fix(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/setup-java	action	minor	v5.4.0 → v5.6.0
com.mikepenz.aboutlibraries.plugin.android	plugin	patch	15.0.2 → 15.0.4
net.bytebuddy:byte-buddy (source)	dependencies	patch	1.18.10 → 1.18.11
com.github.bumptech.glide:glide	dependencies	patch	5.0.7 → 5.0.9
com.gradle.develocity	plugin	minor	4.4.3 → 4.5.0
com.google.devtools.ksp (source)	plugin	patch	2.3.9 → 2.3.10
com.google.devtools.ksp:symbol-processing-api (source)	dependencies	patch	2.3.9 → 2.3.10
org.jetbrains.kotlin.plugin.serialization (source)	plugin	patch	2.4.0 → 2.4.10
org.jetbrains.kotlin.jvm (source)	plugin	patch	2.4.0 → 2.4.10
org.jetbrains.kotlin:kotlin-gradle-plugin (source)	dependencies	patch	2.4.0 → 2.4.10
com.android.library (source)	plugin	minor	9.2.1 → 9.3.0

---

Release Notes

actions/setup-java (actions/setup-java)

v5.6.0

Compare Source

What's Changed

• Backport to v5: Add Maven compiler problem matcher for javac diagnostics by @​brunoborges in #​1087
• feat: expose cache-primary-key output (#​597) [v5 backport] by @​brunoborges in #​1089
• dist: Cover Tencent Kona JDK 25 (#​1108) [v5 backport] by @​brunoborges in #​1110
• Backport #​1111: Preserve Maven toolchains across repeated setup-java runs (#​1099) by @​brunoborges in #​1113
• Backport #​1097/#​1098 to v5: cache Maven and Gradle wrapper distributions separately by @​brunoborges in #​1122

Full Changelog: actions/setup-java@v5...v5.6.0

v5.5.0

Compare Source

raphw/byte-buddy (net.bytebuddy:byte-buddy)

v1.18.11

• Add SBOM to published artifacts.
• Check for traversable paths injected into class files as a rather hypothetical attack vector.

bumptech/glide (com.github.bumptech.glide:glide)

v5.0.9: Glide v5.0.9

Removed extra . from version name.

google/ksp (com.google.devtools.ksp)

v2.3.10

Compare Source

What's Changed

• Fix OOMs caused by unstopped coroutine Dispatcher threads by moving KSP task cache to a gradle build service (#​2817)
• Sanitize ':' in internal-name module suffix so KSP works with Kotlin 2.4.0 default module names (#​2964)
• Filter source file trees in KspAATask to restore NO-SOURCE skipping behaviour (#​2947)
• Fix R-class resolution in KSP when AGP 9 built-in Kotlin is enabled (#​2857)
• Fix KSP2 incremental cache path normalization mismatch (#​2854)
• Normalize line endings for KspAATask source roots to prevent cross-platform remote build cache misses (#​2849)
• Fix bug where KSP incremental compilation does not consider library class references in annotations (#​3011)
• Consume all Kotlin sources in KSP to support other code generators (#​3001)
• Fix configuration cache invalidation in klib cross-compilation check (#​3014)
• Memoized hash code for KSTypeImpl to speed up processing (#​2896)
• Fix incorrect name generation for data classes annotated with @JvmRecord (#​2813)
• Include kotlinx.coroutines in the distributed uber jar symbol-processing-aa-embeddable (#​2938)
• New debugging features for incremental compilation, including additional logging and dependency graph visualization (#​3015)
• Deprecate the ksp(...) Gradle configuration in Kotlin Multiplatform (KMP) projects in favor of target-specific configurations (#​2956). Note: Non-KMP projects are also affected. For migration details, see the documentation.

Contributors

• Thanks to @​mvanhorn, @​Yong-yuan-X, @​MariusVolkhart, @​shmuelr and everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.9...2.3.10

JetBrains/kotlin (org.jetbrains.kotlin.plugin.serialization)

v2.4.10: Kotlin 2.4.10

Changelog

Backend. Wasm

• KT-87066 K/Wasm: Not all files are presented in compiler output directory with multimodule-closed-world and incremental compilation

Compiler

• KT-86939 JVM: IllegalStateException "No value for annotation parameter" when using const val in nested Java annotation array argument
• KT-83766 K2: Wrong sourcePsi is set for SymbolPsiLiteral in SLC for annotation arguments referencing a const val
• KT-86728 Reified type inference: expected type not propagated into inline call inside lambda with elvis operator

Compose Compiler

• b/522127447 Compose Compiler 2.4: classes previously inferred stable now reported runtime/Uncertain

Klibs

• KT-86501 Native: IrTypeAliasSymbolImpl is already bound. Signature: kotlinx.datetime/Instant|null[0] on iosSimulatorArm64

Tools. CLI

• KT-86930 Introduce kotlinr in the Kotlin distribution

Tools. Gradle. BCV

• KT-87223 Gradle, BCV: open version range in kotlinAbiValidationCompatClasspath causes kotlin-build-tools-impl to resolve to 2.4.20-Beta1 instead of 2.4.0

Tools. Gradle. JS

• KT-87304 jsBrowserTest fails with "exited with errors (exit code: 1)"
• KT-86057 kotlinUpgradeYarnLock skips lock file regeneration when kotlinNpmInstall is up-to-date, causing kotlinStoreYarnLock to fail

Tools. Gradle. Multiplatform

• KT-87084 False positive warning for JS and Wasm compilations when CRI is enabled

Tools. Scripts

• KT-87076 @file:CompilerOptions("-jvm-target", ...) ignored in .main.kts scripts in Kotlin 2.4.0, falling back to JVM target 1.8
• KT-86352 K2 scripting: FirResolvedTypeRef exception when resolving extension functions from imported scripts

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.