chore: bump the gradle-updates group across 1 directory with 8 updates

[dependabot]

Bumps the gradle-updates group with 8 updates in the / directory:

Package	From	To
ch.qos.logback:logback-classic	1.5.32	1.6.3
org.apache.maven:maven-artifact	3.9.15	3.9.16
gradle-wrapper	9.5.1	9.7.1
com.google.guava:guava	33.6.0-jre	33.7.1-jre
io.ktor:ktor-bom	3.4.3	3.5.2
io.kotest:kotest-bom	6.1.11	6.2.4
com.vanniktech.maven.publish.base	0.36.0	0.37.0
com.ncorti.ktfmt.gradle	0.26.0	0.27.0

Updates ch.qos.logback:logback-classic from 1.5.32 to 1.6.3

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.3

2026-08-14 Release of logback version 1.6.3

• In response CVE-2026-19880, MDCBasedDiscriminator (used by SiftingAppender) now strips forward and backward slashes (/, \) from MDC values before they are used as discriminating keys. This prevents path segments from escaping into destinations controlled by an attacker. When sanitisation actually changes a value, a warning is emitted; the warning is rate-limited (a small batch, then a lull of about ten minutes).

• Colour console support is split out into a dedicated JansiConsoleAppender. It wraps stdout or stderr with Jansi so ANSI escape sequences (for example coloured patterns) render correctly on terminals that need it, notably Windows. Prefer this class over the older path described next. See the appenders documentation.

• The withJansi property on ConsoleAppender is deprecated. Existing configurations that still set <withJansi>true</withJansi> continue to work for compatibility, but new setups should use JansiConsoleAppender instead.

• ConsoleAppender no longer treats the process console as an exclusive resource: stopping it does not close System.out / System.err. JansiConsoleAppender pairs each AnsiConsole.systemInstall() with systemUninstall() on stop, so repeated start/stop cycles do not leave Jansi installed or tear down streams shared with the rest of the JVM. Related behavior is covered by tests for issues/1063.

• Invocation throttling helpers were reworked: SimpleInvocationGate is renamed FixedIntervalInvocationGate, and BatchedFixedIntervalInvocationGate allows a short burst of invocations before applying a fixed lull. The sanitisation warning above uses the batched gate.

• The JPMS module-info for logback-core now exports the ch.qos.logback.core.property package, which had been missing from the module descriptor.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit e8e824dede022a6d7208b36cfa875b0d1b7772f3 associated with the tag v_1.6.3. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

-- Sponsoring SLF4J/logback/reload4j at https://github.com/sponsors/qos-ch

Logback 1.6.2

clean.full.1.6.2.mp4

2026-08-10 Release of logback version 1.6.2

• Configuration analysis now detects contradictory caller-data inclusion instructions. For example, an AsyncAppender, SocketAppender or SMTPAppender with includeCallerData left at the default false is incompatible with a layout or encoder pattern that uses a caller-data converter such as %C, %M, %L, %F, %l or %caller. At runtime those converters would print question marks and still incur extraction cost on a worker thread. Logback now emits a configuration-time warning when such instructions disagree. See codes.html#callerContradiction for details. This issue was reported in issues/1059 by leeychee. The initial analysis was contributed by seonwoo_jung.

• Caller-contradiction analysis can be turned off by setting the logback.skipCallerContradictionAnalysis variable to true, either as a system property (-Dlogback.skipCallerContradictionAnalysis=true) or as a property in the configuration file:

  <property name="logback.skipCallerContradictionAnalysis" value="true"/>

• SimpleSocketServer and SimpleSSLSocketServer now require an explicit client IP whitelist. On the command line, pass one or more allowed addresses (single IPs or CIDR ranges) after the configuration file. An empty whitelist means no clients are accepted. When embedding the server programmatically, register allowed addresses with addAllowedClientAddress(String) or setAllowedClientAddresses(Collection) before clients connect. See the documentation on restricting client access.

• Added ThrowableProxyVOBuilder for assembling a ThrowableProxyVO field by field, with a corresponding ThrowableProxyVO.builder() entry point.

• Dependency analysis handlers now run their postHandle method after child models have been processed, so checks that depend on nested appenders (such as caller-contradiction analysis) see a complete picture.

• Updated several dependencies, including Angus Mail to 2.0.4 and Jetty (test) to 12.1.12.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit e3d78330ad1ba024fd987fd00c3ffb9cfcdb07dc associated with the tag v_1.6.2. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.6.1

2026-07-28 Release of logback version 1.6.1

• In TimeBasedRollingPolicy, when the file option is set, the intermediate file renamed before asynchronous compression now receives the target archive name without the compression suffix (e.g. .gz, .zip, .xz). Previously it used a nanotime-based .tmp suffix. This makes the file easier to identify if compression fails during rollover. (See also the following paragraph.)

... (truncated)

Commits

• e8e824d prepare release 1.6.3
• 761821b MDCBasedDiscriminator has a gated warning mechanism
• 53ed122 update copyright year
• c7e2db2 rename SimpleInvocationGate as FixedIntervalInvocationGate
• b5aa931 added BatchedSimpleInvocationGate
• 1f22af7 add javadocs to SimpleInvocationGate
• 638ffa7 prevent forward and backward slashes to escape to other directories
• 7d6b9a4 add missing ch.qos.logback.core.property package
• fa25930 add an extension path in ConsoleAppender for JansiConsoleAppender
• c73b43f deprecate the withJansi path
• Additional commits viewable in compare view

Updates org.apache.maven:maven-artifact from 3.9.15 to 3.9.16

Updates gradle-wrapper from 9.5.1 to 9.7.1

Release notes

Sourced from gradle-wrapper's releases.

9.7.1

The Gradle team is excited to announce Gradle 9.7.1.

This is a patch release for 9.7.0. We recommend using 9.7.1 instead of 9.7.0.

Here are the highlights of 9.7.0 release:

• Isolated Projects graduates to incubating
• Broader Configuration Cache compatibility
• Resilient Sync helps you fix broken builds
• More source locations in problem reports

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Adam, Aman Gautam, Aman Kumar, Anton Dubrouski, Aurimas, gbhavya07, Josh Friend, nicklauslittle-gov, Pragati, project516, Qin Mi, Ravi, sk-reddy17, Suvrat Acharya, Yongshun Ye.

Upgrade instructions

Switch your build to use Gradle 9.7.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.7.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.7.0

The Gradle team is excited to announce Gradle 9.7.0.

... (truncated)

Commits

• 92f0512 update fixed issues for 9.7.1 (#38892)
• 820ee75 update fixed issues for 9.7.1
• 82c23f9 Fix annotation parameter ordering problem in KTS (#38878)
• ef11a72 Fix annotation parameter ordering issue
• bb0d8a9 Make relevant tests polyglot (run for multiple DSLs)
• 336e129 Update signing configuration (#38874)
• 4bdf0da Update signing configuration
• cd9b92c List issues resolved in 9.7.1 (#38839)
• 5f4e381 List issues resolved in 9.7.1
• 1e08ab5 Keep type-use annotations in extracted ABI classes (#38810)
• Additional commits viewable in compare view

Updates com.google.guava:guava from 33.6.0-jre to 33.7.1-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.7.1

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.1-jre</version>
  <!-- or, for Android: -->
  <version>33.7.1-android</version>
</dependency>

Jar files

• 33.7.1-jre.jar
• 33.7.1-android.jar

Guava requires one runtime dependency, which you can download here:

• failureaccess-1.0.3.jar

Javadoc

• 33.7.1-jre
• 33.7.1-android

JDiff

• 33.7.1-jre vs. 33.7.0-jre
• 33.7.1-android vs. 33.7.0-android
• 33.7.1-android vs. 33.7.1-jre

Changelog

Guava 33.7.1 removes the Multi-Release line from our jar manifest, fixing an issue under Java 9 and 10 that was introduced to guava-jre in version 33.7.0. Sorry for the trouble.

33.7.0

Newly introduced problem for Java 9 and Java 10 only

Guava 33.7.0 includes a Multi-Release line in its jar manifest, even though it is no longer a multi-release jar. This causes some problems with tools from Java 9 and Java 10. The issue is fixed in version 33.7.1. Sorry for the trouble.

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.0-jre</version>
  <!-- or, for Android: -->
</tr></table> 

... (truncated)

Commits

• See full diff in compare view

Updates io.ktor:ktor-bom from 3.4.3 to 3.5.2

Release notes

Sourced from io.ktor:ktor-bom's releases.

3.5.2

Published 31 July 2026

Improvements

• KTOR-8032 RateLimit: Allow limit requests based on authentication result
• KTOR-9719 ApplicationCall.isStaticContent returns false when called from plugin interceptors
• KTOR-8450 ContentNegotiation: it doesn't handle content type suffixes
• KTOR-7892 SwaggerUI: Missing oauth2-redirect.html support in the plugin
• KTOR-9759 Reject whitespace in URL hosts during parsing
• KTOR-9681 Update kotlinx-io to 0.9.1
• KTOR-9743 ByteReadChannel.readLineStrict: Misleading definition of limit parameter in KDocs
• KTOR-9504 Improve KDoc for EmbeddedServer.addShutdownHook

Bugfixes

• KTOR-9741 CIO: request-handler coroutine leak on half-closed idle connection after ≥1MB response
• KTOR-7661 Maven + YAML config file does not work
• KTOR-9585 OpenAPI: JsonSchema title is truncated when it contains a dot
• KTOR-9704 UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics, slowing every text response by 5-7x
• KTOR-9588 SSE client (CIO engine) sends spurious Content-Length: 0 on body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)
• KTOR-9679 ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a character at a buffer boundary
• KTOR-9767 ByteReadChannel.readLineTo: Return read bytes count instead of decoded characters count
• KTOR-8992 HoconConfigLoader is not loaded when ktor-server-config-yaml on the classpath
• KTOR-9698 OpenAPI: schema for kotlinx.serialization sealed types omits discriminator property in variant schemas
• KTOR-9690 Netty: in-flight requests are aborted on stop(), ignoring shutdown grace period
• KTOR-8903 Netty: Close channel connection on errors properly
• KTOR-9707 SaveBody performance regression
• KTOR-9703 Inefficient text reading function in DefaultTransform
• KTOR-9711 Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks response flushing for the whole connection
• KTOR-9688 RateLimit: No access to principal when wrapped with authentication since 3.5.1
• KTOR-9677 Auto-reloading: server is reloaded only once since 3.5.0
• KTOR-9683 Sockets: Canceling a SelectorManager job doesn't close it properly
• KTOR-9671 Darwin: Semicolons in URL path are sanitized

3.5.1

Published 25 June 2026

Improvements

• KTOR-9492 OpenAPI plugin: handle requireXxx functions in compiler plugin
• KTOR-9569 Add more details for KDoc of BearerAuthConfig.sendWithoutRequest
• KTOR-9571 Add KDoc for BearerAuthConfig.realm
• KTOR-9570 Add Kdoc for BearerAuthConfig.refreshTokens

Bugfixes

• KTOR-9646 Fix Kotlin 2.4.0 compiler plugin breaking changes
• KTOR-9585 OpenAPI: JsonSchema title is truncated when it contains a dot
• KTOR-9591 OpenAPI: @JsonClassDiscriminator on sealed types is ignored when generating OpenAPI discriminator schema
• KTOR-9597 OpenAPI: Schema name collisions because@SerialName of sealed subtypes is used as components.schemas key
• KTOR-9601 OpenAPI: nullable @​JvmInline value class loses nullability in generated schema
• KTOR-9620 Some issues related to digest authentication in 3.5.0
• KTOR-9623 Digest Auth: server must respond with one WWW-Authenticate header for each supported algorithm

... (truncated)

Changelog

Sourced from io.ktor:ktor-bom's changelog.

3.5.2

Published 31 July 2026

Improvements

• KTOR-8032 RateLimit: Allow limit requests based on authentication result
• KTOR-9719 ApplicationCall.isStaticContent returns false when called from plugin interceptors
• KTOR-8450 ContentNegotiation: it doesn't handle content type suffixes
• KTOR-7892 SwaggerUI: Missing oauth2-redirect.html support in the plugin
• KTOR-9759 Reject whitespace in URL hosts during parsing
• KTOR-9681 Update kotlinx-io to 0.9.1
• KTOR-9743 ByteReadChannel.readLineStrict: Misleading definition of limit parameter in KDocs
• KTOR-9504 Improve KDoc for EmbeddedServer.addShutdownHook

Bugfixes

• KTOR-9741 CIO: request-handler coroutine leak on half-closed idle connection after ≥1MB response
• KTOR-7661 Maven + YAML config file does not work
• KTOR-9585 OpenAPI: JsonSchema title is truncated when it contains a dot
• KTOR-9704 UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics, slowing every text response by 5-7x
• KTOR-9588 SSE client (CIO engine) sends spurious Content-Length: 0 on body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)
• KTOR-9679 ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a character at a buffer boundary
• KTOR-9767 ByteReadChannel.readLineTo: Return read bytes count instead of decoded characters count
• KTOR-8992 HoconConfigLoader is not loaded when ktor-server-config-yaml on the classpath
• KTOR-9698 OpenAPI: schema for kotlinx.serialization sealed types omits discriminator property in variant schemas
• KTOR-9690 Netty: in-flight requests are aborted on stop(), ignoring shutdown grace period
• KTOR-8903 Netty: Close channel connection on errors properly
• KTOR-9707 SaveBody performance regression
• KTOR-9703 Inefficient text reading function in DefaultTransform
• KTOR-9711 Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks response flushing for the whole connection
• KTOR-9688 RateLimit: No access to principal when wrapped with authentication since 3.5.1
• KTOR-9677 Auto-reloading: server is reloaded only once since 3.5.0
• KTOR-9683 Sockets: Canceling a SelectorManager job doesn't close it properly
• KTOR-9671 Darwin: Semicolons in URL path are sanitized

3.5.1

Published 25 June 2026

Improvements

• KTOR-9492 OpenAPI plugin: handle requireXxx functions in compiler plugin
• KTOR-9569 Add more details for KDoc of BearerAuthConfig.sendWithoutRequest
• KTOR-9571 Add KDoc for BearerAuthConfig.realm
• KTOR-9570 Add Kdoc for BearerAuthConfig.refreshTokens

Bugfixes

• KTOR-9646 Fix Kotlin 2.4.0 compiler plugin breaking changes
• KTOR-9585 OpenAPI: JsonSchema title is truncated when it contains a dot
• KTOR-9591 OpenAPI: @JsonClassDiscriminator on sealed types is ignored when generating OpenAPI discriminator schema
• KTOR-9597 OpenAPI: Schema name collisions because@SerialName of sealed subtypes is used as components.schemas key
• KTOR-9601 OpenAPI: nullable @​JvmInline value class loses nullability in generated schema
• KTOR-9620 Some issues related to digest authentication in 3.5.0

... (truncated)

Commits

• 01c469a Release 3.5.2 (#5781)
• c965a0c KTOR-9741 Prevent CIO request handler leak (#5783)
• 74df458 chore: fix some comments to improve readability
• 2672567 [KTOR-9704] Optimized encoding flow for UTF-8 (#5743)
• d5680ed KTOR-5391: Document ECDSA certificate limitation for client authentication (#...
• 9b0f356 something::javaClass.name is not the name of the class of something but `"j...
• 58256cd KTOR-9743 Clarify readLine documentation
• 088bd60 KTOR-9679 Fix regressions caused by adding buffering
• 167176a KTOR-9588 Do not send Content-Length: 0 for body-less GET requests (#5620)
• 7fb0844 KTOR-9585 Fix schema title trimming
• Additional commits viewable in compare view

Updates io.kotest:kotest-bom from 6.1.11 to 6.2.4

Release notes

Sourced from io.kotest:kotest-bom's releases.

v6.2.4

What's Changed

• Alex/same time offset date time (#6180) by @​AlexCue987 in kotest/kotest#6181
• Alex/range intersect details (#6183) by @​AlexCue987 in kotest/kotest#6184
• Force commons-beanutils to 1.11.0 (CVE-2025-48734) by @​sksamuel in kotest/kotest#6187
• Update kotlinx-datetime to 0.8.0 by @​sksamuel in kotest/kotest#6186
• chore: route a few hardcoded dependency/plugin versions through the version catalog by @​stlpine in kotest/kotest#6189
• check gradle wrapper gh action by @​alfonsoristorato in kotest/kotest#6192
• fix(assertions): state the containExactCopies lower bound as at least 1 by @​mvanhorn in kotest/kotest#6193
• General improvements - framework by @​alfonsoristorato in kotest/kotest#6190
• General improvements - IJ plugin by @​alfonsoristorato in kotest/kotest#6191
• fix jump to source by @​alfonsoristorato in kotest/kotest#6195
• Update dependency net.bytebuddy:byte-buddy to v1.18.11 by @​renovate[bot] in kotest/kotest#6202
• Update dependency io.github.classgraph:classgraph to v4.8.186 by @​renovate[bot] in kotest/kotest#6201
• update docs to clarify that copies in shouldContainExactCopies must be 1 or higher by @​alfonsoristorato in kotest/kotest#6207
• spring extension improvements by @​alfonsoristorato in kotest/kotest#6204
• sourceRef improvements by @​alfonsoristorato in kotest/kotest#6203
• introduce a TeamCity renderer that allows tree view and force it for our legacy IJ plugin by @​alfonsoristorato in kotest/kotest#6210
• fix kdoc on StrictThrowableHandling by @​alfonsoristorato in kotest/kotest#6212
• make ai skill available to users via claude marketplace and tie versioning to kotest releases by @​alfonsoristorato in kotest/kotest#6211
• spec tags cache by @​alfonsoristorato in kotest/kotest#6206
• junit testFinished improvements by @​alfonsoristorato in kotest/kotest#6205
• Add module-factory support to KoinExtension (#6006) by @​sksamuel in kotest/kotest#6138

New Contributors

• @​stlpine made their first contribution in kotest/kotest#6189

Full Changelog: kotest/kotest@6.2.3...v6.2.4

v6.2.3

What's Changed

• Document Kotest Gradle plugin usage by @​cfcromn in kotest/kotest#6166
• add Double.atMost by @​AlexCue987 in kotest/kotest#6175
• add offsetDateTime.shouldHaveSameInstantAsZonedDateTime(other: ZonedDateTime) by @​AlexCue987 in kotest/kotest#6173
• match fields of data classes that are data objects by @​AlexCue987 in kotest/kotest#6177
• complete custom styles DSL by @​alfonsoristorato in kotest/kotest#6179

New Contributors

• @​cfcromn made their first contribution in kotest/kotest#6166

Full Changelog: kotest/kotest@6.2.2...v6.2.3

v6.2.2

What's Changed

• Document instant-based ZonedDateTime plusOrMinus comparison by @​AlexCue987 with @​Copilot in kotest/kotest#6159
• Add documentation for OffsetDateTime tolerance matcher by @​AlexCue987 in kotest/kotest#6161
• Fix typo in proptest config docs by @​axiom in kotest/kotest#6155
• disable return-value-checker for releases by @​alfonsoristorato in kotest/kotest#6165
• fix(kotest-framework-engine): Use display-name rendering for ignored tests in TeamCity listener by @​sksamuel in kotest/kotest#6119
• fix(kotest-assertions-core): Handle null map values in shouldBeEqualUsingFields by @​sksamuel in kotest/kotest#6112

... (truncated)

Commits

• 736a47b Add module-factory support to KoinExtension (#6006) (#6138)
• cb91c7e junit testFinished improvements (#6205)
• 5c898b4 spec tags cache (#6206)
• 69fdc8d make ai skill available to users via claude marketplace and tie versioning to...
• 2403f4f fix kdoc on StrictThrowableHandling (#6212)
• f96cf2a introduce a TeamCity renderer that allows tree view and force it for our IJ p...
• 0579271 sourceRef improvements (#6203)
• da26f16 spring extension improvements (#6204)
• cc5cf25 update docs to clarify that copies in shouldContainExactCopies must be 1 or...
• 1d648f9 Update dependency io.github.classgraph:classgraph to v4.8.186 (#6201)
• Additional commits viewable in compare view

Updates com.vanniktech.maven.publish.base from 0.36.0 to 0.37.0

Release notes

Sourced from com.vanniktech.maven.publish.base's releases.

0.37.0

• When publishing to Maven Central, redundant checksum files are now excluded by default: checksums of .asc signature files (gradle/gradle#20232) and the sha256/sha512 checksums, which are never read by Gradle or Maven Central. The published checksums can be configured through checksums(...) in the DSL or the mavenCentralChecksums Gradle property (default md5,sha1). Signature checksum exclusion can be controlled through excludeSignatureChecksums() or the mavenCentralExcludeSignatureChecksums Gradle property.
• Maven Central deployment id is being logged after upload.

Minimum supported versions

• JDK 17
• Gradle 9.0.0
• Android Gradle Plugin 8.13.0
• Kotlin Gradle Plugin 2.2.0

Compatibility tested up to

• JDK 26
• Gradle 9.6.0
• Gradle 9.7.0-milestone-1
• Android Gradle Plugin 9.2.1
• Android Gradle Plugin 9.3.0-rc01
• Android Gradle Plugin 9.4.0-alpha01
• Kotlin Gradle Plugin 2.4.0

0.37.0-rc1

• When publishing to Maven Central, redundant checksum files are now excluded by default: checksums of .asc signature files (gradle/gradle#20232) and the sha256/sha512 checksums, which are never read by Gradle or Maven Central. The published checksums can be configured through checksums(...) in the DSL or the mavenCentralChecksums Gradle property (default md5,sha1). Signature checksum exclusion can be controlled through excludeSignatureChecksums() or the mavenCentralExcludeSignatureChecksums Gradle property.
• Maven Central deployment id is being logged after upload.

Minimum supported versions

• JDK 17
• Gradle 9.0.0
• Android Gradle Plugin 8.13.0
• Kotlin Gradle Plugin 2.2.0

Compatibility tested up to

• JDK 26
• Gradle 9.6.0
• Gradle 9.7.0-milestone-1
• Android Gradle Plugin 9.2.1
• Android Gradle Plugin 9.3.0-rc01
• Android Gradle Plugin 9.4.0-alpha01
• Kotlin Gradle Plugin 2.4.0

Changelog

Sourced from com.vanniktech.maven.publish.base's changelog.

0.37.0 (2026-06-21)

• When publishing to Maven Central, redundant checksum files are now excluded by default: checksums of .asc signature files (gradle/gradle#20232) and the sha256/sha512 checksums, which are never read by Gradle or Maven Central. The published checksums can be configured through checksums(...) in the DSL or the mavenCentralChecksums Gradle property (default md5,sha1). Signature checksum exclusion can be controlled through excludeSignatureChecksums() or the mavenCentralExcludeSignatureChecksums Gradle property.
• Maven Central deployment id is being logged after upload.

Minimum supported versions

• JDK 17
• Gradle 9.0.0
• Android Gradle Plugin 8.13.0
• Kotlin Gradle Plugin 2.2.0

Compatibility tested up to

• JDK 26
• Gradle 9.6.0
• Gradle 9.7.0-milestone-1
• Android Gradle Plugin 9.2.1
• Android Gradle Plugin 9.3.0-rc01
• Android Gradle Plugin 9.4.0-alpha01
• Kotlin Gradle Plugin 2.4.0

Commits

• 7017e3d enable feature preview (#1381)
• 05f6b6e use 0.37.0-rc1 (#1380)
• 0167c9c Changelog for 0.37.0 (#1379)
• b652eb3 Update dependency java to v26 (#1353)
• a9f70b3 Update dependency com.freeletics.gradle:scripts-formatting-jvm to v0.37.0 (#1...
• 541cf8f Log deployment id and publishing type after Central Portal upload (#1354)
• d4873e5 Update slf4j monorepo to v2 (#1365)
• 42baf9d Update android.gradle (#1335)
• 2de1978 Update Gradle (#1362)
• 6f03e46 Update kotlin monorepo to v2.4.0 (#1352)
• Additional commits viewable in compare view

Updates com.ncorti.ktfmt.gradle from 0.26.0 to 0.27.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions