.com/kotest/kotest/compare/6.2.4...v6.2.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="41df99d60c"><code>41df99d</code></a>
Fix Android StackWalker compatibility (<a
href="https://redirect.github.com/kotest/kotest/issues/6222">#6222</a>)</li>
<li><a
href="8655ca73f2"><code>8655ca7</code></a>
add back jsoup assertions (<a
href="https://redirect.github.com/kotest/kotest/issues/6226">#6226</a>)</li>
<li><a
href="e2271eb187"><code>e2271eb</code></a>
Alex/make default extension registry thread safe (<a
href="https://redirect.github.com/kotest/kotest/issues/6199">#6199</a>)</li>
<li><a
href="fdca609841"><code>fdca609</code></a>
Bound the short/byte/uShort/uByte shrinkers by the generator range (<a
href="https://redirect.github.com/kotest/kotest/issues/6224">#6224</a>)</li>
<li><a
href="56301a629b"><code>56301a6</code></a>
Make the <code>shouldBeSingleton</code> block overloads infix (<a
href="https://redirect.github.com/kotest/kotest/issues/6223">#6223</a>)</li>
<li><a
href="dfee83ac08"><code>dfee83a</code></a>
Use <code>withEdtSafeAnalysis</code> to improve safe analysis for spec
and style… (<a
href="https://redirect.github.com/kotest/kotest/issues/6215">#6215</a>)</li>
<li><a
href="c44d1c3caa"><code>c44d1c3</code></a>
use a singleton strategy for getConfigurationFactory of Kotest legacy
produce...</li>
<li><a
href="b74611b017"><code>b74611b</code></a>
skill version update PR upon release (<a
href="https://redirect.github.com/kotest/kotest/issues/6213">#6213</a>)</li>
<li><a
href="0d3c09a362"><code>0d3c09a</code></a>
6.2.4 claude marketplace manual update</li>
<li>See full diff in <a
href="https://github.com/kotest/kotest/compare/6.2.4...6.2.5">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.kotest:kotest-assertions-json` from 6.2.4 to 6.2.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-json's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.5</h2>
<h2>What's Changed</h2>
<ul>
<li>skill version update PR upon release by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6213">kotest/kotest#6213</a></li>
<li>use a singleton strategy for getConfigurationFactory of Kotest
legacy producers + ensure the same config is reused for gradle producers
by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6216">kotest/kotest#6216</a></li>
<li>Use <code>withEdtSafeAnalysis</code> to improve safe analysis for
spec and style… by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6215">kotest/kotest#6215</a></li>
<li>Make the <code>shouldBeSingleton</code> block overloads infix by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6223">kotest/kotest#6223</a></li>
<li>Bound the short/byte/uShort/uByte shrinkers by the generator range
by <a href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in
<a
href="https://redirect.github.com/kotest/kotest/pull/6224">kotest/kotest#6224</a></li>
<li>Alex/make default extension registry thread safe by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6199">kotest/kotest#6199</a></li>
<li>add back jsoup assertions by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6226">kotest/kotest#6226</a></li>
<li>Fix Android StackWalker compatibility by <a
href="https://github.com/cfcromn"><code>@​cfcromn</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6222">kotest/kotest#6222</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/6.2.4...v6.2.5">https://github.com/kotest/kotest/compare/6.2.4...v6.2.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="41df99d60c"><code>41df99d</code></a>
Fix Android StackWalker compatibility (<a
href="https://redirect.github.com/kotest/kotest/issues/6222">#6222</a>)</li>
<li><a
href="8655ca73f2"><code>8655ca7</code></a>
add back jsoup assertions (<a
href="https://redirect.github.com/kotest/kotest/issues/6226">#6226</a>)</li>
<li><a
href="e2271eb187"><code>e2271eb</code></a>
Alex/make default extension registry thread safe (<a
href="https://redirect.github.com/kotest/kotest/issues/6199">#6199</a>)</li>
<li><a
href="fdca609841"><code>fdca609</code></a>
Bound the short/byte/uShort/uByte shrinkers by the generator range (<a
href="https://redirect.github.com/kotest/kotest/issues/6224">#6224</a>)</li>
<li><a
href="56301a629b"><code>56301a6</code></a>
Make the <code>shouldBeSingleton</code> block overloads infix (<a
href="https://redirect.github.com/kotest/kotest/issues/6223">#6223</a>)</li>
<li><a
href="dfee83ac08"><code>dfee83a</code></a>
Use <code>withEdtSafeAnalysis</code> to improve safe analysis for spec
and style… (<a
href="https://redirect.github.com/kotest/kotest/issues/6215">#6215</a>)</li>
<li><a
href="c44d1c3caa"><code>c44d1c3</code></a>
use a singleton strategy for getConfigurationFactory of Kotest legacy
produce...</li>
<li><a
href="b74611b017"><code>b74611b</code></a>
skill version update PR upon release (<a
href="https://redirect.github.com/kotest/kotest/issues/6213">#6213</a>)</li>
<li><a
href="0d3c09a362"><code>0d3c09a</code></a>
6.2.4 claude marketplace manual update</li>
<li>See full diff in <a
href="https://github.com/kotest/kotest/compare/6.2.4...6.2.5">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.kotest:kotest-assertions-ktor` from 6.2.4 to 6.2.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-ktor's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.5</h2>
<h2>What's Changed</h2>
<ul>
<li>skill version update PR upon release by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6213">kotest/kotest#6213</a></li>
<li>use a singleton strategy for getConfigurationFactory of Kotest
legacy producers + ensure the same config is reused for gradle producers
by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6216">kotest/kotest#6216</a></li>
<li>Use <code>withEdtSafeAnalysis</code> to improve safe analysis for
spec and style… by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6215">kotest/kotest#6215</a></li>
<li>Make the <code>shouldBeSingleton</code> block overloads infix by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6223">kotest/kotest#6223</a></li>
<li>Bound the short/byte/uShort/uByte shrinkers by the generator range
by <a href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in
<a
href="https://redirect.github.com/kotest/kotest/pull/6224">kotest/kotest#6224</a></li>
<li>Alex/make default extension registry thread safe by <a
href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6199">kotest/kotest#6199</a></li>
<li>add back jsoup assertions by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6226">kotest/kotest#6226</a></li>
<li>Fix Android StackWalker compatibility by <a
href="https://github.com/cfcromn"><code>@​cfcromn</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6222">kotest/kotest#6222</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/6.2.4...v6.2.5">https://github.com/kotest/kotest/compare/6.2.4...v6.2.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="41df99d60c"><code>41df99d</code></a>
Fix Android StackWalker compatibility (<a
href="https://redirect.github.com/kotest/kotest/issues/6222">#6222</a>)</li>
<li><a
href="8655ca73f2"><code>8655ca7</code></a>
add back jsoup assertions (<a
href="https://redirect.github.com/kotest/kotest/issues/6226">#6226</a>)</li>
<li><a
href="e2271eb187"><code>e2271eb</code></a>
Alex/make default extension registry thread safe (<a
href="https://redirect.github.com/kotest/kotest/issues/6199">#6199</a>)</li>
<li><a
href="fdca609841"><code>fdca609</code></a>
Bound the short/byte/uShort/uByte shrinkers by the generator range (<a
href="https://redirect.github.com/kotest/kotest/issues/6224">#6224</a>)</li>
<li><a
href="56301a629b"><code>56301a6</code></a>
Make the <code>shouldBeSingleton</code> block overloads infix (<a
href="https://redirect.github.com/kotest/kotest/issues/6223">#6223</a>)</li>
<li><a
href="dfee83ac08"><code>dfee83a</code></a>
Use <code>withEdtSafeAnalysis</code> to improve safe analysis for spec
and style… (<a
href="https://redirect.github.com/kotest/kotest/issues/6215">#6215</a>)</li>
<li><a
href="c44d1c3caa"><code>c44d1c3</code></a>
use a singleton strategy for getConfigurationFactory of Kotest legacy
produce...</li>
<li><a
href="b74611b017"><code>b74611b</code></a>
skill version update PR upon release (<a
href="https://redirect.github.com/kotest/kotest/issues/6213">#6213</a>)</li>
<li><a
href="0d3c09a362"><code>0d3c09a</code></a>
6.2.4 claude marketplace manual update</li>
<li>See full diff in <a
href="https://github.com/kotest/kotest/compare/6.2.4...6.2.5">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-17 15:56:45 +02:00
dependabot[bot]
f7877f2040
chore(deps): bump the all-dependencies group across 1 directory with 2 updates (#991)
Bumps the all-dependencies group with 2 updates in the
/integration-test/src/jvmTest/typescript directory:
[zod](https://github.com/colinhacks/zod) and
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).

Updates `zod` from 4.5.4 to 4.6.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/colinhacks/zod/releases">zod's
releases</a>.</em></p>
<blockquote>
<h2>v4.6.2</h2>
<p>A patch on top of <a
href="https://github.com/colinhacks/zod/releases/tag/v4.6.1">4.6.1</a>.</p>
<ul>
<li><a
href="9446b5cc"><code>9446b5cc</code></a>
fix: preserve undefined prefault outputs and object keys (<a
href="https://redirect.github.com/colinhacks/zod/pull/6587">#6587</a>) —
closes <a
href="https://redirect.github.com/colinhacks/zod/issues/6585">#6585</a></li>
<li><a
href="0c483c58"><code>0c483c58</code></a>
docs: the <a href="https://zod.dev/blog/zod-4-6">Zod 4.6 announcement
post</a> (<a
href="https://redirect.github.com/colinhacks/zod/pull/6546">#6546</a>)</li>
<li><a
href="a00c3f34"><code>a00c3f34</code></a>
docs: use Trigger.dev's brand-kit lockups for the platinum card</li>
</ul>
<h2>v4.6.1</h2>
<p>A patch on top of <a
href="https://github.com/colinhacks/zod/releases/tag/v4.6.0">4.6.0</a>.</p>
<ul>
<li><a
href="b12aa523"><code>b12aa523</code></a>
fix: preserve unique tags with defaulted discriminators (<a
href="https://redirect.github.com/colinhacks/zod/pull/6582">#6582</a>) —
closes <a
href="https://redirect.github.com/colinhacks/zod/issues/6577">#6577</a></li>
<li><a
href="dd9c36fa"><code>dd9c36fa</code></a>
fix(v4): defer recursive object index inference (<a
href="https://redirect.github.com/colinhacks/zod/pull/6580">#6580</a>)</li>
<li><a
href="3b154992"><code>3b154992</code></a>
feat(lang): add Tajik (<code>tg</code>) locale (<a
href="https://redirect.github.com/colinhacks/zod/pull/6581">#6581</a>)
by <a
href="https://github.com/ismoil77"><code>@​ismoil77</code></a></li>
<li><a
href="2efa8b80"><code>2efa8b80</code></a>
ci: give the npm wait a real budget and drop the back-publish path (<a
href="https://redirect.github.com/colinhacks/zod/pull/6583">#6583</a>)</li>
</ul>
<h2>v4.6.0</h2>
<p>Zod 4.6 is now available.</p>
<pre lang="sh"><code>npm install zod@latest
</code></pre>
<p>At a glance:</p>
<ul>
<li><a
href="https://zod.dev/blog/zod-4-6#validate"><code>.validate()</code></a>
— checks input validity without building a result (up to 35x faster than
<code>.safeParse().success</code> on a compiled schema)</li>
<li><a
href="https://zod.dev/blog/zod-4-6#zproperties"><code>z.instanceof().properties()</code></a>
— validates properties of an instance</li>
<li><a
href="https://zod.dev/blog/zod-4-6#fromjsonschema"><code>fromJSONSchema()</code></a>
— enforces six validation keywords it used to ignore</li>
<li><a
href="https://zod.dev/blog/zod-4-6#ziban"><code>z.iban()</code></a> —
electronic-format IBAN plus mod-97 checksum</li>
<li><a
href="https://zod.dev/blog/zod-4-6#zwithparser"><code>z.withParser()</code></a>
— installs a parser generated elsewhere, for environments without
<code>new Function</code></li>
<li><a href="https://zod.dev/blog/zod-4-6#faster-commonjs">Faster
CommonJS</a> — drops the getter on every export (~3x faster
<code>z.validate()</code> under <code>require</code>)</li>
<li><a
href="https://zod.dev/blog/zod-4-6#memory-retention-in-recursive-schemas">Memory
retention in recursive schemas</a> — releases the parsed input, fixing a
4.5 out-of-memory regression</li>
<li><a href="https://zod.dev/packages/mini"><code>@zod/mini</code></a> —
Zod Mini as a standalone package, versioned in lockstep with
<code>zod</code> since 4.5</li>
</ul>
<h2><code>.validate()</code></h2>
<p>Standalone boolean validation, in Zod, Zod Mini, and Zod Core. It
answers &quot;is this input valid?&quot; without constructing a
<code>ZodError</code>, which makes rejection cheap. The return type is a
guard on the schema's input type.</p>
<pre lang="ts"><code>z.validate(z.string(), &quot;hi&quot;); // true
z.validate(z.string(), 42);   // false
</code></pre>
<p>It is a method on Zod Classic schemas too. (<a
href="https://redirect.github.com/colinhacks/zod/pull/6547">#6547</a>)</p>
<pre lang="ts"><code>const Player = z.object({
  username: z.string(),
  xp: z.number(),
});
<p>&lt;/tr&gt;&lt;/table&gt;<br />
</code></pre></p>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e359f7378f"><code>e359f73</code></a>
4.6.2</li>
<li><a
href="9446b5cc14"><code>9446b5c</code></a>
fix: preserve undefined prefault outputs and object keys (<a
href="https://redirect.github.com/colinhacks/zod/issues/6587">#6587</a>)</li>
<li><a
href="0c483c5884"><code>0c483c5</code></a>
docs: Zod 4.6 announcement post (<a
href="https://redirect.github.com/colinhacks/zod/issues/6546">#6546</a>)</li>
<li><a
href="a00c3f348a"><code>a00c3f3</code></a>
docs: use Trigger.dev's brand-kit lockups for the platinum card</li>
<li><a
href="62311eb2c4"><code>62311eb</code></a>
4.6.1</li>
<li><a
href="2efa8b803c"><code>2efa8b8</code></a>
ci: give the npm wait a real budget and drop the back-publish path (<a
href="https://redirect.github.com/colinhacks/zod/issues/6583">#6583</a>)</li>
<li><a
href="b12aa523e7"><code>b12aa52</code></a>
fix: preserve unique tags with defaulted discriminators (<a
href="https://redirect.github.com/colinhacks/zod/issues/6582">#6582</a>)</li>
<li><a
href="dd9c36fa2d"><code>dd9c36f</code></a>
fix(v4): defer recursive object index inference (<a
href="https://redirect.github.com/colinhacks/zod/issues/6580">#6580</a>)</li>
<li><a
href="574d480fb4"><code>574d480</code></a>
fix(locales): clarify Tajik discriminator value message</li>
<li><a
href="c532d766de"><code>c532d76</code></a>
test(locales): cover Tajik error branches</li>
<li>Additional commits viewable in <a
href="https://github.com/colinhacks/zod/compare/v4.5.4...v4.6.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `@types/node` from 26.4.1 to 26.5.1
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-15 17:03:30 +02:00
dependabot[bot]
12e4020d8d
chore(deps): bump github/codeql-action from 4.37.9 to 4.38.0 in the all-actions group across 1 directory (#990)
Bumps the all-actions group with 1 update in the / directory:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 4.37.9 to 4.38.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.38.0</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h2>4.38.0 - 09 Sept 2026</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b96794f015"><code>b96794f</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4131">#4131</a>
from github/update-v4.38.0-7e08580a9</li>
<li><a
href="02d5093871"><code>02d5093</code></a>
Update changelog for v4.38.0</li>
<li><a
href="7e08580a93"><code>7e08580</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4130">#4130</a>
from github/henrymercer/workflow-runner-sizing</li>
<li><a
href="bfcc52b4f5"><code>bfcc52b</code></a>
Run slow macOS checks on larger runners</li>
<li><a
href="8c251e757c"><code>8c251e7</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4129">#4129</a>
from github/update-bundle/codeql-bundle-v2.27.0</li>
<li><a
href="0b7ca400df"><code>0b7ca40</code></a>
Add changelog note</li>
<li><a
href="40484b3395"><code>40484b3</code></a>
Update default bundle to codeql-bundle-v2.27.0</li>
<li><a
href="977e6ceaea"><code>977e6ce</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4124">#4124</a>
from github/henrymercer/toolcache-bundle-cleanup</li>
<li><a
href="40a6b38247"><code>40a6b38</code></a>
Address toolcache cleanup review feedback</li>
<li><a
href="deece8f852"><code>deece8f</code></a>
Apply suggestion from <a
href="https://github.com/henrymercer"><code>@​henrymercer</code></a></li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/v4.37.9...v4.38.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-15 16:07:40 +02:00
dependabot[bot]
be06a71053
chore(deps): bump org.jetbrains.kotlin.jvm from 2.4.10 to 2.4.20 in /samples/kotlin-mcp-client (#989)
Bumps [org.jetbrains.kotlin.jvm](https://github.com/JetBrains/kotlin)
from 2.4.10 to 2.4.20.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.jvm's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.20</h2>
<h2>Changelog</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86546"><code>KT-86546</code></a>
Check suspicious when over ConeKotlinType in
ConeTypeCompatibilityChecker</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85418"><code>KT-85418</code></a>
Implement an API for accessing deserialized file annotations in Analysis
API</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-74448"><code>KT-74448</code></a>
K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt,
kotlinx.coroutines</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85856"><code>KT-85856</code></a>
containingSymbol of constructor property differs for local and non-local
classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65417"><code>KT-65417</code></a>
K2 IDE: KTOR false positive expect-actual matching error on enum class
because of implicit clone() in non-JVM source sets</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-76457"><code>KT-76457</code></a>
K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a
JVM counterpart” on evaluating inline fun from common module inside
jvm</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70552"><code>KT-70552</code></a>
No expects for actual</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69727"><code>KT-69727</code></a>
K2 IDE. Wrong error in the editor on calling <code>clone</code> function
of actual enum instance in non-jvm platform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69726"><code>KT-69726</code></a>
FP errors on declaring <code>fun clone()</code> in actual enum in
not-jvm source-set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86014"><code>KT-86014</code></a>
Types are broken after remove parameter through change signature</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86363"><code>KT-86363</code></a>
KotlinIllegalArgumentExceptionWithAttachments: No dangling modifier
found on companion blocks</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86147"><code>KT-86147</code></a>
Drop <code>kotlin.parallel.resolve.under.global.lock</code> registry
key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85543"><code>KT-85543</code></a>
Avoid lazy resolve for the contracts phase if no constracts might be
resolved</li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84914"><code>KT-84914</code></a>
Do not publish analysis-api-test-framework</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86986"><code>KT-86986</code></a>
<code>kotlin-compiler-common-for-ide</code> bundles unrelated Analysis
API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86186"><code>KT-86186</code></a>
Analysis API: Codebase tests run twice in some analysis modules — pick a
single JUnit runner and migrate</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85360"><code>KT-85360</code></a>
Drop kotlin-compiler-testdata-for-ide artifact</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85585"><code>KT-85585</code></a>
Simplify the dependencies graph for the Analysis API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85381"><code>KT-85381</code></a>
Remove tests for the FE10 implementation</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<h4>New Features</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84645"><code>KT-84645</code></a>
Support resolving to companion block members &amp; extensions from Java
(light classes)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80775"><code>KT-80775</code></a>
Support PsiClass#getRecordComponents in light classes</li>
</ul>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-57537"><code>KT-57537</code></a>
SLC: propagate default parameter value from (<code>@JvmOverloads</code>)
<code>expect</code> declarations to <code>actual</code>
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85040"><code>KT-85040</code></a>
[Analysis API] Improve Java / Kotlin interop in KMP projects</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87301"><code>KT-87301</code></a>
SymbolLightAccessorMethod#isValid returns false for delegated
properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87171"><code>KT-87171</code></a>
SLC: non-mapped Kotlin collection supertype is dropped from supertype
list</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87250"><code>KT-87250</code></a>
JvmExposeBoxed: light classes shouldn't be autogenerated for private
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70428"><code>KT-70428</code></a>
AA: good code is red when a Java class extends a Kotlin class
implementing MutableList by delegation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-63568"><code>KT-63568</code></a>
Symbol Light Classes:
KtAnnotationApplicationWithArgumentsInfo.normalizedArguments() may work
incorrectly when psi is not set</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.jvm's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.20</h2>
<h3>Analysis API</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86546"><code>KT-86546</code></a>
Check suspicious when over ConeKotlinType in
ConeTypeCompatibilityChecker</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85418"><code>KT-85418</code></a>
Implement an API for accessing deserialized file annotations in Analysis
API</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-74448"><code>KT-74448</code></a>
K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt,
kotlinx.coroutines</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85856"><code>KT-85856</code></a>
containingSymbol of constructor property differs for local and non-local
classes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-65417"><code>KT-65417</code></a>
K2 IDE: KTOR false positive expect-actual matching error on enum class
because of implicit clone() in non-JVM source sets</li>
</ul>
<h3>Analysis API. Code Compilation</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-76457"><code>KT-76457</code></a>
K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a
JVM counterpart” on evaluating inline fun from common module inside
jvm</li>
</ul>
<h3>Analysis API. FIR</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70552"><code>KT-70552</code></a>
No expects for actual</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69727"><code>KT-69727</code></a>
K2 IDE. Wrong error in the editor on calling <code>clone</code> function
of actual enum instance in non-jvm platform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-69726"><code>KT-69726</code></a>
FP errors on declaring <code>fun clone()</code> in actual enum in
not-jvm source-set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86014"><code>KT-86014</code></a>
Types are broken after remove parameter through change signature</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86363"><code>KT-86363</code></a>
KotlinIllegalArgumentExceptionWithAttachments: No dangling modifier
found on companion blocks</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86147"><code>KT-86147</code></a>
Drop <code>kotlin.parallel.resolve.under.global.lock</code> registry
key</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85543"><code>KT-85543</code></a>
Avoid lazy resolve for the contracts phase if no constracts might be
resolved</li>
</ul>
<h3>Analysis API. Infrastructure</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84914"><code>KT-84914</code></a>
Do not publish analysis-api-test-framework</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86986"><code>KT-86986</code></a>
<code>kotlin-compiler-common-for-ide</code> bundles unrelated Analysis
API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86186"><code>KT-86186</code></a>
Analysis API: Codebase tests run twice in some analysis modules — pick a
single JUnit runner and migrate</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85360"><code>KT-85360</code></a>
Drop kotlin-compiler-testdata-for-ide artifact</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85585"><code>KT-85585</code></a>
Simplify the dependencies graph for the Analysis API modules</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85381"><code>KT-85381</code></a>
Remove tests for the FE10 implementation</li>
</ul>
<h3>Analysis API. Light Classes</h3>
<h4>New Features</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-84645"><code>KT-84645</code></a>
Support resolving to companion block members &amp; extensions from Java
(light classes)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-80775"><code>KT-80775</code></a>
Support PsiClass#getRecordComponents in light classes</li>
</ul>
<h4>Fixes</h4>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-57537"><code>KT-57537</code></a>
SLC: propagate default parameter value from (<code>@JvmOverloads</code>)
<code>expect</code> declarations to <code>actual</code>
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-85040"><code>KT-85040</code></a>
[Analysis API] Improve Java / Kotlin interop in KMP projects</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87301"><code>KT-87301</code></a>
SymbolLightAccessorMethod#isValid returns false for delegated
properties</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87171"><code>KT-87171</code></a>
SLC: non-mapped Kotlin collection supertype is dropped from supertype
list</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87250"><code>KT-87250</code></a>
JvmExposeBoxed: light classes shouldn't be autogenerated for private
declarations</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-70428"><code>KT-70428</code></a>
AA: good code is red when a Java class extends a Kotlin class
implementing MutableList by delegation</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-63568"><code>KT-63568</code></a>
Symbol Light Classes:
KtAnnotationApplicationWithArgumentsInfo.normalizedArguments() may work
incorrectly when psi is not set</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-36740"><code>KT-36740</code></a>
MPP: False-positive incompatible types in .java when using expect-class
returned by non-expect member from common when actual is actual
typealias</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="890ac1d94f"><code>890ac1d</code></a>
Add Changelog for 2.4.20-RC3</li>
<li><a
href="8860aed4ae"><code>8860aed</code></a>
🍒 [FIR] Fix suspend conversion when expected type is nullable (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7769">#7769</a>)</li>
<li><a
href="ab5bcd9428"><code>ab5bcd9</code></a>
Edit ChangeLog for 2.4.20-RC2</li>
<li><a
href="9464edc097"><code>9464edc</code></a>
Add ChangeLog for 2.4.20-RC2</li>
<li><a
href="0261e43b78"><code>0261e43</code></a>
Cherry-pick &quot;Fix <code>asBodyAndResultVar</code> call in
`visitInlinedLambdaInComposable...</li>
<li><a
href="0763513670"><code>0763513</code></a>
[box-tests] Workaround for klib compatibility tests (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7626">#7626</a>)</li>
<li><a
href="045aec6647"><code>045aec6</code></a>
[Wasm] Append scripts from webpack.config.d in the end of the file (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7615">#7615</a>)</li>
<li><a
href="cd7173bf0b"><code>cd7173b</code></a>
🍒 [2.4.20] [K/JS] Keep associated obj annotation only if getInstance
survives...</li>
<li><a
href="d36a2ffbcc"><code>d36a2ff</code></a>
CastsOptimizationPass: break aliases cycles (<a
href="https://redirect.github.com/JetBrains/kotlin/issues/7578">#7578</a>)</li>
<li><a
href="8664983b34"><code>8664983</code></a>
[CLI] Restore custom IC search scope creation</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.10...v2.4.20">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.jetbrains.kotlin.jvm&package-manager=gradle&previous-version=2.4.10&new-version=2.4.20)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-15 15:44:06 +02:00
dependabot[bot]
5555b0d8ae
chore(deps): bump org.jetbrains.kotlinx:kotlinx-collections-immutable from 0.5.1 to 0.5.2 in the kotlinx group across 1 directory (#981)
Bumps the kotlinx group with 1 update in the / directory:
[org.jetbrains.kotlinx:kotlinx-collections-immutable](https://github.com/Kotlin/kotlinx.collections.immutable).

Updates `org.jetbrains.kotlinx:kotlinx-collections-immutable` from 0.5.1
to 0.5.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Kotlin/kotlinx.collections.immutable/releases">org.jetbrains.kotlinx:kotlinx-collections-immutable's
releases</a>.</em></p>
<blockquote>
<h2>v0.5.2</h2>
<ul>
<li>Fixed <code>addingAll</code>, <code>removingAll</code>,
<code>retainingAll</code>, <code>intersect</code>, and
<code>containsAll</code> on <code>PersistentHashSet</code>,
<code>puttingAll</code> on <code>PersistentHashMap</code>, and their
builder counterparts returning wrong results when a collision node meets
a single element at the bottom trie level <a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/294">#294</a></li>
<li>Fixed <code>puttingAll</code> on <code>PersistentHashMap</code>, and
<code>putAll</code> on its builder, keeping the receiver's value for a
key that sits in a collision node on both sides <a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/300">#300</a></li>
<li>Fixed <code>PersistentHashSet.equals</code> being asymmetric after
<code>intersect</code>, <code>retainingAll</code>, or the builder's
<code>retainAll</code> <a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/291">#291</a></li>
<li>Fixed <code>PersistentHashMapBuilder.put</code> of an already stored
value invalidating live iterators and making <code>build()</code> return
a new map when the key is in a collision node <a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/304">#304</a></li>
<li>Fixed a live iterator of <code>PersistentHashMapBuilder</code>
returning the old values after a <code>putAll</code> that only replaces
values <a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/308">#308</a></li>
<li>Fixed <code>PersistentOrderedMapBuilder</code> iterators throwing
<code>ConcurrentModificationException</code> after
<code>MutableMap.MutableEntry.setValue</code>, or a <code>put</code>
that only replaces a value, during iteration <a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/307">#307</a></li>
<li>Fixed <code>MutableMap.MutableEntry.setValue</code> on a
<code>PersistentOrderedMapBuilder</code> entry re-adding the key after
it was removed from the builder <a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/310">#310</a></li>
</ul>
<p><strong>Full changelog</strong>: <a
href="https://github.com/Kotlin/kotlinx.collections.immutable/compare/v0.5.1...v0.5.2">https://github.com/Kotlin/kotlinx.collections.immutable/compare/v0.5.1...v0.5.2</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Kotlin/kotlinx.collections.immutable/blob/master/CHANGELOG.md">org.jetbrains.kotlinx:kotlinx-collections-immutable's
changelog</a>.</em></p>
<blockquote>
<h2>0.5.2</h2>
<ul>
<li>Fixed <code>addingAll</code>, <code>removingAll</code>,
<code>retainingAll</code>, <code>intersect</code>, and
<code>containsAll</code> on <code>PersistentHashSet</code>,
<code>puttingAll</code> on <code>PersistentHashMap</code>, and their
builder counterparts returning wrong results when a collision node meets
a single element at the bottom trie level <a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/294">#294</a></li>
<li>Fixed <code>puttingAll</code> on <code>PersistentHashMap</code>, and
<code>putAll</code> on its builder, keeping the receiver's value for a
key that sits in a collision node on both sides <a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/300">#300</a></li>
<li>Fixed <code>PersistentHashSet.equals</code> being asymmetric after
<code>intersect</code>, <code>retainingAll</code>, or the builder's
<code>retainAll</code> <a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/291">#291</a></li>
<li>Fixed <code>PersistentHashMapBuilder.put</code> of an already stored
value invalidating live iterators and making <code>build()</code> return
a new map when the key is in a collision node <a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/304">#304</a></li>
<li>Fixed a live iterator of <code>PersistentHashMapBuilder</code>
returning the old values after a <code>putAll</code> that only replaces
values <a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/308">#308</a></li>
<li>Fixed <code>PersistentOrderedMapBuilder</code> iterators throwing
<code>ConcurrentModificationException</code> after
<code>MutableMap.MutableEntry.setValue</code>, or a <code>put</code>
that only replaces a value, during iteration <a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/307">#307</a></li>
<li>Fixed <code>MutableMap.MutableEntry.setValue</code> on a
<code>PersistentOrderedMapBuilder</code> entry re-adding the key after
it was removed from the builder <a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/310">#310</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9f961e4dd4"><code>9f961e4</code></a>
Release v0.5.2</li>
<li><a
href="1d00eeaf6f"><code>1d00eea</code></a>
Skip the setValue write when the entry's key is gone from the builder
(<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/315">#315</a>)</li>
<li><a
href="8a49b2091b"><code>8a49b20</code></a>
Count the value overwrites of putAll and keep the stored keys (<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/312">#312</a>)</li>
<li><a
href="59bc873788"><code>59bc873</code></a>
Count only size changes for the ordered map builder's iterators (<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/311">#311</a>)</li>
<li><a
href="2b9cc44717"><code>2b9cc44</code></a>
Return the collision node as is when the put value is already stored (<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/309">#309</a>)</li>
<li><a
href="c9a67cb5e6"><code>c9a67cb</code></a>
Take the argument's value when two collision nodes share a key (<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/302">#302</a>)</li>
<li><a
href="024f04c89a"><code>024f04c</code></a>
Dispatch bulk trie ops to collision helpers at the bottom level (<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/301">#301</a>)</li>
<li><a
href="578f6ed44c"><code>578f6ed</code></a>
Update kotlinx.benchmark to 0.4.17</li>
<li><a
href="e72f86e84d"><code>e72f86e</code></a>
Lift the single remaining element to the root in set retainAll (<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/293">#293</a>)</li>
<li><a
href="1fd89dd939"><code>1fd89dd</code></a>
Restore commented-out invariant asserts (<a
href="https://redirect.github.com/Kotlin/kotlinx.collections.immutable/issues/290">#290</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/Kotlin/kotlinx.collections.immutable/compare/v0.5.1...v0.5.2">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-10 23:50:17 +02:00
dependabot[bot]
318aabe74e
chore(deps): bump hono from 4.13.1 to 4.13.7 in /integration-test/src/jvmTest/typescript (#987)
Bumps [hono](https://github.com/honojs/hono) from 4.13.1 to 4.13.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/honojs/hono/releases">hono's
releases</a>.</em></p>
<blockquote>
<h2>v4.13.7</h2>
<h2>Security fixes</h2>
<p>This release includes a fix for the following security issue:</p>
<h3><code>hono/jsx</code> renders plain strings unescaped in boundary
components, leading to XSS</h3>
<p>Affects: <code>Suspense</code>, <code>ErrorBoundary</code>, and
<code>Context.Provider</code> in <code>hono/jsx</code>, and
<code>renderToString()</code> / <code>renderToReadableStream()</code> in
<code>hono/jsx/dom/server</code>. Fixes missing HTML escaping for a
plain string placed directly as a child or <code>fallback</code> of
these components, or as the root value of the server rendering
functions, so untrusted strings could be emitted as markup.
GHSA-hxh3-vqpv-xpqv</p>
<hr />
<p>Users who render untrusted strings inside <code>Suspense</code>,
<code>ErrorBoundary</code>, or <code>Context.Provider</code>, or pass
them directly to <code>hono/jsx/dom/server</code>, are strongly
encouraged to upgrade to this version.</p>
<h2>v4.13.6</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(client): keep a param value of &quot;index&quot; in $url() and
$path() in <a
href="https://redirect.github.com/honojs/hono/pull/5297">honojs/hono#5297</a></li>
<li>fix(client): normalize root WebSocket URLs in <a
href="https://redirect.github.com/honojs/hono/pull/5291">honojs/hono#5291</a></li>
<li>fix(types): allow symbol keys in Context<!-- raw HTML omitted -->
get and set fallbacks in <a
href="https://redirect.github.com/honojs/hono/pull/5300">honojs/hono#5300</a></li>
<li>chore: bump <code>editorconfig-checker</code> in <a
href="https://redirect.github.com/honojs/hono/pull/5336">honojs/hono#5336</a></li>
<li>refactor(on-handler): use forEach for consistent handler iteration
in <a
href="https://redirect.github.com/honojs/hono/pull/5326">honojs/hono#5326</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/hono/compare/v4.13.5...v4.13.6">https://github.com/honojs/hono/compare/v4.13.5...v4.13.6</a></p>
<h2>v4.13.5</h2>
<h2>Security fixes</h2>
<p>This release includes fixes for the following security issues:</p>
<h3>Query parser reads parameters after the URL fragment, causing
cache-key and proxy interpretation differentials</h3>
<p>Affects: Cache Middleware and applications behind a proxy, WAF, or
logging layer that inspects query strings. Fixes query parsing that did
not stop at the URL fragment, so a <code>?</code> after a <code>#</code>
was treated as the start of a query string and the application could
read parameters that the other component never saw.
GHSA-crvj-82cr-hjcx</p>
<h3>Incomplete fix for CVE-2026-39408: <code>toSSG()</code> still writes
files outside the output directory</h3>
<p>Affects: <code>toSSG()</code> for Static Site Generation. Fixes a
path normalization gap where consecutive parent-directory segments in
<code>ssgParams</code> values were not fully collapsed, bypassing the
containment check added in 4.12.12. GHSA-gqvv-2mrq-wpjv</p>
<h3>Unbounded dot-notation nesting in <code>parseBody()</code> can cause
memory exhaustion</h3>
<p>Affects: <code>parseBody()</code> when dot-notation parsing is
enabled. Fixes unbounded expansion of dot-separated field names, where a
small request body could allocate a disproportionately large object
graph and concurrent requests could exhaust the heap.
GHSA-g6gw-c38x-mqfc</p>
<hr />
<p>Users who use Cache Middleware, deploy behind a proxy or WAF that
inspects query strings, use Static Site Generation, or use
<code>parseBody({ dot: true })</code> are strongly encouraged to upgrade
to this version.</p>
<h2>v4.13.4</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(request): handle params on unmatched requests in <a
href="https://redirect.github.com/honojs/hono/pull/5268">honojs/hono#5268</a></li>
<li>fix(jsx/dom): execute previous ref cleanup when ref prop changes on
re-render in <a
href="https://redirect.github.com/honojs/hono/pull/5264">honojs/hono#5264</a></li>
<li>fix(reg-exp-router): associate wildcard middleware with matching
routes in <a
href="https://redirect.github.com/honojs/hono/pull/5266">honojs/hono#5266</a></li>
<li>perf(router): share null object creation in <a
href="https://redirect.github.com/honojs/hono/pull/5267">honojs/hono#5267</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="eebdf7be39"><code>eebdf7b</code></a>
4.13.7</li>
<li><a
href="2b8ed402cd"><code>2b8ed40</code></a>
Merge commit from fork</li>
<li><a
href="cac0c4d3fe"><code>cac0c4d</code></a>
4.13.6</li>
<li><a
href="dac5d5794c"><code>dac5d57</code></a>
refactor(on-handler): use forEach for consistent handler iteration (<a
href="https://redirect.github.com/honojs/hono/issues/5326">#5326</a>)</li>
<li><a
href="ec648d6837"><code>ec648d6</code></a>
chore: bump <code>editorconfig-checker</code> (<a
href="https://redirect.github.com/honojs/hono/issues/5336">#5336</a>)</li>
<li><a
href="e2740d5a1b"><code>e2740d5</code></a>
fix(types): allow symbol keys in Context&lt;any&gt; get and set
fallbacks (<a
href="https://redirect.github.com/honojs/hono/issues/5300">#5300</a>)</li>
<li><a
href="499c35ebda"><code>499c35e</code></a>
fix(client): normalize root WebSocket URLs (<a
href="https://redirect.github.com/honojs/hono/issues/5291">#5291</a>)</li>
<li><a
href="50b8788cf5"><code>50b8788</code></a>
fix(client): keep a param value of &quot;index&quot; in $url() and
$path() (<a
href="https://redirect.github.com/honojs/hono/issues/5297">#5297</a>)</li>
<li><a
href="06880c4a2b"><code>06880c4</code></a>
4.13.5</li>
<li><a
href="531e9c5a3a"><code>531e9c5</code></a>
Merge commit from fork</li>
<li>Additional commits viewable in <a
href="https://github.com/honojs/hono/compare/v4.13.1...v4.13.7">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-10 16:10:41 +02:00
dependabot[bot]
ba5b1cce65
chore(deps): bump the all-dependencies group across 1 directory with 3 updates (#983)
Bumps the all-dependencies group with 3 updates in the
/integration-test/src/jvmTest/typescript directory:
[zod](https://github.com/colinhacks/zod),
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
and [tsx](https://github.com/privatenumber/tsx).

Updates `zod` from 4.5.2 to 4.5.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/colinhacks/zod/releases">zod's
releases</a>.</em></p>
<blockquote>
<h2>v4.5.4</h2>
<h2>Commits:</h2>
<ul>
<li>84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle
walk from firing a default factory (<a
href="https://redirect.github.com/colinhacks/zod/issues/6500">#6500</a>)</li>
<li>e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4</li>
</ul>
<h2>v4.5.3</h2>
<h2>Commits:</h2>
<ul>
<li>e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the
z.compile example to a 20-property schema</li>
<li>87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG
description when the title wraps past two lines</li>
<li>99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile()
against zod-compiler (<a
href="https://redirect.github.com/colinhacks/zod/issues/6499">#6499</a>)</li>
<li>e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email
regex and container output-shape findings under Open</li>
<li>7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the
reading time and put a GitHub link in the navbar</li>
<li>eab51ff3592b2d11d863f4ee4d5452f31a3de1b6 fix(v4): emit record
numeric keys as strings in toJSONSchema (<a
href="https://redirect.github.com/colinhacks/zod/issues/6497">#6497</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e8e206fa33"><code>e8e206f</code></a>
4.5.4</li>
<li><a
href="84e416fbf4"><code>84e416f</code></a>
fix(v4): stop the cycle walk from firing a default factory (<a
href="https://redirect.github.com/colinhacks/zod/issues/6500">#6500</a>)</li>
<li><a
href="1a16102a49"><code>1a16102</code></a>
4.5.3</li>
<li><a
href="eab51ff359"><code>eab51ff</code></a>
fix(v4): emit record numeric keys as strings in toJSONSchema (<a
href="https://redirect.github.com/colinhacks/zod/issues/6497">#6497</a>)</li>
<li><a
href="7e24a24288"><code>7e24a24</code></a>
docs(blog): drop the reading time and put a GitHub link in the
navbar</li>
<li><a
href="e3a695b6bf"><code>e3a695b</code></a>
docs(v4): record the email regex and container output-shape findings
under Open</li>
<li><a
href="99fce394a0"><code>99fce39</code></a>
bench(v4): z.compile() against zod-compiler (<a
href="https://redirect.github.com/colinhacks/zod/issues/6499">#6499</a>)</li>
<li><a
href="87d6464418"><code>87d6464</code></a>
fix(docs): drop the OG description when the title wraps past two
lines</li>
<li><a
href="e6b6ab3476"><code>e6b6ab3</code></a>
docs(blog): widen the z.compile example to a 20-property schema</li>
<li>See full diff in <a
href="https://github.com/colinhacks/zod/compare/v4.5.2...v4.5.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `@types/node` from 26.4.0 to 26.4.1
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />

Updates `tsx` from 4.23.12 to 4.23.13
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/privatenumber/tsx/releases">tsx's
releases</a>.</em></p>
<blockquote>
<h2>v4.23.13</h2>
<h2><a
href="https://github.com/privatenumber/tsx/compare/v4.23.12...v4.23.13">4.23.13</a>
(2026-08-30)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>cache:</strong> bound shared transform cache memory (<a
href="https://redirect.github.com/privatenumber/tsx/issues/835">#835</a>)
(<a
href="28e1f12d04">28e1f12</a>)</li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.23.13"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="28e1f12d04"><code>28e1f12</code></a>
fix(cache): bound shared transform cache memory (<a
href="https://redirect.github.com/privatenumber/tsx/issues/835">#835</a>)</li>
<li>See full diff in <a
href="https://github.com/privatenumber/tsx/compare/v4.23.12...v4.23.13">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-10 14:47:39 +02:00
Recoordinate
b7047e77cf
fix(server): return INVALID_PARAMS for unknown prompt in prompts/get (#955)
## Problem

`prompts/get` for a name that is not registered responds with JSON-RPC
`-32603` (INTERNAL_ERROR).

`handleGetPrompt` in `Server.kt` throws a bare
`IllegalArgumentException` when the prompt is missing.
`Protocol.respondWithError` maps any non-`McpException` cause to
`INTERNAL_ERROR`, so the client receives `-32603` for what is a
client-side bad parameter.

The sibling handler `handleReadResource` in the same file already throws
a typed `McpException(RESOURCE_NOT_FOUND)` for the equivalent not-found
case, which reaches the client as `-32002`. The two not-found paths are
inconsistent.

In JSON-RPC, `-32603` means the server hit an internal fault. Requesting
a prompt name that does not exist is a client error (an invalid `name`
parameter), so a client cannot tell "the prompt does not exist" apart
from "the server failed" and may retry a request that can never succeed.

## Change

Throw a typed `McpException(INVALID_PARAMS)` from `handleGetPrompt`,
consistent with `handleReadResource`. The message is unchanged.

`AbstractPromptIntegrationTest.testNonExistentPrompt` asserted `-32603`;
it now asserts `INVALID_PARAMS`.

If you would prefer a dedicated error code for this case instead of
`INVALID_PARAMS`, I am glad to adjust.
2026-09-09 19:00:31 +02:00
dependabot[bot]
45e3b8c1ec
chore(deps): bump org.jetbrains.kotlinx.binary-compatibility-validator from 0.18.1 to 0.18.2 in the gradle-plugins group across 1 directory (#982)
Bumps the gradle-plugins group with 1 update in the / directory:
[org.jetbrains.kotlinx.binary-compatibility-validator](https://github.com/Kotlin/binary-compatibility-validator).

Updates `org.jetbrains.kotlinx.binary-compatibility-validator` from
0.18.1 to 0.18.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Kotlin/binary-compatibility-validator/releases">org.jetbrains.kotlinx.binary-compatibility-validator's
releases</a>.</em></p>
<blockquote>
<h2>0.18.2</h2>
<ul>
<li>Prevent configuration crash on hosts unrecognized by
Kotlin/Native</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="534b4eb256"><code>534b4eb</code></a>
Release 0.18.2</li>
<li><a
href="0332e2252c"><code>0332e22</code></a>
Prevent configuration crash on hosts unrecognized by Kotlin/Native (<a
href="https://redirect.github.com/Kotlin/binary-compatibility-validator/issues/316">#316</a>)</li>
<li><a
href="31dafe4fb9"><code>31dafe4</code></a>
Updated warning about freezing development</li>
<li><a
href="74e2c571e6"><code>74e2c57</code></a>
Updated warning about freezing development (<a
href="https://redirect.github.com/Kotlin/binary-compatibility-validator/issues/309">#309</a>)</li>
<li>See full diff in <a
href="https://github.com/Kotlin/binary-compatibility-validator/compare/0.18.1...0.18.2">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-08 15:55:00 +02:00
dependabot[bot]
2f91865f3d
chore(deps): bump com.anthropic:anthropic-java from 2.59.0 to 2.60.0 in /samples/kotlin-mcp-client in the other-dependencies group across 1 directory (#980)
Bumps the other-dependencies group with 1 update in the
/samples/kotlin-mcp-client directory:
[com.anthropic:anthropic-java](https://github.com/anthropics/anthropic-sdk-java).

Updates `com.anthropic:anthropic-java` from 2.59.0 to 2.60.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-java/releases">com.anthropic:anthropic-java's
releases</a>.</em></p>
<blockquote>
<h2>v2.60.0</h2>
<h2>2.60.0 (2026-09-01)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.59.0...v2.60.0">v2.59.0...v2.60.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add external_user_onboarded_at to user
profiles (<a
href="2aa81c05e5">2aa81c0</a>)</li>
<li><strong>api:</strong> add support for claude-fable-5-1 and
claude-mythos-5-1 (<a
href="f41a324564">f41a324</a>)</li>
<li><strong>api:</strong> add support for organization compliance
settings in the Admin API (<a
href="4b64a841b6">4b64a84</a>)</li>
<li><strong>api:</strong> support pagination on organization rate limit
list endpoints (<a
href="2aa81c05e5">2aa81c0</a>)</li>
<li><strong>user_profiles:</strong> sort the user profile list by name
with order_by=name (<a
href="931543ef60">931543e</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>api:</strong> mark the beta header required on Admin API
Tunnel operations (<a
href="898dabf8ac">898dabf</a>)</li>
<li><strong>api:</strong> remove unsupported allowed_callers from the
toolset entries (<a
href="53bd597bcd">53bd597</a>)</li>
<li><strong>client:</strong> include non-JSON error response bodies in
API errors (<a
href="04045b50ac">04045b5</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li><strong>api:</strong> remove unreleased thinking
prefix_mismatched_behavior param (<a
href="e01193ad4e">e01193a</a>)</li>
<li><strong>api:</strong> remove user profile relationship in favor of
access_type (<a
href="e01193ad4e">e01193a</a>)</li>
<li><strong>ci:</strong> keep the Maven artifact upload steps under stlc
(<a
href="7437d73702">7437d73</a>)</li>
<li><strong>docs:</strong> clarify disallowed characters in memory paths
(<a
href="20582c1f6e">20582c1</a>)</li>
<li><strong>internal:</strong> add browser-stubbed internal/node module
and lint rule for Node built-in imports (<a
href="2aa81c05e5">2aa81c0</a>)</li>
<li><strong>internal:</strong> pin JAVA_HOME for detekt-rules tests and
relax UnusedPrivateProperty for tests/examples (<a
href="2aa81c05e5">2aa81c0</a>)</li>
<li><strong>internal:</strong> read the request id shown in Terraform
error diagnostics from the response header (<a
href="2aa81c05e5">2aa81c0</a>)</li>
<li><strong>internal:</strong> remove discriminator support from
PropertyInfo (<a
href="4b64a841b6">4b64a84</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li><strong>api:</strong> backtick identifiers in managed-agents API
descriptions (<a
href="db40558f3b">db40558</a>)</li>
<li><strong>api:</strong> describe external_key_id and compartment_id
behavior on Claude Platform on AWS (<a
href="5eefbe1b52">5eefbe1</a>)</li>
<li><strong>changelog:</strong> detail the beta files/skills GA-shape
change (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/398">#398</a>)
(<a
href="010593670e">0105936</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-java/blob/main/CHANGELOG.md">com.anthropic:anthropic-java's
changelog</a>.</em></p>
<blockquote>
<h2>2.60.0 (2026-09-01)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.59.0...v2.60.0">v2.59.0...v2.60.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add external_user_onboarded_at to user
profiles (<a
href="2aa81c05e5">2aa81c0</a>)</li>
<li><strong>api:</strong> add support for claude-fable-5-1 and
claude-mythos-5-1 (<a
href="f41a324564">f41a324</a>)</li>
<li><strong>api:</strong> add support for organization compliance
settings in the Admin API (<a
href="4b64a841b6">4b64a84</a>)</li>
<li><strong>api:</strong> support pagination on organization rate limit
list endpoints (<a
href="2aa81c05e5">2aa81c0</a>)</li>
<li><strong>user_profiles:</strong> sort the user profile list by name
with order_by=name (<a
href="931543ef60">931543e</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>api:</strong> mark the beta header required on Admin API
Tunnel operations (<a
href="898dabf8ac">898dabf</a>)</li>
<li><strong>api:</strong> remove unsupported allowed_callers from the
toolset entries (<a
href="53bd597bcd">53bd597</a>)</li>
<li><strong>client:</strong> include non-JSON error response bodies in
API errors (<a
href="04045b50ac">04045b5</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li><strong>api:</strong> remove unreleased thinking
prefix_mismatched_behavior param (<a
href="e01193ad4e">e01193a</a>)</li>
<li><strong>api:</strong> remove user profile relationship in favor of
access_type (<a
href="e01193ad4e">e01193a</a>)</li>
<li><strong>ci:</strong> keep the Maven artifact upload steps under stlc
(<a
href="7437d73702">7437d73</a>)</li>
<li><strong>docs:</strong> clarify disallowed characters in memory paths
(<a
href="20582c1f6e">20582c1</a>)</li>
<li><strong>internal:</strong> add browser-stubbed internal/node module
and lint rule for Node built-in imports (<a
href="2aa81c05e5">2aa81c0</a>)</li>
<li><strong>internal:</strong> pin JAVA_HOME for detekt-rules tests and
relax UnusedPrivateProperty for tests/examples (<a
href="2aa81c05e5">2aa81c0</a>)</li>
<li><strong>internal:</strong> read the request id shown in Terraform
error diagnostics from the response header (<a
href="2aa81c05e5">2aa81c0</a>)</li>
<li><strong>internal:</strong> remove discriminator support from
PropertyInfo (<a
href="4b64a841b6">4b64a84</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li><strong>api:</strong> backtick identifiers in managed-agents API
descriptions (<a
href="db40558f3b">db40558</a>)</li>
<li><strong>api:</strong> describe external_key_id and compartment_id
behavior on Claude Platform on AWS (<a
href="5eefbe1b52">5eefbe1</a>)</li>
<li><strong>changelog:</strong> detail the beta files/skills GA-shape
change (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/398">#398</a>)
(<a
href="010593670e">0105936</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1dfef96487"><code>1dfef96</code></a>
Merge pull request <a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/397">#397</a>
from anthropics/release-please--branches--main--chang...</li>
<li><a
href="110af9e0eb"><code>110af9e</code></a>
release: 2.60.0</li>
<li><a
href="f41a324564"><code>f41a324</code></a>
feat(api): add support for claude-fable-5-1 and claude-mythos-5-1</li>
<li><a
href="04045b50ac"><code>04045b5</code></a>
fix(client): include non-JSON error response bodies in API errors</li>
<li><a
href="5eefbe1b52"><code>5eefbe1</code></a>
docs(api): describe external_key_id and compartment_id behavior on
Claude Pla...</li>
<li><a
href="841463e335"><code>841463e</code></a>
Merge branch 'main' into next</li>
<li><a
href="010593670e"><code>0105936</code></a>
docs(changelog): detail the beta files/skills GA-shape change (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/398">#398</a>)</li>
<li><a
href="53bd597bcd"><code>53bd597</code></a>
fix(api): remove unsupported allowed_callers from the toolset
entries</li>
<li><a
href="20582c1f6e"><code>20582c1</code></a>
chore(docs): clarify disallowed characters in memory paths</li>
<li><a
href="db40558f3b"><code>db40558</code></a>
docs(api): backtick identifiers in managed-agents API descriptions</li>
<li>Additional commits viewable in <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.59.0...v2.60.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.anthropic:anthropic-java&package-manager=gradle&previous-version=2.59.0&new-version=2.60.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-08 13:57:00 +02:00
dependabot[bot]
40a14756ca
chore(deps): bump the all-actions group across 1 directory with 2 updates (#975)
Bumps the all-actions group with 2 updates in the / directory:
[actions/setup-java](https://github.com/actions/setup-java) and
[github/codeql-action](https://github.com/github/codeql-action).

Updates `actions/setup-java` from 5 to 6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-java/releases">actions/setup-java's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>dist: Migrate from Zulu Discovery API to Azul Metadata API by <a
href="https://github.com/jameswald"><code>@​jameswald</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/1010">actions/setup-java#1010</a></li>
<li>feat: add .mvn/extensions.xml to Maven cache key pattern by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1041">actions/setup-java#1041</a></li>
<li>Migrate to ESM and upgrade dependencies by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-java/pull/1078">actions/setup-java#1078</a></li>
<li>Map Zulu x86 architecture to i686 for Azul Metadata API by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1079">actions/setup-java#1079</a></li>
<li>Rename jdkFile input to jdk-file with deprecated alias by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1083">actions/setup-java#1083</a></li>
<li>Infer distribution from asdf .tool-versions vendor prefix by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1084">actions/setup-java#1084</a></li>
<li>Add Maven compiler problem matcher for javac diagnostics by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1086">actions/setup-java#1086</a></li>
<li>feat: expose cache-primary-key output (<a
href="https://redirect.github.com/actions/setup-java/issues/597">#597</a>)
by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1088">actions/setup-java#1088</a></li>
<li>docs: clarify V6 ESM migration is not a user-facing breaking change
by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1090">actions/setup-java#1090</a></li>
<li>Support multi-field Java versions like <code>18.0.1.1</code> by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1092">actions/setup-java#1092</a></li>
<li>docs: document seeding the Maven cache for plugin dependencies by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1094">actions/setup-java#1094</a></li>
<li>docs: clarify Maven cache paths and key hash inputs by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1096">actions/setup-java#1096</a></li>
<li>Support pinning java-version as &quot;latest&quot; by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1093">actions/setup-java#1093</a></li>
<li>chore(deps-dev): bump eslint from 10.6.0 to 10.7.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1101">actions/setup-java#1101</a></li>
<li>chore(deps-dev): bump eslint-plugin-n from 18.2.1 to 18.2.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1103">actions/setup-java#1103</a></li>
<li>chore(deps-dev): bump prettier from 3.9.4 to 3.9.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1105">actions/setup-java#1105</a></li>
<li>chore(deps): bump actions/checkout from 6 to 7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1106">actions/setup-java#1106</a></li>
<li>chore(deps-dev): bump <code>@​types/node</code> from 26.1.0 to
26.1.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1104">actions/setup-java#1104</a></li>
<li>dist: Cover Tencent Kona JDK 25 by <a
href="https://github.com/johnshajiang"><code>@​johnshajiang</code></a>
in <a
href="https://redirect.github.com/actions/setup-java/pull/1108">actions/setup-java#1108</a></li>
<li>chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1102">actions/setup-java#1102</a></li>
<li>Preserve Maven toolchains across repeated setup-java runs (<a
href="https://redirect.github.com/actions/setup-java/issues/1099">#1099</a>)
by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1111">actions/setup-java#1111</a></li>
<li>dist: Support Liberica NIK (<a
href="https://redirect.github.com/actions/setup-java/issues/878">#878</a>)
by <a href="https://github.com/asm0dey"><code>@​asm0dey</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/1112">actions/setup-java#1112</a></li>
<li>Fix template injection (zizmor alert <a
href="https://redirect.github.com/actions/setup-java/issues/118">#118</a>)
in e2e-versions.yml by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1114">actions/setup-java#1114</a></li>
<li>Fix template injection in e2e-versions.yml (zizmor alert <a
href="https://redirect.github.com/actions/setup-java/issues/122">#122</a>)
by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1120">actions/setup-java#1120</a></li>
<li>Disable persisted checkout credentials in e2e workflow by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1115">actions/setup-java#1115</a></li>
<li>feat: Update recommended configuration for GPG signing by <a
href="https://github.com/wetneb"><code>@​wetneb</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/608">actions/setup-java#608</a></li>
<li>Cache Maven and Gradle wrapper distributions separately from the
dependency cache by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1097">actions/setup-java#1097</a></li>
<li>Consolidate cache-dependency-path e2e workflow and add maven/sbt
coverage by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1124">actions/setup-java#1124</a></li>
<li>Use gpg.passphraseEnvName instead of the deprecated gpg.passphrase
server by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1123">actions/setup-java#1123</a></li>
<li>Extract repeated directory-check assertions into check-dir.sh helper
by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1127">actions/setup-java#1127</a></li>
<li>Consolidate duplicate jobs in e2e-versions workflow by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1125">actions/setup-java#1125</a></li>
<li>Use YAML anchors to reduce boilerplate in e2e-versions workflow by
<a href="https://github.com/brunoborges"><code>@​brunoborges</code></a>
in <a
href="https://redirect.github.com/actions/setup-java/pull/1126">actions/setup-java#1126</a></li>
<li>Updated msft json for now by <a
href="https://github.com/jmjaffe37"><code>@​jmjaffe37</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/1129">actions/setup-java#1129</a></li>
<li>Document missing action inputs in README by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1130">actions/setup-java#1130</a></li>
<li>chore(deps): bump <code>@​actions/cache</code> to 6.2.0 by <a
href="https://github.com/philip-gai"><code>@​philip-gai</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/1128">actions/setup-java#1128</a></li>
<li>Add an option to disable Java problem matchers by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1133">actions/setup-java#1133</a></li>
<li>docs: update setup-java examples by <a
href="https://github.com/HarithaVattikuti"><code>@​HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-java/pull/1131">actions/setup-java#1131</a></li>
<li>Clarify credential environment variable inputs by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1134">actions/setup-java#1134</a></li>
<li>chore(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code>
from 8.63.0 to 8.64.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1135">actions/setup-java#1135</a></li>
<li>chore(deps): bump actions/setup-python from 6 to 7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1143">actions/setup-java#1143</a></li>
<li>chore(deps): bump fast-xml-parser from 5.9.3 to 5.10.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1142">actions/setup-java#1142</a></li>
<li>chore(deps-dev): bump <code>@​typescript-eslint/parser</code> from
8.64.0 to 8.65.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1138">actions/setup-java#1138</a></li>
<li>chore(deps-dev): bump lint-staged from 17.0.8 to 17.2.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1136">actions/setup-java#1136</a></li>
<li>chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1137">actions/setup-java#1137</a></li>
<li>chore(deps): fix npm audited vulnerabilities by <a
href="https://github.com/mhoffrog"><code>@​mhoffrog</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/1140">actions/setup-java#1140</a></li>
<li>Fix formatting issues in README.md by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1144">actions/setup-java#1144</a></li>
<li>Remediate npm audit findings and rebuild distributions by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1145">actions/setup-java#1145</a></li>
<li>Set GRAALVM_HOME for GraalVM distributions by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1146">actions/setup-java#1146</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="dd06d9cba3"><code>dd06d9c</code></a>
Prepare documentation for v6 release (<a
href="https://redirect.github.com/actions/setup-java/issues/1253">#1253</a>)</li>
<li><a
href="59b3450628"><code>59b3450</code></a>
chore(deps): combine open Dependabot npm updates (<a
href="https://redirect.github.com/actions/setup-java/issues/1252">#1252</a>)</li>
<li><a
href="b96213d9d2"><code>b96213d</code></a>
Set default signature verification for supported distributions (<a
href="https://redirect.github.com/actions/setup-java/issues/1246">#1246</a>)</li>
<li><a
href="1dbac3c9e1"><code>1dbac3c</code></a>
docs: expose contributing guide to GitHub (<a
href="https://redirect.github.com/actions/setup-java/issues/1245">#1245</a>)</li>
<li><a
href="11741d6cfa"><code>11741d6</code></a>
ci: constrain cache e2e job modes (<a
href="https://redirect.github.com/actions/setup-java/issues/1244">#1244</a>)</li>
<li><a
href="ff99aa1c87"><code>ff99aa1</code></a>
Fix Oracle macOS E2E version (<a
href="https://redirect.github.com/actions/setup-java/issues/1243">#1243</a>)</li>
<li><a
href="416c6d1e8a"><code>416c6d1</code></a>
Add Red Hat Build of OpenJDK support (<a
href="https://redirect.github.com/actions/setup-java/issues/1241">#1241</a>)</li>
<li><a
href="5f75b27283"><code>5f75b27</code></a>
Add Maven dependency-resolution repositories (<a
href="https://redirect.github.com/actions/setup-java/issues/1240">#1240</a>)</li>
<li><a
href="a42a52cfb5"><code>a42a52c</code></a>
Add multiple Maven server credentials (<a
href="https://redirect.github.com/actions/setup-java/issues/1239">#1239</a>)</li>
<li><a
href="fb4abd7a70"><code>fb4abd7</code></a>
test: cover JDK 26 from SDKMAN (<a
href="https://redirect.github.com/actions/setup-java/issues/1238">#1238</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/setup-java/compare/v5...v6">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action` from 4.37.8 to 4.37.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.37.9</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="cdf488f595"><code>cdf488f</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4107">#4107</a>
from github/update-v4.37.9-920ba7cd1</li>
<li><a
href="7243f38558"><code>7243f38</code></a>
Update changelog for v4.37.9</li>
<li><a
href="920ba7cd15"><code>920ba7c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4106">#4106</a>
from github/update-bundle/codeql-bundle-v2.26.4</li>
<li><a
href="ecfa6e1681"><code>ecfa6e1</code></a>
Add changelog note</li>
<li><a
href="adcdf4a70d"><code>adcdf4a</code></a>
Update default bundle to codeql-bundle-v2.26.4</li>
<li><a
href="486fec2a3e"><code>486fec2</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4099">#4099</a>
from github/update-supported-enterprise-server-versions</li>
<li><a
href="134624c67b"><code>134624c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4101">#4101</a>
from github/dependabot/npm_and_yarn/npm-minor-457d82...</li>
<li><a
href="ff43db8f98"><code>ff43db8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4103">#4103</a>
from github/mergeback/v4.37.8-to-main-db488dde</li>
<li><a
href="4605e03a74"><code>4605e03</code></a>
Rebuild</li>
<li><a
href="099c869cad"><code>099c869</code></a>
Update changelog and version after v4.37.8</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/v4.37.8...v4.37.9">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-03 11:48:16 +00:00
dependabot[bot]
d78d2d8b6f
chore(deps): bump fast-uri from 3.1.5 to 3.1.7 in /integration-test/src/jvmTest/typescript (#978)
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.5 to
3.1.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fastify/fast-uri/releases">fast-uri's
releases</a>.</em></p>
<blockquote>
<h2>v3.1.7</h2>
<h2>⚠️ Security Warning</h2>
<p>This is a security release that fixes the following high-severity
security advisories:</p>
<ul>
<li><a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3">GHSA-qw65-cvwx-89v3</a>
— authority injection via an unvalidated port in
<code>serialize()</code></li>
<li><a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g">GHSA-58mr-gqgx-xq4g</a>
— host confusion via unbalanced or misplaced IP-literal brackets</li>
</ul>
<p>Users of the v3.x release line should upgrade to v3.1.7.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7">https://github.com/fastify/fast-uri/compare/v3.1.6...v3.1.7</a></p>
<h2>v3.1.6</h2>
<h2>⚠️ Security Warning</h2>
<p>This release addresses the following high-severity security
advisories:</p>
<ul>
<li><a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8">GHSA-5jgf-p345-68v8</a>
— host confusion via skipped IDN canonicalization on scheme-relative
references</li>
<li><a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf">GHSA-fph4-wmhf-6fwf</a>
— server-side request forgery via repeated hostname
percent-decoding</li>
<li><a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc">GHSA-f65p-4m7j-42xc</a>
— server-side request forgery via malformed IPv6 normalization</li>
<li><a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp">GHSA-jqff-g426-hqxp</a>
— host confusion via percent-encoded scheme normalization</li>
</ul>
<p>Users of the v3.x release line should upgrade to v3.1.6.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fast-uri/compare/v3.1.5...v3.1.6">https://github.com/fastify/fast-uri/compare/v3.1.5...v3.1.6</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="412e40abd4"><code>412e40a</code></a>
Bumped v3.1.7</li>
<li><a
href="9f4c943e4d"><code>9f4c943</code></a>
fix: backport port and IP-literal validation to v3.x (<a
href="https://redirect.github.com/fastify/fast-uri/issues/216">#216</a>)</li>
<li><a
href="1eb3ce436f"><code>1eb3ce4</code></a>
fix: treat unterminated bracket hosts as reg-names again (<a
href="https://redirect.github.com/fastify/fast-uri/issues/214">#214</a>)</li>
<li><a
href="6f970b2951"><code>6f970b2</code></a>
Bumped v3.1.6</li>
<li><a
href="d941579a84"><code>d941579</code></a>
fix: never run IDN canonicalization on bracketed IP literals</li>
<li><a
href="c0f0279cf3"><code>c0f0279</code></a>
test: adapt decoded-scheme handler assertion to 3.x (no mailto
scheme)</li>
<li><a
href="37f3417c82"><code>37f3417</code></a>
Merge commit from fork</li>
<li><a
href="607bfbe953"><code>607bfbe</code></a>
Merge commit from fork</li>
<li><a
href="ae92a4c5d8"><code>ae92a4c</code></a>
Merge commit from fork</li>
<li><a
href="444ecdad44"><code>444ecda</code></a>
Merge commit from fork</li>
<li>Additional commits viewable in <a
href="https://github.com/fastify/fast-uri/compare/v3.1.5...v3.1.7">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-03 13:26:35 +02:00
dependabot[bot]
358b2d5a12
chore(deps): bump qs from 6.15.2 to 6.16.0 in /integration-test/src/jvmTest/typescript (#979)
Bumps [qs](https://github.com/ljharb/qs) from 6.15.2 to 6.16.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ljharb/qs/blob/main/CHANGELOG.md">qs's
changelog</a>.</em></p>
<blockquote>
<h2><strong>6.16.0</strong></h2>
<ul>
<li>[New] <code>stringify</code>: add a <code>depth</code> option to
bound recursion depth (default <code>Infinity</code>)</li>
<li>[Fix] stringify: serialize Date values when a filter is
provided</li>
<li>[Fix] <code>parse</code>: enforce <code>arrayLimit</code> on comma
groups under <code>[]=</code> when <code>throwOnLimitExceeded</code> is
set</li>
<li>[Fix] <code>parse</code>: flatten a collection appended to an
overflowed array (<a
href="https://redirect.github.com/ljharb/qs/issues/571">#571</a>)</li>
<li>[Fix] <code>utils</code>: <code>isBuffer</code>: do not invoke a
non-callable <code>constructor.isBuffer</code></li>
<li>[Fix] <code>stringify</code>: do not let
<code>allowEmptyArrays</code> skip cycle detection (or drop own keys) on
an empty array with own properties</li>
<li>[Fix] <code>stringify</code>: encode dots in a top-level key with a
primitive value when encodeDotInKeys is set (<a
href="https://redirect.github.com/ljharb/qs/issues/562">#562</a>)</li>
<li>[Docs] threat model: clarify <code>stringify</code> deep-nesting DoS
is caller-bounded</li>
<li>[Docs] clarify <code>arrayLimit</code> is a representation
threshold, not an element-count cap</li>
<li>[Tests] <code>parse</code>: remove a test that pinned
<code>[]=</code> comma groups escaping <code>arrayLimit</code></li>
<li>[Tests] <code>stringify</code>: pin current
<code>encodeDotInKeys</code> separator-dot behavior</li>
<li>[Dev Deps] update <code>@ljharb/eslint-config</code>,
<code>eslint</code></li>
<li>[Dev Deps] update <code>eslint</code>, <code>evalmd</code></li>
</ul>
<h2><strong>6.15.3</strong></h2>
<ul>
<li>[Fix] <code>parse</code>: enforce <code>throwOnLimitExceeded</code>
for cumulative array growth via
<code>combine</code>/<code>merge</code></li>
<li>[Fix] <code>utils</code>: respect encoding of surrogate pairs across
chunks (<a
href="https://redirect.github.com/ljharb/qs/issues/559">#559</a>)</li>
<li>[Robustness] <code>parse</code>: throw the <code>arrayLimit</code>
error before splitting oversized comma values</li>
<li>[Robustness] <code>utils.merge</code> / <code>utils.assign</code>:
avoid invoking <code>__proto__</code> setter when copying own
properties</li>
<li>[Robustness] <code>utils</code>: enforce <code>arrayLimit</code>
consistently across <code>merge</code>'s array paths</li>
<li>[Perf] <code>utils</code>: make <code>compact</code> O(n) via a
side-channel visited-set instead of <code>Array.indexOf</code></li>
<li>[Deps] update <code>side-channel</code></li>
<li>[Dev Deps] update <code>eslint</code>, <code>mock-property</code>,
<code>tape</code></li>
<li>[Tests] <code>parse</code>: characterize current lenient handling of
unbalanced bracket keys (<a
href="https://redirect.github.com/ljharb/qs/issues/558">#558</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="bb9379e01f"><code>bb9379e</code></a>
v6.16.0</li>
<li><a
href="62fd25480b"><code>62fd254</code></a>
[Fix] stringify: serialize Date values when a filter is provided</li>
<li><a
href="8859c37470"><code>8859c37</code></a>
[Fix] <code>parse</code>: enforce <code>arrayLimit</code> on comma
groups under <code>[]=</code> when `throwOn...</li>
<li><a
href="8079adc7e7"><code>8079adc</code></a>
[Tests] <code>parse</code>: remove a test that pinned <code>[]=</code>
comma groups escaping `array...</li>
<li><a
href="d56f48ca13"><code>d56f48c</code></a>
[Fix] <code>parse</code>: flatten a collection appended to an overflowed
array</li>
<li><a
href="e83d321ffa"><code>e83d321</code></a>
[Fix] <code>utils</code>: <code>isBuffer</code>: do not invoke a
non-callable <code>constructor.isBuffer</code></li>
<li><a
href="7e87a07c2c"><code>7e87a07</code></a>
[Dev Deps] update <code>@ljharb/eslint-config</code>,
<code>eslint</code></li>
<li><a
href="9a76af2160"><code>9a76af2</code></a>
[Dev Deps] update <code>eslint</code>, <code>evalmd</code></li>
<li><a
href="3a890d4ecd"><code>3a890d4</code></a>
[Dev Deps] update <code>eslint</code>, <code>evalmd</code></li>
<li><a
href="b433a9b163"><code>b433a9b</code></a>
[Fix] <code>stringify</code>: do not let <code>allowEmptyArrays</code>
skip cycle detection (or dro...</li>
<li>Additional commits viewable in <a
href="https://github.com/ljharb/qs/compare/v6.15.2...v6.16.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-03 12:46:46 +02:00
dependabot[bot]
abce6d5367
chore(deps): bump the all-dependencies group across 1 directory with 2 updates (#977)
Bumps the all-dependencies group with 2 updates in the
/integration-test/src/jvmTest/typescript directory:
[zod](https://github.com/colinhacks/zod) and
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).

Updates `zod` from 4.4.3 to 4.5.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/colinhacks/zod/releases">zod's
releases</a>.</em></p>
<blockquote>
<h2>v4.5.2</h2>
<h2>Commits:</h2>
<ul>
<li>a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts
out of the docs collection (<a
href="https://redirect.github.com/colinhacks/zod/issues/6484">#6484</a>)</li>
<li>d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing
from the release workflow (<a
href="https://redirect.github.com/colinhacks/zod/issues/6487">#6487</a>)</li>
<li>212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype
method getter answer a bare call so vi.spyOn works (<a
href="https://redirect.github.com/colinhacks/zod/issues/6488">#6488</a>)</li>
<li>e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page
show through the navbar in dark mode (<a
href="https://redirect.github.com/colinhacks/zod/issues/6489">#6489</a>)</li>
<li>fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog
TOC hover bar to the 2px active indicator</li>
<li>6c932fcb2eea6eb671710ea058ca9fdc382ada89 chore: bump devcontainer
image to Node 24 (<a
href="https://redirect.github.com/colinhacks/zod/issues/6470">#6470</a>)</li>
<li>6635d9dd367a664109de83c021995821f48efa29 docs(blog): soften the
&quot;method memoization&quot; attribution</li>
<li>019ae299cc75daa132bf1acf59086a520abf6b85 fix(docs): drop ISR on the
docs route so the home page hydrates</li>
<li>652bb438aa4c626c1cd7948c6849c4691239fca7 chore(docs): drop the
scroll log from the route-change scroller</li>
<li>571c8e8a3d73b4305f4abfdd6977773cc12f2bf5 fix(docs): render blog tabs
with the stock fumadocs tab card</li>
<li>9a193aa24b4efa3b315b91d4c56c8bc385b8513f 4.5.2</li>
</ul>
<h2>v4.5.1</h2>
<h2>Commits:</h2>
<ul>
<li>2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release
and JSR publish on the version being live on npm</li>
<li>8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1</li>
</ul>
<h2>v4.5.0</h2>
<p>Zod 4.5 is now available.</p>
<pre lang="sh"><code>npm install zod@latest
</code></pre>
<p>At a glance:</p>
<ul>
<li><a
href="https://github.com/colinhacks/zod/blob/HEAD%5Bhttps://github.com/colinhacks/zod/blob/HEAD%60https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADmhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD%60https://github.com/colinhacks/zod/blob/HEAD%5Dhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADmhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD">https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADmhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADmhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD</a>
— the flagship feature of Zod 4.5</li>
<li><a
href="https://github.com/colinhacks/zod/blob/HEAD%5Bhttps://github.com/colinhacks/zod/blob/HEAD%60https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADChttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD%60https://github.com/colinhacks/zod/blob/HEAD%5Dhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD">https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADChttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD</a>
— 12–19 digits plus Luhn checksum</li>
<li><a
href="https://github.com/colinhacks/zod/blob/HEAD%5Bhttps://github.com/colinhacks/zod/blob/HEAD%60https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADshttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD%60https://github.com/colinhacks/zod/blob/HEAD%5Dhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADshttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD">https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADshttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADshttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD</a>
— the multi-property counterpart to <code>z.property()</code></li>
<li><a
href="https://github.com/colinhacks/zod/blob/HEAD%5Bhttps://github.com/colinhacks/zod/blob/HEAD%60https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADPhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD%60https://github.com/colinhacks/zod/blob/HEAD%5Dhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD/https://github.com/colinhacks/zod/blob/HEAD%5Bhttps://github.com/colinhacks/zod/blob/HEAD%60https://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADxhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADPhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD%60https://github.com/colinhacks/zod/blob/HEAD%5Dhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADxhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD">https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADPhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD/https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADxhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADPhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADxhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD</a></li>
<li><a
href="https://github.com/colinhacks/zod/blob/HEAD%5Bhttps://github.com/colinhacks/zod/blob/HEAD%60https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADvhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD:https://github.com/colinhacks/zod/blob/HEAD">https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADvhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD:https://github.com/colinhacks/zod/blob/HEAD</a>
<a
href="https://github.com/colinhacks/zod/blob/HEADbhttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADnhttps://github.com/colinhacks/zod/blob/HEAD%60https://github.com/colinhacks/zod/blob/HEAD%5Dhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADvhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD">https://github.com/colinhacks/zod/blob/HEADbhttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADnhttps://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADvhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD</a>
— a fast-path to verify input validity without a full parse (up to 16x
faster on invalid data)</li>
<li><a
href="https://github.com/colinhacks/zod/blob/HEAD/#9x-reduction-in-schema-memory-footprint">9x
reduction in memory footprint</a></li>
<li><a href="https://zod.dev/error-customization#locales">New
locales</a>: Bengali (<code>bn</code>), Central Kurdish
(<code>ckb</code>), Hindi (<code>hi</code>), Kannada (<code>kn</code>),
Norwegian Nynorsk (<code>nn</code>), Brazilian Portuguese
(<code>pt-BR</code>), Slovak (<code>sk</code>), Turkmen
(<code>tk</code>)</li>
</ul>
<h2><code>z.compile()</code></h2>
<p>You can now pre-compile any Zod schema using
<code>z.compile(schema)</code>. This dramatically speeds up parsing
performance.</p>
<pre lang="ts"><code>import * as z from &quot;zod&quot;;
<p>const Player = z.object({
username: z.string(),
bio: z.string(),
xp: z.number(),
// ...20 more properties...
&lt;/tr&gt;&lt;/table&gt;
</code></pre></p>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9a193aa24b"><code>9a193aa</code></a>
4.5.2</li>
<li><a
href="571c8e8a3d"><code>571c8e8</code></a>
fix(docs): render blog tabs with the stock fumadocs tab card</li>
<li><a
href="652bb438aa"><code>652bb43</code></a>
chore(docs): drop the scroll log from the route-change scroller</li>
<li><a
href="019ae299cc"><code>019ae29</code></a>
fix(docs): drop ISR on the docs route so the home page hydrates</li>
<li><a
href="6635d9dd36"><code>6635d9d</code></a>
docs(blog): soften the &quot;method memoization&quot; attribution</li>
<li><a
href="6c932fcb2e"><code>6c932fc</code></a>
chore: bump devcontainer image to Node 24 (<a
href="https://redirect.github.com/colinhacks/zod/issues/6470">#6470</a>)</li>
<li><a
href="fedb06fafe"><code>fedb06f</code></a>
fix(docs): match the blog TOC hover bar to the 2px active indicator</li>
<li><a
href="e7576f542a"><code>e7576f5</code></a>
docs(blog): let the page show through the navbar in dark mode (<a
href="https://redirect.github.com/colinhacks/zod/issues/6489">#6489</a>)</li>
<li><a
href="212b941791"><code>212b941</code></a>
fix(v4): let a prototype method getter answer a bare call so vi.spyOn
works (...</li>
<li><a
href="d378c42aff"><code>d378c42</code></a>
ci: drop canary publishing from the release workflow (<a
href="https://redirect.github.com/colinhacks/zod/issues/6487">#6487</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/colinhacks/zod/compare/v4.4.3...v4.5.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `@types/node` from 26.2.0 to 26.4.0
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-03 12:20:21 +02:00
dependabot[bot]
52fc8878cd
chore(deps): bump the other-dependencies group across 3 directories with 2 updates (#974)
Bumps the other-dependencies group with 1 update in the
/samples/kotlin-mcp-client directory:
[com.anthropic:anthropic-java](https://github.com/anthropics/anthropic-sdk-java).
Bumps the other-dependencies group with 1 update in the
/samples/kotlin-mcp-server directory:
[gradle-wrapper](https://github.com/gradle/gradle).
Bumps the other-dependencies group with 1 update in the
/samples/weather-stdio-server directory:
[gradle-wrapper](https://github.com/gradle/gradle).

Updates `com.anthropic:anthropic-java` from 2.57.0 to 2.59.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-java/releases">com.anthropic:anthropic-java's
releases</a>.</em></p>
<blockquote>
<h2>v2.59.0</h2>
<h2>2.59.0 (2026-08-27)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.58.0...v2.59.0">v2.58.0...v2.59.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> beta files/skills namespaces use GA shapes;
drop dated beta header pins (<a
href="e4e0e25fec">e4e0e25</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>aws,bedrock:</strong> don't consume the request body while
SigV4 signing (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/257">#257</a>)
(<a
href="95238b1cdc">95238b1</a>)</li>
<li><strong>client:</strong> page backward via before_id and stop on
has_more=false (<a
href="81f16e718b">81f16e7</a>)</li>
<li><strong>webhooks:</strong> require headers to be passed to
<code>unwrap()</code> (<a
href="4b43e22ce0">4b43e22</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li><strong>api:</strong> clarify pagination on the organization
rate-limit list endpoints (<a
href="1d0e9877c2">1d0e987</a>)</li>
</ul>
<h2>v2.58.0</h2>
<h2>2.58.0 (2026-08-26)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.57.0...v2.58.0">v2.57.0...v2.58.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add <code>updates</code> thinking display mode
(beta) (<a
href="792b318a9b">792b318</a>)</li>
<li><strong>api:</strong> add missing anthropic-beta values (<a
href="60cc62afc6">60cc62a</a>)</li>
<li><strong>api:</strong> add support for Organization API endpoints (<a
href="3adde69133">3adde69</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>bedrock:</strong> stop clobbering body anthropic_beta with
header betas (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/58">#58</a>)
(<a
href="e2609a9346">e2609a9</a>)</li>
<li><strong>client:</strong> let explicit and ANTHROPIC_BASE_URL base
URLs override profile base_url (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/241">#241</a>)
(<a
href="7486e65be4">7486e65</a>)</li>
<li><strong>client:</strong> resolve base URL in ClientOptions instead
of the transport (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/242">#242</a>)
(<a
href="a3e988ac85">a3e988a</a>)</li>
<li><strong>tools:</strong> keep the tool runner going on pause_turn (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/196">#196</a>)
(<a
href="557c72df30">557c72d</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li><strong>docs:</strong> clarify skill version <code>latest</code>
support and memory version retention (<a
href="cc7fc00777">cc7fc00</a>)</li>
<li><strong>internal:</strong> cancel superseded CI runs (<a
href="ae7cc8f98e">ae7cc8f</a>)</li>
<li><strong>internal:</strong> minor workflow reformat (<a
href="36b5b98a15">36b5b98</a>)</li>
</ul>
<h3>Documentation</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-java/blob/main/CHANGELOG.md">com.anthropic:anthropic-java's
changelog</a>.</em></p>
<blockquote>
<h2>2.59.0 (2026-08-27)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.58.0...v2.59.0">v2.58.0...v2.59.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> beta files/skills namespaces use GA shapes;
drop dated beta header pins (<a
href="e4e0e25fec">e4e0e25</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>aws,bedrock:</strong> don't consume the request body while
SigV4 signing (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/257">#257</a>)
(<a
href="95238b1cdc">95238b1</a>)</li>
<li><strong>client:</strong> page backward via before_id and stop on
has_more=false (<a
href="81f16e718b">81f16e7</a>)</li>
<li><strong>webhooks:</strong> require headers to be passed to
<code>unwrap()</code> (<a
href="4b43e22ce0">4b43e22</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li><strong>api:</strong> clarify pagination on the organization
rate-limit list endpoints (<a
href="1d0e9877c2">1d0e987</a>)</li>
</ul>
<h2>2.58.0 (2026-08-26)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.57.0...v2.58.0">v2.57.0...v2.58.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add <code>updates</code> thinking display mode
(beta) (<a
href="792b318a9b">792b318</a>)</li>
<li><strong>api:</strong> add missing anthropic-beta values (<a
href="60cc62afc6">60cc62a</a>)</li>
<li><strong>api:</strong> add support for Organization API endpoints (<a
href="3adde69133">3adde69</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>bedrock:</strong> stop clobbering body anthropic_beta with
header betas (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/58">#58</a>)
(<a
href="e2609a9346">e2609a9</a>)</li>
<li><strong>client:</strong> let explicit and ANTHROPIC_BASE_URL base
URLs override profile base_url (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/241">#241</a>)
(<a
href="7486e65be4">7486e65</a>)</li>
<li><strong>client:</strong> resolve base URL in ClientOptions instead
of the transport (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/242">#242</a>)
(<a
href="a3e988ac85">a3e988a</a>)</li>
<li><strong>tools:</strong> keep the tool runner going on pause_turn (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/196">#196</a>)
(<a
href="557c72df30">557c72d</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li><strong>docs:</strong> clarify skill version <code>latest</code>
support and memory version retention (<a
href="cc7fc00777">cc7fc00</a>)</li>
<li><strong>internal:</strong> cancel superseded CI runs (<a
href="ae7cc8f98e">ae7cc8f</a>)</li>
<li><strong>internal:</strong> minor workflow reformat (<a
href="36b5b98a15">36b5b98</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li><strong>api:</strong> clarify session thread agent and
usage.iterations compaction descriptions (beta) (<a
href="2283253bf6">2283253</a>)</li>
<li><strong>examples:</strong> use adaptive thinking in thinking
examples (<a
href="da9aabae51">da9aaba</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8722270844"><code>8722270</code></a>
release: 2.59.0</li>
<li><a
href="bc1e1995f1"><code>bc1e199</code></a>
docs(api): clarify pagination on the organization rate-limit list
endpoints</li>
<li><a
href="4da20e1818"><code>4da20e1</code></a>
fix(client): page backward via before_id and stop on has_more=false</li>
<li><a
href="b7046bca8d"><code>b7046bc</code></a>
feat(api): beta files/skills namespaces use GA shapes; drop dated beta
header...</li>
<li><a
href="6531a27dc1"><code>6531a27</code></a>
fix(webhooks): require headers to be passed to
<code>unwrap()</code></li>
<li><a
href="8786a4500d"><code>8786a45</code></a>
fix(aws,bedrock): don't consume the request body while SigV4 signing (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/257">#257</a>)</li>
<li><a
href="accd19e373"><code>accd19e</code></a>
codegen metadata</li>
<li><a
href="51bd4922ec"><code>51bd492</code></a>
release: 2.58.0</li>
<li><a
href="82b254480b"><code>82b2544</code></a>
codegen metadata</li>
<li><a
href="7bec4e1e67"><code>7bec4e1</code></a>
feat(api): add support for Organization API endpoints</li>
<li>Additional commits viewable in <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.57.0...v2.59.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.7.0 to 9.7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.1</h2>
<p>The Gradle team is excited to announce Gradle 9.7.1.</p>
<p>This is a patch release for 9.7.0. We recommend using 9.7.1 instead
of 9.7.0.</p>
<p>Here are the highlights of 9.7.0 release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>Resilient Sync helps you fix broken builds</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.1/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.1 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.1 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.1/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.1/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="92f0512e7f"><code>92f0512</code></a>
update fixed issues for 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38892">#38892</a>)</li>
<li><a
href="820ee75a99"><code>820ee75</code></a>
update fixed issues for 9.7.1</li>
<li><a
href="82c23f9bd2"><code>82c23f9</code></a>
Fix annotation parameter ordering problem in KTS (<a
href="https://redirect.github.com/gradle/gradle/issues/38878">#38878</a>)</li>
<li><a
href="ef11a7268f"><code>ef11a72</code></a>
Fix annotation parameter ordering issue</li>
<li><a
href="bb0d8a974a"><code>bb0d8a9</code></a>
Make relevant tests polyglot (run for multiple DSLs)</li>
<li><a
href="336e129d7f"><code>336e129</code></a>
Update signing configuration (<a
href="https://redirect.github.com/gradle/gradle/issues/38874">#38874</a>)</li>
<li><a
href="4bdf0da2da"><code>4bdf0da</code></a>
Update signing configuration</li>
<li><a
href="cd9b92c1b8"><code>cd9b92c</code></a>
List issues resolved in 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38839">#38839</a>)</li>
<li><a
href="5f4e381964"><code>5f4e381</code></a>
List issues resolved in 9.7.1</li>
<li><a
href="1e08ab5513"><code>1e08ab5</code></a>
Keep type-use annotations in extracted ABI classes (<a
href="https://redirect.github.com/gradle/gradle/issues/38810">#38810</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.7.0...v9.7.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.7.0 to 9.7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.1</h2>
<p>The Gradle team is excited to announce Gradle 9.7.1.</p>
<p>This is a patch release for 9.7.0. We recommend using 9.7.1 instead
of 9.7.0.</p>
<p>Here are the highlights of 9.7.0 release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>Resilient Sync helps you fix broken builds</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.1/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.1 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.1 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.1/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.1/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="92f0512e7f"><code>92f0512</code></a>
update fixed issues for 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38892">#38892</a>)</li>
<li><a
href="820ee75a99"><code>820ee75</code></a>
update fixed issues for 9.7.1</li>
<li><a
href="82c23f9bd2"><code>82c23f9</code></a>
Fix annotation parameter ordering problem in KTS (<a
href="https://redirect.github.com/gradle/gradle/issues/38878">#38878</a>)</li>
<li><a
href="ef11a7268f"><code>ef11a72</code></a>
Fix annotation parameter ordering issue</li>
<li><a
href="bb0d8a974a"><code>bb0d8a9</code></a>
Make relevant tests polyglot (run for multiple DSLs)</li>
<li><a
href="336e129d7f"><code>336e129</code></a>
Update signing configuration (<a
href="https://redirect.github.com/gradle/gradle/issues/38874">#38874</a>)</li>
<li><a
href="4bdf0da2da"><code>4bdf0da</code></a>
Update signing configuration</li>
<li><a
href="cd9b92c1b8"><code>cd9b92c</code></a>
List issues resolved in 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38839">#38839</a>)</li>
<li><a
href="5f4e381964"><code>5f4e381</code></a>
List issues resolved in 9.7.1</li>
<li><a
href="1e08ab5513"><code>1e08ab5</code></a>
Keep type-use annotations in extracted ABI classes (<a
href="https://redirect.github.com/gradle/gradle/issues/38810">#38810</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.7.0...v9.7.1">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-01 13:26:31 +02:00
dependabot[bot]
cf5cca553b
chore(deps): bump github/codeql-action from 4.37.7 to 4.37.8 in the all-actions group across 1 directory (#971)
Bumps the all-actions group with 1 update in the / directory:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 4.37.7 to 4.37.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.37.8</h2>
<p>No user facing changes.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h2>4.37.8 - 21 Aug 2026</h2>
<p>No user facing changes.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="db488ddef3"><code>db488dd</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4102">#4102</a>
from github/update-v4.37.8-9ee088e13</li>
<li><a
href="1845f5ba8b"><code>1845f5b</code></a>
Update changelog for v4.37.8</li>
<li><a
href="9ee088e136"><code>9ee088e</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4080">#4080</a>
from github/henrymercer/studious-giggle</li>
<li><a
href="1aef003397"><code>1aef003</code></a>
Address review feedback on overlay disk flags</li>
<li><a
href="508b83bc41"><code>508b83b</code></a>
Merge main into overlay minimum disk feature branch</li>
<li><a
href="d97b3428e8"><code>d97b342</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4098">#4098</a>
from github/mbg/permission-error-as-configuration-error</li>
<li><a
href="47fa622223"><code>47fa622</code></a>
Make <code>EACCES</code> a <code>ConfigurationError</code></li>
<li><a
href="45693cc688"><code>45693cc</code></a>
Refactor <code>ENOSPC</code> check into
<code>isDiskConfigurationError</code> function</li>
<li><a
href="c2fd8f54d1"><code>c2fd8f5</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4081">#4081</a>
from github/mario-campos/version-cache-to-disk</li>
<li><a
href="c56f48e9bd"><code>c56f48e</code></a>
Log unexpected conditions during caching CLI output</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/v4.37.7...v4.37.8">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-24 20:56:55 +02:00
dependabot[bot]
dfdd8820da
chore(deps): bump ch.qos.logback:logback-classic from 1.6.1 to 1.6.3 (#970)
Bumps
[ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from
1.6.1 to 1.6.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/qos-ch/logback/releases">ch.qos.logback:logback-classic's
releases</a>.</em></p>
<blockquote>
<h2>Logback 1.6.3</h2>
<h1>2026-08-14 Release of logback version 1.6.3</h1>
<ul>
<li>
<p>In response <a
href="https://www.cve.org/cverecord?id=CVE-2026-19880">CVE-2026-19880</a>,
<code>MDCBasedDiscriminator</code> (used by
<code>SiftingAppender</code>) now strips forward and backward slashes
(<code>/</code>, <code>\</code>) from MDC values before they are used as
discriminating keys. This prevents path segments from escaping into
destinations controlled by an attacker. When sanitisation actually
changes a value, a warning is emitted; the warning is rate-limited (a
small batch, then a lull of about ten minutes).</p>
</li>
<li>
<p>Colour console support is split out into a dedicated <a
href="https://logback.qos.ch/manual/appenders.html#JansiConsoleAppender"><code>JansiConsoleAppender</code></a>.
It wraps stdout or stderr with Jansi so ANSI escape sequences (for
example coloured patterns) render correctly on terminals that need it,
notably Windows. Prefer this class over the older path described next.
See the <a
href="https://logback.qos.ch/manual/appenders.html#JansiConsoleAppender">appenders
documentation</a>.</p>
</li>
<li>
<p>The <code>withJansi</code> property on <code>ConsoleAppender</code>
is <strong>deprecated</strong>. Existing configurations that still set
<code>&lt;withJansi&gt;true&lt;/withJansi&gt;</code> continue to work
for compatibility, but new setups should use
<code>JansiConsoleAppender</code> instead.</p>
</li>
<li>
<p><code>ConsoleAppender</code> no longer treats the process console as
an exclusive resource: stopping it does not close
<code>System.out</code> / <code>System.err</code>.
<code>JansiConsoleAppender</code> pairs each
<code>AnsiConsole.systemInstall()</code> with
<code>systemUninstall()</code> on stop, so repeated start/stop cycles do
not leave Jansi installed or tear down streams shared with the rest of
the JVM. Related behavior is covered by tests for <a
href="https://redirect.github.com/qos-ch/logback/issues/1063">issues/1063</a>.</p>
</li>
<li>
<p>Invocation throttling helpers were reworked:
<code>SimpleInvocationGate</code> is renamed
<code>FixedIntervalInvocationGate</code>, and
<code>BatchedFixedIntervalInvocationGate</code> allows a short burst of
invocations before applying a fixed lull. The sanitisation
warning above uses the batched gate.</p>
</li>
<li>
<p>The JPMS <code>module-info</code> for logback-core now exports the
<code>ch.qos.logback.core.property</code> package, which had been
missing from the module descriptor.</p>
</li>
<li>
<p>A bit-wise identical binary of this version can be reproduced by
building from <a href="https://github.com/qos-ch/logback">source
code</a> at commit <code>e8e824dede022a6d7208b36cfa875b0d1b7772f3</code>
associated with the tag <code>v_1.6.3</code>. The release was built
using Java &quot;21&quot; 2023-10-17 LTS build 21.0.1.+12-LTS-29 under
Linux Debian 11.6.</p>
</li>
</ul>
<p>--
Sponsoring SLF4J/logback/reload4j at <a
href="https://github.com/sponsors/qos-ch">https://github.com/sponsors/qos-ch</a></p>
<h2>Logback 1.6.2</h2>
<p><a
href="https://github.com/user-attachments/assets/9ceaf157-b758-4188-815d-edfe4e1b4edd">https://github.com/user-attachments/assets/9ceaf157-b758-4188-815d-edfe4e1b4edd</a></p>
<h1>2026-08-10 Release of logback version 1.6.2</h1>
<ul>
<li>
<p>Configuration analysis now detects <em>contradictory caller-data
inclusion instructions</em>. For example, an <code>AsyncAppender</code>,
<code>SocketAppender</code> or <code>SMTPAppender</code> with
<code>includeCallerData</code> left at the default <code>false</code> is
incompatible with a layout or encoder pattern that uses a caller-data
converter such as <code>%C</code>, <code>%M</code>, <code>%L</code>,
<code>%F</code>, <code>%l</code> or <code>%caller</code>. At runtime
those converters would print question marks and still incur extraction
cost on a worker thread. Logback now emits a configuration-time warning
when such instructions disagree. See <a
href="https://logback.qos.ch/codes.html#callerContradiction">codes.html#callerContradiction</a>
for details. This issue was reported in <a
href="https://redirect.github.com/qos-ch/logback/issues/1059">issues/1059</a>
by <a href="https://github.com/leeychee">leeychee</a>. The initial
analysis was contributed by <a
href="https://github.com/seonwooj0810">seonwoo_jung</a>.</p>
</li>
<li>
<p>Caller-contradiction analysis can be turned off by setting the
<code>logback.skipCallerContradictionAnalysis</code> variable to
<code>true</code>, either as a system property
(<code>-Dlogback.skipCallerContradictionAnalysis=true</code>) or as a
property in the configuration file:</p>
<pre lang="xml"><code>&lt;property
name=&quot;logback.skipCallerContradictionAnalysis&quot;
value=&quot;true&quot;/&gt;
</code></pre>
</li>
<li>
<p><code>SimpleSocketServer</code> and
<code>SimpleSSLSocketServer</code> now require an explicit client IP
whitelist. On the command line, pass one or more allowed addresses
(single IPs or CIDR ranges) after the configuration file. An empty
whitelist means no clients are accepted. When embedding the server
programmatically, register allowed addresses with
<code>addAllowedClientAddress(String)</code> or
<code>setAllowedClientAddresses(Collection)</code> before clients
connect. See the documentation on <a
href="https://logback.qos.ch/manual/appenders.html#simpleSocketServerClientAccess">restricting
client access</a>.</p>
</li>
<li>
<p>Added <code>ThrowableProxyVOBuilder</code> for assembling a
<code>ThrowableProxyVO</code> field by field, with a corresponding
<code>ThrowableProxyVO.builder()</code> entry point.</p>
</li>
<li>
<p>Dependency analysis handlers now run their <code>postHandle</code>
method after child models have been processed, so checks that depend on
nested appenders (such as caller-contradiction analysis) see a complete
picture.</p>
</li>
<li>
<p>Updated several dependencies, including Angus Mail to 2.0.4 and Jetty
(test) to 12.1.12.</p>
</li>
<li>
<p>A bit-wise identical binary of this version can be reproduced by
building from <a href="https://github.com/qos-ch/logback">source
code</a> at commit e3d78330ad1ba024fd987fd00c3ffb9cfcdb07dc associated
with the tag <code>v_1.6.2</code>. The release was built using Java
&quot;21&quot; 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian
11.6.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e8e824dede"><code>e8e824d</code></a>
prepare release 1.6.3</li>
<li><a
href="761821bfaa"><code>761821b</code></a>
MDCBasedDiscriminator has a gated warning mechanism</li>
<li><a
href="53ed122900"><code>53ed122</code></a>
update copyright year</li>
<li><a
href="c7e2db2446"><code>c7e2db2</code></a>
rename SimpleInvocationGate as FixedIntervalInvocationGate</li>
<li><a
href="b5aa931b09"><code>b5aa931</code></a>
added BatchedSimpleInvocationGate</li>
<li><a
href="1f22af7686"><code>1f22af7</code></a>
add javadocs to SimpleInvocationGate</li>
<li><a
href="638ffa7e78"><code>638ffa7</code></a>
prevent forward and backward slashes to escape to other directories</li>
<li><a
href="7d6b9a4f8c"><code>7d6b9a4</code></a>
add missing ch.qos.logback.core.property package</li>
<li><a
href="fa25930346"><code>fa25930</code></a>
add an extension path in ConsoleAppender for JansiConsoleAppender</li>
<li><a
href="c73b43f201"><code>c73b43f</code></a>
deprecate the withJansi path</li>
<li>Additional commits viewable in <a
href="https://github.com/qos-ch/logback/compare/v_1.6.1...v_1.6.3">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-24 19:50:19 +02:00
dependabot[bot]
e06014fc83
chore(deps): bump gradle-wrapper from 9.7.0 to 9.7.1 (#969)
Bumps [gradle-wrapper](https://github.com/gradle/gradle) from 9.7.0 to
9.7.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.1</h2>
<p>The Gradle team is excited to announce Gradle 9.7.1.</p>
<p>This is a patch release for 9.7.0. We recommend using 9.7.1 instead
of 9.7.0.</p>
<p>Here are the highlights of 9.7.0 release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>Resilient Sync helps you fix broken builds</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.1/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.1 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.1 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.1/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.1/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="92f0512e7f"><code>92f0512</code></a>
update fixed issues for 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38892">#38892</a>)</li>
<li><a
href="820ee75a99"><code>820ee75</code></a>
update fixed issues for 9.7.1</li>
<li><a
href="82c23f9bd2"><code>82c23f9</code></a>
Fix annotation parameter ordering problem in KTS (<a
href="https://redirect.github.com/gradle/gradle/issues/38878">#38878</a>)</li>
<li><a
href="ef11a7268f"><code>ef11a72</code></a>
Fix annotation parameter ordering issue</li>
<li><a
href="bb0d8a974a"><code>bb0d8a9</code></a>
Make relevant tests polyglot (run for multiple DSLs)</li>
<li><a
href="336e129d7f"><code>336e129</code></a>
Update signing configuration (<a
href="https://redirect.github.com/gradle/gradle/issues/38874">#38874</a>)</li>
<li><a
href="4bdf0da2da"><code>4bdf0da</code></a>
Update signing configuration</li>
<li><a
href="cd9b92c1b8"><code>cd9b92c</code></a>
List issues resolved in 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38839">#38839</a>)</li>
<li><a
href="5f4e381964"><code>5f4e381</code></a>
List issues resolved in 9.7.1</li>
<li><a
href="1e08ab5513"><code>1e08ab5</code></a>
Keep type-use annotations in extracted ABI classes (<a
href="https://redirect.github.com/gradle/gradle/issues/38810">#38810</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.7.0...v9.7.1">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-24 17:18:50 +02:00
dependabot[bot]
4aa06febfc
chore(deps): bump the other-dependencies group across 3 directories with 4 updates (#968)
Bumps the other-dependencies group with 2 updates in the
/samples/kotlin-mcp-client directory:
[gradle-wrapper](https://github.com/gradle/gradle) and
[com.anthropic:anthropic-java](https://github.com/anthropics/anthropic-sdk-java).
Bumps the other-dependencies group with 2 updates in the
/samples/kotlinlang-mcp-server directory:
[gradle-wrapper](https://github.com/gradle/gradle) and
[ch.qos.logback:logback-classic](https://github.com/qos-ch/logback).
Bumps the other-dependencies group with 2 updates in the
/samples/simple-streamable-server directory:
[gradle-wrapper](https://github.com/gradle/gradle) and
[org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework).

Updates `gradle-wrapper` from 9.7.0 to 9.7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.1</h2>
<p>The Gradle team is excited to announce Gradle 9.7.1.</p>
<p>This is a patch release for 9.7.0. We recommend using 9.7.1 instead
of 9.7.0.</p>
<p>Here are the highlights of 9.7.0 release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>Resilient Sync helps you fix broken builds</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.1/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.1 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.1 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.1/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.1/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="92f0512e7f"><code>92f0512</code></a>
update fixed issues for 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38892">#38892</a>)</li>
<li><a
href="820ee75a99"><code>820ee75</code></a>
update fixed issues for 9.7.1</li>
<li><a
href="82c23f9bd2"><code>82c23f9</code></a>
Fix annotation parameter ordering problem in KTS (<a
href="https://redirect.github.com/gradle/gradle/issues/38878">#38878</a>)</li>
<li><a
href="ef11a7268f"><code>ef11a72</code></a>
Fix annotation parameter ordering issue</li>
<li><a
href="bb0d8a974a"><code>bb0d8a9</code></a>
Make relevant tests polyglot (run for multiple DSLs)</li>
<li><a
href="336e129d7f"><code>336e129</code></a>
Update signing configuration (<a
href="https://redirect.github.com/gradle/gradle/issues/38874">#38874</a>)</li>
<li><a
href="4bdf0da2da"><code>4bdf0da</code></a>
Update signing configuration</li>
<li><a
href="cd9b92c1b8"><code>cd9b92c</code></a>
List issues resolved in 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38839">#38839</a>)</li>
<li><a
href="5f4e381964"><code>5f4e381</code></a>
List issues resolved in 9.7.1</li>
<li><a
href="1e08ab5513"><code>1e08ab5</code></a>
Keep type-use annotations in extracted ABI classes (<a
href="https://redirect.github.com/gradle/gradle/issues/38810">#38810</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.7.0...v9.7.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `com.anthropic:anthropic-java` from 2.52.0 to 2.57.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-java/releases">com.anthropic:anthropic-java's
releases</a>.</em></p>
<blockquote>
<h2>v2.57.0</h2>
<h2>2.57.0 (2026-08-19)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.56.0...v2.57.0">v2.56.0...v2.57.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> managed agents web search config and self
hosted sandbox memory (<a
href="83b03c0423">83b03c0</a>)</li>
</ul>
<h2>v2.56.0</h2>
<h2>2.56.0 (2026-08-19)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.55.0...v2.56.0">v2.55.0...v2.56.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> Files and Skills APIs are now GA; add computer
use and browser use toolsets (<a
href="762f3423d1">762f342</a>)</li>
</ul>
<h2>v2.55.0</h2>
<h2>2.55.0 (2026-08-18)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.54.0...v2.55.0">v2.54.0...v2.55.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> additions to files and memory stores (<a
href="1f89b9b41e">1f89b9b</a>)</li>
<li><strong>api:</strong> updates to skill, files, and user profiles (<a
href="a5febdadd6">a5febda</a>)</li>
<li><strong>client:</strong> add helpers for accessing the workspace ID
in response headers (<a
href="718d5c180e">718d5c1</a>)</li>
<li><strong>internal:</strong> upgrade to Gradle 9 and Kotlin 2.3 with a
shared version catalog (<a
href="596395e1bd">596395e</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>api:</strong> remove unsupported mid_conv_system content
block (<a
href="89bf90137d">89bf901</a>)</li>
<li><strong>client:</strong> don't let null usage fields in
message_delta overwrite accumulated usage (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/226">#226</a>)
(<a
href="603d2f5474">603d2f5</a>)</li>
<li><strong>client:</strong> keep unknown content block and delta types
when accumulating a message stream (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/225">#225</a>)
(<a
href="9bf944db26">9bf944d</a>)</li>
<li><strong>tool-runner:</strong> forward the server-assigned container
on follow-up requests (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/216">#216</a>)
(<a
href="b754c459b5">b754c45</a>)</li>
<li><strong>tool-runner:</strong> send the BetaToolRunner helper header
(<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/220">#220</a>)
(<a
href="95b359c5f9">95b359c</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li><strong>internal:</strong> lint and format build logic sources with
ktfmt (<a
href="9b52a2afc0">9b52a2a</a>)</li>
<li><strong>internal:</strong> remove leftover prism references (<a
href="76245235cb">7624523</a>)</li>
</ul>
<h2>v2.54.0</h2>
<h2>2.54.0 (2026-08-13)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.53.0...v2.54.0">v2.53.0...v2.54.0</a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/anthropics/anthropic-sdk-java/blob/main/CHANGELOG.md">com.anthropic:anthropic-java's
changelog</a>.</em></p>
<blockquote>
<h2>2.57.0 (2026-08-19)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.56.0...v2.57.0">v2.56.0...v2.57.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> managed agents web search config and self
hosted sandbox memory (<a
href="83b03c0423">83b03c0</a>)</li>
</ul>
<h2>2.56.0 (2026-08-19)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.55.0...v2.56.0">v2.55.0...v2.56.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> Files and Skills APIs are now GA; add computer
use and browser use toolsets (<a
href="762f3423d1">762f342</a>)</li>
</ul>
<h2>2.55.0 (2026-08-18)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.54.0...v2.55.0">v2.54.0...v2.55.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> additions to files and memory stores (<a
href="1f89b9b41e">1f89b9b</a>)</li>
<li><strong>api:</strong> updates to skill, files, and user profiles (<a
href="a5febdadd6">a5febda</a>)</li>
<li><strong>client:</strong> add helpers for accessing the workspace ID
in response headers (<a
href="718d5c180e">718d5c1</a>)</li>
<li><strong>internal:</strong> upgrade to Gradle 9 and Kotlin 2.3 with a
shared version catalog (<a
href="596395e1bd">596395e</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>api:</strong> remove unsupported mid_conv_system content
block (<a
href="89bf90137d">89bf901</a>)</li>
<li><strong>client:</strong> don't let null usage fields in
message_delta overwrite accumulated usage (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/226">#226</a>)
(<a
href="603d2f5474">603d2f5</a>)</li>
<li><strong>client:</strong> keep unknown content block and delta types
when accumulating a message stream (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/225">#225</a>)
(<a
href="9bf944db26">9bf944d</a>)</li>
<li><strong>tool-runner:</strong> forward the server-assigned container
on follow-up requests (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/216">#216</a>)
(<a
href="b754c459b5">b754c45</a>)</li>
<li><strong>tool-runner:</strong> send the BetaToolRunner helper header
(<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/220">#220</a>)
(<a
href="95b359c5f9">95b359c</a>)</li>
</ul>
<h3>Chores</h3>
<ul>
<li><strong>internal:</strong> lint and format build logic sources with
ktfmt (<a
href="9b52a2afc0">9b52a2a</a>)</li>
<li><strong>internal:</strong> remove leftover prism references (<a
href="76245235cb">7624523</a>)</li>
</ul>
<h2>2.54.0 (2026-08-13)</h2>
<p>Full Changelog: <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.53.0...v2.54.0">v2.53.0...v2.54.0</a></p>
<h3>Features</h3>
<ul>
<li><strong>api:</strong> add output_behavior to dream creation (create
a new memory store or update the input store in place) (<a
href="a49ea9a1e9">a49ea9a</a>)</li>
<li><strong>client:</strong> add StructuredOutputConfig for combining
Class&lt;T&gt; structured outputs with other output options (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/192">#192</a>)
(<a
href="8caead30a1">8caead3</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8f5861c883"><code>8f5861c</code></a>
release: 2.57.0</li>
<li><a
href="71074ed7e3"><code>71074ed</code></a>
feat(api): managed agents web search config and self hosted sandbox
memory</li>
<li><a
href="76e0cfae22"><code>76e0cfa</code></a>
release: 2.56.0</li>
<li><a
href="ce2a502726"><code>ce2a502</code></a>
feat(api): Files and Skills APIs are now GA; add computer use and
browser use...</li>
<li><a
href="8752d28a57"><code>8752d28</code></a>
release: 2.55.0</li>
<li><a
href="fb3146713c"><code>fb31467</code></a>
feat(api): updates to skill, files, and user profiles</li>
<li><a
href="ddaf1ec146"><code>ddaf1ec</code></a>
fix(client): don't let null usage fields in message_delta overwrite
accumulat...</li>
<li><a
href="a544b28fb5"><code>a544b28</code></a>
fix(client): keep unknown content block and delta types when
accumulating a m...</li>
<li><a
href="27a08d0761"><code>27a08d0</code></a>
fix(tool-runner): send the BetaToolRunner helper header (<a
href="https://redirect.github.com/anthropics/anthropic-sdk-java/issues/220">#220</a>)</li>
<li><a
href="df22a5933b"><code>df22a59</code></a>
chore(internal): lint and format build logic sources with ktfmt</li>
<li>Additional commits viewable in <a
href="https://github.com/anthropics/anthropic-sdk-java/compare/v2.52.0...v2.57.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.7.0 to 9.7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.1</h2>
<p>The Gradle team is excited to announce Gradle 9.7.1.</p>
<p>This is a patch release for 9.7.0. We recommend using 9.7.1 instead
of 9.7.0.</p>
<p>Here are the highlights of 9.7.0 release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>Resilient Sync helps you fix broken builds</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.1/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.1 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.1 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.1/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.1/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="92f0512e7f"><code>92f0512</code></a>
update fixed issues for 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38892">#38892</a>)</li>
<li><a
href="820ee75a99"><code>820ee75</code></a>
update fixed issues for 9.7.1</li>
<li><a
href="82c23f9bd2"><code>82c23f9</code></a>
Fix annotation parameter ordering problem in KTS (<a
href="https://redirect.github.com/gradle/gradle/issues/38878">#38878</a>)</li>
<li><a
href="ef11a7268f"><code>ef11a72</code></a>
Fix annotation parameter ordering issue</li>
<li><a
href="bb0d8a974a"><code>bb0d8a9</code></a>
Make relevant tests polyglot (run for multiple DSLs)</li>
<li><a
href="336e129d7f"><code>336e129</code></a>
Update signing configuration (<a
href="https://redirect.github.com/gradle/gradle/issues/38874">#38874</a>)</li>
<li><a
href="4bdf0da2da"><code>4bdf0da</code></a>
Update signing configuration</li>
<li><a
href="cd9b92c1b8"><code>cd9b92c</code></a>
List issues resolved in 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38839">#38839</a>)</li>
<li><a
href="5f4e381964"><code>5f4e381</code></a>
List issues resolved in 9.7.1</li>
<li><a
href="1e08ab5513"><code>1e08ab5</code></a>
Keep type-use annotations in extracted ABI classes (<a
href="https://redirect.github.com/gradle/gradle/issues/38810">#38810</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.7.0...v9.7.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.7.0 to 9.7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.1</h2>
<p>The Gradle team is excited to announce Gradle 9.7.1.</p>
<p>This is a patch release for 9.7.0. We recommend using 9.7.1 instead
of 9.7.0.</p>
<p>Here are the highlights of 9.7.0 release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>Resilient Sync helps you fix broken builds</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.1/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.1 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.1 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.1/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.1/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="92f0512e7f"><code>92f0512</code></a>
update fixed issues for 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38892">#38892</a>)</li>
<li><a
href="820ee75a99"><code>820ee75</code></a>
update fixed issues for 9.7.1</li>
<li><a
href="82c23f9bd2"><code>82c23f9</code></a>
Fix annotation parameter ordering problem in KTS (<a
href="https://redirect.github.com/gradle/gradle/issues/38878">#38878</a>)</li>
<li><a
href="ef11a7268f"><code>ef11a72</code></a>
Fix annotation parameter ordering issue</li>
<li><a
href="bb0d8a974a"><code>bb0d8a9</code></a>
Make relevant tests polyglot (run for multiple DSLs)</li>
<li><a
href="336e129d7f"><code>336e129</code></a>
Update signing configuration (<a
href="https://redirect.github.com/gradle/gradle/issues/38874">#38874</a>)</li>
<li><a
href="4bdf0da2da"><code>4bdf0da</code></a>
Update signing configuration</li>
<li><a
href="cd9b92c1b8"><code>cd9b92c</code></a>
List issues resolved in 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38839">#38839</a>)</li>
<li><a
href="5f4e381964"><code>5f4e381</code></a>
List issues resolved in 9.7.1</li>
<li><a
href="1e08ab5513"><code>1e08ab5</code></a>
Keep type-use annotations in extracted ABI classes (<a
href="https://redirect.github.com/gradle/gradle/issues/38810">#38810</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.7.0...v9.7.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.7.0 to 9.7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.1</h2>
<p>The Gradle team is excited to announce Gradle 9.7.1.</p>
<p>This is a patch release for 9.7.0. We recommend using 9.7.1 instead
of 9.7.0.</p>
<p>Here are the highlights of 9.7.0 release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>Resilient Sync helps you fix broken builds</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.1/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.1 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.1 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.1/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.1/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="92f0512e7f"><code>92f0512</code></a>
update fixed issues for 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38892">#38892</a>)</li>
<li><a
href="820ee75a99"><code>820ee75</code></a>
update fixed issues for 9.7.1</li>
<li><a
href="82c23f9bd2"><code>82c23f9</code></a>
Fix annotation parameter ordering problem in KTS (<a
href="https://redirect.github.com/gradle/gradle/issues/38878">#38878</a>)</li>
<li><a
href="ef11a7268f"><code>ef11a72</code></a>
Fix annotation parameter ordering issue</li>
<li><a
href="bb0d8a974a"><code>bb0d8a9</code></a>
Make relevant tests polyglot (run for multiple DSLs)</li>
<li><a
href="336e129d7f"><code>336e129</code></a>
Update signing configuration (<a
href="https://redirect.github.com/gradle/gradle/issues/38874">#38874</a>)</li>
<li><a
href="4bdf0da2da"><code>4bdf0da</code></a>
Update signing configuration</li>
<li><a
href="cd9b92c1b8"><code>cd9b92c</code></a>
List issues resolved in 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38839">#38839</a>)</li>
<li><a
href="5f4e381964"><code>5f4e381</code></a>
List issues resolved in 9.7.1</li>
<li><a
href="1e08ab5513"><code>1e08ab5</code></a>
Keep type-use annotations in extracted ABI classes (<a
href="https://redirect.github.com/gradle/gradle/issues/38810">#38810</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.7.0...v9.7.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.7.0 to 9.7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.1</h2>
<p>The Gradle team is excited to announce Gradle 9.7.1.</p>
<p>This is a patch release for 9.7.0. We recommend using 9.7.1 instead
of 9.7.0.</p>
<p>Here are the highlights of 9.7.0 release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>Resilient Sync helps you fix broken builds</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.1/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.1 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.1 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.1/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.1/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="92f0512e7f"><code>92f0512</code></a>
update fixed issues for 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38892">#38892</a>)</li>
<li><a
href="820ee75a99"><code>820ee75</code></a>
update fixed issues for 9.7.1</li>
<li><a
href="82c23f9bd2"><code>82c23f9</code></a>
Fix annotation parameter ordering problem in KTS (<a
href="https://redirect.github.com/gradle/gradle/issues/38878">#38878</a>)</li>
<li><a
href="ef11a7268f"><code>ef11a72</code></a>
Fix annotation parameter ordering issue</li>
<li><a
href="bb0d8a974a"><code>bb0d8a9</code></a>
Make relevant tests polyglot (run for multiple DSLs)</li>
<li><a
href="336e129d7f"><code>336e129</code></a>
Update signing configuration (<a
href="https://redirect.github.com/gradle/gradle/issues/38874">#38874</a>)</li>
<li><a
href="4bdf0da2da"><code>4bdf0da</code></a>
Update signing configuration</li>
<li><a
href="cd9b92c1b8"><code>cd9b92c</code></a>
List issues resolved in 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38839">#38839</a>)</li>
<li><a
href="5f4e381964"><code>5f4e381</code></a>
List issues resolved in 9.7.1</li>
<li><a
href="1e08ab5513"><code>1e08ab5</code></a>
Keep type-use annotations in extracted ABI classes (<a
href="https://redirect.github.com/gradle/gradle/issues/38810">#38810</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.7.0...v9.7.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `ch.qos.logback:logback-classic` from 1.6.1 to 1.6.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/qos-ch/logback/releases">ch.qos.logback:logback-classic's
releases</a>.</em></p>
<blockquote>
<h2>Logback 1.6.3</h2>
<h1>2026-08-14 Release of logback version 1.6.3</h1>
<ul>
<li>
<p>In response <a
href="https://www.cve.org/cverecord?id=CVE-2026-19880">CVE-2026-19880</a>,
<code>MDCBasedDiscriminator</code> (used by
<code>SiftingAppender</code>) now strips forward and backward slashes
(<code>/</code>, <code>\</code>) from MDC values before they are used as
discriminating keys. This prevents path segments from escaping into
destinations controlled by an attacker. When sanitisation actually
changes a value, a warning is emitted; the warning is rate-limited (a
small batch, then a lull of about ten minutes).</p>
</li>
<li>
<p>Colour console support is split out into a dedicated <a
href="https://logback.qos.ch/manual/appenders.html#JansiConsoleAppender"><code>JansiConsoleAppender</code></a>.
It wraps stdout or stderr with Jansi so ANSI escape sequences (for
example coloured patterns) render correctly on terminals that need it,
notably Windows. Prefer this class over the older path described next.
See the <a
href="https://logback.qos.ch/manual/appenders.html#JansiConsoleAppender">appenders
documentation</a>.</p>
</li>
<li>
<p>The <code>withJansi</code> property on <code>ConsoleAppender</code>
is <strong>deprecated</strong>. Existing configurations that still set
<code>&lt;withJansi&gt;true&lt;/withJansi&gt;</code> continue to work
for compatibility, but new setups should use
<code>JansiConsoleAppender</code> instead.</p>
</li>
<li>
<p><code>ConsoleAppender</code> no longer treats the process console as
an exclusive resource: stopping it does not close
<code>System.out</code> / <code>System.err</code>.
<code>JansiConsoleAppender</code> pairs each
<code>AnsiConsole.systemInstall()</code> with
<code>systemUninstall()</code> on stop, so repeated start/stop cycles do
not leave Jansi installed or tear down streams shared with the rest of
the JVM. Related behavior is covered by tests for <a
href="https://redirect.github.com/qos-ch/logback/issues/1063">issues/1063</a>.</p>
</li>
<li>
<p>Invocation throttling helpers were reworked:
<code>SimpleInvocationGate</code> is renamed
<code>FixedIntervalInvocationGate</code>, and
<code>BatchedFixedIntervalInvocationGate</code> allows a short burst of
invocations before applying a fixed lull. The sanitisation
warning above uses the batched gate.</p>
</li>
<li>
<p>The JPMS <code>module-info</code> for logback-core now exports the
<code>ch.qos.logback.core.property</code> package, which had been
missing from the module descriptor.</p>
</li>
<li>
<p>A bit-wise identical binary of this version can be reproduced by
building from <a href="https://github.com/qos-ch/logback">source
code</a> at commit <code>e8e824dede022a6d7208b36cfa875b0d1b7772f3</code>
associated with the tag <code>v_1.6.3</code>. The release was built
using Java &quot;21&quot; 2023-10-17 LTS build 21.0.1.+12-LTS-29 under
Linux Debian 11.6.</p>
</li>
</ul>
<p>--
Sponsoring SLF4J/logback/reload4j at <a
href="https://github.com/sponsors/qos-ch">https://github.com/sponsors/qos-ch</a></p>
<h2>Logback 1.6.2</h2>
<p><a
href="https://github.com/user-attachments/assets/9ceaf157-b758-4188-815d-edfe4e1b4edd">https://github.com/user-attachments/assets/9ceaf157-b758-4188-815d-edfe4e1b4edd</a></p>
<h1>2026-08-10 Release of logback version 1.6.2</h1>
<ul>
<li>
<p>Configuration analysis now detects <em>contradictory caller-data
inclusion instructions</em>. For example, an <code>AsyncAppender</code>,
<code>SocketAppender</code> or <code>SMTPAppender</code> with
<code>includeCallerData</code> left at the default <code>false</code> is
incompatible with a layout or encoder pattern that uses a caller-data
converter such as <code>%C</code>, <code>%M</code>, <code>%L</code>,
<code>%F</code>, <code>%l</code> or <code>%caller</code>. At runtime
those converters would print question marks and still incur extraction
cost on a worker thread. Logback now emits a configuration-time warning
when such instructions disagree. See <a
href="https://logback.qos.ch/codes.html#callerContradiction">codes.html#callerContradiction</a>
for details. This issue was reported in <a
href="https://redirect.github.com/qos-ch/logback/issues/1059">issues/1059</a>
by <a href="https://github.com/leeychee">leeychee</a>. The initial
analysis was contributed by <a
href="https://github.com/seonwooj0810">seonwoo_jung</a>.</p>
</li>
<li>
<p>Caller-contradiction analysis can be turned off by setting the
<code>logback.skipCallerContradictionAnalysis</code> variable to
<code>true</code>, either as a system property
(<code>-Dlogback.skipCallerContradictionAnalysis=true</code>) or as a
property in the configuration file:</p>
<pre lang="xml"><code>&lt;property
name=&quot;logback.skipCallerContradictionAnalysis&quot;
value=&quot;true&quot;/&gt;
</code></pre>
</li>
<li>
<p><code>SimpleSocketServer</code> and
<code>SimpleSSLSocketServer</code> now require an explicit client IP
whitelist. On the command line, pass one or more allowed addresses
(single IPs or CIDR ranges) after the configuration file. An empty
whitelist means no clients are accepted. When embedding the server
programmatically, register allowed addresses with
<code>addAllowedClientAddress(String)</code> or
<code>setAllowedClientAddresses(Collection)</code> before clients
connect. See the documentation on <a
href="https://logback.qos.ch/manual/appenders.html#simpleSocketServerClientAccess">restricting
client access</a>.</p>
</li>
<li>
<p>Added <code>ThrowableProxyVOBuilder</code> for assembling a
<code>ThrowableProxyVO</code> field by field, with a corresponding
<code>ThrowableProxyVO.builder()</code> entry point.</p>
</li>
<li>
<p>Dependency analysis handlers now run their <code>postHandle</code>
method after child models have been processed, so checks that depend on
nested appenders (such as caller-contradiction analysis) see a complete
picture.</p>
</li>
<li>
<p>Updated several dependencies, including Angus Mail to 2.0.4 and Jetty
(test) to 12.1.12.</p>
</li>
<li>
<p>A bit-wise identical binary of this version can be reproduced by
building from <a href="https://github.com/qos-ch/logback">source
code</a> at commit e3d78330ad1ba024fd987fd00c3ffb9cfcdb07dc associated
with the tag <code>v_1.6.2</code>. The release was built using Java
&quot;21&quot; 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian
11.6.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e8e824dede"><code>e8e824d</code></a>
prepare release 1.6.3</li>
<li><a
href="761821bfaa"><code>761821b</code></a>
MDCBasedDiscriminator has a gated warning mechanism</li>
<li><a
href="53ed122900"><code>53ed122</code></a>
update copyright year</li>
<li><a
href="c7e2db2446"><code>c7e2db2</code></a>
rename SimpleInvocationGate as FixedIntervalInvocationGate</li>
<li><a
href="b5aa931b09"><code>b5aa931</code></a>
added BatchedSimpleInvocationGate</li>
<li><a
href="1f22af7686"><code>1f22af7</code></a>
add javadocs to SimpleInvocationGate</li>
<li><a
href="638ffa7e78"><code>638ffa7</code></a>
prevent forward and backward slashes to escape to other directories</li>
<li><a
href="7d6b9a4f8c"><code>7d6b9a4</code></a>
add missing ch.qos.logback.core.property package</li>
<li><a
href="fa25930346"><code>fa25930</code></a>
add an extension path in ConsoleAppender for JansiConsoleAppender</li>
<li><a
href="c73b43f201"><code>c73b43f</code></a>
deprecate the withJansi path</li>
<li>Additional commits viewable in <a
href="https://github.com/qos-ch/logback/compare/v_1.6.1...v_1.6.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.7.0 to 9.7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.1</h2>
<p>The Gradle team is excited to announce Gradle 9.7.1.</p>
<p>This is a patch release for 9.7.0. We recommend using 9.7.1 instead
of 9.7.0.</p>
<p>Here are the highlights of 9.7.0 release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>Resilient Sync helps you fix broken builds</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.1/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.1 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.1 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.1/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.1/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="92f0512e7f"><code>92f0512</code></a>
update fixed issues for 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38892">#38892</a>)</li>
<li><a
href="820ee75a99"><code>820ee75</code></a>
update fixed issues for 9.7.1</li>
<li><a
href="82c23f9bd2"><code>82c23f9</code></a>
Fix annotation parameter ordering problem in KTS (<a
href="https://redirect.github.com/gradle/gradle/issues/38878">#38878</a>)</li>
<li><a
href="ef11a7268f"><code>ef11a72</code></a>
Fix annotation parameter ordering issue</li>
<li><a
href="bb0d8a974a"><code>bb0d8a9</code></a>
Make relevant tests polyglot (run for multiple DSLs)</li>
<li><a
href="336e129d7f"><code>336e129</code></a>
Update signing configuration (<a
href="https://redirect.github.com/gradle/gradle/issues/38874">#38874</a>)</li>
<li><a
href="4bdf0da2da"><code>4bdf0da</code></a>
Update signing configuration</li>
<li><a
href="cd9b92c1b8"><code>cd9b92c</code></a>
List issues resolved in 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38839">#38839</a>)</li>
<li><a
href="5f4e381964"><code>5f4e381</code></a>
List issues resolved in 9.7.1</li>
<li><a
href="1e08ab5513"><code>1e08ab5</code></a>
Keep type-use annotations in extracted ABI classes (<a
href="https://redirect.github.com/gradle/gradle/issues/38810">#38810</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.7.0...v9.7.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.7.0 to 9.7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.1</h2>
<p>The Gradle team is excited to announce Gradle 9.7.1.</p>
<p>This is a patch release for 9.7.0. We recommend using 9.7.1 instead
of 9.7.0.</p>
<p>Here are the highlights of 9.7.0 release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>Resilient Sync helps you fix broken builds</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.1/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.1 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.1 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.1/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.1/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="92f0512e7f"><code>92f0512</code></a>
update fixed issues for 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38892">#38892</a>)</li>
<li><a
href="820ee75a99"><code>820ee75</code></a>
update fixed issues for 9.7.1</li>
<li><a
href="82c23f9bd2"><code>82c23f9</code></a>
Fix annotation parameter ordering problem in KTS (<a
href="https://redirect.github.com/gradle/gradle/issues/38878">#38878</a>)</li>
<li><a
href="ef11a7268f"><code>ef11a72</code></a>
Fix annotation parameter ordering issue</li>
<li><a
href="bb0d8a974a"><code>bb0d8a9</code></a>
Make relevant tests polyglot (run for multiple DSLs)</li>
<li><a
href="336e129d7f"><code>336e129</code></a>
Update signing configuration (<a
href="https://redirect.github.com/gradle/gradle/issues/38874">#38874</a>)</li>
<li><a
href="4bdf0da2da"><code>4bdf0da</code></a>
Update signing configuration</li>
<li><a
href="cd9b92c1b8"><code>cd9b92c</code></a>
List issues resolved in 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38839">#38839</a>)</li>
<li><a
href="5f4e381964"><code>5f4e381</code></a>
List issues resolved in 9.7.1</li>
<li><a
href="1e08ab5513"><code>1e08ab5</code></a>
Keep type-use annotations in extracted ABI classes (<a
href="https://redirect.github.com/gradle/gradle/issues/38810">#38810</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.7.0...v9.7.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.7.0 to 9.7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.1</h2>
<p>The Gradle team is excited to announce Gradle 9.7.1.</p>
<p>This is a patch release for 9.7.0. We recommend using 9.7.1 instead
of 9.7.0.</p>
<p>Here are the highlights of 9.7.0 release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>Resilient Sync helps you fix broken builds</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.1/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.1 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.1 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.1/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.1/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="92f0512e7f"><code>92f0512</code></a>
update fixed issues for 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38892">#38892</a>)</li>
<li><a
href="820ee75a99"><code>820ee75</code></a>
update fixed issues for 9.7.1</li>
<li><a
href="82c23f9bd2"><code>82c23f9</code></a>
Fix annotation parameter ordering problem in KTS (<a
href="https://redirect.github.com/gradle/gradle/issues/38878">#38878</a>)</li>
<li><a
href="ef11a7268f"><code>ef11a72</code></a>
Fix annotation parameter ordering issue</li>
<li><a
href="bb0d8a974a"><code>bb0d8a9</code></a>
Make relevant tests polyglot (run for multiple DSLs)</li>
<li><a
href="336e129d7f"><code>336e129</code></a>
Update signing configuration (<a
href="https://redirect.github.com/gradle/gradle/issues/38874">#38874</a>)</li>
<li><a
href="4bdf0da2da"><code>4bdf0da</code></a>
Update signing configuration</li>
<li><a
href="cd9b92c1b8"><code>cd9b92c</code></a>
List issues resolved in 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38839">#38839</a>)</li>
<li><a
href="5f4e381964"><code>5f4e381</code></a>
List issues resolved in 9.7.1</li>
<li><a
href="1e08ab5513"><code>1e08ab5</code></a>
Keep type-use annotations in extracted ABI classes (<a
href="https://redirect.github.com/gradle/gradle/issues/38810">#38810</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.7.0...v9.7.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.7.0 to 9.7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.1</h2>
<p>The Gradle team is excited to announce Gradle 9.7.1.</p>
<p>This is a patch release for 9.7.0. We recommend using 9.7.1 instead
of 9.7.0.</p>
<p>Here are the highlights of 9.7.0 release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>Resilient Sync helps you fix broken builds</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.1/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.1 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.1 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.1/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.1/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="92f0512e7f"><code>92f0512</code></a>
update fixed issues for 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38892">#38892</a>)</li>
<li><a
href="820ee75a99"><code>820ee75</code></a>
update fixed issues for 9.7.1</li>
<li><a
href="82c23f9bd2"><code>82c23f9</code></a>
Fix annotation parameter ordering problem in KTS (<a
href="https://redirect.github.com/gradle/gradle/issues/38878">#38878</a>)</li>
<li><a
href="ef11a7268f"><code>ef11a72</code></a>
Fix annotation parameter ordering issue</li>
<li><a
href="bb0d8a974a"><code>bb0d8a9</code></a>
Make relevant tests polyglot (run for multiple DSLs)</li>
<li><a
href="336e129d7f"><code>336e129</code></a>
Update signing configuration (<a
href="https://redirect.github.com/gradle/gradle/issues/38874">#38874</a>)</li>
<li><a
href="4bdf0da2da"><code>4bdf0da</code></a>
Update signing configuration</li>
<li><a
href="cd9b92c1b8"><code>cd9b92c</code></a>
List issues resolved in 9.7.1 (<a
href="https://redirect.github.com/gradle/gradle/issues/38839">#38839</a>)</li>
<li><a
href="5f4e381964"><code>5f4e381</code></a>
List issues resolved in 9.7.1</li>
<li><a
href="1e08ab5513"><code>1e08ab5</code></a>
Keep type-use annotations in extracted ABI classes (<a
href="https://redirect.github.com/gradle/gradle/issues/38810">#38810</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.7.0...v9.7.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.junit.jupiter:junit-jupiter`...

_Description has been truncated_

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-24 13:14:04 +02:00
dependabot[bot]
8624334057
chore(deps): bump the kotest group across 1 directory with 3 updates (#960)
Bumps the kotest group with 3 updates in the / directory:
[io.kotest:kotest-assertions-core](https://github.com/kotest/kotest),
[io.kotest:kotest-assertions-json](https://github.com/kotest/kotest) and
[io.kotest:kotest-assertions-ktor](https://github.com/kotest/kotest).

Updates `io.kotest:kotest-assertions-core` from 6.2.3 to 6.2.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-core's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Alex/same time offset date time (<a
href="https://redirect.github.com/kotest/kotest/issues/6180">#6180</a>)
by <a href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6181">kotest/kotest#6181</a></li>
<li>Alex/range intersect details (<a
href="https://redirect.github.com/kotest/kotest/issues/6183">#6183</a>)
by <a href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6184">kotest/kotest#6184</a></li>
<li>Force commons-beanutils to 1.11.0 (CVE-2025-48734) by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6187">kotest/kotest#6187</a></li>
<li>Update kotlinx-datetime to 0.8.0 by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6186">kotest/kotest#6186</a></li>
<li>chore: route a few hardcoded dependency/plugin versions through the
version catalog by <a
href="https://github.com/stlpine"><code>@​stlpine</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6189">kotest/kotest#6189</a></li>
<li>check gradle wrapper gh action by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6192">kotest/kotest#6192</a></li>
<li>fix(assertions): state the containExactCopies lower bound as at
least 1 by <a
href="https://github.com/mvanhorn"><code>@​mvanhorn</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6193">kotest/kotest#6193</a></li>
<li>General improvements - framework by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6190">kotest/kotest#6190</a></li>
<li>General improvements - IJ plugin by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6191">kotest/kotest#6191</a></li>
<li>fix jump to source by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6195">kotest/kotest#6195</a></li>
<li>Update dependency net.bytebuddy:byte-buddy to v1.18.11 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6202">kotest/kotest#6202</a></li>
<li>Update dependency io.github.classgraph:classgraph to v4.8.186 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6201">kotest/kotest#6201</a></li>
<li>update docs to clarify that <code>copies</code> in
shouldContainExactCopies must be 1 or higher by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6207">kotest/kotest#6207</a></li>
<li>spring extension improvements by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6204">kotest/kotest#6204</a></li>
<li>sourceRef improvements by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6203">kotest/kotest#6203</a></li>
<li>introduce a TeamCity renderer that allows tree view and force it for
our legacy IJ plugin by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6210">kotest/kotest#6210</a></li>
<li>fix kdoc on StrictThrowableHandling by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6212">kotest/kotest#6212</a></li>
<li>make ai skill available to users via claude marketplace and tie
versioning to kotest releases by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6211">kotest/kotest#6211</a></li>
<li>spec tags cache by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6206">kotest/kotest#6206</a></li>
<li>junit testFinished improvements by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6205">kotest/kotest#6205</a></li>
<li>Add module-factory support to KoinExtension (<a
href="https://redirect.github.com/kotest/kotest/issues/6006">#6006</a>)
by <a href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in
<a
href="https://redirect.github.com/kotest/kotest/pull/6138">kotest/kotest#6138</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/stlpine"><code>@​stlpine</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6189">kotest/kotest#6189</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/6.2.3...v6.2.4">https://github.com/kotest/kotest/compare/6.2.3...v6.2.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="736a47b8ab"><code>736a47b</code></a>
Add module-factory support to KoinExtension (<a
href="https://redirect.github.com/kotest/kotest/issues/6006">#6006</a>)
(<a
href="https://redirect.github.com/kotest/kotest/issues/6138">#6138</a>)</li>
<li><a
href="cb91c7e167"><code>cb91c7e</code></a>
junit testFinished improvements (<a
href="https://redirect.github.com/kotest/kotest/issues/6205">#6205</a>)</li>
<li><a
href="5c898b4fbd"><code>5c898b4</code></a>
spec tags cache (<a
href="https://redirect.github.com/kotest/kotest/issues/6206">#6206</a>)</li>
<li><a
href="69fdc8dc9f"><code>69fdc8d</code></a>
make ai skill available to users via claude marketplace and tie
versioning to...</li>
<li><a
href="2403f4fbe3"><code>2403f4f</code></a>
fix kdoc on StrictThrowableHandling (<a
href="https://redirect.github.com/kotest/kotest/issues/6212">#6212</a>)</li>
<li><a
href="f96cf2a6fc"><code>f96cf2a</code></a>
introduce a TeamCity renderer that allows tree view and force it for our
IJ p...</li>
<li><a
href="05792718cb"><code>0579271</code></a>
sourceRef improvements (<a
href="https://redirect.github.com/kotest/kotest/issues/6203">#6203</a>)</li>
<li><a
href="da26f165ab"><code>da26f16</code></a>
spring extension improvements (<a
href="https://redirect.github.com/kotest/kotest/issues/6204">#6204</a>)</li>
<li><a
href="cc5cf2536f"><code>cc5cf25</code></a>
update docs to clarify that <code>copies</code> in
shouldContainExactCopies must be 1 or...</li>
<li><a
href="1d648f92eb"><code>1d648f9</code></a>
Update dependency io.github.classgraph:classgraph to v4.8.186 (<a
href="https://redirect.github.com/kotest/kotest/issues/6201">#6201</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/kotest/kotest/compare/6.2.3...6.2.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.kotest:kotest-assertions-json` from 6.2.3 to 6.2.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-json's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Alex/same time offset date time (<a
href="https://redirect.github.com/kotest/kotest/issues/6180">#6180</a>)
by <a href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6181">kotest/kotest#6181</a></li>
<li>Alex/range intersect details (<a
href="https://redirect.github.com/kotest/kotest/issues/6183">#6183</a>)
by <a href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6184">kotest/kotest#6184</a></li>
<li>Force commons-beanutils to 1.11.0 (CVE-2025-48734) by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6187">kotest/kotest#6187</a></li>
<li>Update kotlinx-datetime to 0.8.0 by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6186">kotest/kotest#6186</a></li>
<li>chore: route a few hardcoded dependency/plugin versions through the
version catalog by <a
href="https://github.com/stlpine"><code>@​stlpine</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6189">kotest/kotest#6189</a></li>
<li>check gradle wrapper gh action by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6192">kotest/kotest#6192</a></li>
<li>fix(assertions): state the containExactCopies lower bound as at
least 1 by <a
href="https://github.com/mvanhorn"><code>@​mvanhorn</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6193">kotest/kotest#6193</a></li>
<li>General improvements - framework by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6190">kotest/kotest#6190</a></li>
<li>General improvements - IJ plugin by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6191">kotest/kotest#6191</a></li>
<li>fix jump to source by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6195">kotest/kotest#6195</a></li>
<li>Update dependency net.bytebuddy:byte-buddy to v1.18.11 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6202">kotest/kotest#6202</a></li>
<li>Update dependency io.github.classgraph:classgraph to v4.8.186 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6201">kotest/kotest#6201</a></li>
<li>update docs to clarify that <code>copies</code> in
shouldContainExactCopies must be 1 or higher by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6207">kotest/kotest#6207</a></li>
<li>spring extension improvements by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6204">kotest/kotest#6204</a></li>
<li>sourceRef improvements by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6203">kotest/kotest#6203</a></li>
<li>introduce a TeamCity renderer that allows tree view and force it for
our legacy IJ plugin by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6210">kotest/kotest#6210</a></li>
<li>fix kdoc on StrictThrowableHandling by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6212">kotest/kotest#6212</a></li>
<li>make ai skill available to users via claude marketplace and tie
versioning to kotest releases by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6211">kotest/kotest#6211</a></li>
<li>spec tags cache by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6206">kotest/kotest#6206</a></li>
<li>junit testFinished improvements by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6205">kotest/kotest#6205</a></li>
<li>Add module-factory support to KoinExtension (<a
href="https://redirect.github.com/kotest/kotest/issues/6006">#6006</a>)
by <a href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in
<a
href="https://redirect.github.com/kotest/kotest/pull/6138">kotest/kotest#6138</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/stlpine"><code>@​stlpine</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6189">kotest/kotest#6189</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/6.2.3...v6.2.4">https://github.com/kotest/kotest/compare/6.2.3...v6.2.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="736a47b8ab"><code>736a47b</code></a>
Add module-factory support to KoinExtension (<a
href="https://redirect.github.com/kotest/kotest/issues/6006">#6006</a>)
(<a
href="https://redirect.github.com/kotest/kotest/issues/6138">#6138</a>)</li>
<li><a
href="cb91c7e167"><code>cb91c7e</code></a>
junit testFinished improvements (<a
href="https://redirect.github.com/kotest/kotest/issues/6205">#6205</a>)</li>
<li><a
href="5c898b4fbd"><code>5c898b4</code></a>
spec tags cache (<a
href="https://redirect.github.com/kotest/kotest/issues/6206">#6206</a>)</li>
<li><a
href="69fdc8dc9f"><code>69fdc8d</code></a>
make ai skill available to users via claude marketplace and tie
versioning to...</li>
<li><a
href="2403f4fbe3"><code>2403f4f</code></a>
fix kdoc on StrictThrowableHandling (<a
href="https://redirect.github.com/kotest/kotest/issues/6212">#6212</a>)</li>
<li><a
href="f96cf2a6fc"><code>f96cf2a</code></a>
introduce a TeamCity renderer that allows tree view and force it for our
IJ p...</li>
<li><a
href="05792718cb"><code>0579271</code></a>
sourceRef improvements (<a
href="https://redirect.github.com/kotest/kotest/issues/6203">#6203</a>)</li>
<li><a
href="da26f165ab"><code>da26f16</code></a>
spring extension improvements (<a
href="https://redirect.github.com/kotest/kotest/issues/6204">#6204</a>)</li>
<li><a
href="cc5cf2536f"><code>cc5cf25</code></a>
update docs to clarify that <code>copies</code> in
shouldContainExactCopies must be 1 or...</li>
<li><a
href="1d648f92eb"><code>1d648f9</code></a>
Update dependency io.github.classgraph:classgraph to v4.8.186 (<a
href="https://redirect.github.com/kotest/kotest/issues/6201">#6201</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/kotest/kotest/compare/6.2.3...6.2.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.kotest:kotest-assertions-ktor` from 6.2.3 to 6.2.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-ktor's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Alex/same time offset date time (<a
href="https://redirect.github.com/kotest/kotest/issues/6180">#6180</a>)
by <a href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6181">kotest/kotest#6181</a></li>
<li>Alex/range intersect details (<a
href="https://redirect.github.com/kotest/kotest/issues/6183">#6183</a>)
by <a href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6184">kotest/kotest#6184</a></li>
<li>Force commons-beanutils to 1.11.0 (CVE-2025-48734) by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6187">kotest/kotest#6187</a></li>
<li>Update kotlinx-datetime to 0.8.0 by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6186">kotest/kotest#6186</a></li>
<li>chore: route a few hardcoded dependency/plugin versions through the
version catalog by <a
href="https://github.com/stlpine"><code>@​stlpine</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6189">kotest/kotest#6189</a></li>
<li>check gradle wrapper gh action by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6192">kotest/kotest#6192</a></li>
<li>fix(assertions): state the containExactCopies lower bound as at
least 1 by <a
href="https://github.com/mvanhorn"><code>@​mvanhorn</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6193">kotest/kotest#6193</a></li>
<li>General improvements - framework by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6190">kotest/kotest#6190</a></li>
<li>General improvements - IJ plugin by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6191">kotest/kotest#6191</a></li>
<li>fix jump to source by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6195">kotest/kotest#6195</a></li>
<li>Update dependency net.bytebuddy:byte-buddy to v1.18.11 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6202">kotest/kotest#6202</a></li>
<li>Update dependency io.github.classgraph:classgraph to v4.8.186 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6201">kotest/kotest#6201</a></li>
<li>update docs to clarify that <code>copies</code> in
shouldContainExactCopies must be 1 or higher by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6207">kotest/kotest#6207</a></li>
<li>spring extension improvements by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6204">kotest/kotest#6204</a></li>
<li>sourceRef improvements by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6203">kotest/kotest#6203</a></li>
<li>introduce a TeamCity renderer that allows tree view and force it for
our legacy IJ plugin by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6210">kotest/kotest#6210</a></li>
<li>fix kdoc on StrictThrowableHandling by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6212">kotest/kotest#6212</a></li>
<li>make ai skill available to users via claude marketplace and tie
versioning to kotest releases by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6211">kotest/kotest#6211</a></li>
<li>spec tags cache by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6206">kotest/kotest#6206</a></li>
<li>junit testFinished improvements by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6205">kotest/kotest#6205</a></li>
<li>Add module-factory support to KoinExtension (<a
href="https://redirect.github.com/kotest/kotest/issues/6006">#6006</a>)
by <a href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in
<a
href="https://redirect.github.com/kotest/kotest/pull/6138">kotest/kotest#6138</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/stlpine"><code>@​stlpine</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6189">kotest/kotest#6189</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/6.2.3...v6.2.4">https://github.com/kotest/kotest/compare/6.2.3...v6.2.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="736a47b8ab"><code>736a47b</code></a>
Add module-factory support to KoinExtension (<a
href="https://redirect.github.com/kotest/kotest/issues/6006">#6006</a>)
(<a
href="https://redirect.github.com/kotest/kotest/issues/6138">#6138</a>)</li>
<li><a
href="cb91c7e167"><code>cb91c7e</code></a>
junit testFinished improvements (<a
href="https://redirect.github.com/kotest/kotest/issues/6205">#6205</a>)</li>
<li><a
href="5c898b4fbd"><code>5c898b4</code></a>
spec tags cache (<a
href="https://redirect.github.com/kotest/kotest/issues/6206">#6206</a>)</li>
<li><a
href="69fdc8dc9f"><code>69fdc8d</code></a>
make ai skill available to users via claude marketplace and tie
versioning to...</li>
<li><a
href="2403f4fbe3"><code>2403f4f</code></a>
fix kdoc on StrictThrowableHandling (<a
href="https://redirect.github.com/kotest/kotest/issues/6212">#6212</a>)</li>
<li><a
href="f96cf2a6fc"><code>f96cf2a</code></a>
introduce a TeamCity renderer that allows tree view and force it for our
IJ p...</li>
<li><a
href="05792718cb"><code>0579271</code></a>
sourceRef improvements (<a
href="https://redirect.github.com/kotest/kotest/issues/6203">#6203</a>)</li>
<li><a
href="da26f165ab"><code>da26f16</code></a>
spring extension improvements (<a
href="https://redirect.github.com/kotest/kotest/issues/6204">#6204</a>)</li>
<li><a
href="cc5cf2536f"><code>cc5cf25</code></a>
update docs to clarify that <code>copies</code> in
shouldContainExactCopies must be 1 or...</li>
<li><a
href="1d648f92eb"><code>1d648f9</code></a>
Update dependency io.github.classgraph:classgraph to v4.8.186 (<a
href="https://redirect.github.com/kotest/kotest/issues/6201">#6201</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/kotest/kotest/compare/6.2.3...6.2.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.kotest:kotest-assertions-json` from 6.2.3 to 6.2.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-json's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Alex/same time offset date time (<a
href="https://redirect.github.com/kotest/kotest/issues/6180">#6180</a>)
by <a href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6181">kotest/kotest#6181</a></li>
<li>Alex/range intersect details (<a
href="https://redirect.github.com/kotest/kotest/issues/6183">#6183</a>)
by <a href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6184">kotest/kotest#6184</a></li>
<li>Force commons-beanutils to 1.11.0 (CVE-2025-48734) by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6187">kotest/kotest#6187</a></li>
<li>Update kotlinx-datetime to 0.8.0 by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6186">kotest/kotest#6186</a></li>
<li>chore: route a few hardcoded dependency/plugin versions through the
version catalog by <a
href="https://github.com/stlpine"><code>@​stlpine</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6189">kotest/kotest#6189</a></li>
<li>check gradle wrapper gh action by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6192">kotest/kotest#6192</a></li>
<li>fix(assertions): state the containExactCopies lower bound as at
least 1 by <a
href="https://github.com/mvanhorn"><code>@​mvanhorn</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6193">kotest/kotest#6193</a></li>
<li>General improvements - framework by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6190">kotest/kotest#6190</a></li>
<li>General improvements - IJ plugin by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6191">kotest/kotest#6191</a></li>
<li>fix jump to source by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6195">kotest/kotest#6195</a></li>
<li>Update dependency net.bytebuddy:byte-buddy to v1.18.11 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6202">kotest/kotest#6202</a></li>
<li>Update dependency io.github.classgraph:classgraph to v4.8.186 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6201">kotest/kotest#6201</a></li>
<li>update docs to clarify that <code>copies</code> in
shouldContainExactCopies must be 1 or higher by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6207">kotest/kotest#6207</a></li>
<li>spring extension improvements by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6204">kotest/kotest#6204</a></li>
<li>sourceRef improvements by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6203">kotest/kotest#6203</a></li>
<li>introduce a TeamCity renderer that allows tree view and force it for
our legacy IJ plugin by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6210">kotest/kotest#6210</a></li>
<li>fix kdoc on StrictThrowableHandling by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6212">kotest/kotest#6212</a></li>
<li>make ai skill available to users via claude marketplace and tie
versioning to kotest releases by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6211">kotest/kotest#6211</a></li>
<li>spec tags cache by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6206">kotest/kotest#6206</a></li>
<li>junit testFinished improvements by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6205">kotest/kotest#6205</a></li>
<li>Add module-factory support to KoinExtension (<a
href="https://redirect.github.com/kotest/kotest/issues/6006">#6006</a>)
by <a href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in
<a
href="https://redirect.github.com/kotest/kotest/pull/6138">kotest/kotest#6138</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/stlpine"><code>@​stlpine</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6189">kotest/kotest#6189</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/6.2.3...v6.2.4">https://github.com/kotest/kotest/compare/6.2.3...v6.2.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="736a47b8ab"><code>736a47b</code></a>
Add module-factory support to KoinExtension (<a
href="https://redirect.github.com/kotest/kotest/issues/6006">#6006</a>)
(<a
href="https://redirect.github.com/kotest/kotest/issues/6138">#6138</a>)</li>
<li><a
href="cb91c7e167"><code>cb91c7e</code></a>
junit testFinished improvements (<a
href="https://redirect.github.com/kotest/kotest/issues/6205">#6205</a>)</li>
<li><a
href="5c898b4fbd"><code>5c898b4</code></a>
spec tags cache (<a
href="https://redirect.github.com/kotest/kotest/issues/6206">#6206</a>)</li>
<li><a
href="69fdc8dc9f"><code>69fdc8d</code></a>
make ai skill available to users via claude marketplace and tie
versioning to...</li>
<li><a
href="2403f4fbe3"><code>2403f4f</code></a>
fix kdoc on StrictThrowableHandling (<a
href="https://redirect.github.com/kotest/kotest/issues/6212">#6212</a>)</li>
<li><a
href="f96cf2a6fc"><code>f96cf2a</code></a>
introduce a TeamCity renderer that allows tree view and force it for our
IJ p...</li>
<li><a
href="05792718cb"><code>0579271</code></a>
sourceRef improvements (<a
href="https://redirect.github.com/kotest/kotest/issues/6203">#6203</a>)</li>
<li><a
href="da26f165ab"><code>da26f16</code></a>
spring extension improvements (<a
href="https://redirect.github.com/kotest/kotest/issues/6204">#6204</a>)</li>
<li><a
href="cc5cf2536f"><code>cc5cf25</code></a>
update docs to clarify that <code>copies</code> in
shouldContainExactCopies must be 1 or...</li>
<li><a
href="1d648f92eb"><code>1d648f9</code></a>
Update dependency io.github.classgraph:classgraph to v4.8.186 (<a
href="https://redirect.github.com/kotest/kotest/issues/6201">#6201</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/kotest/kotest/compare/6.2.3...6.2.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.kotest:kotest-assertions-ktor` from 6.2.3 to 6.2.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/kotest/kotest/releases">io.kotest:kotest-assertions-ktor's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Alex/same time offset date time (<a
href="https://redirect.github.com/kotest/kotest/issues/6180">#6180</a>)
by <a href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6181">kotest/kotest#6181</a></li>
<li>Alex/range intersect details (<a
href="https://redirect.github.com/kotest/kotest/issues/6183">#6183</a>)
by <a href="https://github.com/AlexCue987"><code>@​AlexCue987</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6184">kotest/kotest#6184</a></li>
<li>Force commons-beanutils to 1.11.0 (CVE-2025-48734) by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6187">kotest/kotest#6187</a></li>
<li>Update kotlinx-datetime to 0.8.0 by <a
href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6186">kotest/kotest#6186</a></li>
<li>chore: route a few hardcoded dependency/plugin versions through the
version catalog by <a
href="https://github.com/stlpine"><code>@​stlpine</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6189">kotest/kotest#6189</a></li>
<li>check gradle wrapper gh action by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6192">kotest/kotest#6192</a></li>
<li>fix(assertions): state the containExactCopies lower bound as at
least 1 by <a
href="https://github.com/mvanhorn"><code>@​mvanhorn</code></a> in <a
href="https://redirect.github.com/kotest/kotest/pull/6193">kotest/kotest#6193</a></li>
<li>General improvements - framework by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6190">kotest/kotest#6190</a></li>
<li>General improvements - IJ plugin by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6191">kotest/kotest#6191</a></li>
<li>fix jump to source by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6195">kotest/kotest#6195</a></li>
<li>Update dependency net.bytebuddy:byte-buddy to v1.18.11 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6202">kotest/kotest#6202</a></li>
<li>Update dependency io.github.classgraph:classgraph to v4.8.186 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/kotest/kotest/pull/6201">kotest/kotest#6201</a></li>
<li>update docs to clarify that <code>copies</code> in
shouldContainExactCopies must be 1 or higher by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6207">kotest/kotest#6207</a></li>
<li>spring extension improvements by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6204">kotest/kotest#6204</a></li>
<li>sourceRef improvements by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6203">kotest/kotest#6203</a></li>
<li>introduce a TeamCity renderer that allows tree view and force it for
our legacy IJ plugin by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6210">kotest/kotest#6210</a></li>
<li>fix kdoc on StrictThrowableHandling by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6212">kotest/kotest#6212</a></li>
<li>make ai skill available to users via claude marketplace and tie
versioning to kotest releases by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6211">kotest/kotest#6211</a></li>
<li>spec tags cache by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6206">kotest/kotest#6206</a></li>
<li>junit testFinished improvements by <a
href="https://github.com/alfonsoristorato"><code>@​alfonsoristorato</code></a>
in <a
href="https://redirect.github.com/kotest/kotest/pull/6205">kotest/kotest#6205</a></li>
<li>Add module-factory support to KoinExtension (<a
href="https://redirect.github.com/kotest/kotest/issues/6006">#6006</a>)
by <a href="https://github.com/sksamuel"><code>@​sksamuel</code></a> in
<a
href="https://redirect.github.com/kotest/kotest/pull/6138">kotest/kotest#6138</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/stlpine"><code>@​stlpine</code></a> made
their first contribution in <a
href="https://redirect.github.com/kotest/kotest/pull/6189">kotest/kotest#6189</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/kotest/kotest/compare/6.2.3...v6.2.4">https://github.com/kotest/kotest/compare/6.2.3...v6.2.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="736a47b8ab"><code>736a47b</code></a>
Add module-factory support to KoinExtension (<a
href="https://redirect.github.com/kotest/kotest/issues/6006">#6006</a>)
(<a
href="https://redirect.github.com/kotest/kotest/issues/6138">#6138</a>)</li>
<li><a
href="cb91c7e167"><code>cb91c7e</code></a>
junit testFinished improvements (<a
href="https://redirect.github.com/kotest/kotest/issues/6205">#6205</a>)</li>
<li><a
href="5c898b4fbd"><code>5c898b4</code></a>
spec tags cache (<a
href="https://redirect.github.com/kotest/kotest/issues/6206">#6206</a>)</li>
<li><a
href="69fdc8dc9f"><code>69fdc8d</code></a>
make ai skill available to users via claude marketplace and tie
versioning to...</li>
<li><a
href="2403f4fbe3"><code>2403f4f</code></a>
fix kdoc on StrictThrowableHandling (<a
href="https://redirect.github.com/kotest/kotest/issues/6212">#6212</a>)</li>
<li><a
href="f96cf2a6fc"><code>f96cf2a</code></a>
introduce a TeamCity renderer that allows tree view and force it for our
IJ p...</li>
<li><a
href="05792718cb"><code>0579271</code></a>
sourceRef improvements (<a
href="https://redirect.github.com/kotest/kotest/issues/6203">#6203</a>)</li>
<li><a
href="da26f165ab"><code>da26f16</code></a>
spring extension improvements (<a
href="https://redirect.github.com/kotest/kotest/issues/6204">#6204</a>)</li>
<li><a
href="cc5cf2536f"><code>cc5cf25</code></a>
update docs to clarify that <code>copies</code> in
shouldContainExactCopies must be 1 or...</li>
<li><a
href="1d648f92eb"><code>1d648f9</code></a>
Update dependency io.github.classgraph:classgraph to v4.8.186 (<a
href="https://redirect.github.com/kotest/kotest/issues/6201">#6201</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/kotest/kotest/compare/6.2.3...6.2.4">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-24 12:08:48 +02:00
dependabot[bot]
815a70e7e7
chore(deps): bump github/codeql-action from 4.37.6 to 4.37.7 in the all-actions group across 1 directory (#962)
Bumps the all-actions group with 1 update in the / directory:
[github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 4.37.6 to 4.37.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.37.7</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h2>4.37.7 - 13 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3">2.26.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4085">#4085</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ff2f1c621b"><code>ff2f1c6</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4093">#4093</a>
from github/update-v4.37.7-be7a3dbb8</li>
<li><a
href="951a133f96"><code>951a133</code></a>
Update changelog for v4.37.7</li>
<li><a
href="be7a3dbb81"><code>be7a3db</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4087">#4087</a>
from github/dependabot/npm_and_yarn/npm-minor-0aa561...</li>
<li><a
href="9310334b11"><code>9310334</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4086">#4086</a>
from github/mbg/thread-action-state-to-codeql</li>
<li><a
href="b4d8a54218"><code>b4d8a54</code></a>
Rebuild</li>
<li><a
href="ab5db2519c"><code>ab5db25</code></a>
Bump the npm-minor group across 1 directory with 8 updates</li>
<li><a
href="38055a3c3c"><code>38055a3</code></a>
Drop <code>logger</code> from <code>databaseInitCluster</code> in
interface</li>
<li><a
href="1f87aed5e6"><code>1f87aed</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4085">#4085</a>
from github/update-bundle/codeql-bundle-v2.26.3</li>
<li><a
href="dc1b98ad1c"><code>dc1b98a</code></a>
Make <code>logger</code> available to <code>getCodeQLForCmd</code></li>
<li><a
href="6f0220ee37"><code>6f0220e</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4084">#4084</a>
from github/navntoft/bump-undici</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/v4.37.6...v4.37.7">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-20 15:54:20 +02:00
dependabot[bot]
d67b0b7804
chore(deps): bump tsx from 4.23.11 to 4.23.12 in /integration-test/src/jvmTest/typescript in the all-dependencies group (#963)
Bumps the all-dependencies group in
/integration-test/src/jvmTest/typescript with 1 update:
[tsx](https://github.com/privatenumber/tsx).

Updates `tsx` from 4.23.11 to 4.23.12
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/privatenumber/tsx/releases">tsx's
releases</a>.</em></p>
<blockquote>
<h2>v4.23.12</h2>
<h2><a
href="https://github.com/privatenumber/tsx/compare/v4.23.11...v4.23.12">4.23.12</a>
(2026-08-10)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>shim <code>import.meta</code> when tokens are split by comments or
newlines (<a
href="https://redirect.github.com/privatenumber/tsx/issues/829">#829</a>)
(<a
href="ed9d33046a">ed9d330</a>),
closes <a
href="https://redirect.github.com/privatenumber/tsx/issues/828">#828</a></li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.23.12"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ed9d33046a"><code>ed9d330</code></a>
fix: shim <code>import.meta</code> when tokens are split by comments or
newlines (<a
href="https://redirect.github.com/privatenumber/tsx/issues/829">#829</a>)</li>
<li><a
href="651f5bec70"><code>651f5be</code></a>
test: cover CommonJS TypeScript import.meta paths</li>
<li>See full diff in <a
href="https://github.com/privatenumber/tsx/compare/v4.23.11...v4.23.12">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tsx&package-manager=npm_and_yarn&previous-version=4.23.11&new-version=4.23.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-20 13:43:30 +02:00
dependabot[bot]
d9b42aed68
chore(deps): bump the all-actions group across 1 directory with 2 updates (#952)
Bumps the all-actions group with 2 updates in the / directory:
[gradle/actions](https://github.com/gradle/actions) and
[github/codeql-action](https://github.com/github/codeql-action).

Updates `gradle/actions` from 6.2.0 to 6.3.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/actions/releases">gradle/actions's
releases</a>.</em></p>
<blockquote>
<h2>v6.3.0</h2>
<h2>Highlights</h2>
<h3>Enhanced Caching: Windows fixes and a cache-protocol bump</h3>
<p>This release updates <code>gradle-actions-caching</code> to
<strong>v1.0.0</strong> (up from v0.7.0), which fixes two significant
caching defects, both most visible on Windows:</p>
<ul>
<li>
<p><strong>Cache entries failed to store at all on Windows.</strong>.
Every entry failed
with <code>Path Validation Error: Path(s) specified in the action for
caching do(es) not exist</code>, even though the Gradle User Home was
fully intact. Nothing was stored, so
every downstream job ran against an empty Gradle User Home. The cause
was a nested,
unpatched copy of <code>@actions/glob</code> combined with a silently
swallowed <code>require()</code> in
the bundle, which left Windows path separators unnormalized.</p>
</li>
<li>
<p><strong>Cache cleanup deleted instrumented jars that were in
use.</strong> A bug in key
hashing for paths shorter than 64 characters made cleanup judge freshly
created
<code>caches/jars-9</code> entries as unused and remove them, so the
<code>instrumented-jars</code> entry
was never saved and every job re-instrumented its classpaths.</p>
<p>Also included: cache entry names are now consistent between the save
and restore
reports — restore previously fell back to showing the raw glob pattern
(e.g.
<code>/home/runner/.gradle/caches/modules-*/files-*/*/*/*/*/</code>)
instead of <code>dependencies</code>.</p>
</li>
</ul>
<blockquote>
<p>[!IMPORTANT]
<strong>Existing cache entries are invalidated by this release.</strong>
The cache protocol
version was bumped to <code>v2</code>, so the first run after upgrading
will be a cache miss
and will repopulate the cache. No configuration changes are
required.</p>
</blockquote>
<h3>Basic caching warns instead of failing silently</h3>
<p>The basic (open-source) caching provider now emits a warning and
reports
<code>(Entry not saved: save failed)</code> in the Job Summary when a
cache save fails, rather
than reporting success (<a
href="https://redirect.github.com/gradle/actions/issues/1028">#1028</a>).</p>
<h3>Dependency submission works with Isolated Projects</h3>
<p><code>dependency-submission</code> now disables Isolated Projects via
a promoted property, so
dependency graph generation works on builds that enable it (<a
href="https://redirect.github.com/gradle/actions/issues/1025">#1025</a>).
Thanks to <a
href="https://github.com/reinsch82"><code>@​reinsch82</code></a> for the
contribution.</p>
<h3>Updated defaults</h3>
<ul>
<li>Injected Develocity Gradle plugin: <strong>4.4.2 →
4.5.0</strong></li>
<li>36 new known-good wrapper checksums added for
<code>wrapper-validation</code></li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Render configuration-cache status in the caching Job Summary by <a
href="https://github.com/bigdaz"><code>@​bigdaz</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/989">gradle/actions#989</a></li>
<li>Update gradle-actions-caching library to v0.8.0 by <a
href="https://github.com/bot-githubaction"><code>@​bot-githubaction</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/993">gradle/actions#993</a></li>
<li>Support experimental project-entry caching (configuration-cache +
build-logic) by <a
href="https://github.com/bigdaz"><code>@​bigdaz</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/994">gradle/actions#994</a></li>
<li>Update gradle-actions-caching library to v0.9.0 by <a
href="https://github.com/bot-githubaction"><code>@​bot-githubaction</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/996">gradle/actions#996</a></li>
<li>Disable Isolated Projects via promoted property in
dependency-submission by <a
href="https://github.com/reinsch82"><code>@​reinsch82</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/1025">gradle/actions#1025</a></li>
<li>Add Windows coverage for caching via a new smoke-test suite by <a
href="https://github.com/bigdaz"><code>@​bigdaz</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/1027">gradle/actions#1027</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9c971963be"><code>9c97196</code></a>
Bump the github-actions group across 2 directories with 9 updates (<a
href="https://redirect.github.com/gradle/actions/issues/1024">#1024</a>)</li>
<li><a
href="760e4a476b"><code>760e4a4</code></a>
Bump the npm-dependencies group across 1 directory with 2 updates (<a
href="https://redirect.github.com/gradle/actions/issues/1037">#1037</a>)</li>
<li><a
href="73e4c4222b"><code>73e4c42</code></a>
Update gradle-actions-caching library to v1.0.0 (<a
href="https://redirect.github.com/gradle/actions/issues/1029">#1029</a>)</li>
<li><a
href="a9d14388b4"><code>a9d1438</code></a>
Add dependabot ignore rules for TypeScript 7.x and
<code>@​types/node</code> 25.x/26.x</li>
<li><a
href="68f37005d7"><code>68f3700</code></a>
[bot] Update dist directory</li>
<li><a
href="5971332a8f"><code>5971332</code></a>
Bump Gradle Wrapper to 9.6.1, wrapper checksums, and Develocity plugin
to 4.5...</li>
<li><a
href="b5bc804016"><code>b5bc804</code></a>
[bot] Update dist directory</li>
<li><a
href="dcbab4e919"><code>dcbab4e</code></a>
Bump npm-dependencies group with TypeScript 6.0.3,
<code>@​types/node</code> 24.x, and secu...</li>
<li><a
href="ca8d95717f"><code>ca8d957</code></a>
Move non-smoke restore-gradle-home tests back to the integ-test suite
(<a
href="https://redirect.github.com/gradle/actions/issues/1032">#1032</a>)</li>
<li><a
href="4318659b28"><code>4318659</code></a>
[bot] Update dist directory</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/actions/compare/v6.2.0...v6.3.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action` from 4.37.4 to 4.37.6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.37.6</h2>
<ul>
<li>Changed the default filepath for the new remote file address format
that was introduced in CodeQL Action 4.37.0 / 3.37.0 to
<code>.github/codeql-config.yml</code> to align it with the suggested
path that is used elsewhere. <a
href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li>
</ul>
<h2>v4.37.5</h2>
<ul>
<li>Fixed a bug where a network error while streaming the download of
the CodeQL bundle could terminate the <code>init</code> Action instead
of falling back to downloading the bundle before extracting it. <a
href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h2>4.37.6 - 04 Aug 2026</h2>
<ul>
<li>Changed the default filepath for the new remote file address format
that was introduced in CodeQL Action 4.37.0 / 3.37.0 to
<code>.github/codeql-config.yml</code> to align it with the suggested
path that is used elsewhere. <a
href="https://redirect.github.com/github/codeql-action/pull/4070">#4070</a></li>
</ul>
<h2>4.37.5 - 03 Aug 2026</h2>
<ul>
<li>Fixed a bug where a network error while streaming the download of
the CodeQL bundle could terminate the <code>init</code> Action instead
of falling back to downloading the bundle before extracting it. <a
href="https://redirect.github.com/github/codeql-action/pull/4061">#4061</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5595ccaf91"><code>5595cca</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4071">#4071</a>
from github/update-v4.37.6-6a9359a1b</li>
<li><a
href="ec9c75796a"><code>ec9c757</code></a>
Add change note for PR 4070</li>
<li><a
href="45c8742e17"><code>45c8742</code></a>
Update changelog for v4.37.6</li>
<li><a
href="6a9359a1bd"><code>6a9359a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4070">#4070</a>
from github/mbg/remote-address/change-file-default</li>
<li><a
href="065cdc0394"><code>065cdc0</code></a>
Change <code>DEFAULT_CONFIG_FILE_NAME</code></li>
<li><a
href="f99dd5aeee"><code>f99dd5a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4066">#4066</a>
from github/dependabot/npm_and_yarn/js-yaml-5.2.2</li>
<li><a
href="1804b211a3"><code>1804b21</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4068">#4068</a>
from github/mergeback/v4.37.5-to-main-d1ba80a1</li>
<li><a
href="3020a2f462"><code>3020a2f</code></a>
Rebuild</li>
<li><a
href="93c3a5a40b"><code>93c3a5a</code></a>
Update changelog and version after v4.37.5</li>
<li><a
href="d1ba80a13d"><code>d1ba80a</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4067">#4067</a>
from github/update-v4.37.5-1cd4d01d5</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/v4.37.4...v4.37.6">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 12:31:41 +02:00
dependabot[bot]
450f9e082c
chore(deps): bump the all-dependencies group across 1 directory with 2 updates (#954)
Bumps the all-dependencies group with 2 updates in the
/integration-test/src/jvmTest/typescript directory:
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
and [tsx](https://github.com/privatenumber/tsx).

Updates `@types/node` from 26.1.2 to 26.2.0
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />

Updates `tsx` from 4.23.4 to 4.23.11
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/privatenumber/tsx/releases">tsx's
releases</a>.</em></p>
<blockquote>
<h2>v4.23.11</h2>
<h2><a
href="https://github.com/privatenumber/tsx/compare/v4.23.10...v4.23.11">4.23.11</a>
(2026-08-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>preserve async ESM require fallback (<a
href="55cbecef8e">55cbece</a>)</li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.23.11"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
<h2>v4.23.10</h2>
<h2><a
href="https://github.com/privatenumber/tsx/compare/v4.23.9...v4.23.10">4.23.10</a>
(2026-08-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>support nyc coverage discovery (<a
href="https://redirect.github.com/privatenumber/tsx/issues/710">#710</a>)
(<a
href="ec1bcd5f71">ec1bcd5</a>)</li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.23.10"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
<h2>v4.23.9</h2>
<h2><a
href="https://github.com/privatenumber/tsx/compare/v4.23.8...v4.23.9">4.23.9</a>
(2026-08-06)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>map Node test locations (<a
href="2f55884195">2f55884</a>)</li>
<li>support data URLs in tsImport (<a
href="b94f46f6b6">b94f46f</a>)</li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.23.9"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
<h2>v4.23.8</h2>
<h2><a
href="https://github.com/privatenumber/tsx/compare/v4.23.7...v4.23.8">4.23.8</a>
(2026-08-05)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>preserve package subpath resolution (<a
href="be1315e3f3">be1315e</a>)</li>
<li>preserve typeless ESM dependency exports (<a
href="70dfc5e3db">70dfc5e</a>)</li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.23.8"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="bd3bc6448e"><code>bd3bc64</code></a>
test: cover CommonJS loader source fallback</li>
<li><a
href="55cbecef8e"><code>55cbece</code></a>
fix: preserve async ESM require fallback</li>
<li><a
href="6c5ba85f7a"><code>6c5ba85</code></a>
docs: document CommonJS default interop</li>
<li><a
href="ec1bcd5f71"><code>ec1bcd5</code></a>
fix: support nyc coverage discovery (<a
href="https://redirect.github.com/privatenumber/tsx/issues/710">#710</a>)</li>
<li><a
href="b6e5b48a7b"><code>b6e5b48</code></a>
docs: clarify CommonJS default imports</li>
<li><a
href="2f55884195"><code>2f55884</code></a>
fix: map Node test locations</li>
<li><a
href="de935d588b"><code>de935d5</code></a>
docs: document Node source-map stack formatting</li>
<li><a
href="b94f46f6b6"><code>b94f46f</code></a>
fix: support data URLs in tsImport</li>
<li><a
href="be1315e3f3"><code>be1315e</code></a>
fix: preserve package subpath resolution</li>
<li><a
href="5efba41e14"><code>5efba41</code></a>
docs: organize transform backend research</li>
<li>Additional commits viewable in <a
href="https://github.com/privatenumber/tsx/compare/v4.23.4...v4.23.11">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 12:01:50 +02:00
dependabot[bot]
de2a0aafd6
chore(deps): bump dev.detekt:detekt-gradle-plugin from 2.0.0-alpha.5 to 2.0.0-alpha.6 (#950)
Bumps
[dev.detekt:detekt-gradle-plugin](https://github.com/detekt/detekt) from
2.0.0-alpha.5 to 2.0.0-alpha.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/detekt/detekt/releases">dev.detekt:detekt-gradle-plugin's
releases</a>.</em></p>
<blockquote>
<h2>v2.0.0-alpha.6</h2>
<h2>2.0.0-alpha.6 - 2026-08-04</h2>
<p>This is an alpha release of Detekt 2.0.0. It's built against Kotlin
2.4.10, Gradle 9.6.1, AGP 9.3.1 and is tested against JDK 25.</p>
<h3>Notable Changes</h3>
<ul>
<li><code>detekt-rules-ktlint-wrapper</code> now targets JVM 17, in
preparation for the next ktlint major release which requires JVM 17+,
the rest of detekt still targets JVM 8+ - <a
href="https://redirect.github.com/detekt/detekt/pull/9453">#9453</a></li>
</ul>
<h3>Changelog</h3>
<ul>
<li>feat(rules): add ignoreSealedClasses option to
AbstractClassCanBeInterface - <a
href="https://redirect.github.com/detekt/detekt/pull/9557">#9557</a></li>
<li>docs: drop stale Android compile classpath warning note - <a
href="https://redirect.github.com/detekt/detekt/pull/9550">#9550</a></li>
<li>Recommend to use Locale.ROOT instead of Locale.US - <a
href="https://redirect.github.com/detekt/detekt/pull/9532">#9532</a></li>
<li>Recognize params swallowed by KDoc lexer in OutdatedDocumentation -
<a
href="https://redirect.github.com/detekt/detekt/pull/9529">#9529</a></li>
<li>Fix UnusedPrivateProperty false negative for constructor properties
- <a
href="https://redirect.github.com/detekt/detekt/pull/9491">#9491</a></li>
<li>Fix MissingSuperCall false positive when annotation is in
grandparent - <a
href="https://redirect.github.com/detekt/detekt/pull/9469">#9469</a></li>
<li>Fix UseDataClass false positive for properties with a custom
accessor - <a
href="https://redirect.github.com/detekt/detekt/pull/9462">#9462</a></li>
<li>Fix a potential bug on <code>Config.getListOrDefault</code> - <a
href="https://redirect.github.com/detekt/detekt/pull/9461">#9461</a></li>
<li>Fix <code>UnusedPrivateFunction</code> false positive for overloaded
private extension functions with a Java (or generated) receiver type -
<a
href="https://redirect.github.com/detekt/detekt/pull/9450">#9450</a></li>
<li>Fix <code>CanBeNonNullable</code> false negative on local variables
- <a
href="https://redirect.github.com/detekt/detekt/pull/9432">#9432</a></li>
<li>Fix CognitiveComplexMethod false positive for object literal methods
- <a
href="https://redirect.github.com/detekt/detekt/pull/9431">#9431</a></li>
<li>Fix <code>ReturnCount</code>/<code>ThrowsCount</code> false positive
where a guard clause following a local variable declaration was still
counted (with <code>excludeGuardClauses</code> enabled) - <a
href="https://redirect.github.com/detekt/detekt/pull/9424">#9424</a></li>
<li>Extend <code>PropertyUsedBeforeDeclaration</code> to follow private
init calls - <a
href="https://redirect.github.com/detekt/detekt/pull/9334">#9334</a></li>
<li>Add configuration ignoredFullyQualifiedNames to
UnnecessaryFullyQualifiedName rule - <a
href="https://redirect.github.com/detekt/detekt/pull/9301">#9301</a></li>
<li>Expose multiline parameter in <code>ClassSignature</code> - <a
href="https://redirect.github.com/detekt/detekt/pull/9084">#9084</a></li>
</ul>
<h3>Dependency Updates</h3>
<ul>
<li>Update agp to v9.3.1 - <a
href="https://redirect.github.com/detekt/detekt/pull/9538">#9538</a></li>
<li>Update kotlin monorepo to v2.4.10 - <a
href="https://redirect.github.com/detekt/detekt/pull/9518">#9518</a></li>
<li>Update Gradle to v9.6.1 - <a
href="https://redirect.github.com/detekt/detekt/pull/9444">#9444</a></li>
<li>Update Gradle to v9.6.0 - <a
href="https://redirect.github.com/detekt/detekt/pull/9420">#9420</a></li>
</ul>
<h3>Housekeeping &amp; Refactorings</h3>
<ul>
<li>Reduce scope of <code>@Suppress(&quot;UNCHECKED_CAST&quot;)</code> -
<a
href="https://redirect.github.com/detekt/detekt/pull/9459">#9459</a></li>
<li>Remove irrelevant test for YamlConfig - <a
href="https://redirect.github.com/detekt/detekt/pull/9457">#9457</a></li>
<li>fix: handle trailing commas in <a
href="https://github.com/Configuration"><code>@​Configuration</code></a>
annotation parsing in JS generator - <a
href="https://redirect.github.com/detekt/detekt/pull/9447">#9447</a></li>
<li>Production code should not depend on fixtures - <a
href="https://redirect.github.com/detekt/detekt/pull/9439">#9439</a></li>
</ul>
<h3>Contributors</h3>
<p>We would like to thank the following contributors that made this
release possible: <a
href="https://github.com/3flex"><code>@​3flex</code></a>, <a
href="https://github.com/BraisGabin"><code>@​BraisGabin</code></a>, <a
href="https://github.com/ChristophyBarth"><code>@​ChristophyBarth</code></a>,
<a
href="https://github.com/FilippoVigani"><code>@​FilippoVigani</code></a>,
<a href="https://github.com/Phoenix1808"><code>@​Phoenix1808</code></a>,
<a
href="https://github.com/ShubhamWorks02"><code>@​ShubhamWorks02</code></a>,
<a href="https://github.com/cortinico"><code>@​cortinico</code></a>, <a
href="https://github.com/e5l"><code>@​e5l</code></a>, <a
href="https://github.com/eyupcanakman"><code>@​eyupcanakman</code></a>,
<a href="https://github.com/iuryeng"><code>@​iuryeng</code></a>, <a
href="https://github.com/loganrosen"><code>@​loganrosen</code></a>, <a
href="https://github.com/marpalat"><code>@​marpalat</code></a>, <a
href="https://github.com/roian6"><code>@​roian6</code></a>, <a
href="https://github.com/sahilpatel2521"><code>@​sahilpatel2521</code></a>,
<a
href="https://github.com/tonytonycoder11"><code>@​tonytonycoder11</code></a></p>
<p>See all issues at: <a
href="https://github.com/detekt/detekt/milestone/42">2.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="401c64bf23"><code>401c64b</code></a>
Update github/codeql-action digest to 5595cca (<a
href="https://redirect.github.com/detekt/detekt/issues/9569">#9569</a>)</li>
<li><a
href="7d92d70b25"><code>7d92d70</code></a>
Migrate to the OSS Community Develocity Instance (<a
href="https://redirect.github.com/detekt/detekt/issues/9549">#9549</a>)</li>
<li><a
href="7212708afb"><code>7212708</code></a>
Update gradle/actions digest to 9c97196 (<a
href="https://redirect.github.com/detekt/detekt/issues/9568">#9568</a>)</li>
<li><a
href="529f2bae7d"><code>529f2ba</code></a>
Update github/codeql-action digest to d1ba80a (<a
href="https://redirect.github.com/detekt/detekt/issues/9567">#9567</a>)</li>
<li><a
href="6df1cf12a5"><code>6df1cf1</code></a>
feat(rules): add ignoreSealedClasses option to
AbstractClassCanBeInterface (#...</li>
<li><a
href="6fa04a63c8"><code>6fa04a6</code></a>
Update actions/setup-java digest to b6effb0 (<a
href="https://redirect.github.com/detekt/detekt/issues/9560">#9560</a>)</li>
<li><a
href="d744c2fdbe"><code>d744c2f</code></a>
Update plugin com.gradle.common-custom-user-data-gradle-plugin to v2.8.0
(<a
href="https://redirect.github.com/detekt/detekt/issues/9561">#9561</a>)</li>
<li><a
href="688c42bb12"><code>688c42b</code></a>
Update github/codeql-action digest to f205ea1 (<a
href="https://redirect.github.com/detekt/detekt/issues/9559">#9559</a>)</li>
<li><a
href="a2f4740552"><code>a2f4740</code></a>
fix(doc): remove mention of fixed issue (<a
href="https://redirect.github.com/detekt/detekt/issues/9556">#9556</a>)</li>
<li><a
href="1ac699e3ec"><code>1ac699e</code></a>
Fix UnusedPrivateProperty false negative (<a
href="https://redirect.github.com/detekt/detekt/issues/9491">#9491</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/detekt/detekt/compare/v2.0.0-alpha.5...v2.0.0-alpha.6">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 11:28:03 +02:00
dependabot[bot]
d6235597e0
chore(deps): bump gradle-wrapper from 9.6.1 to 9.7.0 (#949)
Bumps [gradle-wrapper](https://github.com/gradle/gradle) from 9.6.1 to
9.7.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.0</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.0/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.0 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.0 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.0/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.0/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
<h2>9.7.0 RC3</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0 RC3.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3defbfc59d"><code>3defbfc</code></a>
make DistributionIntegrationSpec more permissive for releases (<a
href="https://redirect.github.com/gradle/gradle/issues/38766">#38766</a>)</li>
<li><a
href="f176043d64"><code>f176043</code></a>
make DistributionIntegrationSpec more permissive for releases</li>
<li><a
href="b0828dad52"><code>b0828da</code></a>
Prepare release notes for Gradle 9.7.0GA (<a
href="https://redirect.github.com/gradle/gradle/issues/38756">#38756</a>)</li>
<li><a
href="064b6d6161"><code>064b6d6</code></a>
cleanup</li>
<li><a
href="dfe7bdcc46"><code>dfe7bdc</code></a>
add new training to release notes</li>
<li><a
href="756196837a"><code>7561968</code></a>
add release notes for 37801</li>
<li><a
href="68a1f351d3"><code>68a1f35</code></a>
cherrypick 38367 to release</li>
<li><a
href="a462c95ca9"><code>a462c95</code></a>
Rebalance AllVersionsCrossVersion buckets for agents without
TestDistribution...</li>
<li><a
href="820e2b14ad"><code>820e2b1</code></a>
Update Gradle wrapper to version 9.7.0-rc-3 (<a
href="https://redirect.github.com/gradle/gradle/issues/38743">#38743</a>)</li>
<li><a
href="75ea3d7671"><code>75ea3d7</code></a>
Update Gradle wrapper to version 9.7.0-rc-3</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.6.1...v9.7.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 00:12:50 +02:00
dependabot[bot]
5ca9955500
chore(deps): bump io.ktor:ktor-bom from 3.5.1 to 3.5.2 in /samples/weather-stdio-server (#948)
Bumps [io.ktor:ktor-bom](https://github.com/ktorio/ktor) from 3.5.1 to
3.5.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/releases">io.ktor:ktor-bom's
releases</a>.</em></p>
<blockquote>
<h2>3.5.2</h2>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/blob/main/CHANGELOG.md">io.ktor:ktor-bom's
changelog</a>.</em></p>
<blockquote>
<h1>3.5.2</h1>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="01c469a85f"><code>01c469a</code></a>
Release 3.5.2 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5781">#5781</a>)</li>
<li><a
href="c965a0ce85"><code>c965a0c</code></a>
KTOR-9741 Prevent CIO request handler leak (<a
href="https://redirect.github.com/ktorio/ktor/issues/5783">#5783</a>)</li>
<li><a
href="74df4585b8"><code>74df458</code></a>
chore: fix some comments to improve readability</li>
<li><a
href="2672567708"><code>2672567</code></a>
[KTOR-9704] Optimized encoding flow for UTF-8 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5743">#5743</a>)</li>
<li><a
href="d5680edbe6"><code>d5680ed</code></a>
KTOR-5391: Document ECDSA certificate limitation for client
authentication (#...</li>
<li><a
href="9b0f356877"><code>9b0f356</code></a>
<code>something::javaClass.name</code> is not the name of the class of
something but `&quot;j...</li>
<li><a
href="58256cd084"><code>58256cd</code></a>
KTOR-9743 Clarify readLine documentation</li>
<li><a
href="088bd60702"><code>088bd60</code></a>
KTOR-9679 Fix regressions caused by adding buffering</li>
<li><a
href="167176a8d9"><code>167176a</code></a>
KTOR-9588 Do not send Content-Length: 0 for body-less GET requests (<a
href="https://redirect.github.com/ktorio/ktor/issues/5620">#5620</a>)</li>
<li><a
href="7fb0844702"><code>7fb0844</code></a>
KTOR-9585 Fix schema title trimming</li>
<li>Additional commits viewable in <a
href="https://github.com/ktorio/ktor/compare/3.5.1...3.5.2">compare
view</a></li>
</ul>
</details>
<br />

<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>

| Dependency Name | Ignore Conditions |
| --- | --- |
| io.ktor:ktor-bom | [>= 3.4.a, < 3.5] |
</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 17:53:45 +02:00
dependabot[bot]
9482283aa3
chore(deps): bump io.ktor:ktor-bom from 3.5.1 to 3.5.2 in /samples/simple-streamable-server (#947)
Bumps [io.ktor:ktor-bom](https://github.com/ktorio/ktor) from 3.5.1 to
3.5.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/releases">io.ktor:ktor-bom's
releases</a>.</em></p>
<blockquote>
<h2>3.5.2</h2>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/blob/main/CHANGELOG.md">io.ktor:ktor-bom's
changelog</a>.</em></p>
<blockquote>
<h1>3.5.2</h1>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="01c469a85f"><code>01c469a</code></a>
Release 3.5.2 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5781">#5781</a>)</li>
<li><a
href="c965a0ce85"><code>c965a0c</code></a>
KTOR-9741 Prevent CIO request handler leak (<a
href="https://redirect.github.com/ktorio/ktor/issues/5783">#5783</a>)</li>
<li><a
href="74df4585b8"><code>74df458</code></a>
chore: fix some comments to improve readability</li>
<li><a
href="2672567708"><code>2672567</code></a>
[KTOR-9704] Optimized encoding flow for UTF-8 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5743">#5743</a>)</li>
<li><a
href="d5680edbe6"><code>d5680ed</code></a>
KTOR-5391: Document ECDSA certificate limitation for client
authentication (#...</li>
<li><a
href="9b0f356877"><code>9b0f356</code></a>
<code>something::javaClass.name</code> is not the name of the class of
something but `&quot;j...</li>
<li><a
href="58256cd084"><code>58256cd</code></a>
KTOR-9743 Clarify readLine documentation</li>
<li><a
href="088bd60702"><code>088bd60</code></a>
KTOR-9679 Fix regressions caused by adding buffering</li>
<li><a
href="167176a8d9"><code>167176a</code></a>
KTOR-9588 Do not send Content-Length: 0 for body-less GET requests (<a
href="https://redirect.github.com/ktorio/ktor/issues/5620">#5620</a>)</li>
<li><a
href="7fb0844702"><code>7fb0844</code></a>
KTOR-9585 Fix schema title trimming</li>
<li>Additional commits viewable in <a
href="https://github.com/ktorio/ktor/compare/3.5.1...3.5.2">compare
view</a></li>
</ul>
</details>
<br />

<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>

| Dependency Name | Ignore Conditions |
| --- | --- |
| io.ktor:ktor-bom | [>= 3.4.a, < 3.5] |
</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 17:03:14 +02:00
dependabot[bot]
df34697505
chore(deps): bump io.ktor:ktor-bom from 3.5.1 to 3.5.2 in /samples/kotlinlang-mcp-server (#946)
Bumps [io.ktor:ktor-bom](https://github.com/ktorio/ktor) from 3.5.1 to
3.5.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/releases">io.ktor:ktor-bom's
releases</a>.</em></p>
<blockquote>
<h2>3.5.2</h2>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/blob/main/CHANGELOG.md">io.ktor:ktor-bom's
changelog</a>.</em></p>
<blockquote>
<h1>3.5.2</h1>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="01c469a85f"><code>01c469a</code></a>
Release 3.5.2 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5781">#5781</a>)</li>
<li><a
href="c965a0ce85"><code>c965a0c</code></a>
KTOR-9741 Prevent CIO request handler leak (<a
href="https://redirect.github.com/ktorio/ktor/issues/5783">#5783</a>)</li>
<li><a
href="74df4585b8"><code>74df458</code></a>
chore: fix some comments to improve readability</li>
<li><a
href="2672567708"><code>2672567</code></a>
[KTOR-9704] Optimized encoding flow for UTF-8 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5743">#5743</a>)</li>
<li><a
href="d5680edbe6"><code>d5680ed</code></a>
KTOR-5391: Document ECDSA certificate limitation for client
authentication (#...</li>
<li><a
href="9b0f356877"><code>9b0f356</code></a>
<code>something::javaClass.name</code> is not the name of the class of
something but `&quot;j...</li>
<li><a
href="58256cd084"><code>58256cd</code></a>
KTOR-9743 Clarify readLine documentation</li>
<li><a
href="088bd60702"><code>088bd60</code></a>
KTOR-9679 Fix regressions caused by adding buffering</li>
<li><a
href="167176a8d9"><code>167176a</code></a>
KTOR-9588 Do not send Content-Length: 0 for body-less GET requests (<a
href="https://redirect.github.com/ktorio/ktor/issues/5620">#5620</a>)</li>
<li><a
href="7fb0844702"><code>7fb0844</code></a>
KTOR-9585 Fix schema title trimming</li>
<li>Additional commits viewable in <a
href="https://github.com/ktorio/ktor/compare/3.5.1...3.5.2">compare
view</a></li>
</ul>
</details>
<br />

<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>

| Dependency Name | Ignore Conditions |
| --- | --- |
| io.ktor:ktor-bom | [>= 3.4.a, < 3.5] |
</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 16:43:19 +02:00
dependabot[bot]
05c5953a18
chore(deps): bump io.ktor:ktor-bom from 3.5.1 to 3.5.2 in /samples/kotlin-mcp-server (#945)
Bumps [io.ktor:ktor-bom](https://github.com/ktorio/ktor) from 3.5.1 to
3.5.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/releases">io.ktor:ktor-bom's
releases</a>.</em></p>
<blockquote>
<h2>3.5.2</h2>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/blob/main/CHANGELOG.md">io.ktor:ktor-bom's
changelog</a>.</em></p>
<blockquote>
<h1>3.5.2</h1>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="01c469a85f"><code>01c469a</code></a>
Release 3.5.2 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5781">#5781</a>)</li>
<li><a
href="c965a0ce85"><code>c965a0c</code></a>
KTOR-9741 Prevent CIO request handler leak (<a
href="https://redirect.github.com/ktorio/ktor/issues/5783">#5783</a>)</li>
<li><a
href="74df4585b8"><code>74df458</code></a>
chore: fix some comments to improve readability</li>
<li><a
href="2672567708"><code>2672567</code></a>
[KTOR-9704] Optimized encoding flow for UTF-8 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5743">#5743</a>)</li>
<li><a
href="d5680edbe6"><code>d5680ed</code></a>
KTOR-5391: Document ECDSA certificate limitation for client
authentication (#...</li>
<li><a
href="9b0f356877"><code>9b0f356</code></a>
<code>something::javaClass.name</code> is not the name of the class of
something but `&quot;j...</li>
<li><a
href="58256cd084"><code>58256cd</code></a>
KTOR-9743 Clarify readLine documentation</li>
<li><a
href="088bd60702"><code>088bd60</code></a>
KTOR-9679 Fix regressions caused by adding buffering</li>
<li><a
href="167176a8d9"><code>167176a</code></a>
KTOR-9588 Do not send Content-Length: 0 for body-less GET requests (<a
href="https://redirect.github.com/ktorio/ktor/issues/5620">#5620</a>)</li>
<li><a
href="7fb0844702"><code>7fb0844</code></a>
KTOR-9585 Fix schema title trimming</li>
<li>Additional commits viewable in <a
href="https://github.com/ktorio/ktor/compare/3.5.1...3.5.2">compare
view</a></li>
</ul>
</details>
<br />

<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>

| Dependency Name | Ignore Conditions |
| --- | --- |
| io.ktor:ktor-bom | [>= 3.4.a, < 3.5] |
</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 16:11:51 +02:00
dependabot[bot]
ffec8947d3
chore(deps): bump io.ktor:ktor-bom from 3.5.1 to 3.5.2 in /samples/kotlin-mcp-client (#944)
Bumps [io.ktor:ktor-bom](https://github.com/ktorio/ktor) from 3.5.1 to
3.5.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/releases">io.ktor:ktor-bom's
releases</a>.</em></p>
<blockquote>
<h2>3.5.2</h2>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/blob/main/CHANGELOG.md">io.ktor:ktor-bom's
changelog</a>.</em></p>
<blockquote>
<h1>3.5.2</h1>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="01c469a85f"><code>01c469a</code></a>
Release 3.5.2 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5781">#5781</a>)</li>
<li><a
href="c965a0ce85"><code>c965a0c</code></a>
KTOR-9741 Prevent CIO request handler leak (<a
href="https://redirect.github.com/ktorio/ktor/issues/5783">#5783</a>)</li>
<li><a
href="74df4585b8"><code>74df458</code></a>
chore: fix some comments to improve readability</li>
<li><a
href="2672567708"><code>2672567</code></a>
[KTOR-9704] Optimized encoding flow for UTF-8 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5743">#5743</a>)</li>
<li><a
href="d5680edbe6"><code>d5680ed</code></a>
KTOR-5391: Document ECDSA certificate limitation for client
authentication (#...</li>
<li><a
href="9b0f356877"><code>9b0f356</code></a>
<code>something::javaClass.name</code> is not the name of the class of
something but `&quot;j...</li>
<li><a
href="58256cd084"><code>58256cd</code></a>
KTOR-9743 Clarify readLine documentation</li>
<li><a
href="088bd60702"><code>088bd60</code></a>
KTOR-9679 Fix regressions caused by adding buffering</li>
<li><a
href="167176a8d9"><code>167176a</code></a>
KTOR-9588 Do not send Content-Length: 0 for body-less GET requests (<a
href="https://redirect.github.com/ktorio/ktor/issues/5620">#5620</a>)</li>
<li><a
href="7fb0844702"><code>7fb0844</code></a>
KTOR-9585 Fix schema title trimming</li>
<li>Additional commits viewable in <a
href="https://github.com/ktorio/ktor/compare/3.5.1...3.5.2">compare
view</a></li>
</ul>
</details>
<br />

<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>

| Dependency Name | Ignore Conditions |
| --- | --- |
| io.ktor:ktor-bom | [>= 3.4.a, < 3.5] |
</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 15:51:01 +02:00
dependabot[bot]
68042497a0
chore(deps): bump the other-dependencies group across 5 directories with 1 update (#942)
Bumps the other-dependencies group with 1 update in the
/samples/kotlin-mcp-client directory:
[gradle-wrapper](https://github.com/gradle/gradle).
Bumps the other-dependencies group with 1 update in the
/samples/kotlin-mcp-server directory:
[gradle-wrapper](https://github.com/gradle/gradle).
Bumps the other-dependencies group with 1 update in the
/samples/kotlinlang-mcp-server directory:
[gradle-wrapper](https://github.com/gradle/gradle).
Bumps the other-dependencies group with 1 update in the
/samples/simple-streamable-server directory:
[gradle-wrapper](https://github.com/gradle/gradle).
Bumps the other-dependencies group with 1 update in the
/samples/weather-stdio-server directory:
[gradle-wrapper](https://github.com/gradle/gradle).

Updates `gradle-wrapper` from 9.6.1 to 9.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.0</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.0/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.0 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.0 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.0/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.0/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
<h2>9.7.0 RC3</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0 RC3.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3defbfc59d"><code>3defbfc</code></a>
make DistributionIntegrationSpec more permissive for releases (<a
href="https://redirect.github.com/gradle/gradle/issues/38766">#38766</a>)</li>
<li><a
href="f176043d64"><code>f176043</code></a>
make DistributionIntegrationSpec more permissive for releases</li>
<li><a
href="b0828dad52"><code>b0828da</code></a>
Prepare release notes for Gradle 9.7.0GA (<a
href="https://redirect.github.com/gradle/gradle/issues/38756">#38756</a>)</li>
<li><a
href="064b6d6161"><code>064b6d6</code></a>
cleanup</li>
<li><a
href="dfe7bdcc46"><code>dfe7bdc</code></a>
add new training to release notes</li>
<li><a
href="756196837a"><code>7561968</code></a>
add release notes for 37801</li>
<li><a
href="68a1f351d3"><code>68a1f35</code></a>
cherrypick 38367 to release</li>
<li><a
href="a462c95ca9"><code>a462c95</code></a>
Rebalance AllVersionsCrossVersion buckets for agents without
TestDistribution...</li>
<li><a
href="820e2b14ad"><code>820e2b1</code></a>
Update Gradle wrapper to version 9.7.0-rc-3 (<a
href="https://redirect.github.com/gradle/gradle/issues/38743">#38743</a>)</li>
<li><a
href="75ea3d7671"><code>75ea3d7</code></a>
Update Gradle wrapper to version 9.7.0-rc-3</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.6.1...v9.7.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.6.1 to 9.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.0</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.0/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.0 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.0 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.0/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.0/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
<h2>9.7.0 RC3</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0 RC3.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3defbfc59d"><code>3defbfc</code></a>
make DistributionIntegrationSpec more permissive for releases (<a
href="https://redirect.github.com/gradle/gradle/issues/38766">#38766</a>)</li>
<li><a
href="f176043d64"><code>f176043</code></a>
make DistributionIntegrationSpec more permissive for releases</li>
<li><a
href="b0828dad52"><code>b0828da</code></a>
Prepare release notes for Gradle 9.7.0GA (<a
href="https://redirect.github.com/gradle/gradle/issues/38756">#38756</a>)</li>
<li><a
href="064b6d6161"><code>064b6d6</code></a>
cleanup</li>
<li><a
href="dfe7bdcc46"><code>dfe7bdc</code></a>
add new training to release notes</li>
<li><a
href="756196837a"><code>7561968</code></a>
add release notes for 37801</li>
<li><a
href="68a1f351d3"><code>68a1f35</code></a>
cherrypick 38367 to release</li>
<li><a
href="a462c95ca9"><code>a462c95</code></a>
Rebalance AllVersionsCrossVersion buckets for agents without
TestDistribution...</li>
<li><a
href="820e2b14ad"><code>820e2b1</code></a>
Update Gradle wrapper to version 9.7.0-rc-3 (<a
href="https://redirect.github.com/gradle/gradle/issues/38743">#38743</a>)</li>
<li><a
href="75ea3d7671"><code>75ea3d7</code></a>
Update Gradle wrapper to version 9.7.0-rc-3</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.6.1...v9.7.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.6.1 to 9.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.0</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.0/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.0 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.0 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.0/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.0/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
<h2>9.7.0 RC3</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0 RC3.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3defbfc59d"><code>3defbfc</code></a>
make DistributionIntegrationSpec more permissive for releases (<a
href="https://redirect.github.com/gradle/gradle/issues/38766">#38766</a>)</li>
<li><a
href="f176043d64"><code>f176043</code></a>
make DistributionIntegrationSpec more permissive for releases</li>
<li><a
href="b0828dad52"><code>b0828da</code></a>
Prepare release notes for Gradle 9.7.0GA (<a
href="https://redirect.github.com/gradle/gradle/issues/38756">#38756</a>)</li>
<li><a
href="064b6d6161"><code>064b6d6</code></a>
cleanup</li>
<li><a
href="dfe7bdcc46"><code>dfe7bdc</code></a>
add new training to release notes</li>
<li><a
href="756196837a"><code>7561968</code></a>
add release notes for 37801</li>
<li><a
href="68a1f351d3"><code>68a1f35</code></a>
cherrypick 38367 to release</li>
<li><a
href="a462c95ca9"><code>a462c95</code></a>
Rebalance AllVersionsCrossVersion buckets for agents without
TestDistribution...</li>
<li><a
href="820e2b14ad"><code>820e2b1</code></a>
Update Gradle wrapper to version 9.7.0-rc-3 (<a
href="https://redirect.github.com/gradle/gradle/issues/38743">#38743</a>)</li>
<li><a
href="75ea3d7671"><code>75ea3d7</code></a>
Update Gradle wrapper to version 9.7.0-rc-3</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.6.1...v9.7.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.6.1 to 9.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.0</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.0/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.0 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.0 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.0/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.0/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
<h2>9.7.0 RC3</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0 RC3.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3defbfc59d"><code>3defbfc</code></a>
make DistributionIntegrationSpec more permissive for releases (<a
href="https://redirect.github.com/gradle/gradle/issues/38766">#38766</a>)</li>
<li><a
href="f176043d64"><code>f176043</code></a>
make DistributionIntegrationSpec more permissive for releases</li>
<li><a
href="b0828dad52"><code>b0828da</code></a>
Prepare release notes for Gradle 9.7.0GA (<a
href="https://redirect.github.com/gradle/gradle/issues/38756">#38756</a>)</li>
<li><a
href="064b6d6161"><code>064b6d6</code></a>
cleanup</li>
<li><a
href="dfe7bdcc46"><code>dfe7bdc</code></a>
add new training to release notes</li>
<li><a
href="756196837a"><code>7561968</code></a>
add release notes for 37801</li>
<li><a
href="68a1f351d3"><code>68a1f35</code></a>
cherrypick 38367 to release</li>
<li><a
href="a462c95ca9"><code>a462c95</code></a>
Rebalance AllVersionsCrossVersion buckets for agents without
TestDistribution...</li>
<li><a
href="820e2b14ad"><code>820e2b1</code></a>
Update Gradle wrapper to version 9.7.0-rc-3 (<a
href="https://redirect.github.com/gradle/gradle/issues/38743">#38743</a>)</li>
<li><a
href="75ea3d7671"><code>75ea3d7</code></a>
Update Gradle wrapper to version 9.7.0-rc-3</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.6.1...v9.7.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.6.1 to 9.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.0</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.0/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.0 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.0 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.0/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.0/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
<h2>9.7.0 RC3</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0 RC3.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3defbfc59d"><code>3defbfc</code></a>
make DistributionIntegrationSpec more permissive for releases (<a
href="https://redirect.github.com/gradle/gradle/issues/38766">#38766</a>)</li>
<li><a
href="f176043d64"><code>f176043</code></a>
make DistributionIntegrationSpec more permissive for releases</li>
<li><a
href="b0828dad52"><code>b0828da</code></a>
Prepare release notes for Gradle 9.7.0GA (<a
href="https://redirect.github.com/gradle/gradle/issues/38756">#38756</a>)</li>
<li><a
href="064b6d6161"><code>064b6d6</code></a>
cleanup</li>
<li><a
href="dfe7bdcc46"><code>dfe7bdc</code></a>
add new training to release notes</li>
<li><a
href="756196837a"><code>7561968</code></a>
add release notes for 37801</li>
<li><a
href="68a1f351d3"><code>68a1f35</code></a>
cherrypick 38367 to release</li>
<li><a
href="a462c95ca9"><code>a462c95</code></a>
Rebalance AllVersionsCrossVersion buckets for agents without
TestDistribution...</li>
<li><a
href="820e2b14ad"><code>820e2b1</code></a>
Update Gradle wrapper to version 9.7.0-rc-3 (<a
href="https://redirect.github.com/gradle/gradle/issues/38743">#38743</a>)</li>
<li><a
href="75ea3d7671"><code>75ea3d7</code></a>
Update Gradle wrapper to version 9.7.0-rc-3</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.6.1...v9.7.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.6.1 to 9.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.0</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.0/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.0 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.0 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.0/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.0/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
<h2>9.7.0 RC3</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0 RC3.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3defbfc59d"><code>3defbfc</code></a>
make DistributionIntegrationSpec more permissive for releases (<a
href="https://redirect.github.com/gradle/gradle/issues/38766">#38766</a>)</li>
<li><a
href="f176043d64"><code>f176043</code></a>
make DistributionIntegrationSpec more permissive for releases</li>
<li><a
href="b0828dad52"><code>b0828da</code></a>
Prepare release notes for Gradle 9.7.0GA (<a
href="https://redirect.github.com/gradle/gradle/issues/38756">#38756</a>)</li>
<li><a
href="064b6d6161"><code>064b6d6</code></a>
cleanup</li>
<li><a
href="dfe7bdcc46"><code>dfe7bdc</code></a>
add new training to release notes</li>
<li><a
href="756196837a"><code>7561968</code></a>
add release notes for 37801</li>
<li><a
href="68a1f351d3"><code>68a1f35</code></a>
cherrypick 38367 to release</li>
<li><a
href="a462c95ca9"><code>a462c95</code></a>
Rebalance AllVersionsCrossVersion buckets for agents without
TestDistribution...</li>
<li><a
href="820e2b14ad"><code>820e2b1</code></a>
Update Gradle wrapper to version 9.7.0-rc-3 (<a
href="https://redirect.github.com/gradle/gradle/issues/38743">#38743</a>)</li>
<li><a
href="75ea3d7671"><code>75ea3d7</code></a>
Update Gradle wrapper to version 9.7.0-rc-3</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.6.1...v9.7.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.6.1 to 9.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.0</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.0/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.0 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.0 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.0/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.0/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
<h2>9.7.0 RC3</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0 RC3.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3defbfc59d"><code>3defbfc</code></a>
make DistributionIntegrationSpec more permissive for releases (<a
href="https://redirect.github.com/gradle/gradle/issues/38766">#38766</a>)</li>
<li><a
href="f176043d64"><code>f176043</code></a>
make DistributionIntegrationSpec more permissive for releases</li>
<li><a
href="b0828dad52"><code>b0828da</code></a>
Prepare release notes for Gradle 9.7.0GA (<a
href="https://redirect.github.com/gradle/gradle/issues/38756">#38756</a>)</li>
<li><a
href="064b6d6161"><code>064b6d6</code></a>
cleanup</li>
<li><a
href="dfe7bdcc46"><code>dfe7bdc</code></a>
add new training to release notes</li>
<li><a
href="756196837a"><code>7561968</code></a>
add release notes for 37801</li>
<li><a
href="68a1f351d3"><code>68a1f35</code></a>
cherrypick 38367 to release</li>
<li><a
href="a462c95ca9"><code>a462c95</code></a>
Rebalance AllVersionsCrossVersion buckets for agents without
TestDistribution...</li>
<li><a
href="820e2b14ad"><code>820e2b1</code></a>
Update Gradle wrapper to version 9.7.0-rc-3 (<a
href="https://redirect.github.com/gradle/gradle/issues/38743">#38743</a>)</li>
<li><a
href="75ea3d7671"><code>75ea3d7</code></a>
Update Gradle wrapper to version 9.7.0-rc-3</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.6.1...v9.7.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.6.1 to 9.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.0</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.0/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.0 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.0 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.0/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.0/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
<h2>9.7.0 RC3</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0 RC3.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3defbfc59d"><code>3defbfc</code></a>
make DistributionIntegrationSpec more permissive for releases (<a
href="https://redirect.github.com/gradle/gradle/issues/38766">#38766</a>)</li>
<li><a
href="f176043d64"><code>f176043</code></a>
make DistributionIntegrationSpec more permissive for releases</li>
<li><a
href="b0828dad52"><code>b0828da</code></a>
Prepare release notes for Gradle 9.7.0GA (<a
href="https://redirect.github.com/gradle/gradle/issues/38756">#38756</a>)</li>
<li><a
href="064b6d6161"><code>064b6d6</code></a>
cleanup</li>
<li><a
href="dfe7bdcc46"><code>dfe7bdc</code></a>
add new training to release notes</li>
<li><a
href="756196837a"><code>7561968</code></a>
add release notes for 37801</li>
<li><a
href="68a1f351d3"><code>68a1f35</code></a>
cherrypick 38367 to release</li>
<li><a
href="a462c95ca9"><code>a462c95</code></a>
Rebalance AllVersionsCrossVersion buckets for agents without
TestDistribution...</li>
<li><a
href="820e2b14ad"><code>820e2b1</code></a>
Update Gradle wrapper to version 9.7.0-rc-3 (<a
href="https://redirect.github.com/gradle/gradle/issues/38743">#38743</a>)</li>
<li><a
href="75ea3d7671"><code>75ea3d7</code></a>
Update Gradle wrapper to version 9.7.0-rc-3</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.6.1...v9.7.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.6.1 to 9.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.0</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.0/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.0 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.0 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.0/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.0/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
<h2>9.7.0 RC3</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0 RC3.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3defbfc59d"><code>3defbfc</code></a>
make DistributionIntegrationSpec more permissive for releases (<a
href="https://redirect.github.com/gradle/gradle/issues/38766">#38766</a>)</li>
<li><a
href="f176043d64"><code>f176043</code></a>
make DistributionIntegrationSpec more permissive for releases</li>
<li><a
href="b0828dad52"><code>b0828da</code></a>
Prepare release notes for Gradle 9.7.0GA (<a
href="https://redirect.github.com/gradle/gradle/issues/38756">#38756</a>)</li>
<li><a
href="064b6d6161"><code>064b6d6</code></a>
cleanup</li>
<li><a
href="dfe7bdcc46"><code>dfe7bdc</code></a>
add new training to release notes</li>
<li><a
href="756196837a"><code>7561968</code></a>
add release notes for 37801</li>
<li><a
href="68a1f351d3"><code>68a1f35</code></a>
cherrypick 38367 to release</li>
<li><a
href="a462c95ca9"><code>a462c95</code></a>
Rebalance AllVersionsCrossVersion buckets for agents without
TestDistribution...</li>
<li><a
href="820e2b14ad"><code>820e2b1</code></a>
Update Gradle wrapper to version 9.7.0-rc-3 (<a
href="https://redirect.github.com/gradle/gradle/issues/38743">#38743</a>)</li>
<li><a
href="75ea3d7671"><code>75ea3d7</code></a>
Update Gradle wrapper to version 9.7.0-rc-3</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.6.1...v9.7.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.6.1 to 9.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.0</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.0/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.0 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.0 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.0/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.0/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
<h2>9.7.0 RC3</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0 RC3.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3defbfc59d"><code>3defbfc</code></a>
make DistributionIntegrationSpec more permissive for releases (<a
href="https://redirect.github.com/gradle/gradle/issues/38766">#38766</a>)</li>
<li><a
href="f176043d64"><code>f176043</code></a>
make DistributionIntegrationSpec more permissive for releases</li>
<li><a
href="b0828dad52"><code>b0828da</code></a>
Prepare release notes for Gradle 9.7.0GA (<a
href="https://redirect.github.com/gradle/gradle/issues/38756">#38756</a>)</li>
<li><a
href="064b6d6161"><code>064b6d6</code></a>
cleanup</li>
<li><a
href="dfe7bdcc46"><code>dfe7bdc</code></a>
add new training to release notes</li>
<li><a
href="756196837a"><code>7561968</code></a>
add release notes for 37801</li>
<li><a
href="68a1f351d3"><code>68a1f35</code></a>
cherrypick 38367 to release</li>
<li><a
href="a462c95ca9"><code>a462c95</code></a>
Rebalance AllVersionsCrossVersion buckets for agents without
TestDistribution...</li>
<li><a
href="820e2b14ad"><code>820e2b1</code></a>
Update Gradle wrapper to version 9.7.0-rc-3 (<a
href="https://redirect.github.com/gradle/gradle/issues/38743">#38743</a>)</li>
<li><a
href="75ea3d7671"><code>75ea3d7</code></a>
Update Gradle wrapper to version 9.7.0-rc-3</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.6.1...v9.7.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.6.1 to 9.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.0</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.0/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.0 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.0 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.0/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.0/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
<h2>9.7.0 RC3</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0 RC3.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3defbfc59d"><code>3defbfc</code></a>
make DistributionIntegrationSpec more permissive for releases (<a
href="https://redirect.github.com/gradle/gradle/issues/38766">#38766</a>)</li>
<li><a
href="f176043d64"><code>f176043</code></a>
make DistributionIntegrationSpec more permissive for releases</li>
<li><a
href="b0828dad52"><code>b0828da</code></a>
Prepare release notes for Gradle 9.7.0GA (<a
href="https://redirect.github.com/gradle/gradle/issues/38756">#38756</a>)</li>
<li><a
href="064b6d6161"><code>064b6d6</code></a>
cleanup</li>
<li><a
href="dfe7bdcc46"><code>dfe7bdc</code></a>
add new training to release notes</li>
<li><a
href="756196837a"><code>7561968</code></a>
add release notes for 37801</li>
<li><a
href="68a1f351d3"><code>68a1f35</code></a>
cherrypick 38367 to release</li>
<li><a
href="a462c95ca9"><code>a462c95</code></a>
Rebalance AllVersionsCrossVersion buckets for agents without
TestDistribution...</li>
<li><a
href="820e2b14ad"><code>820e2b1</code></a>
Update Gradle wrapper to version 9.7.0-rc-3 (<a
href="https://redirect.github.com/gradle/gradle/issues/38743">#38743</a>)</li>
<li><a
href="75ea3d7671"><code>75ea3d7</code></a>
Update Gradle wrapper to version 9.7.0-rc-3</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.6.1...v9.7.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.6.1 to 9.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.0</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.0/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.0 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.0 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.0/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.0/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
<h2>9.7.0 RC3</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0 RC3.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3defbfc59d"><code>3defbfc</code></a>
make DistributionIntegrationSpec more permissive for releases (<a
href="https://redirect.github.com/gradle/gradle/issues/38766">#38766</a>)</li>
<li><a
href="f176043d64"><code>f176043</code></a>
make DistributionIntegrationSpec more permissive for releases</li>
<li><a
href="b0828dad52"><code>b0828da</code></a>
Prepare release notes for Gradle 9.7.0GA (<a
href="https://redirect.github.com/gradle/gradle/issues/38756">#38756</a>)</li>
<li><a
href="064b6d6161"><code>064b6d6</code></a>
cleanup</li>
<li><a
href="dfe7bdcc46"><code>dfe7bdc</code></a>
add new training to release notes</li>
<li><a
href="756196837a"><code>7561968</code></a>
add release notes for 37801</li>
<li><a
href="68a1f351d3"><code>68a1f35</code></a>
cherrypick 38367 to release</li>
<li><a
href="a462c95ca9"><code>a462c95</code></a>
Rebalance AllVersionsCrossVersion buckets for agents without
TestDistribution...</li>
<li><a
href="820e2b14ad"><code>820e2b1</code></a>
Update Gradle wrapper to version 9.7.0-rc-3 (<a
href="https://redirect.github.com/gradle/gradle/issues/38743">#38743</a>)</li>
<li><a
href="75ea3d7671"><code>75ea3d7</code></a>
Update Gradle wrapper to version 9.7.0-rc-3</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/gradle/compare/v9.6.1...v9.7.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `gradle-wrapper` from 9.6.1 to 9.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/gradle/releases">gradle-wrapper's
releases</a>.</em></p>
<blockquote>
<h2>9.7.0</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
<li>Broader Configuration Cache compatibility</li>
<li>More source locations in problem reports</li>
</ul>
<p><a href="https://docs.gradle.org/9.7.0/release-notes.html">Read the
Release Notes</a></p>
<p>We would like to thank the following community members for their
contributions to this release of Gradle:
<a href="https://github.com/aSemy">Adam</a>,
<a href="https://github.com/Gautam-aman">Aman Gautam</a>,
<a href="https://github.com/YukiCodepth">Aman Kumar</a>,
<a href="https://github.com/adubrouski">Anton Dubrouski</a>,
<a href="https://github.com/liutikas">Aurimas</a>,
<a href="https://github.com/gbhavya07">gbhavya07</a>,
<a href="https://github.com/joshfriend">Josh Friend</a>,
<a href="https://github.com/nicklauslittle-gov">nicklauslittle-gov</a>,
<a href="https://github.com/psoni674">Pragati</a>,
<a href="https://github.com/Project516">project516</a>,
<a href="https://github.com/Uomocapra">Qin Mi</a>,
<a href="https://github.com/rkdfx">Ravi</a>,
<a href="https://github.com/sk-reddy17">sk-reddy17</a>,
<a href="https://github.com/Suvrat1629">Suvrat Acharya</a>,
<a href="https://github.com/ShreckYe">Yongshun Ye</a>.</p>
<h2>Upgrade instructions</h2>
<p>Switch your build to use Gradle 9.7.0 by updating your wrapper:</p>
<pre><code>./gradlew :wrapper --gradle-version=9.7.0 &amp;&amp;
./gradlew :wrapper
</code></pre>
<p>See the Gradle <a
href="https://docs.gradle.org/9.7.0/userguide/upgrading_version_9.html">9.x
upgrade guide</a> to learn about deprecations, breaking changes and
other considerations when upgrading.</p>
<p>For Java, Groovy, Kotlin and Android compatibility, see the <a
href="https://docs.gradle.org/9.7.0/userguide/compatibility.html">full
compatibility notes</a>.</p>
<h2>Reporting problems</h2>
<p>If you find a problem with this release, please file a bug on <a
href="https://github.com/gradle/gradle/issues">GitHub Issues</a>
adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the <a
href="https://discuss.gradle.org/c/help-discuss">forum</a>.</p>
<p>We hope you will build happiness with Gradle, and we look forward to
your feedback via <a href="https://twitter.com/gradle">Twitter</a> or on
<a href="https://github.com/gradle">GitHub</a>.</p>
<h2>9.7.0 RC3</h2>
<p>The Gradle team is excited to announce Gradle 9.7.0 RC3.</p>
<p>Here are the highlights of this release:</p>
<ul>
<li>Isolated Projects graduates to incubating</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3defbfc59d"><code>3defbfc</code></a>
make DistributionIntegrationSpec more permissive for releases (<a
href="https://redirect.github.com/gradle/gradle/issues/38766">#38766</a>)</li>
<li><a
href="f176043d64"><code>f176043</code></a>
make DistributionIntegrationSpec more permissive for releases</li>
<li><a
href="b0828dad52"><code>b0828da</code></a>
Prepare release notes for Gradle 9.7.0GA (<a
href="https://redirect.github.com/gradle/gradle/issues/38756">#38756</a>)</li>
<li><a
href="064b6d6161"><code>064b6d6</code></a>
cleanup</li>
<li><a
href="dfe7bdcc46"><code>dfe7bdc</code></a>
add new training to release notes</li>
<li><a
href="756196837a"><code>7561968</code></a>
add release notes for 37801</li>
<li><a
href="68a1f351d3"><code>68a1f35</code></a>
cherrypick 38367 to release</li>
<li><a
href="a462c95ca9"><code>a462c95</code></a>
Rebalance AllVersionsCrossVersion buckets for agents without
TestDistribution...</li>
<li><a
href="820e2b14ad"><code>820e2b1</code></a>
Update Gradle wrapper to version 9.7.0-rc-3 (<a
href="https://redirect.github.com/gradle/gradle/issues/38743">#38743</a>)</li>
<li><a
href="75ea3d7671...

_Description has been truncated_

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 14:59:51 +02:00
dependabot[bot]
8ceb779dd4
chore(deps): bump the ktor group across 1 directory with 15 updates (#941)
Bumps the ktor group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [io.ktor:ktor-client-apache5](https://github.com/ktorio/ktor) |
`3.5.1` | `3.5.2` |
| [io.ktor:ktor-client-auth](https://github.com/ktorio/ktor) | `3.5.1` |
`3.5.2` |
| [io.ktor:ktor-client-core](https://github.com/ktorio/ktor) | `3.5.1` |
`3.5.2` |
| [io.ktor:ktor-client-logging](https://github.com/ktorio/ktor) |
`3.5.1` | `3.5.2` |
|
[io.ktor:ktor-server-content-negotiation](https://github.com/ktorio/ktor)
| `3.5.1` | `3.5.2` |
|
[io.ktor:ktor-client-content-negotiation](https://github.com/ktorio/ktor)
| `3.5.1` | `3.5.2` |
|
[io.ktor:ktor-serialization-kotlinx-json](https://github.com/ktorio/ktor)
| `3.5.1` | `3.5.2` |
| [io.ktor:ktor-server-auth](https://github.com/ktorio/ktor) | `3.5.1` |
`3.5.2` |
| [io.ktor:ktor-server-core](https://github.com/ktorio/ktor) | `3.5.1` |
`3.5.2` |
| [io.ktor:ktor-server-sse](https://github.com/ktorio/ktor) | `3.5.1` |
`3.5.2` |
| [io.ktor:ktor-server-websockets](https://github.com/ktorio/ktor) |
`3.5.1` | `3.5.2` |
| [io.ktor:ktor-client-mock](https://github.com/ktorio/ktor) | `3.5.1` |
`3.5.2` |
| [io.ktor:ktor-server-test-host](https://github.com/ktorio/ktor) |
`3.5.1` | `3.5.2` |
| [io.ktor:ktor-client-cio](https://github.com/ktorio/ktor) | `3.5.1` |
`3.5.2` |
| [io.ktor:ktor-server-cio](https://github.com/ktorio/ktor) | `3.5.1` |
`3.5.2` |


Updates `io.ktor:ktor-client-apache5` from 3.5.1 to 3.5.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/releases">io.ktor:ktor-client-apache5's
releases</a>.</em></p>
<blockquote>
<h2>3.5.2</h2>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/blob/main/CHANGELOG.md">io.ktor:ktor-client-apache5's
changelog</a>.</em></p>
<blockquote>
<h1>3.5.2</h1>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="01c469a85f"><code>01c469a</code></a>
Release 3.5.2 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5781">#5781</a>)</li>
<li><a
href="c965a0ce85"><code>c965a0c</code></a>
KTOR-9741 Prevent CIO request handler leak (<a
href="https://redirect.github.com/ktorio/ktor/issues/5783">#5783</a>)</li>
<li><a
href="74df4585b8"><code>74df458</code></a>
chore: fix some comments to improve readability</li>
<li><a
href="2672567708"><code>2672567</code></a>
[KTOR-9704] Optimized encoding flow for UTF-8 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5743">#5743</a>)</li>
<li><a
href="d5680edbe6"><code>d5680ed</code></a>
KTOR-5391: Document ECDSA certificate limitation for client
authentication (#...</li>
<li><a
href="9b0f356877"><code>9b0f356</code></a>
<code>something::javaClass.name</code> is not the name of the class of
something but `&quot;j...</li>
<li><a
href="58256cd084"><code>58256cd</code></a>
KTOR-9743 Clarify readLine documentation</li>
<li><a
href="088bd60702"><code>088bd60</code></a>
KTOR-9679 Fix regressions caused by adding buffering</li>
<li><a
href="167176a8d9"><code>167176a</code></a>
KTOR-9588 Do not send Content-Length: 0 for body-less GET requests (<a
href="https://redirect.github.com/ktorio/ktor/issues/5620">#5620</a>)</li>
<li><a
href="7fb0844702"><code>7fb0844</code></a>
KTOR-9585 Fix schema title trimming</li>
<li>Additional commits viewable in <a
href="https://github.com/ktorio/ktor/compare/3.5.1...3.5.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.ktor:ktor-client-auth` from 3.5.1 to 3.5.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/releases">io.ktor:ktor-client-auth's
releases</a>.</em></p>
<blockquote>
<h2>3.5.2</h2>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/blob/main/CHANGELOG.md">io.ktor:ktor-client-auth's
changelog</a>.</em></p>
<blockquote>
<h1>3.5.2</h1>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="01c469a85f"><code>01c469a</code></a>
Release 3.5.2 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5781">#5781</a>)</li>
<li><a
href="c965a0ce85"><code>c965a0c</code></a>
KTOR-9741 Prevent CIO request handler leak (<a
href="https://redirect.github.com/ktorio/ktor/issues/5783">#5783</a>)</li>
<li><a
href="74df4585b8"><code>74df458</code></a>
chore: fix some comments to improve readability</li>
<li><a
href="2672567708"><code>2672567</code></a>
[KTOR-9704] Optimized encoding flow for UTF-8 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5743">#5743</a>)</li>
<li><a
href="d5680edbe6"><code>d5680ed</code></a>
KTOR-5391: Document ECDSA certificate limitation for client
authentication (#...</li>
<li><a
href="9b0f356877"><code>9b0f356</code></a>
<code>something::javaClass.name</code> is not the name of the class of
something but `&quot;j...</li>
<li><a
href="58256cd084"><code>58256cd</code></a>
KTOR-9743 Clarify readLine documentation</li>
<li><a
href="088bd60702"><code>088bd60</code></a>
KTOR-9679 Fix regressions caused by adding buffering</li>
<li><a
href="167176a8d9"><code>167176a</code></a>
KTOR-9588 Do not send Content-Length: 0 for body-less GET requests (<a
href="https://redirect.github.com/ktorio/ktor/issues/5620">#5620</a>)</li>
<li><a
href="7fb0844702"><code>7fb0844</code></a>
KTOR-9585 Fix schema title trimming</li>
<li>Additional commits viewable in <a
href="https://github.com/ktorio/ktor/compare/3.5.1...3.5.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.ktor:ktor-client-core` from 3.5.1 to 3.5.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/releases">io.ktor:ktor-client-core's
releases</a>.</em></p>
<blockquote>
<h2>3.5.2</h2>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/blob/main/CHANGELOG.md">io.ktor:ktor-client-core's
changelog</a>.</em></p>
<blockquote>
<h1>3.5.2</h1>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="01c469a85f"><code>01c469a</code></a>
Release 3.5.2 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5781">#5781</a>)</li>
<li><a
href="c965a0ce85"><code>c965a0c</code></a>
KTOR-9741 Prevent CIO request handler leak (<a
href="https://redirect.github.com/ktorio/ktor/issues/5783">#5783</a>)</li>
<li><a
href="74df4585b8"><code>74df458</code></a>
chore: fix some comments to improve readability</li>
<li><a
href="2672567708"><code>2672567</code></a>
[KTOR-9704] Optimized encoding flow for UTF-8 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5743">#5743</a>)</li>
<li><a
href="d5680edbe6"><code>d5680ed</code></a>
KTOR-5391: Document ECDSA certificate limitation for client
authentication (#...</li>
<li><a
href="9b0f356877"><code>9b0f356</code></a>
<code>something::javaClass.name</code> is not the name of the class of
something but `&quot;j...</li>
<li><a
href="58256cd084"><code>58256cd</code></a>
KTOR-9743 Clarify readLine documentation</li>
<li><a
href="088bd60702"><code>088bd60</code></a>
KTOR-9679 Fix regressions caused by adding buffering</li>
<li><a
href="167176a8d9"><code>167176a</code></a>
KTOR-9588 Do not send Content-Length: 0 for body-less GET requests (<a
href="https://redirect.github.com/ktorio/ktor/issues/5620">#5620</a>)</li>
<li><a
href="7fb0844702"><code>7fb0844</code></a>
KTOR-9585 Fix schema title trimming</li>
<li>Additional commits viewable in <a
href="https://github.com/ktorio/ktor/compare/3.5.1...3.5.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.ktor:ktor-client-logging` from 3.5.1 to 3.5.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/releases">io.ktor:ktor-client-logging's
releases</a>.</em></p>
<blockquote>
<h2>3.5.2</h2>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/blob/main/CHANGELOG.md">io.ktor:ktor-client-logging's
changelog</a>.</em></p>
<blockquote>
<h1>3.5.2</h1>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="01c469a85f"><code>01c469a</code></a>
Release 3.5.2 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5781">#5781</a>)</li>
<li><a
href="c965a0ce85"><code>c965a0c</code></a>
KTOR-9741 Prevent CIO request handler leak (<a
href="https://redirect.github.com/ktorio/ktor/issues/5783">#5783</a>)</li>
<li><a
href="74df4585b8"><code>74df458</code></a>
chore: fix some comments to improve readability</li>
<li><a
href="2672567708"><code>2672567</code></a>
[KTOR-9704] Optimized encoding flow for UTF-8 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5743">#5743</a>)</li>
<li><a
href="d5680edbe6"><code>d5680ed</code></a>
KTOR-5391: Document ECDSA certificate limitation for client
authentication (#...</li>
<li><a
href="9b0f356877"><code>9b0f356</code></a>
<code>something::javaClass.name</code> is not the name of the class of
something but `&quot;j...</li>
<li><a
href="58256cd084"><code>58256cd</code></a>
KTOR-9743 Clarify readLine documentation</li>
<li><a
href="088bd60702"><code>088bd60</code></a>
KTOR-9679 Fix regressions caused by adding buffering</li>
<li><a
href="167176a8d9"><code>167176a</code></a>
KTOR-9588 Do not send Content-Length: 0 for body-less GET requests (<a
href="https://redirect.github.com/ktorio/ktor/issues/5620">#5620</a>)</li>
<li><a
href="7fb0844702"><code>7fb0844</code></a>
KTOR-9585 Fix schema title trimming</li>
<li>Additional commits viewable in <a
href="https://github.com/ktorio/ktor/compare/3.5.1...3.5.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.ktor:ktor-server-content-negotiation` from 3.5.1 to 3.5.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/releases">io.ktor:ktor-server-content-negotiation's
releases</a>.</em></p>
<blockquote>
<h2>3.5.2</h2>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/blob/main/CHANGELOG.md">io.ktor:ktor-server-content-negotiation's
changelog</a>.</em></p>
<blockquote>
<h1>3.5.2</h1>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="01c469a85f"><code>01c469a</code></a>
Release 3.5.2 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5781">#5781</a>)</li>
<li><a
href="c965a0ce85"><code>c965a0c</code></a>
KTOR-9741 Prevent CIO request handler leak (<a
href="https://redirect.github.com/ktorio/ktor/issues/5783">#5783</a>)</li>
<li><a
href="74df4585b8"><code>74df458</code></a>
chore: fix some comments to improve readability</li>
<li><a
href="2672567708"><code>2672567</code></a>
[KTOR-9704] Optimized encoding flow for UTF-8 (<a
href="https://redirect.github.com/ktorio/ktor/issues/5743">#5743</a>)</li>
<li><a
href="d5680edbe6"><code>d5680ed</code></a>
KTOR-5391: Document ECDSA certificate limitation for client
authentication (#...</li>
<li><a
href="9b0f356877"><code>9b0f356</code></a>
<code>something::javaClass.name</code> is not the name of the class of
something but `&quot;j...</li>
<li><a
href="58256cd084"><code>58256cd</code></a>
KTOR-9743 Clarify readLine documentation</li>
<li><a
href="088bd60702"><code>088bd60</code></a>
KTOR-9679 Fix regressions caused by adding buffering</li>
<li><a
href="167176a8d9"><code>167176a</code></a>
KTOR-9588 Do not send Content-Length: 0 for body-less GET requests (<a
href="https://redirect.github.com/ktorio/ktor/issues/5620">#5620</a>)</li>
<li><a
href="7fb0844702"><code>7fb0844</code></a>
KTOR-9585 Fix schema title trimming</li>
<li>Additional commits viewable in <a
href="https://github.com/ktorio/ktor/compare/3.5.1...3.5.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.ktor:ktor-client-content-negotiation` from 3.5.1 to 3.5.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/releases">io.ktor:ktor-client-content-negotiation's
releases</a>.</em></p>
<blockquote>
<h2>3.5.2</h2>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't close it properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9671">KTOR-9671</a>
Darwin: Semicolons in URL path are sanitized</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/ktorio/ktor/blob/main/CHANGELOG.md">io.ktor:ktor-client-content-negotiation's
changelog</a>.</em></p>
<blockquote>
<h1>3.5.2</h1>
<blockquote>
<p>Published 31 July 2026</p>
</blockquote>
<h3>Improvements</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8032">KTOR-8032</a>
RateLimit: Allow limit requests based on authentication result</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9719">KTOR-9719</a>
<code>ApplicationCall.isStaticContent</code> returns false when called
from plugin interceptors</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8450">KTOR-8450</a>
ContentNegotiation: it doesn't handle content type suffixes</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7892">KTOR-7892</a>
SwaggerUI: Missing oauth2-redirect.html support in the plugin</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9759">KTOR-9759</a>
Reject whitespace in URL hosts during parsing</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9681">KTOR-9681</a>
Update kotlinx-io to 0.9.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9743">KTOR-9743</a>
ByteReadChannel.readLineStrict: Misleading definition of limit parameter
in KDocs</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9504">KTOR-9504</a>
Improve KDoc for EmbeddedServer.addShutdownHook</li>
</ul>
<h3>Bugfixes</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9741">KTOR-9741</a> CIO:
request-handler coroutine leak on half-closed idle connection after ≥1MB
response</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-7661">KTOR-7661</a>
Maven + YAML config file does not work</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9585">KTOR-9585</a>
OpenAPI: JsonSchema title is truncated when it contains a dot</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9704">KTOR-9704</a>
UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics,
slowing every text response by 5-7x</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9588">KTOR-9588</a> SSE
client (CIO engine) sends spurious <code>Content-Length: 0</code> on
body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9679">KTOR-9679</a>
ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a
character at a buffer boundary</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9767">KTOR-9767</a>
ByteReadChannel.readLineTo: Return read bytes count instead of decoded
characters count <a href="#"><img
src="https://img.shields.io/badge/%5BImpactful%20change%5D-orange?style=flat-square"
alt="" /></a></li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8992">KTOR-8992</a>
HoconConfigLoader is not loaded when ktor-server-config-yaml on the
classpath</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9698">KTOR-9698</a>
OpenAPI: schema for kotlinx.serialization sealed types omits
discriminator property in variant schemas</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9690">KTOR-9690</a>
Netty: in-flight requests are aborted on stop(), ignoring shutdown grace
period</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-8903">KTOR-8903</a>
Netty: Close channel connection on errors properly</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9707">KTOR-9707</a>
SaveBody performance regression</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9703">KTOR-9703</a>
Inefficient text reading function in DefaultTransform</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9711">KTOR-9711</a>
Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks
response flushing for the whole connection</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9688">KTOR-9688</a>
RateLimit: No access to principal when wrapped with authentication since
3.5.1</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9677">KTOR-9677</a>
Auto-reloading: server is reloaded only once since 3.5.0</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KTOR-9683">KTOR-9683</a>
Sockets: Canceling a SelectorManager job doesn't...

_Description has been truncated_

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 13:04:29 +02:00
dependabot[bot]
e34cb2244c
chore(deps): bump hono from 4.12.27 to 4.13.1 in /integration-test/src/jvmTest/typescript (#940)
Bumps [hono](https://github.com/honojs/hono) from 4.12.27 to 4.13.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/honojs/hono/releases">hono's
releases</a>.</em></p>
<blockquote>
<h2>v4.13.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(trie-router): count every slash a pattern consumes by <a
href="https://github.com/Jaybhade"><code>@​Jaybhade</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5189">honojs/hono#5189</a></li>
<li>fix(utils/stream): re-acquire writer lock when pipe() throws by <a
href="https://github.com/Sriharsha-dev369"><code>@​Sriharsha-dev369</code></a>
in <a
href="https://redirect.github.com/honojs/hono/pull/4988">honojs/hono#4988</a></li>
<li>fix(etag): skip unsafe methods or error responses on non-* case by
<a
href="https://github.com/na-trium-144"><code>@​na-trium-144</code></a>
in <a
href="https://redirect.github.com/honojs/hono/pull/5196">honojs/hono#5196</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Jaybhade"><code>@​Jaybhade</code></a>
made their first contribution in <a
href="https://redirect.github.com/honojs/hono/pull/5189">honojs/hono#5189</a></li>
<li><a
href="https://github.com/Sriharsha-dev369"><code>@​Sriharsha-dev369</code></a>
made their first contribution in <a
href="https://redirect.github.com/honojs/hono/pull/4988">honojs/hono#4988</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/hono/compare/v4.13.0...v4.13.1">https://github.com/honojs/hono/compare/v4.13.0...v4.13.1</a></p>
<h2>v4.13.0</h2>
<p>Hono v4.13.0 is now available!</p>
<p>The highlight of this release is performance: a batch of low-level
optimizations makes the core request/response path significantly faster
— up to 1.25x on common routes in our benchmark. This release also adds
first-class support for the HTTP QUERY method, defined in <a
href="https://www.rfc-editor.org/rfc/rfc10008.html">RFC 10008</a>, a new
Method Not Allowed middleware, and more.</p>
<h2>Performance improvements</h2>
<p>This release includes a series of small optimizations: skipping
unnecessary <code>Headers</code> allocations, replacing regex tests with
<code>indexOf</code>, allocating internal state lazily, and more.</p>
<p>Here is <a
href="https://github.com/honojs/hono/tree/main/benchmarks/fetch"><code>benchmarks/fetch</code></a>
comparing v4.12 and v4.13 (<code>ROUNDS=5 ./compare.sh</code>, Bun
1.4.0, Apple Silicon — each measurement runs in a fresh process, and the
variant order is reversed every round to avoid warm-up bias):</p>
<table>
<thead>
<tr>
<th>Benchmark</th>
<th align="right">v4.12</th>
<th align="right">v4.13</th>
<th align="right">Speedup</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>ping</code> — <code>GET /</code></td>
<td align="right">165.83 ns</td>
<td align="right">163.99 ns</td>
<td align="right">1.01x</td>
</tr>
<tr>
<td><code>query</code> — <code>GET /id/1?name=bun</code></td>
<td align="right">674.40 ns</td>
<td align="right">616.99 ns</td>
<td align="right"><strong>1.09x</strong></td>
</tr>
<tr>
<td><code>json</code> — <code>GET /user</code></td>
<td align="right">528.99 ns</td>
<td align="right">422.44 ns</td>
<td align="right"><strong>1.25x</strong></td>
</tr>
<tr>
<td><code>body</code> — <code>POST /json</code></td>
<td align="right">1.16 µs</td>
<td align="right">1.00 µs</td>
<td align="right"><strong>1.15x</strong></td>
</tr>
</tbody>
</table>
<p>The individual changes:</p>
<ul>
<li>perf(context): iterate the header record with <code>for..in</code>
<a
href="https://redirect.github.com/honojs/hono/pull/5118">honojs/hono#5118</a></li>
<li>perf(url): replace regex tests with <code>indexOf</code> <a
href="https://redirect.github.com/honojs/hono/pull/5121">honojs/hono#5121</a></li>
<li>perf(context): skip <code>Headers</code> creation when there are no
headers to merge <a
href="https://redirect.github.com/honojs/hono/pull/5122">honojs/hono#5122</a></li>
<li>perf(urls): refactor <code>tryDecodeURIComponent</code> <a
href="https://redirect.github.com/honojs/hono/pull/5158">honojs/hono#5158</a></li>
<li>perf(request): allocate <code>#validatedData</code> lazily <a
href="https://redirect.github.com/honojs/hono/pull/5175">honojs/hono#5175</a></li>
<li>perf(request): probe the body cache without allocating <a
href="https://redirect.github.com/honojs/hono/pull/5176">honojs/hono#5176</a></li>
</ul>
<p>In addition, the RegExpRouter rewrite described below makes route
registration plus the first match roughly 20% faster.</p>
<p>Thanks <a
href="https://github.com/kibertoad"><code>@​kibertoad</code></a> for the
contributions!</p>
<h2>First-class QUERY method support</h2>
<p>The QUERY method — a safe, idempotent method that carries a request
body — is now a first-class citizen in Hono. You can define QUERY
handlers with <code>app.query()</code>:</p>
<pre lang="ts"><code>const app = new Hono()
<p>&lt;/tr&gt;&lt;/table&gt;<br />
</code></pre></p>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="cf785287b5"><code>cf78528</code></a>
4.13.1</li>
<li><a
href="f6aa913c3f"><code>f6aa913</code></a>
fix(etag): skip unsafe methods or error responses on non-* case (<a
href="https://redirect.github.com/honojs/hono/issues/5196">#5196</a>)</li>
<li><a
href="cd31bc196e"><code>cd31bc1</code></a>
fix(utils/stream): re-acquire writer lock when pipe() throws (<a
href="https://redirect.github.com/honojs/hono/issues/4988">#4988</a>)</li>
<li><a
href="569b4191a2"><code>569b419</code></a>
fix(trie-router): count every slash a pattern consumes (<a
href="https://redirect.github.com/honojs/hono/issues/5189">#5189</a>)</li>
<li><a
href="192768fbaf"><code>192768f</code></a>
4.13.0</li>
<li><a
href="b0c2d90eb0"><code>b0c2d90</code></a>
Merge pull request <a
href="https://redirect.github.com/honojs/hono/issues/5154">#5154</a>
from honojs/next</li>
<li><a
href="8f07028270"><code>8f07028</code></a>
fix(compress): set Vary: Accept-Encoding on negotiated responses (<a
href="https://redirect.github.com/honojs/hono/issues/5137">#5137</a>)</li>
<li><a
href="8a0b18fd9b"><code>8a0b18f</code></a>
feat(reg-exp-router): throw UnsupportedPathError during route
registration (#...</li>
<li><a
href="3feb3551d4"><code>3feb355</code></a>
fix(jsx): allow a function component to return an array (<a
href="https://redirect.github.com/honojs/hono/issues/5179">#5179</a>)</li>
<li><a
href="5d911d2ab7"><code>5d911d2</code></a>
feat(utils/headers): add HTTP fields newly registered with IANA (<a
href="https://redirect.github.com/honojs/hono/issues/5153">#5153</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/honojs/hono/compare/v4.12.27...v4.13.1">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 12:26:30 +02:00
dependabot[bot]
04a72353e1
chore(deps): bump @hono/node-server from 1.19.13 to 2.1.0 in /integration-test/src/jvmTest/typescript (#939)
Bumps [@hono/node-server](https://github.com/honojs/node-server) from
1.19.13 to 2.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/honojs/node-server/releases">@​hono/node-server's
releases</a>.</em></p>
<blockquote>
<h2>v2.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat: add Early Hints (HTTP 103) middleware by <a
href="https://github.com/bilal-azam"><code>@​bilal-azam</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/378">honojs/node-server#378</a></li>
<li>fix(listener): avoid uncaught error when force-closing a
non-standard socket by <a
href="https://github.com/mohamedramadan14"><code>@​mohamedramadan14</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/383">honojs/node-server#383</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/bilal-azam"><code>@​bilal-azam</code></a> made
their first contribution in <a
href="https://redirect.github.com/honojs/node-server/pull/378">honojs/node-server#378</a></li>
<li><a
href="https://github.com/mohamedramadan14"><code>@​mohamedramadan14</code></a>
made their first contribution in <a
href="https://redirect.github.com/honojs/node-server/pull/383">honojs/node-server#383</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.12...v2.1.0">https://github.com/honojs/node-server/compare/v2.0.12...v2.1.0</a></p>
<h2>v2.0.12</h2>
<h2>What's Changed</h2>
<ul>
<li>test: replace supertest by <a
href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/379">honojs/node-server#379</a></li>
<li>fix(response): copy headers when init is a foreign Response by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/382">honojs/node-server#382</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.11...v2.0.12">https://github.com/honojs/node-server/compare/v2.0.11...v2.0.12</a></p>
<h2>v2.0.11</h2>
<h2>What's Changed</h2>
<ul>
<li>test: use a custom helper for path traversal tests by <a
href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/377">honojs/node-server#377</a></li>
<li>perf(request): fast-path QUERY methods by <a
href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/376">honojs/node-server#376</a></li>
<li>perf(request): fast-path PATCH method by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/380">honojs/node-server#380</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.10...v2.0.11">https://github.com/honojs/node-server/compare/v2.0.10...v2.0.11</a></p>
<h2>v2.0.10</h2>
<h2>Security fixes</h2>
<p>This release includes a fix for the following security issue:</p>
<h3>Unauthenticated memory-leak DoS via aborted WebSocket handshake</h3>
<p>Affects: <code>upgradeWebSocket</code>. A WebSocket upgrade request
with a missing or malformed <code>Sec-WebSocket-Key</code> header leaked
the request's <code>IncomingMessage</code> and left a promise pending,
even though no connection was established. Since the route is reachable
pre-handshake without authentication, an attacker could flood it to
gradually exhaust memory. <a
href="https://github.com/honojs/node-server/security/advisories/GHSA-9mqv-5hh9-4cgg">GHSA-9mqv-5hh9-4cgg</a></p>
<hr />
<p>Users of <code>upgradeWebSocket</code> are encouraged to upgrade to
this version.</p>
<h2>v2.0.9</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(websocket): polyfill missing ErrorEvent global by <a
href="https://github.com/otnc"><code>@​otnc</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/371">honojs/node-server#371</a></li>
<li>fix(serve-static): correct Range header parsing edge cases by <a
href="https://github.com/otnc"><code>@​otnc</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/372">honojs/node-server#372</a></li>
<li>fix: recover complete request bodies after client disconnect by <a
href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/375">honojs/node-server#375</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/otnc"><code>@​otnc</code></a> made their
first contribution in <a
href="https://redirect.github.com/honojs/node-server/pull/371">honojs/node-server#371</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="82ba34e6b1"><code>82ba34e</code></a>
2.1.0</li>
<li><a
href="1f2909a5ef"><code>1f2909a</code></a>
fix(listener): avoid uncaught error when force-closing a non-standard
socket ...</li>
<li><a
href="977a242557"><code>977a242</code></a>
feat: add Early Hints (HTTP 103) middleware (<a
href="https://redirect.github.com/honojs/node-server/issues/378">#378</a>)</li>
<li><a
href="a813b6cdaa"><code>a813b6c</code></a>
2.0.12</li>
<li><a
href="caf48bafd4"><code>caf48ba</code></a>
fix(response): copy headers when init is a foreign Response (<a
href="https://redirect.github.com/honojs/node-server/issues/382">#382</a>)</li>
<li><a
href="3b1dd68758"><code>3b1dd68</code></a>
test: replace supertest (<a
href="https://redirect.github.com/honojs/node-server/issues/379">#379</a>)</li>
<li><a
href="834e54f15c"><code>834e54f</code></a>
2.0.11</li>
<li><a
href="ba72bcd8c5"><code>ba72bcd</code></a>
perf(request): fast-path PATCH method (<a
href="https://redirect.github.com/honojs/node-server/issues/380">#380</a>)</li>
<li><a
href="962baa4638"><code>962baa4</code></a>
perf(request): fast-path QUERY methods (<a
href="https://redirect.github.com/honojs/node-server/issues/376">#376</a>)</li>
<li><a
href="62284d6593"><code>62284d6</code></a>
test: use a custom helper for path traversal tests (<a
href="https://redirect.github.com/honojs/node-server/issues/377">#377</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/honojs/node-server/compare/v1.19.13...v2.1.0">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for <code>@​hono/node-server</code> since your current
version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hono/node-server&package-manager=npm_and_yarn&previous-version=1.19.13&new-version=2.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/modelcontextprotocol/kotlin-sdk/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 12:02:22 +02:00
Yusuf İhsan Görgel
76c12274ef
feat(core): add SEP-2575 request metadata and discovery types (#893)
## Summary

Part of #815.

Adds the core types and codecs needed for SEP-2575:

- experimental accessors for request-scoped metadata while preserving
legacy request shapes and unknown `_meta` entries;
- `server/discover` request/result types, cache fields, and
unsupported-version error data; and
- polymorphic request/result decoding with wire-format and
malformed-input coverage.

The discovery types match the merged draft schema in
modelcontextprotocol/modelcontextprotocol#3002: `protocolVersion` and
`clientCapabilities` are required, `clientInfo` is optional, and
optional server information remains in result `_meta`.

## Motivation and Context

SEP-2575 moves protocol and client context onto individual requests and
introduces `server/discover`. The shared `RequestMeta` accessors remain
nullable so legacy requests stay representable; `DiscoverRequestParams`
enforces the fields required by the new discovery request.

This PR stops at the core type and codec boundary. It does not add
server admission, request-scoped dispatch, Streamable HTTP,
authentication, subscriptions, MRTR, lifecycle hooks, or a discovery
DSL.

## How Has This Been Tested?

- JVM: 597/597 tests
- JS Node and Chrome: 528/528 tests per target
- WasmJS Node and Chrome: 528/528 tests per target
- iOS Simulator arm64 and macOS arm64: 528/528 tests per target
- API dump/check, ktlint, detekt, and diff checks

Coverage includes required discovery metadata, optional `clientInfo`,
required cache fields, unknown metadata round-trips, the legacy
`resultType` fallback, unsupported-version data, and polymorphic result
classification.

## Breaking Changes

This adds `DiscoverRequest` as a new `ClientRequest` subtype. Consumers
recompiling exhaustive `when` expressions over `ClientRequest` may need
to add a branch. Existing request types and wire representations are
unchanged.

## Types of changes

- [ ] Bug fix (non-breaking change which fixes an issue)
- [x] New feature (non-breaking change which adds functionality)
- [x] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update

## Checklist

- [x] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [x] My code follows the repository's style guidelines
- [x] New and existing tests pass locally
- [x] I have added appropriate error handling
- [x] I have added or updated documentation as needed

## Additional context

`ttlMs` and `cacheScope` have Kotlin construction defaults but remain
required when decoding. An absent `resultType` decodes as `"complete"`
for compatibility with legacy results. Discovery result selection
requires the complete required shape so unrelated result extensions are
not misclassified.

---------

Co-authored-by: Pavel Gorgulov <devcrocod@gmail.com>
2026-08-05 23:20:07 +02:00
dependabot[bot]
0ab49f30be
chore(deps): bump the all-dependencies group across 1 directory with 2 updates (#937)
Bumps the all-dependencies group with 2 updates in the
/integration-test/src/jvmTest/typescript directory:
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
and [tsx](https://github.com/privatenumber/tsx).

Updates `@types/node` from 26.1.1 to 26.1.2
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare
view</a></li>
</ul>
</details>
<br />

Updates `tsx` from 4.23.1 to 4.23.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/privatenumber/tsx/releases">tsx's
releases</a>.</em></p>
<blockquote>
<h2>v4.23.4</h2>
<h2><a
href="https://github.com/privatenumber/tsx/compare/v4.23.3...v4.23.4">4.23.4</a>
(2026-08-02)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>cli:</strong> allow async process.once() signal handlers to
finish (<a
href="https://redirect.github.com/privatenumber/tsx/issues/827">#827</a>)
(<a
href="2afc7bbcbd">2afc7bb</a>)</li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.23.4"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
<h2>v4.23.3</h2>
<h2><a
href="https://github.com/privatenumber/tsx/compare/v4.23.2...v4.23.3">4.23.3</a>
(2026-08-02)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>preserve listenerCount overload semantics (<a
href="https://redirect.github.com/privatenumber/tsx/issues/823">#823</a>)
(<a
href="b6574d4307">b6574d4</a>)</li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.23.3"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
<h2>v4.23.2</h2>
<h2><a
href="https://github.com/privatenumber/tsx/compare/v4.23.1...v4.23.2">4.23.2</a>
(2026-08-02)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>watch:</strong> exit with 128 + signal number when
interrupted (<a
href="https://redirect.github.com/privatenumber/tsx/issues/820">#820</a>)
(<a
href="0b00bc84d1">0b00bc8</a>)</li>
</ul>
<hr />
<p>This release is also available on:</p>
<ul>
<li><a href="https://www.npmjs.com/package/tsx/v/4.23.2"><code>npm
package (@​latest dist-tag)</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2afc7bbcbd"><code>2afc7bb</code></a>
fix(cli): allow async process.once() signal handlers to finish (<a
href="https://redirect.github.com/privatenumber/tsx/issues/827">#827</a>)</li>
<li><a
href="b6574d4307"><code>b6574d4</code></a>
fix: preserve listenerCount overload semantics (<a
href="https://redirect.github.com/privatenumber/tsx/issues/823">#823</a>)</li>
<li><a
href="0b00bc84d1"><code>0b00bc8</code></a>
fix(watch): exit with 128 + signal number when interrupted (<a
href="https://redirect.github.com/privatenumber/tsx/issues/820">#820</a>)</li>
<li><a
href="3216332611"><code>3216332</code></a>
docs(faq): minor grammar nit (<a
href="https://redirect.github.com/privatenumber/tsx/issues/686">#686</a>)</li>
<li><a
href="5828ffe328"><code>5828ffe</code></a>
chore: require cross-spawn 7.0.6 (<a
href="https://redirect.github.com/privatenumber/tsx/issues/815">#815</a>)</li>
<li><a
href="33afa363be"><code>33afa36</code></a>
ci: gate releases on test workflow</li>
<li>See full diff in <a
href="https://github.com/privatenumber/tsx/compare/v4.23.1...v4.23.4">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-05 21:29:09 +02:00
dependabot[bot]
455a4b30c3
chore(deps): bump fast-uri from 3.1.4 to 3.1.5 in /integration-test/src/jvmTest/typescript (#935)
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.4 to
3.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/fastify/fast-uri/releases">fast-uri's
releases</a>.</em></p>
<blockquote>
<h2>v3.1.5</h2>
<h2>⚠️ Security Warning</h2>
<p>Fix for <a
href="https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7">https://github.com/fastify/fast-uri/security/advisories/GHSA-7p8r-x3mc-p8w7</a></p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5">https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5e179cbb46"><code>5e179cb</code></a>
Bumped v3.1.5</li>
<li><a
href="2cad02d6ed"><code>2cad02d</code></a>
Merge commit from fork</li>
<li>See full diff in <a
href="https://github.com/fastify/fast-uri/compare/v3.1.4...v3.1.5">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-05 20:46:39 +02:00
dependabot[bot]
f1cf484e25
chore(deps): bump kotlin from 2.4.0 to 2.4.10 in /samples/kotlinlang-mcp-server (#903)
Bumps `kotlin` from 2.4.0 to 2.4.10.
Updates `org.jetbrains.kotlin.jvm` from 2.4.0 to 2.4.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.jvm's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.10</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
<h2>Kotlin 2.4.10-RC2</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.jvm's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.10</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5687445832"><code>5687445</code></a>
Add Changelog for 2.4.10-RC2</li>
<li><a
href="ba30392c45"><code>ba30392</code></a>
[Wasm] Support regenerate unchanged modules flag on KGP</li>
<li><a
href="6307e7310d"><code>6307e73</code></a>
[Wasm] Implement Xwasm-IC-generate-unchanged-modules flag</li>
<li><a
href="39d7aee847"><code>39d7aee</code></a>
Add ChangeLog for 2.4.10-RC2</li>
<li><a
href="a2956bed85"><code>a2956be</code></a>
[Gradle] Update karma.conf.js to use 'require(...)' instead plain
strings</li>
<li><a
href="9b1361ce7a"><code>9b1361c</code></a>
[Gradle] KT-87223: Updated regression test</li>
<li><a
href="a4c153af52"><code>a4c153a</code></a>
[Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat
config</li>
<li><a
href="bc04b90d24"><code>bc04b90</code></a>
Add ChangeLog for 2.4.10-RC</li>
<li><a
href="bbcb94baa2"><code>bbcb94b</code></a>
[CRI] explicitly disable CRI generation for non-JVM targets to avoid
false-po...</li>
<li><a
href="6c2c458f1d"><code>6c2c458</code></a>
Scripting: fix jvmTarget processing from script annotations</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.0...v2.4.10">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.jetbrains.kotlin.plugin.serialization` from 2.4.0 to 2.4.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.plugin.serialization's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.10</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
<h2>Kotlin 2.4.10-RC2</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.plugin.serialization's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.10</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5687445832"><code>5687445</code></a>
Add Changelog for 2.4.10-RC2</li>
<li><a
href="ba30392c45"><code>ba30392</code></a>
[Wasm] Support regenerate unchanged modules flag on KGP</li>
<li><a
href="6307e7310d"><code>6307e73</code></a>
[Wasm] Implement Xwasm-IC-generate-unchanged-modules flag</li>
<li><a
href="39d7aee847"><code>39d7aee</code></a>
Add ChangeLog for 2.4.10-RC2</li>
<li><a
href="a2956bed85"><code>a2956be</code></a>
[Gradle] Update karma.conf.js to use 'require(...)' instead plain
strings</li>
<li><a
href="9b1361ce7a"><code>9b1361c</code></a>
[Gradle] KT-87223: Updated regression test</li>
<li><a
href="a4c153af52"><code>a4c153a</code></a>
[Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat
config</li>
<li><a
href="bc04b90d24"><code>bc04b90</code></a>
Add ChangeLog for 2.4.10-RC</li>
<li><a
href="bbcb94baa2"><code>bbcb94b</code></a>
[CRI] explicitly disable CRI generation for non-JVM targets to avoid
false-po...</li>
<li><a
href="6c2c458f1d"><code>6c2c458</code></a>
Scripting: fix jvmTarget processing from script annotations</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.0...v2.4.10">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 20:55:25 +02:00
dependabot[bot]
046af27213
chore(deps): bump kotlin from 2.4.0 to 2.4.10 in /samples/kotlin-mcp-server (#900)
Bumps `kotlin` from 2.4.0 to 2.4.10.
Updates `org.jetbrains.kotlin.jvm` from 2.4.0 to 2.4.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.jvm's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.10</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
<h2>Kotlin 2.4.10-RC2</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.jvm's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.10</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5687445832"><code>5687445</code></a>
Add Changelog for 2.4.10-RC2</li>
<li><a
href="ba30392c45"><code>ba30392</code></a>
[Wasm] Support regenerate unchanged modules flag on KGP</li>
<li><a
href="6307e7310d"><code>6307e73</code></a>
[Wasm] Implement Xwasm-IC-generate-unchanged-modules flag</li>
<li><a
href="39d7aee847"><code>39d7aee</code></a>
Add ChangeLog for 2.4.10-RC2</li>
<li><a
href="a2956bed85"><code>a2956be</code></a>
[Gradle] Update karma.conf.js to use 'require(...)' instead plain
strings</li>
<li><a
href="9b1361ce7a"><code>9b1361c</code></a>
[Gradle] KT-87223: Updated regression test</li>
<li><a
href="a4c153af52"><code>a4c153a</code></a>
[Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat
config</li>
<li><a
href="bc04b90d24"><code>bc04b90</code></a>
Add ChangeLog for 2.4.10-RC</li>
<li><a
href="bbcb94baa2"><code>bbcb94b</code></a>
[CRI] explicitly disable CRI generation for non-JVM targets to avoid
false-po...</li>
<li><a
href="6c2c458f1d"><code>6c2c458</code></a>
Scripting: fix jvmTarget processing from script annotations</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.0...v2.4.10">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.jetbrains.kotlin.plugin.serialization` from 2.4.0 to 2.4.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.plugin.serialization's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.10</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
<h2>Kotlin 2.4.10-RC2</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.plugin.serialization's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.10</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5687445832"><code>5687445</code></a>
Add Changelog for 2.4.10-RC2</li>
<li><a
href="ba30392c45"><code>ba30392</code></a>
[Wasm] Support regenerate unchanged modules flag on KGP</li>
<li><a
href="6307e7310d"><code>6307e73</code></a>
[Wasm] Implement Xwasm-IC-generate-unchanged-modules flag</li>
<li><a
href="39d7aee847"><code>39d7aee</code></a>
Add ChangeLog for 2.4.10-RC2</li>
<li><a
href="a2956bed85"><code>a2956be</code></a>
[Gradle] Update karma.conf.js to use 'require(...)' instead plain
strings</li>
<li><a
href="9b1361ce7a"><code>9b1361c</code></a>
[Gradle] KT-87223: Updated regression test</li>
<li><a
href="a4c153af52"><code>a4c153a</code></a>
[Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat
config</li>
<li><a
href="bc04b90d24"><code>bc04b90</code></a>
Add ChangeLog for 2.4.10-RC</li>
<li><a
href="bbcb94baa2"><code>bbcb94b</code></a>
[CRI] explicitly disable CRI generation for non-JVM targets to avoid
false-po...</li>
<li><a
href="6c2c458f1d"><code>6c2c458</code></a>
Scripting: fix jvmTarget processing from script annotations</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.0...v2.4.10">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 20:30:46 +02:00
dependabot[bot]
00a27e6ceb
chore(deps): bump kotlin from 2.4.0 to 2.4.10 in /samples/simple-streamable-server (#904)
Bumps `kotlin` from 2.4.0 to 2.4.10.
Updates `org.jetbrains.kotlin.jvm` from 2.4.0 to 2.4.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.jvm's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.10</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
<h2>Kotlin 2.4.10-RC2</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.jvm's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.10</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5687445832"><code>5687445</code></a>
Add Changelog for 2.4.10-RC2</li>
<li><a
href="ba30392c45"><code>ba30392</code></a>
[Wasm] Support regenerate unchanged modules flag on KGP</li>
<li><a
href="6307e7310d"><code>6307e73</code></a>
[Wasm] Implement Xwasm-IC-generate-unchanged-modules flag</li>
<li><a
href="39d7aee847"><code>39d7aee</code></a>
Add ChangeLog for 2.4.10-RC2</li>
<li><a
href="a2956bed85"><code>a2956be</code></a>
[Gradle] Update karma.conf.js to use 'require(...)' instead plain
strings</li>
<li><a
href="9b1361ce7a"><code>9b1361c</code></a>
[Gradle] KT-87223: Updated regression test</li>
<li><a
href="a4c153af52"><code>a4c153a</code></a>
[Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat
config</li>
<li><a
href="bc04b90d24"><code>bc04b90</code></a>
Add ChangeLog for 2.4.10-RC</li>
<li><a
href="bbcb94baa2"><code>bbcb94b</code></a>
[CRI] explicitly disable CRI generation for non-JVM targets to avoid
false-po...</li>
<li><a
href="6c2c458f1d"><code>6c2c458</code></a>
Scripting: fix jvmTarget processing from script annotations</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.0...v2.4.10">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.jetbrains.kotlin.plugin.serialization` from 2.4.0 to 2.4.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.plugin.serialization's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.10</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
<h2>Kotlin 2.4.10-RC2</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.plugin.serialization's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.10</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5687445832"><code>5687445</code></a>
Add Changelog for 2.4.10-RC2</li>
<li><a
href="ba30392c45"><code>ba30392</code></a>
[Wasm] Support regenerate unchanged modules flag on KGP</li>
<li><a
href="6307e7310d"><code>6307e73</code></a>
[Wasm] Implement Xwasm-IC-generate-unchanged-modules flag</li>
<li><a
href="39d7aee847"><code>39d7aee</code></a>
Add ChangeLog for 2.4.10-RC2</li>
<li><a
href="a2956bed85"><code>a2956be</code></a>
[Gradle] Update karma.conf.js to use 'require(...)' instead plain
strings</li>
<li><a
href="9b1361ce7a"><code>9b1361c</code></a>
[Gradle] KT-87223: Updated regression test</li>
<li><a
href="a4c153af52"><code>a4c153a</code></a>
[Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat
config</li>
<li><a
href="bc04b90d24"><code>bc04b90</code></a>
Add ChangeLog for 2.4.10-RC</li>
<li><a
href="bbcb94baa2"><code>bbcb94b</code></a>
[CRI] explicitly disable CRI generation for non-JVM targets to avoid
false-po...</li>
<li><a
href="6c2c458f1d"><code>6c2c458</code></a>
Scripting: fix jvmTarget processing from script annotations</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.0...v2.4.10">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 19:46:01 +02:00
dependabot[bot]
dae3476f7d
chore(deps): bump kotlin from 2.4.0 to 2.4.10 in /samples/weather-stdio-server (#905)
Bumps `kotlin` from 2.4.0 to 2.4.10.
Updates `org.jetbrains.kotlin.jvm` from 2.4.0 to 2.4.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.jvm's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.10</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
<h2>Kotlin 2.4.10-RC2</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.jvm's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.10</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5687445832"><code>5687445</code></a>
Add Changelog for 2.4.10-RC2</li>
<li><a
href="ba30392c45"><code>ba30392</code></a>
[Wasm] Support regenerate unchanged modules flag on KGP</li>
<li><a
href="6307e7310d"><code>6307e73</code></a>
[Wasm] Implement Xwasm-IC-generate-unchanged-modules flag</li>
<li><a
href="39d7aee847"><code>39d7aee</code></a>
Add ChangeLog for 2.4.10-RC2</li>
<li><a
href="a2956bed85"><code>a2956be</code></a>
[Gradle] Update karma.conf.js to use 'require(...)' instead plain
strings</li>
<li><a
href="9b1361ce7a"><code>9b1361c</code></a>
[Gradle] KT-87223: Updated regression test</li>
<li><a
href="a4c153af52"><code>a4c153a</code></a>
[Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat
config</li>
<li><a
href="bc04b90d24"><code>bc04b90</code></a>
Add ChangeLog for 2.4.10-RC</li>
<li><a
href="bbcb94baa2"><code>bbcb94b</code></a>
[CRI] explicitly disable CRI generation for non-JVM targets to avoid
false-po...</li>
<li><a
href="6c2c458f1d"><code>6c2c458</code></a>
Scripting: fix jvmTarget processing from script annotations</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.0...v2.4.10">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.jetbrains.kotlin.plugin.serialization` from 2.4.0 to 2.4.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin.plugin.serialization's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.10</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
<h2>Kotlin 2.4.10-RC2</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin.plugin.serialization's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.10</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5687445832"><code>5687445</code></a>
Add Changelog for 2.4.10-RC2</li>
<li><a
href="ba30392c45"><code>ba30392</code></a>
[Wasm] Support regenerate unchanged modules flag on KGP</li>
<li><a
href="6307e7310d"><code>6307e73</code></a>
[Wasm] Implement Xwasm-IC-generate-unchanged-modules flag</li>
<li><a
href="39d7aee847"><code>39d7aee</code></a>
Add ChangeLog for 2.4.10-RC2</li>
<li><a
href="a2956bed85"><code>a2956be</code></a>
[Gradle] Update karma.conf.js to use 'require(...)' instead plain
strings</li>
<li><a
href="9b1361ce7a"><code>9b1361c</code></a>
[Gradle] KT-87223: Updated regression test</li>
<li><a
href="a4c153af52"><code>a4c153a</code></a>
[Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat
config</li>
<li><a
href="bc04b90d24"><code>bc04b90</code></a>
Add ChangeLog for 2.4.10-RC</li>
<li><a
href="bbcb94baa2"><code>bbcb94b</code></a>
[CRI] explicitly disable CRI generation for non-JVM targets to avoid
false-po...</li>
<li><a
href="6c2c458f1d"><code>6c2c458</code></a>
Scripting: fix jvmTarget processing from script annotations</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.0...v2.4.10">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 19:15:31 +02:00
dependabot[bot]
7284373aa4
chore(deps): bump @hono/node-server and @modelcontextprotocol/sdk in /integration-test/src/jvmTest/typescript (#933)
Bumps [@hono/node-server](https://github.com/honojs/node-server) to
2.1.0 and updates ancestor dependency
[@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk).
These dependencies need to be updated together.

Updates `@hono/node-server` from 1.19.13 to 2.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/honojs/node-server/releases">@​hono/node-server's
releases</a>.</em></p>
<blockquote>
<h2>v2.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat: add Early Hints (HTTP 103) middleware by <a
href="https://github.com/bilal-azam"><code>@​bilal-azam</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/378">honojs/node-server#378</a></li>
<li>fix(listener): avoid uncaught error when force-closing a
non-standard socket by <a
href="https://github.com/mohamedramadan14"><code>@​mohamedramadan14</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/383">honojs/node-server#383</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/bilal-azam"><code>@​bilal-azam</code></a> made
their first contribution in <a
href="https://redirect.github.com/honojs/node-server/pull/378">honojs/node-server#378</a></li>
<li><a
href="https://github.com/mohamedramadan14"><code>@​mohamedramadan14</code></a>
made their first contribution in <a
href="https://redirect.github.com/honojs/node-server/pull/383">honojs/node-server#383</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.12...v2.1.0">https://github.com/honojs/node-server/compare/v2.0.12...v2.1.0</a></p>
<h2>v2.0.12</h2>
<h2>What's Changed</h2>
<ul>
<li>test: replace supertest by <a
href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/379">honojs/node-server#379</a></li>
<li>fix(response): copy headers when init is a foreign Response by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/382">honojs/node-server#382</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.11...v2.0.12">https://github.com/honojs/node-server/compare/v2.0.11...v2.0.12</a></p>
<h2>v2.0.11</h2>
<h2>What's Changed</h2>
<ul>
<li>test: use a custom helper for path traversal tests by <a
href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/377">honojs/node-server#377</a></li>
<li>perf(request): fast-path QUERY methods by <a
href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/376">honojs/node-server#376</a></li>
<li>perf(request): fast-path PATCH method by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/380">honojs/node-server#380</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.10...v2.0.11">https://github.com/honojs/node-server/compare/v2.0.10...v2.0.11</a></p>
<h2>v2.0.10</h2>
<h2>Security fixes</h2>
<p>This release includes a fix for the following security issue:</p>
<h3>Unauthenticated memory-leak DoS via aborted WebSocket handshake</h3>
<p>Affects: <code>upgradeWebSocket</code>. A WebSocket upgrade request
with a missing or malformed <code>Sec-WebSocket-Key</code> header leaked
the request's <code>IncomingMessage</code> and left a promise pending,
even though no connection was established. Since the route is reachable
pre-handshake without authentication, an attacker could flood it to
gradually exhaust memory. <a
href="https://github.com/honojs/node-server/security/advisories/GHSA-9mqv-5hh9-4cgg">GHSA-9mqv-5hh9-4cgg</a></p>
<hr />
<p>Users of <code>upgradeWebSocket</code> are encouraged to upgrade to
this version.</p>
<h2>v2.0.9</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(websocket): polyfill missing ErrorEvent global by <a
href="https://github.com/otnc"><code>@​otnc</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/371">honojs/node-server#371</a></li>
<li>fix(serve-static): correct Range header parsing edge cases by <a
href="https://github.com/otnc"><code>@​otnc</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/372">honojs/node-server#372</a></li>
<li>fix: recover complete request bodies after client disconnect by <a
href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/375">honojs/node-server#375</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/otnc"><code>@​otnc</code></a> made their
first contribution in <a
href="https://redirect.github.com/honojs/node-server/pull/371">honojs/node-server#371</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="82ba34e6b1"><code>82ba34e</code></a>
2.1.0</li>
<li><a
href="1f2909a5ef"><code>1f2909a</code></a>
fix(listener): avoid uncaught error when force-closing a non-standard
socket ...</li>
<li><a
href="977a242557"><code>977a242</code></a>
feat: add Early Hints (HTTP 103) middleware (<a
href="https://redirect.github.com/honojs/node-server/issues/378">#378</a>)</li>
<li><a
href="a813b6cdaa"><code>a813b6c</code></a>
2.0.12</li>
<li><a
href="caf48bafd4"><code>caf48ba</code></a>
fix(response): copy headers when init is a foreign Response (<a
href="https://redirect.github.com/honojs/node-server/issues/382">#382</a>)</li>
<li><a
href="3b1dd68758"><code>3b1dd68</code></a>
test: replace supertest (<a
href="https://redirect.github.com/honojs/node-server/issues/379">#379</a>)</li>
<li><a
href="834e54f15c"><code>834e54f</code></a>
2.0.11</li>
<li><a
href="ba72bcd8c5"><code>ba72bcd</code></a>
perf(request): fast-path PATCH method (<a
href="https://redirect.github.com/honojs/node-server/issues/380">#380</a>)</li>
<li><a
href="962baa4638"><code>962baa4</code></a>
perf(request): fast-path QUERY methods (<a
href="https://redirect.github.com/honojs/node-server/issues/376">#376</a>)</li>
<li><a
href="62284d6593"><code>62284d6</code></a>
test: use a custom helper for path traversal tests (<a
href="https://redirect.github.com/honojs/node-server/issues/377">#377</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/honojs/node-server/compare/v1.19.13...v2.1.0">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for <code>@​hono/node-server</code> since your current
version.</p>
</details>
<br />

Updates `@modelcontextprotocol/sdk` from 1.29.0 to 1.30.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/typescript-sdk/releases">@​modelcontextprotocol/sdk's
releases</a>.</em></p>
<blockquote>
<h2>1.30.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(server): prioritize zod issues and format them by <a
href="https://github.com/mozmo15"><code>@​mozmo15</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1503">modelcontextprotocol/typescript-sdk#1503</a></li>
<li>chore(ci): switch publish to OIDC trusted publishing by <a
href="https://github.com/felixweinberger"><code>@​felixweinberger</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1839">modelcontextprotocol/typescript-sdk#1839</a></li>
<li>Add end-to-end test suite by <a
href="https://github.com/felixweinberger"><code>@​felixweinberger</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2167">modelcontextprotocol/typescript-sdk#2167</a></li>
<li>v1 stdio buffer limit by <a
href="https://github.com/KKonstantinov"><code>@​KKonstantinov</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2239">modelcontextprotocol/typescript-sdk#2239</a></li>
<li>fix: support Zod 3.25 method literals by <a
href="https://github.com/mattzcarey"><code>@​mattzcarey</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2368">modelcontextprotocol/typescript-sdk#2368</a></li>
<li>Validate Content-Type by parsed media type instead of substring
match (v1.x) by <a
href="https://github.com/felixweinberger"><code>@​felixweinberger</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2444">modelcontextprotocol/typescript-sdk#2444</a></li>
<li>fix: send SSE keep-alive comment frames from Streamable HTTP server
transport (v1.x) by <a
href="https://github.com/mattzcarey"><code>@​mattzcarey</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2538">modelcontextprotocol/typescript-sdk#2538</a></li>
<li>fix(deps): widen <code>@​hono/node-server</code> past
GHSA-frvp-7c67-39w9 by <a
href="https://github.com/arimu1"><code>@​arimu1</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2549">modelcontextprotocol/typescript-sdk#2549</a></li>
<li>Fix SSE keep-alive timer lifecycle in Streamable HTTP server
transport (v1.x) by <a
href="https://github.com/felixweinberger"><code>@​felixweinberger</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2547">modelcontextprotocol/typescript-sdk#2547</a></li>
<li>chore: bump version to 1.30.0 by <a
href="https://github.com/felixweinberger"><code>@​felixweinberger</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2563">modelcontextprotocol/typescript-sdk#2563</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/mozmo15"><code>@​mozmo15</code></a> made
their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/1503">modelcontextprotocol/typescript-sdk#1503</a></li>
<li><a href="https://github.com/arimu1"><code>@​arimu1</code></a> made
their first contribution in <a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2549">modelcontextprotocol/typescript-sdk#2549</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/modelcontextprotocol/typescript-sdk/compare/v1.29.0...1.30.0">https://github.com/modelcontextprotocol/typescript-sdk/compare/v1.29.0...1.30.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2d889f2b32"><code>2d889f2</code></a>
chore: bump version to 1.30.0 (<a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2563">#2563</a>)</li>
<li><a
href="e3f3daa12c"><code>e3f3daa</code></a>
Fix SSE keep-alive timer lifecycle in Streamable HTTP server transport
(v1.x)...</li>
<li><a
href="bb5a718cbf"><code>bb5a718</code></a>
fix(deps): widen <code>@​hono/node-server</code> past
GHSA-frvp-7c67-39w9 (<a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2549">#2549</a>)</li>
<li><a
href="1dad2634ce"><code>1dad263</code></a>
fix: send SSE keep-alive comment frames from Streamable HTTP server
transport...</li>
<li><a
href="69749aa508"><code>69749aa</code></a>
Validate Content-Type by parsed media type instead of substring match
(v1.x) ...</li>
<li><a
href="369513df7b"><code>369513d</code></a>
fix: support Zod 3.25 method literals (<a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2368">#2368</a>)</li>
<li><a
href="e7ee57c2f3"><code>e7ee57c</code></a>
v1 stdio buffer limit (<a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2239">#2239</a>)</li>
<li><a
href="c36e1ef5bb"><code>c36e1ef</code></a>
Add end-to-end test suite (<a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2167">#2167</a>)</li>
<li><a
href="bf1e022bd2"><code>bf1e022</code></a>
chore(ci): switch publish to OIDC trusted publishing (<a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/1839">#1839</a>)</li>
<li><a
href="9edbab7a09"><code>9edbab7</code></a>
fix(server): prioritize zod issues and format them (<a
href="https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/1503">#1503</a>)</li>
<li>See full diff in <a
href="https://github.com/modelcontextprotocol/typescript-sdk/compare/v1.29.0...1.30.0">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for <code>@​modelcontextprotocol/sdk</code> since your current
version.</p>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 18:21:38 +02:00
dependabot[bot]
9249c69295
chore(deps): bump ip-address from 10.2.0 to 10.4.0 in /integration-test/src/jvmTest/typescript (#934)
Bumps [ip-address](https://github.com/beaugunderson/ip-address) from
10.2.0 to 10.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/beaugunderson/ip-address/releases">ip-address's
releases</a>.</em></p>
<blockquote>
<h2>v10.4.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add GitHub Actions CI by <a
href="https://github.com/beaugunderson"><code>@​beaugunderson</code></a>
in <a
href="https://redirect.github.com/beaugunderson/ip-address/pull/213">beaugunderson/ip-address#213</a></li>
<li>Keep the package loadable on node 12, and enforce it by <a
href="https://github.com/beaugunderson"><code>@​beaugunderson</code></a>
in <a
href="https://redirect.github.com/beaugunderson/ip-address/pull/216">beaugunderson/ip-address#216</a></li>
<li>Validate the byte arrays Address6 is given by <a
href="https://github.com/beaugunderson"><code>@​beaugunderson</code></a>
in <a
href="https://redirect.github.com/beaugunderson/ip-address/pull/217">beaugunderson/ip-address#217</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/beaugunderson/ip-address/compare/v10.3.1...v10.4.0">https://github.com/beaugunderson/ip-address/compare/v10.3.1...v10.4.0</a></p>
<h2>v10.3.1</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/beaugunderson/ip-address/compare/v10.3.0...v10.3.1">https://github.com/beaugunderson/ip-address/compare/v10.3.0...v10.3.1</a></p>
<h2>v10.3.0</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/beaugunderson/ip-address/compare/v10.2.2...v10.3.0">https://github.com/beaugunderson/ip-address/compare/v10.2.2...v10.3.0</a></p>
<h2>v10.2.2</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/beaugunderson/ip-address/compare/v10.2.1...v10.2.2">https://github.com/beaugunderson/ip-address/compare/v10.2.1...v10.2.2</a></p>
<h2>v10.2.1</h2>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/beaugunderson/ip-address/compare/v10.2.0...v10.2.1">https://github.com/beaugunderson/ip-address/compare/v10.2.0...v10.2.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fbb8db28f1"><code>fbb8db2</code></a>
10.4.0</li>
<li><a
href="45a2b11ec2"><code>45a2b11</code></a>
Validate the byte arrays Address6 is given (<a
href="https://redirect.github.com/beaugunderson/ip-address/issues/217">#217</a>)</li>
<li><a
href="bac8810b39"><code>bac8810</code></a>
Keep the package loadable on node 12, and enforce it (<a
href="https://redirect.github.com/beaugunderson/ip-address/issues/216">#216</a>)</li>
<li><a
href="9b3d8488d1"><code>9b3d848</code></a>
Add a security policy and a README section on security posture</li>
<li><a
href="e84a7b381d"><code>e84a7b3</code></a>
Order the README API reference Address4, Address6, AddressError</li>
<li><a
href="015160b85e"><code>015160b</code></a>
Collapse each class in the README API reference</li>
<li><a
href="34061a897d"><code>34061a8</code></a>
Pin checkout and setup-node to commits in the release job</li>
<li><a
href="c5fae5d9bd"><code>c5fae5d</code></a>
Pin action-gh-release to a commit and move it to 3.0.2</li>
<li><a
href="e0ef048419"><code>e0ef048</code></a>
Replace CircleCI with GitHub Actions</li>
<li><a
href="5e3ceb779a"><code>5e3ceb7</code></a>
Add GitHub Actions CI across Node 20, 22, 24 and 25 (<a
href="https://redirect.github.com/beaugunderson/ip-address/issues/213">#213</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/beaugunderson/ip-address/compare/v10.2.0...v10.4.0">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for ip-address since your current version.</p>
</details>
<details>
<summary>Install script changes</summary>
<p>This version adds <code>prepare</code> script that runs during
installation. Review the package contents before updating.</p>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 14:27:10 +02:00
dependabot[bot]
4a8ffdfea9
chore(deps): bump the kotlin group across 1 directory with 2 updates (#901)
Bumps the kotlin group with 2 updates in the / directory:
[org.jetbrains.kotlin:kotlin-gradle-plugin](https://github.com/JetBrains/kotlin)
and
[org.jetbrains.kotlin:kotlin-serialization](https://github.com/JetBrains/kotlin).

Updates `org.jetbrains.kotlin:kotlin-gradle-plugin` from 2.4.0 to 2.4.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin:kotlin-gradle-plugin's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.10</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
<h2>Kotlin 2.4.10-RC2</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin:kotlin-gradle-plugin's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.10</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5687445832"><code>5687445</code></a>
Add Changelog for 2.4.10-RC2</li>
<li><a
href="ba30392c45"><code>ba30392</code></a>
[Wasm] Support regenerate unchanged modules flag on KGP</li>
<li><a
href="6307e7310d"><code>6307e73</code></a>
[Wasm] Implement Xwasm-IC-generate-unchanged-modules flag</li>
<li><a
href="39d7aee847"><code>39d7aee</code></a>
Add ChangeLog for 2.4.10-RC2</li>
<li><a
href="a2956bed85"><code>a2956be</code></a>
[Gradle] Update karma.conf.js to use 'require(...)' instead plain
strings</li>
<li><a
href="9b1361ce7a"><code>9b1361c</code></a>
[Gradle] KT-87223: Updated regression test</li>
<li><a
href="a4c153af52"><code>a4c153a</code></a>
[Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat
config</li>
<li><a
href="bc04b90d24"><code>bc04b90</code></a>
Add ChangeLog for 2.4.10-RC</li>
<li><a
href="bbcb94baa2"><code>bbcb94b</code></a>
[CRI] explicitly disable CRI generation for non-JVM targets to avoid
false-po...</li>
<li><a
href="6c2c458f1d"><code>6c2c458</code></a>
Scripting: fix jvmTarget processing from script annotations</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.0...v2.4.10">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.jetbrains.kotlin:kotlin-serialization` from 2.4.0 to 2.4.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin:kotlin-serialization's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.10</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
<h2>Kotlin 2.4.10-RC2</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin:kotlin-serialization's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.10</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5687445832"><code>5687445</code></a>
Add Changelog for 2.4.10-RC2</li>
<li><a
href="ba30392c45"><code>ba30392</code></a>
[Wasm] Support regenerate unchanged modules flag on KGP</li>
<li><a
href="6307e7310d"><code>6307e73</code></a>
[Wasm] Implement Xwasm-IC-generate-unchanged-modules flag</li>
<li><a
href="39d7aee847"><code>39d7aee</code></a>
Add ChangeLog for 2.4.10-RC2</li>
<li><a
href="a2956bed85"><code>a2956be</code></a>
[Gradle] Update karma.conf.js to use 'require(...)' instead plain
strings</li>
<li><a
href="9b1361ce7a"><code>9b1361c</code></a>
[Gradle] KT-87223: Updated regression test</li>
<li><a
href="a4c153af52"><code>a4c153a</code></a>
[Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat
config</li>
<li><a
href="bc04b90d24"><code>bc04b90</code></a>
Add ChangeLog for 2.4.10-RC</li>
<li><a
href="bbcb94baa2"><code>bbcb94b</code></a>
[CRI] explicitly disable CRI generation for non-JVM targets to avoid
false-po...</li>
<li><a
href="6c2c458f1d"><code>6c2c458</code></a>
Scripting: fix jvmTarget processing from script annotations</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.0...v2.4.10">compare
view</a></li>
</ul>
</details>
<br />

Updates `org.jetbrains.kotlin:kotlin-serialization` from 2.4.0 to 2.4.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/releases">org.jetbrains.kotlin:kotlin-serialization's
releases</a>.</em></p>
<blockquote>
<h2>Kotlin 2.4.10</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
<h2>Kotlin 2.4.10-RC2</h2>
<h2>Changelog</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md">org.jetbrains.kotlin:kotlin-serialization's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.10</h2>
<h3>Backend. Wasm</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87066"><code>KT-87066</code></a>
K/Wasm: Not all files are presented in compiler output directory with
multimodule-closed-world and incremental compilation</li>
</ul>
<h3>Compiler</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86939"><code>KT-86939</code></a>
JVM: IllegalStateException &quot;No value for annotation parameter&quot;
when using const val in nested Java annotation array argument</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-83766"><code>KT-83766</code></a>
K2: Wrong sourcePsi is set for <code>SymbolPsiLiteral</code> in SLC for
annotation arguments referencing a const val</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86728"><code>KT-86728</code></a>
Reified type inference: expected type not propagated into inline call
inside lambda with elvis operator</li>
</ul>
<h3>Compose Compiler</h3>
<ul>
<li><a
href="https://issuetracker.google.com/issues/522127447"><code>b/522127447</code></a>
Compose Compiler 2.4: classes previously inferred <code>stable</code>
now reported <code>runtime</code>/<code>Uncertain</code></li>
</ul>
<h3>Klibs</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86501"><code>KT-86501</code></a>
Native: IrTypeAliasSymbolImpl is already bound. Signature:
kotlinx.datetime/Instant|null[0] on iosSimulatorArm64</li>
</ul>
<h3>Tools. CLI</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86930"><code>KT-86930</code></a>
Introduce <code>kotlinr</code> in the Kotlin distribution</li>
</ul>
<h3>Tools. Gradle. BCV</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87223"><code>KT-87223</code></a>
Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath
causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of
2.4.0</li>
</ul>
<h3>Tools. Gradle. JS</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87304"><code>KT-87304</code></a>
jsBrowserTest fails with &quot;exited with errors (exit code:
1)&quot;</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86057"><code>KT-86057</code></a>
kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall
is up-to-date, causing kotlinStoreYarnLock to fail</li>
</ul>
<h3>Tools. Gradle. Multiplatform</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87084"><code>KT-87084</code></a>
False positive warning for JS and Wasm compilations when CRI is
enabled</li>
</ul>
<h3>Tools. Scripts</h3>
<ul>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-87076"><code>KT-87076</code></a>
<code>@file</code>:CompilerOptions(&quot;-jvm-target&quot;, ...) ignored
in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target
1.8</li>
<li><a
href="https://youtrack.jetbrains.com/issue/KT-86352"><code>KT-86352</code></a>
K2 scripting: FirResolvedTypeRef exception when resolving extension
functions from imported scripts</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5687445832"><code>5687445</code></a>
Add Changelog for 2.4.10-RC2</li>
<li><a
href="ba30392c45"><code>ba30392</code></a>
[Wasm] Support regenerate unchanged modules flag on KGP</li>
<li><a
href="6307e7310d"><code>6307e73</code></a>
[Wasm] Implement Xwasm-IC-generate-unchanged-modules flag</li>
<li><a
href="39d7aee847"><code>39d7aee</code></a>
Add ChangeLog for 2.4.10-RC2</li>
<li><a
href="a2956bed85"><code>a2956be</code></a>
[Gradle] Update karma.conf.js to use 'require(...)' instead plain
strings</li>
<li><a
href="9b1361ce7a"><code>9b1361c</code></a>
[Gradle] KT-87223: Updated regression test</li>
<li><a
href="a4c153af52"><code>a4c153a</code></a>
[Gradle] KT-87223: Fix toochain to 2.4.0 for abiValidation compat
config</li>
<li><a
href="bc04b90d24"><code>bc04b90</code></a>
Add ChangeLog for 2.4.10-RC</li>
<li><a
href="bbcb94baa2"><code>bbcb94b</code></a>
[CRI] explicitly disable CRI generation for non-JVM targets to avoid
false-po...</li>
<li><a
href="6c2c458f1d"><code>6c2c458</code></a>
Scripting: fix jvmTarget processing from script annotations</li>
<li>Additional commits viewable in <a
href="https://github.com/JetBrains/kotlin/compare/v2.4.0...v2.4.10">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 14:07:06 +02:00
dependabot[bot]
fe9843ded9
chore(deps): bump the all-actions group across 1 directory with 3 updates (#932)
Bumps the all-actions group with 3 updates in the / directory:
[gradle/actions](https://github.com/gradle/actions),
[actions/stale](https://github.com/actions/stale) and
[github/codeql-action](https://github.com/github/codeql-action).

Updates `gradle/actions` from 6 to 6.2.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/actions/releases">gradle/actions's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.0</h2>
<h2>Highlights</h2>
<p>This release brings significant behaviour improvements to
<strong>Enhanced caching</strong>, improvements to the generated Job
Summary, and a number of correctness and security fixes.</p>
<ol>
<li><strong>Improved cache-cleanup mechanism.</strong> Cleanup of stale
files from the Gradle User Home is now faster, and no longer depends on
Gradle or a JVM. It works by inspecting the local file state directly,
removing the Gradle invocation from the post-build step.</li>
<li><strong>More granular, more stable caching.</strong> The local build
cache is stored as a separate cache entry, so it can be restored and
invalidated independently of the main Gradle User Home entry. Transient
Gradle housekeeping files are excluded from the cache, reducing its size
and improving stability.</li>
<li><strong>Hide obsolete Job summaries in PR commments</strong>: When a
new Job summary comment is added to a PR, previous outdated Job
summaries are now hidden.</li>
<li><strong>Improved caching report in the job summary.</strong> The
cache report now uses a single, consistent layout across all cache
states and providers. Provider information is integrated directly into
the report, and per-entry details are available in an expandable
section. (<a
href="https://redirect.github.com/gradle/actions/issues/985">#985</a>)</li>
<li><strong>Correctness and security fixes.</strong> A unique cache key
is now used per run attempt, so re-runs no longer collide; the job
summary shows the cache key string rather than an internal id; and
bundled dependencies have been updated, including a ReDoS fix and a
fast-xml CVE fix.</li>
</ol>
<h2>What's Changed</h2>
<ul>
<li>Remove unnecessary dependency overrides by <a
href="https://github.com/bigdaz"><code>@​bigdaz</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/981">gradle/actions#981</a></li>
<li>Scope CI-integ-test concurrency groups per-branch by <a
href="https://github.com/bigdaz"><code>@​bigdaz</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/983">gradle/actions#983</a></li>
<li>Improve typings by <a
href="https://github.com/Vampire"><code>@​Vampire</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/938">gradle/actions#938</a></li>
<li>Hide obsolete Job summaries by <a
href="https://github.com/SimonMarquis"><code>@​SimonMarquis</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/902">gradle/actions#902</a></li>
<li>CI: add requireable aggregate/no-op checks for branch protection by
<a href="https://github.com/bigdaz"><code>@​bigdaz</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/984">gradle/actions#984</a></li>
<li>Redesign the caching Job Summary by <a
href="https://github.com/bigdaz"><code>@​bigdaz</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/985">gradle/actions#985</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Vampire"><code>@​Vampire</code></a> made
their first contribution in <a
href="https://redirect.github.com/gradle/actions/pull/938">gradle/actions#938</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/gradle/actions/compare/v6.1.1...v6.2.0">https://github.com/gradle/actions/compare/v6.1.1...v6.2.0</a></p>
<h2>v6.1.1</h2>
<p>This release updates various dependency versions, resolving several
reported security vulnerabilities.
No functional changes are included</p>
<h2>What's Changed</h2>
<ul>
<li>Bump Gradle Wrapper from 9.4.1 to 9.5.1 in
/sources/test/init-scripts by <a
href="https://github.com/bot-githubaction"><code>@​bot-githubaction</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/961">gradle/actions#961</a></li>
<li>Bump Gradle Wrapper from 9.4.1 to 9.5.1 in
/.github/workflow-samples/gradle-plugin by <a
href="https://github.com/bot-githubaction"><code>@​bot-githubaction</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/962">gradle/actions#962</a></li>
<li>Bump Gradle Wrapper from 9.4.1 to 9.5.1 in
/.github/workflow-samples/groovy-dsl by <a
href="https://github.com/bot-githubaction"><code>@​bot-githubaction</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/963">gradle/actions#963</a></li>
<li>Bump Gradle Wrapper from 9.4.1 to 9.5.1 in
/.github/workflow-samples/java-toolchain by <a
href="https://github.com/bot-githubaction"><code>@​bot-githubaction</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/964">gradle/actions#964</a></li>
<li>Bump Gradle Wrapper from 9.4.1 to 9.5.1 in
/.github/workflow-samples/kotlin-dsl by <a
href="https://github.com/bot-githubaction"><code>@​bot-githubaction</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/965">gradle/actions#965</a></li>
<li>Update known wrapper checksums by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot]
in <a
href="https://redirect.github.com/gradle/actions/pull/937">gradle/actions#937</a></li>
<li>Bump the github-actions group across 2 directories with 8 updates by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/gradle/actions/pull/976">gradle/actions#976</a></li>
<li>Bump the npm-dependencies group across 1 directory with 14 updates
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/gradle/actions/pull/970">gradle/actions#970</a></li>
<li>Bump references to Develocity Gradle plugin from 4.4.0 to 4.4.2 by
<a
href="https://github.com/bot-githubaction"><code>@​bot-githubaction</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/973">gradle/actions#973</a></li>
<li>Bump the npm-dependencies group in /sources with 5 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/gradle/actions/pull/977">gradle/actions#977</a></li>
<li>Update <code>@​actions/cache</code> and
<code>@​actions/artifact</code>, stop ignoring them in Dependabot by <a
href="https://github.com/bigdaz"><code>@​bigdaz</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/978">gradle/actions#978</a></li>
<li>Resolve npm security vulnerabilities via dependency overrides by <a
href="https://github.com/bigdaz"><code>@​bigdaz</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/980">gradle/actions#980</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/gradle/actions/compare/v6.1.0...v6.1.1">https://github.com/gradle/actions/compare/v6.1.0...v6.1.1</a></p>
<h2>v6.1.0</h2>
<h2>New: Basic Cache Provider</h2>
<p>A new MIT-licensed <strong>Basic Caching</strong> provider is now
available as an alternative to the proprietary <strong>Enhanced
Caching</strong> provided by <code>gradle-actions-caching</code>. Choose
Basic Caching by setting <code>cache-provider: basic</code> on
<code>setup-gradle</code> or <code>dependency-submission</code>
actions.</p>
<ul>
<li>Built on <code>@actions/cache</code> -- fully open source</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b6eebf33f1"><code>b6eebf3</code></a>
[bot] Update dist directory</li>
<li><a
href="9901393644"><code>9901393</code></a>
Remove unnecessary dependency overrides (<a
href="https://redirect.github.com/gradle/actions/issues/981">#981</a>)</li>
<li><a
href="20ce680c89"><code>20ce680</code></a>
Update RELEASING.md</li>
<li><a
href="5e2ebd065d"><code>5e2ebd0</code></a>
[bot] Update dist directory</li>
<li><a
href="9e2c1cc01d"><code>9e2c1cc</code></a>
Resolve npm security vulnerabilities via dependency overrides (<a
href="https://redirect.github.com/gradle/actions/issues/980">#980</a>)</li>
<li><a
href="657f690528"><code>657f690</code></a>
[bot] Update dist directory</li>
<li><a
href="9d6bacde37"><code>9d6bacd</code></a>
Update <code>@​actions/cache</code> and <code>@​actions/artifact</code>,
stop ignoring them in Dependabot...</li>
<li><a
href="79f6b196a7"><code>79f6b19</code></a>
[bot] Update dist directory</li>
<li><a
href="6781648d2b"><code>6781648</code></a>
Bump the npm-dependencies group in /sources with 5 updates (<a
href="https://redirect.github.com/gradle/actions/issues/977">#977</a>)</li>
<li><a
href="a3b40d2308"><code>a3b40d2</code></a>
[bot] Update dist directory</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/actions/compare/v6...v6.2.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/stale` from 10 to 11
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/stale/releases">actions/stale's
releases</a>.</em></p>
<blockquote>
<h2>v11.0.0</h2>
<h2>What's Changed</h2>
<h3>Enhancement</h3>
<ul>
<li>Migrate to ESM and update dependencies by <a
href="https://github-grid.enterprise.slack.com/team/U08CVLQ4JKE"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1350">actions/stale#1350</a></li>
</ul>
<h3>Dependency Update</h3>
<ul>
<li>Override brace-expansion to 5.0.8 to address 24 high-severity
dependency vulnerabilities by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1351">actions/stale#1351</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/stale/compare/v10...v11.0.0">https://github.com/actions/stale/compare/v10...v11.0.0</a></p>
<h2>v10.4.0</h2>
<h2>What's Changed</h2>
<h3>Bug Fix</h3>
<ul>
<li>Fixed <code>only-issue-types</code> validation by <a
href="https://github.com/trueberryless"><code>@​trueberryless</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1338">actions/stale#1338</a></li>
</ul>
<h3>Dependency Updates</h3>
<ul>
<li>Bump undici to 6.27.0 via override, clean up stale license files,
and version to 10.4.0. by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1342">actions/stale#1342</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/trueberryless"><code>@​trueberryless</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/stale/pull/1338">actions/stale#1338</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/stale/compare/v10.3.0...v10.4.0">https://github.com/actions/stale/compare/v10.3.0...v10.4.0</a></p>
<h2>v10.3.0</h2>
<h2>What's Changed</h2>
<h3>Bug Fix</h3>
<ul>
<li>Enhancement: ignore stale labeling events by <a
href="https://github.com/shamoon"><code>@​shamoon</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1311">actions/stale#1311</a></li>
</ul>
<h3>Dependency Updates</h3>
<ul>
<li>Upgrade dependencies (<code>@​actions/core</code>,
<code>@​octokit/plugin-retry</code>, <a
href="https://github.com/typescript-eslint"><code>@​typescript-eslint</code></a>)
by <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1335">actions/stale#1335</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/shamoon"><code>@​shamoon</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/stale/pull/1311">actions/stale#1311</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/stale/compare/v10...v10.3.0">https://github.com/actions/stale/compare/v10...v10.3.0</a></p>
<h2>v10.2.0</h2>
<h2>What's Changed</h2>
<h3>Bug Fix</h3>
<ul>
<li>Fix checking state cache (fix <a
href="https://redirect.github.com/actions/stale/issues/1136">#1136</a>)
and switch to Octokit helper methods by <a
href="https://github.com/itchyny"><code>@​itchyny</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1152">actions/stale#1152</a></li>
</ul>
<h3>Dependency Updates</h3>
<ul>
<li>Upgrade js-yaml from 4.1.0 to 4.1.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1304">actions/stale#1304</a></li>
<li>Upgrade lodash from 4.17.21 to 4.17.23 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1313">actions/stale#1313</a></li>
<li>Upgrade actions/cache from 4.0.3 to 5.0.2 and actions/github from
5.1.1 to 7.0.0 by <a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1312">actions/stale#1312</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/itchyny"><code>@​itchyny</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/stale/pull/1152">actions/stale#1152</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/stale/compare/v10...v10.2.0">https://github.com/actions/stale/compare/v10...v10.2.0</a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/stale/blob/main/CHANGELOG.md">actions/stale's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h1>[10.1.0]</h1>
<h2>What's Changed</h2>
<ul>
<li>Add only-issue-types option to filter issues by type by <a
href="https://github.com/Bibo-Joshi"><code>@​Bibo-Joshi</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1255">actions/stale#1255</a></li>
</ul>
<h1>[10.0.0]</h1>
<h2>What's Changed</h2>
<h2>Breaking Changes</h2>
<ul>
<li>Upgrade to node 24 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1279">actions/stale#1279</a>
Make sure your runner is on version v2.327.1 or later to ensure
compatibility with this release. <a
href="https://github.com/actions/runner/releases/tag/v2.327.1">Release
Notes</a></li>
</ul>
<h2>Enhancement</h2>
<ul>
<li>Introducing sort-by option by <a
href="https://github.com/suyashgaonkar"><code>@​suyashgaonkar</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1254">actions/stale#1254</a></li>
</ul>
<h2>Dependency Upgrades</h2>
<ul>
<li>Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/stale/pull/1186">actions/stale#1186</a></li>
<li>Upgrade undici from 5.28.4 to 5.28.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/stale/pull/1201">actions/stale#1201</a></li>
<li>Upgrade <code>@​action/cache</code> from 4.0.0 to 4.0.2 by <a
href="https://github.com/aparnajyothi-y"><code>@​aparnajyothi-y</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1226">actions/stale#1226</a></li>
<li>Upgrade <code>@​action/cache</code> from 4.0.2 to 4.0.3 by <a
href="https://github.com/suyashgaonkar"><code>@​suyashgaonkar</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1233">actions/stale#1233</a></li>
<li>Upgrade undici from 5.28.5 to 5.29.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/stale/pull/1251">actions/stale#1251</a></li>
<li>Upgrade form-data to bring in fix for critical vulnerability by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/stale/pull/1277">actions/stale#1277</a></li>
</ul>
<h2>Documentation changes</h2>
<ul>
<li>Changelog update for recent releases by <a
href="https://github.com/suyashgaonkar"><code>@​suyashgaonkar</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1224">actions/stale#1224</a></li>
<li>Permissions update in Readme by <a
href="https://github.com/ghadimir"><code>@​ghadimir</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1248">actions/stale#1248</a></li>
</ul>
<h1>[9.1.0]</h1>
<h2>What's Changed</h2>
<ul>
<li>Documentation update by <a
href="https://github.com/Marukome0743"><code>@​Marukome0743</code></a>
in <a
href="https://redirect.github.com/actions/stale/pull/1116">actions/stale#1116</a></li>
<li>Add workflow file for publishing releases to immutable action
package by <a
href="https://github.com/Jcambass"><code>@​Jcambass</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1179">actions/stale#1179</a></li>
<li>Update undici from 5.28.2 to 5.28.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1150">actions/stale#1150</a></li>
<li>Update actions/checkout from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1091">actions/stale#1091</a></li>
<li>Update actions/publish-action from 0.2.2 to 0.3.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1147">actions/stale#1147</a></li>
<li>Update ts-jest from 29.1.1 to 29.2.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1175">actions/stale#1175</a></li>
<li>Update <code>@​actions/core</code> from 1.10.1 to 1.11.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1191">actions/stale#1191</a></li>
<li>Update <code>@​types/jest</code> from 29.5.11 to 29.5.14 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1193">actions/stale#1193</a></li>
<li>Update <code>@​actions/cache</code> from 3.2.2 to 4.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/stale/pull/1194">actions/stale#1194</a></li>
</ul>
<h1>[9.0.0]</h1>
<h2>Breaking Changes</h2>
<ol>
<li>Action is now stateful: If the action ends because of <a
href="https://github.com/actions/stale#operations-per-run">operations-per-run</a>
then the next run will start from the first unprocessed issue skipping
the issues processed during the previous run(s). The state is reset when
all the issues are processed. This should be considered for scheduling
workflow runs.</li>
<li>Version 9 of this action updated the runtime to Node.js 20. All
scripts are now run with Node.js 20 instead of Node.js 16 and are
affected by any breaking changes between Node.js 16 and 20.</li>
</ol>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4391f3da66"><code>4391f3d</code></a>
Fix 24 high severity vulnerabilities by overriding brace-expansion to
5.0.8 (...</li>
<li><a
href="eaf9131fae"><code>eaf9131</code></a>
refactor: update imports to use ES module syntax and improve test
structure (...</li>
<li>See full diff in <a
href="https://github.com/actions/stale/compare/v10...v11">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action` from 4 to 4.37.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.37.4</h2>
<ul>
<li>This version of the CodeQL Action adds support for the
<code>tools</code> input for the <code>codeql-action/init</code> step to
be specified using a <code>github-codeql-tools</code> <a
href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository
property</a>. This feature will gradually be rolled out following the
release of this version. Once rolled out, this allows for the CodeQL CLI
version that is used in GitHub-managed workflows, such as Default Setup,
to be set to a custom value. For example, customers who run into issues
with rate limits when a new CodeQL CLI version is released can set the
value to <code>toolcache</code> to always use the CodeQL CLI version
that is available in the runner toolcache. For Advanced Setup workflows,
the value provided for <code>tools</code> in the workflow definition
always takes precedence unless the value of the repository property
starts with <code>!</code>. <a
href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li>
</ul>
<h2>v4.37.3</h2>
<p>No user facing changes.</p>
<h2>v4.37.2</h2>
<ul>
<li>The new address format for the <code>config-file</code> input that
was introduced in CodeQL Action 4.37.0 is now enabled by default. In
addition to the format described there, the <code>remote=</code> prefix
can now be used to explicitly indicate that the input refers to a remote
file. All previous input formats continue to be accepted as well. <a
href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li>
<li>The CodeQL Action can now make use of <a
href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured
private registries</a> in Default Setup to retrieve CodeQL configuration
files from remote repositories that require authentication. This will
allow customers to store their CodeQL configuration in a single
repository that can then be referenced by Default Setup workflows in
other repositories. We expect to roll this and other, related changes
out to everyone in July. <a
href="https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li>
</ul>
<h2>v4.37.1</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.20.6 and earlier. These versions of
CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise
Server 3.16, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li>
</ul>
<h2>v4.37.0</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li>
<li>In addition to the existing input format, the
<code>config-file</code> input for the <code>codeql-action/init</code>
step will soon support a new <code>[owner/]repo[@ref][:path]</code>
format. All components except the repository name are optional. If
omitted, <code>owner</code> defaults to the same owner as the repository
the analysis is running for, <code>ref</code> to <code>main</code>, and
<code>path</code> to <code>.github/codeql-action.yaml</code>. Support
for this format ships in this version of the CodeQL Action, but will
only be enabled over the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li>
</ul>
<h2>v4.36.3</h2>
<p>No user facing changes.</p>
<h2>v4.36.2</h2>
<ul>
<li>Cache CodeQL CLI version information across Actions steps. <a
href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li>
<li>Reduce requests while waiting for analysis processing by using
exponential backoff when polling SARIF processing status. <a
href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li>
</ul>
<h2>v4.36.1</h2>
<p>No user facing changes.</p>
<h2>v4.36.0</h2>
<ul>
<li><em>Breaking change</em>: Bump the minimum required CodeQL bundle
version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li>
<li>Add support for SHA-256 Git object IDs. <a
href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li>
</ul>
<h2>v4.35.5</h2>
<ul>
<li>We have improved how the JavaScript bundles for the CodeQL Action
are generated to avoid duplication across bundles and reduce the size of
the repository by around 70%. This should have no effect on the runtime
behaviour of the CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li>
<li>For performance and accuracy reasons, <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a> will now only be enabled on a pull request when
diff-informed analysis is also enabled for that run. If diff-informed
analysis is unavailable (for example, because the PR diff ranges could
not be computed), the action will fall back to a full analysis. <a
href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li>
<li>If multiple inputs are provided for the GitHub-internal
<code>analysis-kinds</code> input, only <code>code-scanning</code> will
be enabled. The <code>analysis-kinds</code> input is experimental, for
GitHub-internal use only, and may change without notice at any time. <a
href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li>
<li>Added an experimental change which, when running a Code Scanning
analysis for a PR with <a
href="https://redirect.github.com/github/roadmap/issues/1158">improved
incremental analysis</a> enabled, prefers CodeQL CLI versions that have
a cached overlay-base database for the configured languages. This speeds
up analysis for a repository when there is not yet a cached overlay-base
database for the latest CLI version. We expect to roll this change out
to everyone in May. <a
href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li>
</ul>
<h2>v4.35.4</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li>
</ul>
<h2>v4.35.3</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.19.3 and earlier. These versions of
CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise
Server 3.15, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3837">#3837</a></li>
<li>Configurations for private registries that use Cloudsmith or GCP
OIDC are now accepted. <a
href="https://redirect.github.com/github/codeql-action/pull/3850">#3850</a></li>
<li>Best-effort connection tests for private registries now use
<code>GET</code> requests instead of <code>HEAD</code> for better
compatibility with various registry implementations. For NuGet feeds,
the test is now always performed against the service index. <a
href="https://redirect.github.com/github/codeql-action/pull/3853">#3853</a></li>
<li>Fixed a bug where two diagnostics produced within the same
millisecond could overwrite each other on disk, causing one of them to
be lost. <a
href="https://redirect.github.com/github/codeql-action/pull/3852">#3852</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3">2.25.3</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3865">#3865</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h2>4.37.4 - 29 Jul 2026</h2>
<ul>
<li>This version of the CodeQL Action adds support for the
<code>tools</code> input for the <code>codeql-action/init</code> step to
be specified using a <code>github-codeql-tools</code> <a
href="https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization">repository
property</a>. This feature will gradually be rolled out following the
release of this version. Once rolled out, this allows for the CodeQL CLI
version that is used in GitHub-managed workflows, such as Default Setup,
to be set to a custom value. For example, customers who run into issues
with rate limits when a new CodeQL CLI version is released can set the
value to <code>toolcache</code> to always use the CodeQL CLI version
that is available in the runner toolcache. For Advanced Setup workflows,
the value provided for <code>tools</code> in the workflow definition
always takes precedence unless the value of the repository property
starts with <code>!</code>. <a
href="https://redirect.github.com/github/codeql-action/pull/4037">#4037</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2">2.26.2</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4051">#4051</a></li>
</ul>
<h2>4.37.3 - 22 Jul 2026</h2>
<p>No user facing changes.</p>
<h2>4.37.2 - 21 Jul 2026</h2>
<ul>
<li>The new address format for the <code>config-file</code> input that
was introduced in CodeQL Action 4.37.0 is now enabled by default. In
addition to the format described there, the <code>remote=</code> prefix
can now be used to explicitly indicate that the input refers to a remote
file. All previous input formats continue to be accepted as well. <a
href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li>
<li>The CodeQL Action can now make use of <a
href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured
private registries</a> in Default Setup to retrieve CodeQL configuration
files from remote repositories that require authentication. This will
allow customers to store their CodeQL configuration in a single
repository that can then be referenced by Default Setup workflows in
other repositories. We expect to roll this and other, related changes
out to everyone in July. <a
href="https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li>
</ul>
<h2>4.37.1 - 16 Jul 2026</h2>
<ul>
<li><em>Upcoming breaking change</em>: Add a deprecation warning for
customers using CodeQL version 2.20.6 and earlier. These versions of
CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise
Server 3.16, and will be unsupported by the next minor release of the
CodeQL Action. <a
href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li>
</ul>
<h2>4.37.0 - 08 Jul 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0">2.26.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/3995">#3995</a></li>
<li>In addition to the existing input format, the
<code>config-file</code> input for the <code>codeql-action/init</code>
step will soon support a new <code>[owner/]repo[@ref][:path]</code>
format. All components except the repository name are optional. If
omitted, <code>owner</code> defaults to the same owner as the repository
the analysis is running for, <code>ref</code> to <code>main</code>, and
<code>path</code> to <code>.github/codeql-action.yaml</code>. Support
for this format ships in this version of the CodeQL Action, but will
only be enabled over the coming weeks. <a
href="https://redirect.github.com/github/codeql-action/pull/3973">#3973</a></li>
</ul>
<h2>4.36.3 - 01 Jul 2026</h2>
<p>No user facing changes.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="18420e3271"><code>18420e3</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4043">#4043</a>
from github/mbg/ts/changelog</li>
<li><a
href="7e8d8970f0"><code>7e8d897</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4046">#4046</a>
from github/mbg/repo-prop/code-quality</li>
<li><a
href="2d4c474c2c"><code>2d4c474</code></a>
Log <code>!analysisKindSupported</code> case</li>
<li><a
href="98c05a17d3"><code>98c05a1</code></a>
Fix argument validation in <code>rollback-changelog.ts</code></li>
<li><a
href="8289a49271"><code>8289a49</code></a>
Ignore repository property for unsupported analysis kinds</li>
<li><a
href="2a8731cc06"><code>2a8731c</code></a>
Move <code>config-file</code> computation after determining the
<code>analysisKinds</code></li>
<li><a
href="3434fbbc53"><code>3434fbb</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4044">#4044</a>
from github/mbg/ff/promote-toolcache</li>
<li><a
href="3013ac07bd"><code>3013ac0</code></a>
Promote <code>AllowToolcacheInput</code> feature</li>
<li><a
href="74b15aa2c6"><code>74b15aa</code></a>
Install JS deps if needed in <code>post-release-mergeback</code>
workflow</li>
<li><a
href="f00f809405"><code>f00f809</code></a>
Fix checking keys rather than values</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/v4...v4.37.4">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 11:56:24 +02:00
dependabot[bot]
c61a7ca00c
chore(deps): bump mcp-kotlin from 0.14.0 to 0.15.0 in /samples/weather-stdio-server (#929)
Bumps `mcp-kotlin` from 0.14.0 to 0.15.0.
Updates `io.modelcontextprotocol:kotlin-sdk-client` from 0.14.0 to
0.15.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-client's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.modelcontextprotocol:kotlin-sdk-server` from 0.14.0 to
0.15.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-server's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 18:46:44 +02:00
dependabot[bot]
bb716cd44d
chore(deps): bump mcp-kotlin from 0.14.0 to 0.15.0 in /samples/simple-streamable-server (#928)
Bumps `mcp-kotlin` from 0.14.0 to 0.15.0.
Updates `io.modelcontextprotocol:kotlin-sdk-client` from 0.14.0 to
0.15.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-client's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.modelcontextprotocol:kotlin-sdk-server` from 0.14.0 to
0.15.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-server's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 17:31:38 +02:00
dependabot[bot]
b7f280118d
chore(deps): bump mcp-kotlin from 0.14.0 to 0.15.0 in /samples/kotlinlang-mcp-server (#927)
Bumps `mcp-kotlin` from 0.14.0 to 0.15.0.
Updates `io.modelcontextprotocol:kotlin-sdk-server` from 0.14.0 to
0.15.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-server's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.modelcontextprotocol:kotlin-sdk-client` from 0.14.0 to
0.15.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-client's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.modelcontextprotocol:kotlin-sdk-testing` from 0.14.0 to
0.15.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-testing's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 13:39:04 +02:00
dependabot[bot]
47938a056c
chore(deps): bump mcp-kotlin from 0.14.0 to 0.15.0 in /samples/kotlin-mcp-server (#926)
Bumps `mcp-kotlin` from 0.14.0 to 0.15.0.
Updates `io.modelcontextprotocol:kotlin-sdk-client` from 0.14.0 to
0.15.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-client's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `io.modelcontextprotocol:kotlin-sdk-server` from 0.14.0 to
0.15.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-server's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 13:20:37 +02:00
dependabot[bot]
6c9ca01922
chore(deps): bump io.modelcontextprotocol:kotlin-sdk-client from 0.14.0 to 0.15.0 in /samples/kotlin-mcp-client (#925)
Bumps
[io.modelcontextprotocol:kotlin-sdk-client](https://github.com/modelcontextprotocol/kotlin-sdk)
from 0.14.0 to 0.15.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/releases">io.modelcontextprotocol:kotlin-sdk-client's
releases</a>.</em></p>
<blockquote>
<h2>0.15.0</h2>
<h2>Description</h2>
<p>This release makes inbound message handling concurrent after the
initialization handshake, adds SSE heartbeats and elicitation schema
validation, and fixes several Streamable HTTP response and
session-lifecycle bugs.</p>
<h3>Breaking Changes</h3>
<p><strong>Concurrent inbound dispatch</strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/884">#884</a></p>
<p>Inbound messages were processed serially on the transport read loop,
so one slow or peer-awaiting handler (sampling, elicitation, roots)
blocked every later message on the connection, including the responses
and <code>notifications/cancelled</code> those handlers depend on. After
the handshake, handlers may now run concurrently; processing stays
serial during initialization.</p>
<ul>
<li><code>ProtocolOptions</code> / <code>ClientOptions</code> /
<code>ServerOptions</code> gain a <code>handlerCoroutineContext</code>
parameter (defaults to <code>Dispatchers.Default</code>). Concurrency is
bounded internally; there is no opt-out flag by design.</li>
<li><code>RequestHandlerExtra</code> is now a
<code>CoroutineContext.Element</code> and is no longer
user-constructible. It exposes <code>requestId</code>,
<code>method</code>, <code>sendRequest</code>, and
<code>sendNotification</code>, and can be read inside a handler via the
new <code>currentRequestHandlerExtra()</code>.</li>
</ul>
<pre lang="diff"><code>- val extra = RequestHandlerExtra()
+ val extra = currentRequestHandlerExtra()
</code></pre>
<p><strong>Duplicate feature names are rejected at registration</strong>
by <a href="https://github.com/devcrocod"><code>@​devcrocod</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/883">#883</a></p>

<p><code>addTool</code>/<code>addPrompt</code>/<code>addResource</code>/<code>addResourceTemplate</code>
silently replaced an existing entry and emitted a spurious
<code>list_changed</code> notification. They now throw
<code>IllegalArgumentException</code> and leave the existing
registration intact. The batch variants
(<code>addTools</code>/<code>addPrompts</code>/<code>addResources</code>)
are all-or-nothing. To replace a feature, remove it first.</p>
<pre lang="diff"><code>- server.addTool(name = &quot;search&quot;, ...)
// silently overwrote
+ server.removeTool(&quot;search&quot;)
+ server.addTool(name = &quot;search&quot;, ...)
</code></pre>
<p><strong><code>eventStore</code> removed from
<code>mcpStatelessStreamableHttp</code></strong> by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/909">#909</a></p>
<p>The parameter was never read or written: a stateless endpoint answers
<code>GET</code> with <code>405</code>, so no stream exists to store or
replay events on. The old overload is retained at
<code>DeprecationLevel.ERROR</code> with a <code>ReplaceWith</code>
migration hint. Use <code>mcpStreamableHttp</code> when you need
resumability.</p>
<pre lang="diff"><code>  application.mcpStatelessStreamableHttp(
      path = &quot;/mcp&quot;,
-     eventStore = myEventStore,
  ) { server }
</code></pre>
<h3>Features</h3>
<ul>
<li>Optional SSE heartbeats for Streamable HTTP servers via
<code>mcpStreamableHttp(sseHeartbeatConfig = { ... })</code>, keeping
long-lived streams alive against clients that disconnect on idle.
Heartbeats stay off by default, by <a
href="https://github.com/UnscientificJsZhai"><code>@​UnscientificJsZhai</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/761">#761</a></li>
<li>Accepted form-mode elicitation content is now validated against
<code>requestedSchema</code>; a mismatch fails
<code>createElicitation</code> with <code>McpException</code>
(<code>INVALID_PARAMS</code>) instead of reaching server code unchecked,
by <a href="https://github.com/rea9r"><code>@​rea9r</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/896">#896</a></li>
<li>The Streamable HTTP client now sends the standard
<code>Mcp-Method</code> and <code>Mcp-Name</code> POST headers, by <a
href="https://github.com/AndreKalberer"><code>@​AndreKalberer</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/894">#894</a></li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stateless Streamable HTTP now closes its per-request session, fixing
unbounded growth of the session registry and notification subscriptions,
by <a
href="https://github.com/KlyneChrysler"><code>@​KlyneChrysler</code></a>
in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/872">#872</a></li>
<li>Streamable HTTP responses keep their status and body when the client
accepts only <code>text/event-stream</code>, by <a
href="https://github.com/devcrocod"><code>@​devcrocod</code></a> in <a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/pull/911">#911</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76b8e7d63a"><code>76b8e7d</code></a>
release: 0.15.0 (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/918">#918</a>)</li>
<li><a
href="dab340f9bf"><code>dab340f</code></a>
fix(server): drop inert eventStore from stateless Streamable HTTP (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/909">#909</a>)</li>
<li><a
href="24c3cd3a69"><code>24c3cd3</code></a>
fix(server): match Accept header as media ranges (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/912">#912</a>)</li>
<li><a
href="7fa438ce00"><code>7fa438c</code></a>
feat(client): send MCP standard POST headers (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/894">#894</a>)</li>
<li><a
href="94745e617c"><code>94745e6</code></a>
chore(deps): bump the kotest group across 1 directory with 3 updates (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/915">#915</a>)</li>
<li><a
href="2b494b7637"><code>2b494b7</code></a>
chore(deps): bump the other-dependencies group across 5 directories with
3 up...</li>
<li><a
href="82fe56e1e8"><code>82fe56e</code></a>
fix(server): preserve Streamable HTTP response status and body (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/911">#911</a>)</li>
<li><a
href="a06d699d6c"><code>a06d699</code></a>
feat: SSE heartbeat (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/761">#761</a>)</li>
<li><a
href="cab669b108"><code>cab669b</code></a>
fix: classify malformed request params as invalid params (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/886">#886</a>)</li>
<li><a
href="b6cb547d58"><code>b6cb547</code></a>
fix(server): preserve id on duplicate initialize errors (<a
href="https://redirect.github.com/modelcontextprotocol/kotlin-sdk/issues/868">#868</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/modelcontextprotocol/kotlin-sdk/compare/0.14.0...0.15.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 13:03:13 +02:00
dependabot[bot]
cce22c282a
chore(deps): bump ch.qos.logback:logback-classic from 1.6.0 to 1.6.1 in /samples/kotlinlang-mcp-server in the other-dependencies group across 1 directory (#924)
Bumps the other-dependencies group with 1 update in the
/samples/kotlinlang-mcp-server directory:
[ch.qos.logback:logback-classic](https://github.com/qos-ch/logback).

Updates `ch.qos.logback:logback-classic` from 1.6.0 to 1.6.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/qos-ch/logback/releases">ch.qos.logback:logback-classic's
releases</a>.</em></p>
<blockquote>
<h2>Logback 1.6.1</h2>
<p><strong>2026-07-28 Release of logback version 1.6.1</strong></p>
<p>• In TimeBasedRollingPolicy, when the file option is set, the
intermediate file renamed before asynchronous compression now receives
the target archive name without the compression suffix (e.g.
<code>.gz</code>, <code>.zip</code>, <code>.xz</code>). Previously it
used a nanotime-based <code>.tmp</code> suffix. This makes the file
easier to identify if compression fails during rollover. (See also the
following paragraph.)</p>
<p>• On GZ, ZIP, or XZ compression failure, the original (uncompressed)
log file is no longer deleted. Compression strategies now delete the
source file only after successful compression and emit a warning that
the original was left intact.</p>
<p>• ConsoleAppender with <!-- raw HTML omitted --> now probes JLine's
org.jline.jansi.AnsiConsole first and falls back to the legacy
FuseSource org.fusesource.jansi.AnsiConsole class. This keeps ANSI
coloring working after Jansi moved under the JLine project. The optional
org.jline:jansi-core artifact is declared as a dependency alongside the
existing FuseSource jansi dependency. A preferredJansiClassName property
was added for tests. This issue was reported in <a
href="https://redirect.github.com/qos-ch/logback/issues/1043">issues/1043</a>
by <a href="https://github.com/seonwooj0810">seonwoo_jung</a> who also
provided the relevant PR.</p>
<p>• LayoutWrappingEncoder now reports an error at start() when no
layout is set and guards encode() against a null layout. Previously, a
missing layout (for example after an ignored <!-- raw HTML omitted
-->/<!-- raw HTML omitted -->/<!-- raw HTML omitted --> branch) allowed
the encoder to start and then fail with a NullPointerException on every
event, resulting in silent log loss. This issue was reported in <a
href="https://redirect.github.com/qos-ch/logback/issues/1046">issues/1046</a>
by <a href="https://github.com/seonwooj0810">seonwoo_jung</a> who also
provided the relevant PR.</p>
<p>• FileCollisionAnalyser now detects file collisions involving nested
appenders of SiftingAppender. When the nested file or fileNamePattern
does not textually reference the discriminator key (e.g. ${userId}), a
warning is issued at configuration time naming the appender, the key,
and the shared target. This closes a gap where statically declared file
appenders were checked but sifted nested appenders were not. This
enhancement was contributed in [PR <a
href="https://redirect.github.com/qos-ch/logback/issues/1041">#1041</a>](<a
href="https://redirect.github.com/qos-ch/logback/issues/1041">qos-ch/logback#1041</a>)
by <a href="https://github.com/seonwooj0810">seonwoo_jung</a>.</p>
<p>• More defensive handling in SyslogOutputStream and
SyslogAppenderBase: the close() method now ensures that resources are
closed, writes and flushes check that the underlying resources are in a
valid state and fallback to no-op otherwise.</p>
<p>• A bit-wise identical binary of this version can be reproduced by
building from source code at commit
57759f433000a133088ef0441038963134437fbd associated with the tag
v_1.6.1. The release was built using Java &quot;21&quot; 2023-10-17 LTS
build 21.0.1.+12-LTS-29 under Linux Debian 11.6.</p>
<p>• See <a
href="https://logback.qos.ch/news.html#1.6.1">https://logback.qos.ch/news.html#1.6.1</a>
for the original text.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="57759f4330"><code>57759f4</code></a>
prepare release 1.6.1</li>
<li><a
href="175f99f209"><code>175f99f</code></a>
fix imports</li>
<li><a
href="4b8773ed12"><code>4b8773e</code></a>
add compressionFailureLeavesOriginalFileIntact test for XZ
compression</li>
<li><a
href="cafaf1115f"><code>cafaf11</code></a>
do not delete original file if compression fails</li>
<li><a
href="ee50125b29"><code>ee50125</code></a>
let the temporary file before compression be target file without the .gz
or ....</li>
<li><a
href="5626acc301"><code>5626acc</code></a>
minor refactoring</li>
<li><a
href="d97da4fbc0"><code>d97da4f</code></a>
minor refactoring</li>
<li><a
href="159c045d8f"><code>159c045</code></a>
more defensive coding in SyslogOutputStream and in
SyslogAppenderBase</li>
<li><a
href="9427d6b23d"><code>9427d6b</code></a>
slight refactoring for clarity</li>
<li><a
href="79c4179c0b"><code>79c4179</code></a>
slight refactoring</li>
<li>Additional commits viewable in <a
href="https://github.com/qos-ch/logback/compare/v_1.6.0...v_1.6.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ch.qos.logback:logback-classic&package-manager=gradle&previous-version=1.6.0&new-version=1.6.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 12:23:43 +02:00
dependabot[bot]
b133d7ecdd
chore(deps): bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.1 (#916)
Bumps
[ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from
1.5.38 to 1.6.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/qos-ch/logback/releases">ch.qos.logback:logback-classic's
releases</a>.</em></p>
<blockquote>
<h2>Logback 1.6.1</h2>
<p><strong>2026-07-28 Release of logback version 1.6.1</strong></p>
<p>• In TimeBasedRollingPolicy, when the file option is set, the
intermediate file renamed before asynchronous compression now receives
the target archive name without the compression suffix (e.g.
<code>.gz</code>, <code>.zip</code>, <code>.xz</code>). Previously it
used a nanotime-based <code>.tmp</code> suffix. This makes the file
easier to identify if compression fails during rollover. (See also the
following paragraph.)</p>
<p>• On GZ, ZIP, or XZ compression failure, the original (uncompressed)
log file is no longer deleted. Compression strategies now delete the
source file only after successful compression and emit a warning that
the original was left intact.</p>
<p>• ConsoleAppender with <!-- raw HTML omitted --> now probes JLine's
org.jline.jansi.AnsiConsole first and falls back to the legacy
FuseSource org.fusesource.jansi.AnsiConsole class. This keeps ANSI
coloring working after Jansi moved under the JLine project. The optional
org.jline:jansi-core artifact is declared as a dependency alongside the
existing FuseSource jansi dependency. A preferredJansiClassName property
was added for tests. This issue was reported in <a
href="https://redirect.github.com/qos-ch/logback/issues/1043">issues/1043</a>
by <a href="https://github.com/seonwooj0810">seonwoo_jung</a> who also
provided the relevant PR.</p>
<p>• LayoutWrappingEncoder now reports an error at start() when no
layout is set and guards encode() against a null layout. Previously, a
missing layout (for example after an ignored <!-- raw HTML omitted
-->/<!-- raw HTML omitted -->/<!-- raw HTML omitted --> branch) allowed
the encoder to start and then fail with a NullPointerException on every
event, resulting in silent log loss. This issue was reported in <a
href="https://redirect.github.com/qos-ch/logback/issues/1046">issues/1046</a>
by <a href="https://github.com/seonwooj0810">seonwoo_jung</a> who also
provided the relevant PR.</p>
<p>• FileCollisionAnalyser now detects file collisions involving nested
appenders of SiftingAppender. When the nested file or fileNamePattern
does not textually reference the discriminator key (e.g. ${userId}), a
warning is issued at configuration time naming the appender, the key,
and the shared target. This closes a gap where statically declared file
appenders were checked but sifted nested appenders were not. This
enhancement was contributed in [PR <a
href="https://redirect.github.com/qos-ch/logback/issues/1041">#1041</a>](<a
href="https://redirect.github.com/qos-ch/logback/issues/1041">qos-ch/logback#1041</a>)
by <a href="https://github.com/seonwooj0810">seonwoo_jung</a>.</p>
<p>• More defensive handling in SyslogOutputStream and
SyslogAppenderBase: the close() method now ensures that resources are
closed, writes and flushes check that the underlying resources are in a
valid state and fallback to no-op otherwise.</p>
<p>• A bit-wise identical binary of this version can be reproduced by
building from source code at commit
57759f433000a133088ef0441038963134437fbd associated with the tag
v_1.6.1. The release was built using Java &quot;21&quot; 2023-10-17 LTS
build 21.0.1.+12-LTS-29 under Linux Debian 11.6.</p>
<p>• See <a
href="https://logback.qos.ch/news.html#1.6.1">https://logback.qos.ch/news.html#1.6.1</a>
for the original text.</p>
<h2>Logback 1.6.0</h2>
<p><strong>2026-07-23 Release of logback version 1.6.0</strong></p>
<p>• Removed certain deprecated variables, methods, and classes. For the
list of removed members see <a
href="https://logback.qos.ch/notes/release_1.6.0.txt">release_1.6.0.txt.</a></p>
<p>• In <code>AsyncAppenderBase</code>, the
<code>put(ILoggingEvent)</code> method now has the protected modifier to
allow access from derived classes. This change was requested by Thomas
Skjølberg in <a
href="https://redirect.github.com/qos-ch/logback/pull/1053">pr#1053</a>.</p>
<p>• Bump SLF4J dependency to version 2.0.18.</p>
<p>• <strong>See also the overview of the <a
href="https://logback.qos.ch/news.html#latest_stable">1.6.x
series</a>.</strong></p>
<p>• A bit-wise identical binary of this version can be reproduced by
building from source code at commit
b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag
v_1.6.0. The release was built using Java &quot;21&quot; 2023-10-17 LTS
build 21.0.1.+12-LTS-29 under Linux Debian 11.6.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="57759f4330"><code>57759f4</code></a>
prepare release 1.6.1</li>
<li><a
href="175f99f209"><code>175f99f</code></a>
fix imports</li>
<li><a
href="4b8773ed12"><code>4b8773e</code></a>
add compressionFailureLeavesOriginalFileIntact test for XZ
compression</li>
<li><a
href="cafaf1115f"><code>cafaf11</code></a>
do not delete original file if compression fails</li>
<li><a
href="ee50125b29"><code>ee50125</code></a>
let the temporary file before compression be target file without the .gz
or ....</li>
<li><a
href="5626acc301"><code>5626acc</code></a>
minor refactoring</li>
<li><a
href="d97da4fbc0"><code>d97da4f</code></a>
minor refactoring</li>
<li><a
href="159c045d8f"><code>159c045</code></a>
more defensive coding in SyslogOutputStream and in
SyslogAppenderBase</li>
<li><a
href="9427d6b23d"><code>9427d6b</code></a>
slight refactoring for clarity</li>
<li><a
href="79c4179c0b"><code>79c4179</code></a>
slight refactoring</li>
<li>Additional commits viewable in <a
href="https://github.com/qos-ch/logback/compare/v_1.5.38...v_1.6.1">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-31 13:48:11 +02:00
37 changed files with 909 additions and 123 deletions

View file

@ -27,14 +27,14 @@ jobs:
- uses: actions/checkout@v7
- name: Set up JDK ${{ env.JAVA_VERSION }}
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.JAVA_DISTRIBUTION }}
cache: gradle
- name: Setup Gradle
uses: gradle/actions/setup-gradle@v6
uses: gradle/actions/setup-gradle@v6.3.0
- name: Generate Dokka Site
run: |-

View file

@ -27,7 +27,7 @@ jobs:
name: Mark/unmark stale PRs and issues
runs-on: ubuntu-latest
steps:
- uses: actions/stale@v10
- uses: actions/stale@v11
with:
debug-only: ${{ env.DRY_RUN }}
exempt-draft-pr: true
@ -66,7 +66,7 @@ jobs:
name: Close stale PRs and issues
runs-on: ubuntu-latest
steps:
- uses: actions/stale@v10
- uses: actions/stale@v11
with:
debug-only: ${{ env.DRY_RUN }}
only-labels: 'stale'

View file

@ -46,7 +46,7 @@ jobs:
- uses: actions/checkout@v7
- name: Set up JDK ${{ env.JAVA_VERSION }}
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.JAVA_DISTRIBUTION }}
@ -63,7 +63,7 @@ jobs:
run: npm ci
- name: Setup Gradle
uses: gradle/actions/setup-gradle@v6
uses: gradle/actions/setup-gradle@v6.3.0
with:
validate-wrappers: true
add-job-summary: 'always'
@ -129,13 +129,13 @@ jobs:
- uses: actions/checkout@v7
- name: Set up JDK ${{ env.JAVA_VERSION }}
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.JAVA_DISTRIBUTION }}
- name: Setup Gradle
uses: gradle/actions/setup-gradle@v6
uses: gradle/actions/setup-gradle@v6.3.0
with:
validate-wrappers: true
add-job-summary: 'always'
@ -171,13 +171,13 @@ jobs:
- uses: actions/checkout@v7
- name: Set up JDK ${{ env.JAVA_VERSION }}
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.JAVA_DISTRIBUTION }}
- name: Setup Gradle
uses: gradle/actions/setup-gradle@v6
uses: gradle/actions/setup-gradle@v6.3.0
with:
add-job-summary: 'always'
cache-read-only: true

View file

@ -28,19 +28,19 @@ jobs:
uses: actions/checkout@v7
- name: Set up JDK ${{ env.JAVA_VERSION }}
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
distribution: ${{ env.JAVA_DISTRIBUTION }}
java-version: ${{ env.JAVA_VERSION }}
- name: Initialize CodeQL
uses: github/codeql-action/init@v4
uses: github/codeql-action/init@v4.38.0
with:
languages: java-kotlin
build-mode: manual
- name: Setup Gradle
uses: gradle/actions/setup-gradle@v6
uses: gradle/actions/setup-gradle@v6.3.0
with:
validate-wrappers: true
cache-read-only: true
@ -52,6 +52,6 @@ jobs:
--no-daemon --rerun-tasks --stacktrace
- name: Analyze
uses: github/codeql-action/analyze@v4
uses: github/codeql-action/analyze@v4.38.0
with:
category: '/language:java-kotlin'

View file

@ -28,13 +28,13 @@ jobs:
- uses: actions/checkout@v7
- name: Set up JDK
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.JAVA_DISTRIBUTION }}
- name: Setup Gradle
uses: gradle/actions/setup-gradle@v6
uses: gradle/actions/setup-gradle@v6.3.0
with:
cache-read-only: ${{ github.ref != 'refs/heads/main' }}
@ -79,13 +79,13 @@ jobs:
- uses: actions/checkout@v7
- name: Set up JDK
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.JAVA_DISTRIBUTION }}
- name: Setup Gradle
uses: gradle/actions/setup-gradle@v6
uses: gradle/actions/setup-gradle@v6.3.0
with:
cache-read-only: ${{ github.ref != 'refs/heads/main' }}
@ -110,13 +110,13 @@ jobs:
- uses: actions/checkout@v7
- name: Set up JDK
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.JAVA_DISTRIBUTION }}
- name: Setup Gradle
uses: gradle/actions/setup-gradle@v6
uses: gradle/actions/setup-gradle@v6.3.0
with:
cache-read-only: ${{ github.ref != 'refs/heads/main' }}
@ -149,13 +149,13 @@ jobs:
- uses: actions/checkout@v7
- name: Set up JDK
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.JAVA_DISTRIBUTION }}
- name: Setup Gradle
uses: gradle/actions/setup-gradle@v6
uses: gradle/actions/setup-gradle@v6.3.0
with:
cache-read-only: ${{ github.ref != 'refs/heads/main' }}

View file

@ -19,7 +19,7 @@ jobs:
steps:
- uses: actions/checkout@v7
- name: Set up JDK 21
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: '21'
distribution: 'temurin'
@ -30,7 +30,7 @@ jobs:
node-version: '22' # increase only after https://github.com/nodejs/node/issues/56645 will be fixed
- name: Setup Gradle
uses: gradle/actions/setup-gradle@v6
uses: gradle/actions/setup-gradle@v6.3.0
- name: Check
run: ./gradlew check --no-configuration-cache

View file

@ -39,13 +39,13 @@ jobs:
- uses: actions/checkout@v7
- name: Set up JDK ${{ env.JAVA_VERSION }}
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.JAVA_DISTRIBUTION }}
- name: Setup Gradle
uses: gradle/actions/setup-gradle@v6
uses: gradle/actions/setup-gradle@v6.3.0
with:
validate-wrappers: true
add-job-summary: 'always'

View file

@ -1,28 +1,28 @@
[versions]
# plugins version
atomicfu = "0.33.0"
binaryCompatibilityValidatorPlugin = "0.18.1"
detekt = "2.0.0-alpha.5"
binaryCompatibilityValidatorPlugin = "0.18.2"
detekt = "2.0.0-alpha.6"
dokka = "2.2.0"
kotlin = "2.4.0"
kotlin = "2.4.10"
kover = "0.9.9"
ktlint = "14.2.0"
knit = "0.5.1"
mavenPublish = "0.37.0"
netty = "4.2.16.Final"
netty = "4.2.18.Final"
# libraries version
awaitility = "4.3.0"
collections-immutable = "0.5.1"
collections-immutable = "0.5.2"
coroutines = "1.11.0"
kotest = "6.2.3"
kotest = "6.2.5"
kotlinx-io = "0.9.1"
ktor = "3.5.1"
ktor = "3.5.2"
logging = "8.0.4"
mockk = "1.14.11"
serialization = "1.11.0"
slf4j = "2.0.18"
logback = "1.5.38"
slf4j = "2.0.19"
logback = "1.6.3"
junit = "5.14.4"
[libraries]

Binary file not shown.

View file

@ -1,6 +1,6 @@
distributionBase=GRADLE_USER_HOME
distributionPath=wrapper/dists
distributionUrl=https\://services.gradle.org/distributions/gradle-9.6.1-bin.zip
distributionUrl=https\://services.gradle.org/distributions/gradle-9.7.1-bin.zip
networkTimeout=10000
retries=0
retryBackOffMs=500

View file

@ -698,8 +698,8 @@ abstract class AbstractPromptIntegrationTest : KotlinTestBase() {
val expectedMessage = "Prompt not found: non-existent-prompt"
withClue("Exception code should be INTERNAL_ERROR: -32603") {
exception.code shouldBe -32603
withClue("Exception code should be INVALID_PARAMS: ${RPCError.ErrorCode.INVALID_PARAMS}") {
exception.code shouldBe RPCError.ErrorCode.INVALID_PARAMS
}
withClue("Unexpected error message for non-existent prompt") {
exception.message shouldBe expectedMessage

View file

@ -8,16 +8,16 @@
"name": "mcp-typescript-test-sdk",
"version": "1.0.0",
"dependencies": {
"@modelcontextprotocol/sdk": "^1.29.0",
"@modelcontextprotocol/sdk": "^1.30.0",
"express": "^5.2.1",
"zod": "^4.4.3"
"zod": "^4.6.2"
},
"devDependencies": {
"@types/cors": "^2.8.19",
"@types/express": "^5.0.6",
"@types/node": "^26.1.1",
"@types/node": "^26.5.1",
"cors": "^2.8.6",
"tsx": "^4.23.1",
"tsx": "^4.23.13",
"typescript": "^7.0.2"
}
},
@ -464,24 +464,24 @@
}
},
"node_modules/@hono/node-server": {
"version": "1.19.13",
"resolved": "https://registry.npmjs.org/@hono/node-server/-/node-server-1.19.13.tgz",
"integrity": "sha512-TsQLe4i2gvoTtrHje625ngThGBySOgSK3Xo2XRYOdqGN1teR8+I7vchQC46uLJi8OF62YTYA3AhSpumtkhsaKQ==",
"version": "2.1.0",
"resolved": "https://registry.npmjs.org/@hono/node-server/-/node-server-2.1.0.tgz",
"integrity": "sha512-XovyyCCnBzW+zKu+z/zq8hwNs4KOR5rEMAOxo2f40Q5xoOI37IMm6MIg2COOUtUApo0i6850MTBKH2u4QLGIqg==",
"license": "MIT",
"engines": {
"node": ">=18.14.1"
"node": ">=20"
},
"peerDependencies": {
"hono": "^4"
}
},
"node_modules/@modelcontextprotocol/sdk": {
"version": "1.29.0",
"resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.29.0.tgz",
"integrity": "sha512-zo37mZA9hJWpULgkRpowewez1y6ML5GsXJPY8FI0tBBCd77HEvza4jDqRKOXgHNn867PVGCyTdzqpz0izu5ZjQ==",
"version": "1.30.0",
"resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.30.0.tgz",
"integrity": "sha512-xKd8OIzlqNzcqcNumGAa6g+PW2kjD5vrpcKOnfldAUPP3j7lnqMPwlTXQm8gF+UwH72z0lqaRbjr9hqGz0eITA==",
"license": "MIT",
"dependencies": {
"@hono/node-server": "^1.19.9",
"@hono/node-server": "^1.19.9 || ^2.0.5",
"ajv": "^8.17.1",
"ajv-formats": "^3.0.1",
"content-type": "^1.0.5",
@ -579,13 +579,13 @@
"license": "MIT"
},
"node_modules/@types/node": {
"version": "26.1.1",
"resolved": "https://registry.npmjs.org/@types/node/-/node-26.1.1.tgz",
"integrity": "sha512-nxAkRSVkN1Y0JC1W8ky/fTfkGsMmcrRsbx+3XoZE+rMOX71kLYTV7fLXpqud1GpbpP5TuffXFqfX7fH2GgZREw==",
"version": "26.5.1",
"resolved": "https://registry.npmjs.org/@types/node/-/node-26.5.1.tgz",
"integrity": "sha512-CzNm2FezW4VR/LjG6yUdiEgLE/rAQ9Slj5gCu/C2VrdcW7I0ahNZ8DRbHT7zOZ6r3ONgd/bsQIeSaoDGrd1C6g==",
"dev": true,
"license": "MIT",
"dependencies": {
"undici-types": "~8.3.0"
"undici-types": "~8.9.0"
}
},
"node_modules/@types/qs": {
@ -1229,9 +1229,9 @@
}
},
"node_modules/es-object-atoms": {
"version": "1.1.1",
"resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz",
"integrity": "sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==",
"version": "1.1.2",
"resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz",
"integrity": "sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==",
"license": "MIT",
"dependencies": {
"es-errors": "^1.3.0"
@ -1387,9 +1387,9 @@
"license": "MIT"
},
"node_modules/fast-uri": {
"version": "3.1.4",
"resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.4.tgz",
"integrity": "sha512-8JnbkQ4juDyvYs4mgFGQqg4yCYtFDtUtmp2QIQq11ZZe5CFQ5wcqm1rqDgAh/QdMySuBnPzMUiJUNZG5N/AiQw==",
"version": "3.1.7",
"resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.7.tgz",
"integrity": "sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg==",
"funding": [
{
"type": "github",
@ -1526,9 +1526,9 @@
}
},
"node_modules/hasown": {
"version": "2.0.2",
"resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz",
"integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==",
"version": "2.0.4",
"resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz",
"integrity": "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==",
"license": "MIT",
"dependencies": {
"function-bind": "^1.1.2"
@ -1538,9 +1538,9 @@
}
},
"node_modules/hono": {
"version": "4.12.27",
"resolved": "https://registry.npmjs.org/hono/-/hono-4.12.27.tgz",
"integrity": "sha512-1yrb/+w6HWQJrUCLkJ2IF5jNIPvvFkblV5RNOYl6bV+OA6p9GLcMpHFFGTosSvHvcAUibuUukRqhlYI4z32C7Q==",
"version": "4.13.7",
"resolved": "https://registry.npmjs.org/hono/-/hono-4.13.7.tgz",
"integrity": "sha512-c8/gF9ac8Y78/agExVocyLevgR+JlpNB444Py0FSX8pJoPdYUfUzRcXtYEYGwt6l19qIlVZPN5Mfsw9jFShmQQ==",
"license": "MIT",
"engines": {
"node": ">=16.9.0"
@ -1589,9 +1589,9 @@
"license": "ISC"
},
"node_modules/ip-address": {
"version": "10.2.0",
"resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz",
"integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==",
"version": "10.4.0",
"resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.4.0.tgz",
"integrity": "sha512-oSK96Grm3aP6OrS263xVxbNDGVL7rzBtYdpGqlDG8iQdoenDoTs/nkki+DflYbAEE8Xl6o5YxhxlrKvI3nqKXQ==",
"license": "MIT",
"engines": {
"node": ">= 12"
@ -1802,12 +1802,13 @@
}
},
"node_modules/qs": {
"version": "6.15.2",
"resolved": "https://registry.npmjs.org/qs/-/qs-6.15.2.tgz",
"integrity": "sha512-Rzq0KEyX/w/tEybncDgdkZrJgVUsUMk3xjh3t5bv3S1HTAtg+uOYt72+ZfwiQwKdysThkTBdL/rTi6HDmX9Ddw==",
"version": "6.16.0",
"resolved": "https://registry.npmjs.org/qs/-/qs-6.16.0.tgz",
"integrity": "sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==",
"license": "BSD-3-Clause",
"dependencies": {
"side-channel": "^1.1.0"
"es-define-property": "^1.0.1",
"side-channel": "^1.1.1"
},
"engines": {
"node": ">=0.6"
@ -1944,14 +1945,14 @@
}
},
"node_modules/side-channel": {
"version": "1.1.0",
"resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
"integrity": "sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==",
"version": "1.1.1",
"resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.1.tgz",
"integrity": "sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==",
"license": "MIT",
"dependencies": {
"es-errors": "^1.3.0",
"object-inspect": "^1.13.3",
"side-channel-list": "^1.0.0",
"object-inspect": "^1.13.4",
"side-channel-list": "^1.0.1",
"side-channel-map": "^1.0.1",
"side-channel-weakmap": "^1.0.2"
},
@ -1963,13 +1964,13 @@
}
},
"node_modules/side-channel-list": {
"version": "1.0.0",
"resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.0.tgz",
"integrity": "sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==",
"version": "1.0.1",
"resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz",
"integrity": "sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==",
"license": "MIT",
"dependencies": {
"es-errors": "^1.3.0",
"object-inspect": "^1.13.3"
"object-inspect": "^1.13.4"
},
"engines": {
"node": ">= 0.4"
@ -2034,9 +2035,9 @@
}
},
"node_modules/tsx": {
"version": "4.23.1",
"resolved": "https://registry.npmjs.org/tsx/-/tsx-4.23.1.tgz",
"integrity": "sha512-GQHnkIfxyx1wYCOS/wonik5MVRZU9hi1TEZmzGZSCJB1y9YgoZ8H6itNE/u4suE+yLmOzuE4E5S4TZ/ZX2wcWQ==",
"version": "4.23.13",
"resolved": "https://registry.npmjs.org/tsx/-/tsx-4.23.13.tgz",
"integrity": "sha512-BL5MGkRln6aDYhb0xbQlEAGw743BaZYWdbWtdJOBriYJboKgUUYCadFp2/FpBBZquBC/ezNBn7wMMPx7FDZUDw==",
"dev": true,
"license": "MIT",
"dependencies": {
@ -2119,9 +2120,9 @@
}
},
"node_modules/undici-types": {
"version": "8.3.0",
"resolved": "https://registry.npmjs.org/undici-types/-/undici-types-8.3.0.tgz",
"integrity": "sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ==",
"version": "8.9.0",
"resolved": "https://registry.npmjs.org/undici-types/-/undici-types-8.9.0.tgz",
"integrity": "sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg==",
"dev": true,
"license": "MIT"
},
@ -2165,9 +2166,9 @@
"license": "ISC"
},
"node_modules/zod": {
"version": "4.4.3",
"resolved": "https://registry.npmjs.org/zod/-/zod-4.4.3.tgz",
"integrity": "sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==",
"version": "4.6.2",
"resolved": "https://registry.npmjs.org/zod/-/zod-4.6.2.tgz",
"integrity": "sha512-lh5RCAGFa1Cm2hjtNwLQhSs/AsqdWnTQaBER9fEwN/88pSh7KOtJavtBx/0VlkN/uFd61SwYmljLMDAsHlvzBQ==",
"license": "MIT",
"funding": {
"url": "https://github.com/sponsors/colinhacks"

View file

@ -9,16 +9,16 @@
"server:http": "tsx server/http-server.ts"
},
"dependencies": {
"@modelcontextprotocol/sdk": "^1.29.0",
"@modelcontextprotocol/sdk": "^1.30.0",
"express": "^5.2.1",
"zod": "^4.4.3"
"zod": "^4.6.2"
},
"devDependencies": {
"@types/cors": "^2.8.19",
"@types/express": "^5.0.6",
"@types/node": "^26.1.1",
"@types/node": "^26.5.1",
"cors": "^2.8.6",
"tsx": "^4.23.1",
"tsx": "^4.23.13",
"typescript": "^7.0.2"
}
}

View file

@ -390,6 +390,19 @@ public final class io/modelcontextprotocol/kotlin/sdk/types/BooleanSchema$Compan
public final fun serializer ()Lkotlinx/serialization/KSerializer;
}
public final class io/modelcontextprotocol/kotlin/sdk/types/CacheScope : java/lang/Enum {
public static final field Companion Lio/modelcontextprotocol/kotlin/sdk/types/CacheScope$Companion;
public static final field Private Lio/modelcontextprotocol/kotlin/sdk/types/CacheScope;
public static final field Public Lio/modelcontextprotocol/kotlin/sdk/types/CacheScope;
public static fun getEntries ()Lkotlin/enums/EnumEntries;
public static fun valueOf (Ljava/lang/String;)Lio/modelcontextprotocol/kotlin/sdk/types/CacheScope;
public static fun values ()[Lio/modelcontextprotocol/kotlin/sdk/types/CacheScope;
}
public final class io/modelcontextprotocol/kotlin/sdk/types/CacheScope$Companion {
public final fun serializer ()Lkotlinx/serialization/KSerializer;
}
public final class io/modelcontextprotocol/kotlin/sdk/types/CallToolRequest : io/modelcontextprotocol/kotlin/sdk/types/ClientRequest {
public static final field Companion Lio/modelcontextprotocol/kotlin/sdk/types/CallToolRequest$Companion;
public fun <init> (Lio/modelcontextprotocol/kotlin/sdk/types/CallToolRequestParams;)V
@ -1395,6 +1408,104 @@ public final class io/modelcontextprotocol/kotlin/sdk/types/CustomRequest$Compan
public final fun serializer ()Lkotlinx/serialization/KSerializer;
}
public final class io/modelcontextprotocol/kotlin/sdk/types/DiscoverRequest : io/modelcontextprotocol/kotlin/sdk/types/ClientRequest {
public static final field Companion Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequest$Companion;
public fun <init> (Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequestParams;)V
public final fun component1 ()Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequestParams;
public final fun copy (Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequestParams;)Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequest;
public static synthetic fun copy$default (Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequest;Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequestParams;ILjava/lang/Object;)Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequest;
public fun equals (Ljava/lang/Object;)Z
public final fun getMeta--Khlwt8 ()Lkotlinx/serialization/json/JsonObject;
public fun getMethod ()Lio/modelcontextprotocol/kotlin/sdk/types/Method;
public fun getParams ()Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequestParams;
public synthetic fun getParams ()Lio/modelcontextprotocol/kotlin/sdk/types/RequestParams;
public fun hashCode ()I
public fun toString ()Ljava/lang/String;
}
public final synthetic class io/modelcontextprotocol/kotlin/sdk/types/DiscoverRequest$$serializer : kotlinx/serialization/internal/GeneratedSerializer {
public static final field INSTANCE Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequest$$serializer;
public final fun childSerializers ()[Lkotlinx/serialization/KSerializer;
public final fun deserialize (Lkotlinx/serialization/encoding/Decoder;)Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequest;
public synthetic fun deserialize (Lkotlinx/serialization/encoding/Decoder;)Ljava/lang/Object;
public final fun getDescriptor ()Lkotlinx/serialization/descriptors/SerialDescriptor;
public final fun serialize (Lkotlinx/serialization/encoding/Encoder;Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequest;)V
public synthetic fun serialize (Lkotlinx/serialization/encoding/Encoder;Ljava/lang/Object;)V
public fun typeParametersSerializers ()[Lkotlinx/serialization/KSerializer;
}
public final class io/modelcontextprotocol/kotlin/sdk/types/DiscoverRequest$Companion {
public final fun serializer ()Lkotlinx/serialization/KSerializer;
}
public final class io/modelcontextprotocol/kotlin/sdk/types/DiscoverRequestParams : io/modelcontextprotocol/kotlin/sdk/types/RequestParams {
public static final field Companion Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequestParams$Companion;
public synthetic fun <init> (Lkotlinx/serialization/json/JsonObject;Lkotlin/jvm/internal/DefaultConstructorMarker;)V
public final fun component1--Khlwt8 ()Lkotlinx/serialization/json/JsonObject;
public final fun copy-hVVZdjo (Lkotlinx/serialization/json/JsonObject;)Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequestParams;
public static synthetic fun copy-hVVZdjo$default (Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequestParams;Lkotlinx/serialization/json/JsonObject;ILjava/lang/Object;)Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequestParams;
public fun equals (Ljava/lang/Object;)Z
public fun getMeta--Khlwt8 ()Lkotlinx/serialization/json/JsonObject;
public synthetic fun getMeta-VI-3G7E ()Lkotlinx/serialization/json/JsonObject;
public fun hashCode ()I
public fun toString ()Ljava/lang/String;
}
public final synthetic class io/modelcontextprotocol/kotlin/sdk/types/DiscoverRequestParams$$serializer : kotlinx/serialization/internal/GeneratedSerializer {
public static final field INSTANCE Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequestParams$$serializer;
public final fun childSerializers ()[Lkotlinx/serialization/KSerializer;
public final fun deserialize (Lkotlinx/serialization/encoding/Decoder;)Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequestParams;
public synthetic fun deserialize (Lkotlinx/serialization/encoding/Decoder;)Ljava/lang/Object;
public final fun getDescriptor ()Lkotlinx/serialization/descriptors/SerialDescriptor;
public final fun serialize (Lkotlinx/serialization/encoding/Encoder;Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverRequestParams;)V
public synthetic fun serialize (Lkotlinx/serialization/encoding/Encoder;Ljava/lang/Object;)V
public fun typeParametersSerializers ()[Lkotlinx/serialization/KSerializer;
}
public final class io/modelcontextprotocol/kotlin/sdk/types/DiscoverRequestParams$Companion {
public final fun serializer ()Lkotlinx/serialization/KSerializer;
}
public final class io/modelcontextprotocol/kotlin/sdk/types/DiscoverResult : io/modelcontextprotocol/kotlin/sdk/types/ServerResult {
public static final field Companion Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverResult$Companion;
public fun <init> (Ljava/util/List;Lio/modelcontextprotocol/kotlin/sdk/types/ServerCapabilities;Ljava/lang/String;Ljava/lang/String;JLio/modelcontextprotocol/kotlin/sdk/types/CacheScope;Lkotlinx/serialization/json/JsonObject;)V
public synthetic fun <init> (Ljava/util/List;Lio/modelcontextprotocol/kotlin/sdk/types/ServerCapabilities;Ljava/lang/String;Ljava/lang/String;JLio/modelcontextprotocol/kotlin/sdk/types/CacheScope;Lkotlinx/serialization/json/JsonObject;ILkotlin/jvm/internal/DefaultConstructorMarker;)V
public final fun component1 ()Ljava/util/List;
public final fun component2 ()Lio/modelcontextprotocol/kotlin/sdk/types/ServerCapabilities;
public final fun component3 ()Ljava/lang/String;
public final fun component4 ()Ljava/lang/String;
public final fun component5 ()J
public final fun component6 ()Lio/modelcontextprotocol/kotlin/sdk/types/CacheScope;
public final fun component7 ()Lkotlinx/serialization/json/JsonObject;
public final fun copy (Ljava/util/List;Lio/modelcontextprotocol/kotlin/sdk/types/ServerCapabilities;Ljava/lang/String;Ljava/lang/String;JLio/modelcontextprotocol/kotlin/sdk/types/CacheScope;Lkotlinx/serialization/json/JsonObject;)Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverResult;
public static synthetic fun copy$default (Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverResult;Ljava/util/List;Lio/modelcontextprotocol/kotlin/sdk/types/ServerCapabilities;Ljava/lang/String;Ljava/lang/String;JLio/modelcontextprotocol/kotlin/sdk/types/CacheScope;Lkotlinx/serialization/json/JsonObject;ILjava/lang/Object;)Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverResult;
public fun equals (Ljava/lang/Object;)Z
public final fun getCacheScope ()Lio/modelcontextprotocol/kotlin/sdk/types/CacheScope;
public final fun getCapabilities ()Lio/modelcontextprotocol/kotlin/sdk/types/ServerCapabilities;
public final fun getInstructions ()Ljava/lang/String;
public fun getMeta ()Lkotlinx/serialization/json/JsonObject;
public final fun getResultType ()Ljava/lang/String;
public final fun getSupportedVersions ()Ljava/util/List;
public final fun getTtlMs ()J
public fun hashCode ()I
public fun toString ()Ljava/lang/String;
}
public final synthetic class io/modelcontextprotocol/kotlin/sdk/types/DiscoverResult$$serializer : kotlinx/serialization/internal/GeneratedSerializer {
public static final field INSTANCE Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverResult$$serializer;
public final fun childSerializers ()[Lkotlinx/serialization/KSerializer;
public final fun deserialize (Lkotlinx/serialization/encoding/Decoder;)Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverResult;
public synthetic fun deserialize (Lkotlinx/serialization/encoding/Decoder;)Ljava/lang/Object;
public final fun getDescriptor ()Lkotlinx/serialization/descriptors/SerialDescriptor;
public final fun serialize (Lkotlinx/serialization/encoding/Encoder;Lio/modelcontextprotocol/kotlin/sdk/types/DiscoverResult;)V
public synthetic fun serialize (Lkotlinx/serialization/encoding/Encoder;Ljava/lang/Object;)V
public fun typeParametersSerializers ()[Lkotlinx/serialization/KSerializer;
}
public final class io/modelcontextprotocol/kotlin/sdk/types/DiscoverResult$Companion {
public final fun serializer ()Lkotlinx/serialization/KSerializer;
}
public final class io/modelcontextprotocol/kotlin/sdk/types/DoubleSchema : io/modelcontextprotocol/kotlin/sdk/types/NumberSchemaDefinition {
public static final field Companion Lio/modelcontextprotocol/kotlin/sdk/types/DoubleSchema$Companion;
public fun <init> ()V
@ -3245,6 +3356,7 @@ public final class io/modelcontextprotocol/kotlin/sdk/types/Method$Defined : jav
public static final field ResourcesUnsubscribe Lio/modelcontextprotocol/kotlin/sdk/types/Method$Defined;
public static final field RootsList Lio/modelcontextprotocol/kotlin/sdk/types/Method$Defined;
public static final field SamplingCreateMessage Lio/modelcontextprotocol/kotlin/sdk/types/Method$Defined;
public static final field ServerDiscover Lio/modelcontextprotocol/kotlin/sdk/types/Method$Defined;
public static final field TasksCancel Lio/modelcontextprotocol/kotlin/sdk/types/Method$Defined;
public static final field TasksGet Lio/modelcontextprotocol/kotlin/sdk/types/Method$Defined;
public static final field TasksList Lio/modelcontextprotocol/kotlin/sdk/types/Method$Defined;
@ -3767,6 +3879,7 @@ public final class io/modelcontextprotocol/kotlin/sdk/types/RPCError$ErrorCode {
public static final field PARSE_ERROR I
public static final field REQUEST_TIMEOUT I
public static final field RESOURCE_NOT_FOUND I
public static final field UNSUPPORTED_PROTOCOL_VERSION I
public static final field URL_ELICITATION_REQUIRED I
}
@ -4012,8 +4125,12 @@ public final class io/modelcontextprotocol/kotlin/sdk/types/RequestMeta {
public static fun equals-impl (Lkotlinx/serialization/json/JsonObject;Ljava/lang/Object;)Z
public static final fun equals-impl0 (Lkotlinx/serialization/json/JsonObject;Lkotlinx/serialization/json/JsonObject;)Z
public static final fun get-impl (Lkotlinx/serialization/json/JsonObject;Ljava/lang/String;)Lkotlinx/serialization/json/JsonElement;
public static final fun getClientCapabilities-impl (Lkotlinx/serialization/json/JsonObject;)Lio/modelcontextprotocol/kotlin/sdk/types/ClientCapabilities;
public static final fun getClientInfo-impl (Lkotlinx/serialization/json/JsonObject;)Lio/modelcontextprotocol/kotlin/sdk/types/Implementation;
public final fun getJson ()Lkotlinx/serialization/json/JsonObject;
public static final fun getLogLevel-impl (Lkotlinx/serialization/json/JsonObject;)Lio/modelcontextprotocol/kotlin/sdk/types/LoggingLevel;
public static final fun getProgressToken-impl (Lkotlinx/serialization/json/JsonObject;)Lio/modelcontextprotocol/kotlin/sdk/types/RequestId;
public static final fun getProtocolVersion-impl (Lkotlinx/serialization/json/JsonObject;)Ljava/lang/String;
public static final fun getRelatedTask-impl (Lkotlinx/serialization/json/JsonObject;)Lio/modelcontextprotocol/kotlin/sdk/types/RelatedTaskMetadata;
public fun hashCode ()I
public static fun hashCode-impl (Lkotlinx/serialization/json/JsonObject;)I
@ -5736,6 +5853,35 @@ public final class io/modelcontextprotocol/kotlin/sdk/types/UnsubscribeRequestPa
public final fun serializer ()Lkotlinx/serialization/KSerializer;
}
public final class io/modelcontextprotocol/kotlin/sdk/types/UnsupportedProtocolVersionData {
public static final field Companion Lio/modelcontextprotocol/kotlin/sdk/types/UnsupportedProtocolVersionData$Companion;
public fun <init> (Ljava/util/List;Ljava/lang/String;)V
public final fun component1 ()Ljava/util/List;
public final fun component2 ()Ljava/lang/String;
public final fun copy (Ljava/util/List;Ljava/lang/String;)Lio/modelcontextprotocol/kotlin/sdk/types/UnsupportedProtocolVersionData;
public static synthetic fun copy$default (Lio/modelcontextprotocol/kotlin/sdk/types/UnsupportedProtocolVersionData;Ljava/util/List;Ljava/lang/String;ILjava/lang/Object;)Lio/modelcontextprotocol/kotlin/sdk/types/UnsupportedProtocolVersionData;
public fun equals (Ljava/lang/Object;)Z
public final fun getRequested ()Ljava/lang/String;
public final fun getSupported ()Ljava/util/List;
public fun hashCode ()I
public fun toString ()Ljava/lang/String;
}
public final synthetic class io/modelcontextprotocol/kotlin/sdk/types/UnsupportedProtocolVersionData$$serializer : kotlinx/serialization/internal/GeneratedSerializer {
public static final field INSTANCE Lio/modelcontextprotocol/kotlin/sdk/types/UnsupportedProtocolVersionData$$serializer;
public final fun childSerializers ()[Lkotlinx/serialization/KSerializer;
public final fun deserialize (Lkotlinx/serialization/encoding/Decoder;)Lio/modelcontextprotocol/kotlin/sdk/types/UnsupportedProtocolVersionData;
public synthetic fun deserialize (Lkotlinx/serialization/encoding/Decoder;)Ljava/lang/Object;
public final fun getDescriptor ()Lkotlinx/serialization/descriptors/SerialDescriptor;
public final fun serialize (Lkotlinx/serialization/encoding/Encoder;Lio/modelcontextprotocol/kotlin/sdk/types/UnsupportedProtocolVersionData;)V
public synthetic fun serialize (Lkotlinx/serialization/encoding/Encoder;Ljava/lang/Object;)V
public fun typeParametersSerializers ()[Lkotlinx/serialization/KSerializer;
}
public final class io/modelcontextprotocol/kotlin/sdk/types/UnsupportedProtocolVersionData$Companion {
public final fun serializer ()Lkotlinx/serialization/KSerializer;
}
public final class io/modelcontextprotocol/kotlin/sdk/types/UntitledMultiSelectEnumSchema : io/modelcontextprotocol/kotlin/sdk/types/MultiSelectEnumSchema {
public static final field Companion Lio/modelcontextprotocol/kotlin/sdk/types/UntitledMultiSelectEnumSchema$Companion;
public fun <init> (Ljava/lang/String;Ljava/lang/String;Ljava/lang/Integer;Ljava/lang/Integer;Lio/modelcontextprotocol/kotlin/sdk/types/UntitledMultiSelectEnumSchema$Items;Ljava/util/List;)V

View file

@ -0,0 +1,107 @@
package io.modelcontextprotocol.kotlin.sdk.types
import io.modelcontextprotocol.kotlin.sdk.ExperimentalMcpApi
import kotlinx.serialization.EncodeDefault
import kotlinx.serialization.ExperimentalSerializationApi
import kotlinx.serialization.Required
import kotlinx.serialization.SerialName
import kotlinx.serialization.Serializable
import kotlinx.serialization.SerializationException
import kotlinx.serialization.json.JsonObject
/**
* Parameters for a `server/discover` request.
*
* Discovery belongs to the request-scoped lifecycle and therefore requires a protocol version and
* client capabilities in [meta]. Client information is recommended by the protocol but optional.
* Unknown metadata entries are preserved by [RequestMeta].
*
* @property meta request-scoped protocol and client metadata
* @throws IllegalArgumentException if required request-scoped metadata is absent
* @throws SerializationException if required metadata is malformed
*/
@Serializable
@ExperimentalMcpApi
public data class DiscoverRequestParams(
@SerialName("_meta")
override val meta: RequestMeta,
) : RequestParams {
init {
requireNotNull(meta.protocolVersion) { "${RequestMetaKeys.PROTOCOL_VERSION} is required" }
requireNotNull(meta.clientCapabilities) { "${RequestMetaKeys.CLIENT_CAPABILITIES} is required" }
}
}
/**
* Requests the protocol versions, capabilities, and metadata advertised by a server.
*
* @property params request metadata required by the request-scoped lifecycle
*/
@Serializable
@ExperimentalMcpApi
public data class DiscoverRequest(override val params: DiscoverRequestParams) : ClientRequest {
@OptIn(ExperimentalSerializationApi::class)
@EncodeDefault
override val method: Method = Method.Defined.ServerDiscover
/** Metadata for this request. */
public val meta: RequestMeta
get() = params.meta
}
/** Defines where a cached discovery result may be reused. */
@Serializable
@ExperimentalMcpApi
public enum class CacheScope {
/** The result may only be reused within the same authorization context. */
@SerialName("private")
Private,
/** The result may be shared across authorization contexts. */
@SerialName("public")
Public,
}
/**
* Result returned by `server/discover`.
*
* @property supportedVersions protocol versions supported by the server
* @property capabilities capabilities advertised by the server
* @property instructions optional guidance for clients using the server
* @property resultType discriminator for the result representation
* @property ttlMs number of milliseconds clients may treat this result as fresh
* @property cacheScope authorization boundary within which the result may be reused
* @property meta optional response metadata, including optional server information
* @throws IllegalArgumentException if [ttlMs] is negative
*/
@Serializable
@ExperimentalMcpApi
public data class DiscoverResult(
val supportedVersions: List<String>,
val capabilities: ServerCapabilities,
val instructions: String? = null,
@EncodeDefault
val resultType: String = COMPLETE_RESULT_TYPE,
@Required
val ttlMs: Long = 0,
@Required
val cacheScope: CacheScope = CacheScope.Private,
@SerialName("_meta")
override val meta: JsonObject? = null,
) : ServerResult {
init {
require(ttlMs >= 0) { "ttlMs must be non-negative, but was $ttlMs" }
}
}
/**
* Data returned when a request selects an unsupported protocol version.
*
* @property supported protocol versions supported by the receiver
* @property requested protocol version selected by the request
*/
@Serializable
@ExperimentalMcpApi
public data class UnsupportedProtocolVersionData(val supported: List<String>, val requested: String)
internal const val COMPLETE_RESULT_TYPE: String = "complete"

View file

@ -269,6 +269,9 @@ public data class RPCError(val code: Int, val message: String, val data: JsonEle
/** Resource not found */
public const val RESOURCE_NOT_FOUND: Int = -32002
/** The request selected a protocol version that the receiver does not support. */
public const val UNSUPPORTED_PROTOCOL_VERSION: Int = -32022
/**
* A URL-mode elicitation must be completed before the request can be processed.
* The error [data][RPCError.data] carries the required URL-mode elicitations

View file

@ -16,6 +16,7 @@ public sealed interface Method {
@Serializable
public enum class Defined(override val value: String) : Method {
Initialize("initialize"),
ServerDiscover("server/discover"),
Ping("ping"),
ResourcesList("resources/list"),
ResourcesTemplatesList("resources/templates/list"),

View file

@ -1,8 +1,10 @@
package io.modelcontextprotocol.kotlin.sdk.types
import io.modelcontextprotocol.kotlin.sdk.ExperimentalMcpApi
import kotlinx.serialization.ExperimentalSerializationApi
import kotlinx.serialization.SerialName
import kotlinx.serialization.Serializable
import kotlinx.serialization.SerializationException
import kotlinx.serialization.json.JsonElement
import kotlinx.serialization.json.JsonObject
import kotlinx.serialization.json.JsonPrimitive
@ -11,6 +13,13 @@ import kotlinx.serialization.json.long
import kotlinx.serialization.json.longOrNull
import kotlin.jvm.JvmInline
internal object RequestMetaKeys {
const val PROTOCOL_VERSION: String = "io.modelcontextprotocol/protocolVersion"
const val CLIENT_INFO: String = "io.modelcontextprotocol/clientInfo"
const val CLIENT_CAPABILITIES: String = "io.modelcontextprotocol/clientCapabilities"
const val LOG_LEVEL: String = "io.modelcontextprotocol/logLevel"
}
/**
* Metadata attached to a request's `_meta` field.
*
@ -40,6 +49,88 @@ public value class RequestMeta(public val json: JsonObject) {
McpJson.decodeFromJsonElement(element)
}
/**
* The MCP protocol version selected for this request, or `null` when absent.
*
* This field is required by the request-scoped lifecycle introduced in protocol version
* `2026-07-28`, but remains optional here so older requests retain their wire shape.
*
* @throws SerializationException if the field is present but is not a string
*/
@ExperimentalMcpApi
public val protocolVersion: String?
get() = json[RequestMetaKeys.PROTOCOL_VERSION]?.let { element ->
if (element !is JsonPrimitive || !element.isString) {
throw SerializationException("${RequestMetaKeys.PROTOCOL_VERSION} must be a JSON string")
}
element.content
}
/**
* Information about the client making this request, or `null` when absent.
*
* Request-scoped clients should include this field unless specifically configured not to do
* so. The self-reported value is intended for display, logging, and debugging; servers should
* not use it to change behavior or rely on it for security decisions.
*
* @throws SerializationException if the field is present but is not a valid [Implementation]
*/
@ExperimentalMcpApi
public val clientInfo: Implementation?
get() = json[RequestMetaKeys.CLIENT_INFO]?.let { element ->
try {
McpJson.decodeFromJsonElement<Implementation>(element)
} catch (cause: SerializationException) {
throw SerializationException(
"${RequestMetaKeys.CLIENT_INFO} must be a valid client implementation",
cause,
)
}
}
/**
* Capabilities declared by the client for this request, or `null` when absent.
*
* Servers using the request-scoped lifecycle must not infer capabilities from an earlier
* request. An empty object means the client supports no optional capabilities.
*
* @throws SerializationException if the field is present but is not valid [ClientCapabilities]
*/
@ExperimentalMcpApi
public val clientCapabilities: ClientCapabilities?
get() = json[RequestMetaKeys.CLIENT_CAPABILITIES]?.let { element ->
try {
McpJson.decodeFromJsonElement<ClientCapabilities>(element)
} catch (cause: SerializationException) {
throw SerializationException(
"${RequestMetaKeys.CLIENT_CAPABILITIES} must be a valid client capabilities object",
cause,
)
}
}
/**
* Minimum severity of request-associated log notifications, or `null` when absent.
*
* In the request-scoped lifecycle, absence means that the server must not emit log
* notifications for this request.
*
* @throws SerializationException if the field is present but is not a valid [LoggingLevel]
*/
@Deprecated("Per-request log levels are deprecated as of MCP protocol version 2026-07-28 (SEP-2577).")
@ExperimentalMcpApi
public val logLevel: LoggingLevel?
get() = json[RequestMetaKeys.LOG_LEVEL]?.let { element ->
try {
McpJson.decodeFromJsonElement<LoggingLevel>(element)
} catch (cause: SerializationException) {
throw SerializationException(
"${RequestMetaKeys.LOG_LEVEL} must be a valid logging level",
cause,
)
}
}
/**
* Retrieves the value associated with the specified key from the JSON object.
*

View file

@ -1,6 +1,7 @@
package io.modelcontextprotocol.kotlin.sdk.types
import io.github.oshai.kotlinlogging.KotlinLogging
import io.modelcontextprotocol.kotlin.sdk.ExperimentalMcpApi
import kotlinx.serialization.DeserializationStrategy
import kotlinx.serialization.KSerializer
import kotlinx.serialization.SerializationException
@ -238,9 +239,11 @@ internal object ResourceContentsPolymorphicSerializer :
// Request Serializers
// ============================================================================
@OptIn(ExperimentalMcpApi::class)
private val clientRequestDeserializers: Map<String, DeserializationStrategy<ClientRequest>> by lazy {
mapOf(
Method.Defined.CompletionComplete.value to CompleteRequest.serializer(),
Method.Defined.ServerDiscover.value to DiscoverRequest.serializer(),
Method.Defined.Initialize.value to InitializeRequest.serializer(),
Method.Defined.Ping.value to PingRequest.serializer(),
Method.Defined.LoggingSetLevel.value to SetLevelRequest.serializer(),
@ -417,9 +420,16 @@ private fun selectClientResultDeserializer(element: JsonElement): Deserializatio
* Selects the appropriate deserializer for server results based on JSON content.
* Returns null if the structure doesn't match any known server result type.
*/
@OptIn(ExperimentalMcpApi::class)
private fun selectServerResultDeserializer(element: JsonElement): DeserializationStrategy<ServerResult>? {
val jsonObject = element.jsonObject
val isDiscoverResult =
"supportedVersions" in jsonObject &&
"capabilities" in jsonObject &&
"ttlMs" in jsonObject &&
"cacheScope" in jsonObject
return when {
isDiscoverResult -> DiscoverResult.serializer()
"protocolVersion" in jsonObject && "capabilities" in jsonObject -> InitializeResult.serializer()
"completion" in jsonObject -> CompleteResult.serializer()
"tools" in jsonObject -> ListToolsResult.serializer()

View file

@ -0,0 +1,324 @@
package io.modelcontextprotocol.kotlin.sdk.types
import io.kotest.assertions.json.shouldEqualJson
import io.modelcontextprotocol.kotlin.sdk.ExperimentalMcpApi
import kotlinx.serialization.json.Json
import kotlinx.serialization.json.jsonObject
import kotlin.test.Test
import kotlin.test.assertEquals
import kotlin.test.assertFails
import kotlin.test.assertFailsWith
import kotlin.test.assertIs
import kotlin.test.assertNotNull
import kotlin.test.assertNull
import kotlin.test.assertTrue
@OptIn(ExperimentalMcpApi::class)
class DiscoveryTest {
@Test
fun `should decode server discover request from its wire shape`() {
val request = McpJson.decodeFromString<Request>(
"""
{
"method": "server/discover",
"params": {
"_meta": {
"io.modelcontextprotocol/protocolVersion": "2026-07-28",
"io.modelcontextprotocol/clientInfo": {
"name": "test-client",
"version": "1.0.0"
},
"io.modelcontextprotocol/clientCapabilities": {}
}
}
}
""".trimIndent(),
)
val discover = assertIs<DiscoverRequest>(request)
assertEquals(Method.Defined.ServerDiscover, discover.method)
assertEquals("2026-07-28", discover.meta.protocolVersion)
assertEquals("test-client", discover.meta.clientInfo?.name)
assertEquals(ClientCapabilities(), discover.meta.clientCapabilities)
}
@Test
fun `should decode discovery request without optional client info`() {
val request = McpJson.decodeFromString<Request>(
"""
{
"method": "server/discover",
"params": {
"_meta": {
"io.modelcontextprotocol/protocolVersion": "2026-07-28",
"io.modelcontextprotocol/clientCapabilities": {},
"com.example/traceId": "trace-123"
}
}
}
""".trimIndent(),
)
val discover = assertIs<DiscoverRequest>(request)
assertEquals("2026-07-28", discover.meta.protocolVersion)
assertEquals(ClientCapabilities(), discover.meta.clientCapabilities)
assertNull(discover.meta.clientInfo)
assertNotNull(discover.meta["com.example/traceId"])
McpJson.encodeToString<Request>(discover) shouldEqualJson """
{
"method": "server/discover",
"params": {
"_meta": {
"io.modelcontextprotocol/protocolVersion": "2026-07-28",
"io.modelcontextprotocol/clientCapabilities": {},
"com.example/traceId": "trace-123"
}
}
}
""".trimIndent()
}
@Test
fun `should reject discovery requests without required request metadata`() {
val invalidParams = listOf(
"{}" to "_meta",
"""{"_meta": {}}""" to RequestMetaKeys.PROTOCOL_VERSION,
"""
{
"_meta": {
"${RequestMetaKeys.PROTOCOL_VERSION}": "2026-07-28",
"${RequestMetaKeys.CLIENT_INFO}": {
"name": "test-client",
"version": "1.0.0"
}
}
}
""".trimIndent() to RequestMetaKeys.CLIENT_CAPABILITIES,
)
invalidParams.forEach { (params, missingField) ->
val failure = assertFails {
McpJson.decodeFromString<Request>(
"""{"method": "server/discover", "params": $params}""",
)
}
assertTrue(
failure.message.orEmpty().contains(missingField),
"Expected failure to identify missing field $missingField, but was: $failure",
)
}
}
@Test
fun `should serialize every required discovery result field`() {
val result = DiscoverResult(
supportedVersions = listOf("2026-07-28"),
capabilities = ServerCapabilities(
tools = ServerCapabilities.Tools(listChanged = true),
),
instructions = "Use tools intentionally.",
)
McpJson.encodeToString<ServerResult>(result) shouldEqualJson """
{
"supportedVersions": ["2026-07-28"],
"capabilities": {
"tools": {"listChanged": true}
},
"instructions": "Use tools intentionally.",
"resultType": "complete",
"ttlMs": 0,
"cacheScope": "private"
}
""".trimIndent()
}
@Test
fun `should encode optional server info in result metadata`() {
val result = DiscoverResult(
supportedVersions = listOf("2026-07-28"),
capabilities = ServerCapabilities(),
meta = Json.parseToJsonElement(
"""
{
"io.modelcontextprotocol/serverInfo": {
"name": "test-server",
"version": "2.0.0"
},
"com.example/source": "edge"
}
""".trimIndent(),
).jsonObject,
)
McpJson.encodeToString<ServerResult>(result) shouldEqualJson """
{
"supportedVersions": ["2026-07-28"],
"capabilities": {},
"resultType": "complete",
"ttlMs": 0,
"cacheScope": "private",
"_meta": {
"io.modelcontextprotocol/serverInfo": {
"name": "test-server",
"version": "2.0.0"
},
"com.example/source": "edge"
}
}
""".trimIndent()
assertEquals(
Json.parseToJsonElement("""{"name":"test-server","version":"2.0.0"}"""),
result.meta?.get("io.modelcontextprotocol/serverInfo"),
)
}
@Test
fun `should encode required defaults independently of McpJson`() {
val result = DiscoverResult(
supportedVersions = listOf("2026-07-28"),
capabilities = ServerCapabilities(),
)
Json.encodeToString(result) shouldEqualJson """
{
"supportedVersions": ["2026-07-28"],
"capabilities": {},
"resultType": "complete",
"ttlMs": 0,
"cacheScope": "private"
}
""".trimIndent()
}
@Test
fun `should reject discovery results without required cache fields`() {
val invalidResults = listOf(
"""
{
"supportedVersions": ["2026-07-28"],
"capabilities": {},
"cacheScope": "private"
}
""".trimIndent(),
"""
{
"supportedVersions": ["2026-07-28"],
"capabilities": {},
"ttlMs": 0
}
""".trimIndent(),
)
invalidResults.forEach { wire ->
assertFails { McpJson.decodeFromString<DiscoverResult>(wire) }
assertFails { McpJson.decodeFromString<ServerResult>(wire) }
}
}
@Test
fun `should use complete when a discovery result omits resultType`() {
val result = McpJson.decodeFromString<ServerResult>(
"""
{
"supportedVersions": ["2026-07-28"],
"capabilities": {},
"ttlMs": 0,
"cacheScope": "private"
}
""".trimIndent(),
)
assertEquals(COMPLETE_RESULT_TYPE, assertIs<DiscoverResult>(result).resultType)
}
@Test
fun `should deserialize discovery results polymorphically`() {
val wire =
"""
{
"supportedVersions": ["2026-07-28"],
"capabilities": {},
"resultType": "complete",
"ttlMs": 250,
"cacheScope": "public",
"_meta": {
"io.modelcontextprotocol/serverInfo": {
"name": "server",
"version": "1"
},
"com.example/source": "edge"
}
}
""".trimIndent()
val result = McpJson.decodeFromString<ServerResult>(wire)
val discover = assertIs<DiscoverResult>(result)
assertEquals(250, discover.ttlMs)
assertEquals(CacheScope.Public, discover.cacheScope)
assertEquals(
Json.parseToJsonElement("""{"name":"server","version":"1"}"""),
discover.meta?.get("io.modelcontextprotocol/serverInfo"),
)
assertNotNull(discover.meta?.get("com.example/source"))
McpJson.encodeToString<ServerResult>(discover) shouldEqualJson wire
}
@Test
fun `should not treat supportedVersions alone as a discovery discriminator`() {
val result = McpJson.decodeFromString<ServerResult>(
"""
{
"tools": [],
"supportedVersions": ["extension-value"]
}
""".trimIndent(),
)
assertIs<ListToolsResult>(result)
}
@Test
fun `should not treat an initialize extension as a discovery result`() {
val result = McpJson.decodeFromString<ServerResult>(
"""
{
"protocolVersion": "2025-06-18",
"capabilities": {},
"serverInfo": {
"name": "test-server",
"version": "1.0.0"
},
"supportedVersions": ["extension-value"]
}
""".trimIndent(),
)
assertIs<InitializeResult>(result)
}
@Test
fun `should reject a negative discovery ttl`() {
assertFailsWith<IllegalArgumentException> {
DiscoverResult(
supportedVersions = listOf("2026-07-28"),
capabilities = ServerCapabilities(),
ttlMs = -1,
)
}
}
@Test
fun `unsupported version data should round trip without losing versions`() {
val data = UnsupportedProtocolVersionData(
supported = listOf("2026-07-28", "2025-11-25"),
requested = "2099-01-01",
)
val encoded = McpJson.encodeToString(data)
assertEquals(data, McpJson.decodeFromString(encoded))
assertEquals(-32022, RPCError.ErrorCode.UNSUPPORTED_PROTOCOL_VERSION)
}
}

Some files were not shown because too many files have changed in this diff Show more