chore(deps): bump the gradle-dependencies group across 1 directory with 19 updates

[dependabot]

Bumps the gradle-dependencies group with 16 updates in the / directory:

Package	From	To
com.google.protobuf:protobuf-java	4.34.0	4.34.1
com.google.guava:guava	33.5.0-android	33.6.0-android
com.google.firebase.crashlytics	3.0.6	3.0.7
com.google.firebase:firebase-bom	34.10.0	34.12.0
androidx.core:core-splashscreen	1.0.1	1.2.0
gradle-wrapper	9.4.0	9.4.1
androidx.core:core-ktx	1.17.0	1.18.0
androidx.activity:activity-compose	1.12.4	1.13.0
androidx.compose:compose-bom	2026.02.01	2026.03.01
net.zetetic:sqlcipher-android	4.13.0	4.14.1
com.google.crypto.tink:tink-android	1.20.0	1.21.0
androidx.work:work-runtime-ktx	2.11.1	2.11.2
androidx.work:work-testing	2.11.1	2.11.2
com.google.android.gms:play-services-ads	25.0.0	25.2.0
com.android.application	9.1.0	9.1.1
org.jetbrains.kotlin.plugin.compose	2.3.10	2.3.20

Updates com.google.protobuf:protobuf-java from 4.34.0 to 4.34.1

Commits

• See full diff in compare view

Updates com.google.protobuf:protobuf-javalite from 4.34.0 to 4.34.1

Updates com.google.protobuf:protobuf-kotlin from 4.34.0 to 4.34.1

Updates com.google.protobuf:protobuf-kotlin-lite from 4.34.0 to 4.34.1

Updates com.google.guava:guava from 33.5.0-android to 33.6.0-android

Release notes

Sourced from com.google.guava:guava's releases.

33.6.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.6.0-jre</version>
  <!-- or, for Android: -->
  <version>33.6.0-android</version>
</dependency>

Jar files

• 33.6.0-jre.jar
• 33.6.0-android.jar

Guava requires one runtime dependency, which you can download here:

• failureaccess-1.0.3.jar

Javadoc

• 33.6.0-jre
• 33.6.0-android

JDiff

• 33.6.0-jre vs. 33.5.0-jre
• 33.6.0-android vs. 33.5.0-android
• 33.6.0-android vs. 33.6.0-jre

Changelog

• Migrated some classes from finalize() to PhantomReference in preparation for the removal of finalization. (786b619dd6, 7c6b17c, aeef90988d)
• cache: Deprecated CacheBuilder APIs that use TimeUnit in favor of those that use Duration. (73f8b0bb84)
• collect: Added toImmutableSortedMap collectors that use the natural comparator. (64d70b9f94)
• collect: Changed ConcurrentHashMultiset, ImmutableMap and TreeMultiset deserialization to avoid mutating final fields. In extremely unlikely scenarios in which an instance of that type contains an object that refers back to that instance, this could lead to a broken instance that throws NullPointerException when used. (8240c7e596, 046468055f)
• graph: Removed @Beta from all APIs in the package. (dae9566b73)
• graph: Added support to Graphs.transitiveClosure() for different strategies for adding self-loops. (2e13df25b2)
• graph: Added an asNetwork() view to Graph and ValueGraph. (909c593c61)
• hash: Added BloomFilter.serializedSize(). (df9bcc251a)
• net: Added HttpHeaders.CDN_CACHE_CONTROL. (75331b5030)

Commits

• See full diff in compare view

Updates com.google.firebase.crashlytics from 3.0.6 to 3.0.7

Updates com.google.firebase:firebase-bom from 34.10.0 to 34.12.0

Updates androidx.core:core-splashscreen from 1.0.1 to 1.2.0

Updates gradle-wrapper from 9.4.0 to 9.4.1

Release notes

Sourced from gradle-wrapper's releases.

9.4.1

The Gradle team is excited to announce Gradle 9.4.1.

Here are the highlights of this release:

• Java 26 support
• Non-class-based JVM tests
• Enhanced console progress bar

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: akankshaa-00, Attila Kelemen, Björn Kautler, dblood, Dennis Rieks, duvvuvenkataramana, John Burns, Julian, kevinstembridge, Niels Doucet, Philip Wedemann, ploober, Richard Hernandez, Roberto Perez Alcolea, Sebastian Lövdahl, stephan2405, Stephane Landelle, Ujwal Suresh Vanjare, Victor Merkulov, Vincent Potuček, Vladimir Sitnikov.

Upgrade instructions

Switch your build to use Gradle 9.4.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.4.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

Commits

• 2d63270 Ignore test (#37180)
• 4c15906 Ignore test
• 9759ac1 Make console/SIGINT test deterministic (#37178)
• aaf6ed4 Make console/SIGINT test deterministic
• 47cb783 Fix OSC 9;4 progress bar not cleared on SIGINT (#37038)
• ef03f1d Fix order-dependent assertion in CrossBuildScriptCachingIntegrationSpec
• fd26fd3 Fix OSC 9;4 taskbar progress bar not cleared on build end or SIGINT
• 0a84d67 Release notes for 9.4.1 (#37148)
• e569c31 cleanup
• 9f227de cleanup
• Additional commits viewable in compare view

Updates androidx.core:core-ktx from 1.17.0 to 1.18.0

Updates androidx.activity:activity-compose from 1.12.4 to 1.13.0

Updates androidx.compose:compose-bom from 2026.02.01 to 2026.03.01

Updates net.zetetic:sqlcipher-android from 4.13.0 to 4.14.1

Release notes

Sourced from net.zetetic:sqlcipher-android's releases.

v4.14.1

Full Changelog: sqlcipher/sqlcipher-android@v4.14.0...v4.14.1

This release corrects the Community edition published artifact on Maven Central.

v4.14.0

Full Changelog: sqlcipher/sqlcipher-android@v4.13.0...v4.14.0

Commits

• fc26a3c Bump version to 4.14.1 for Maven Central release
• 9582dca Update SQLCipher core submodule to v4.14.0
• b1789b1 Adjust SQLCipher core submodule url to use GH
• 3848d53 Adjust README with notes on OpenSSL build
• 1117df7 Adjust findstring search for OpenSSL linking
• 417ab11 Updates LibTomCrypto build for 1.18.2 sources
• ecaa929 Updates submodule to sqlcipher/libtomcrypt fork on sqlcipher branch
• 8129dcb Adds recommended / default LTC complier optimizations
• e7fd358 Switch outputs.upToDateWhen to onlyIf in clean, submodule init change
• 6a062f3 Replaces output.upToDateWhen with onlyIf
• Additional commits viewable in compare view

Updates com.google.crypto.tink:tink-android from 1.20.0 to 1.21.0

Release notes

Sourced from com.google.crypto.tink:tink-android's releases.

Tink Java v1.21.0

Tink is a multi-language, cross-platform library that provides simple and misuse-proof APIs for common cryptographic tasks.

This is Tink Java 1.21.0

The complete list of changes since 1.20.0 can be found here.

• Added methods addAnnotations to KeysetHandle.Builder and getAnnotationsOrNull to KeysetHandle. This allows attaching arbitrary information to a KeysetHandle, which can be useful when one has deep stacks.
• A set of accessor methods in RawJwt has been made public.
• Added general support for ML-DSA-87.
• SignaturePemKeysetReader now supports ML-DSA-65, ML-DSA-87 and Ed25519.
• Added buildPublicKeysetHandle method to SignaturePemKeysetReader.Builder, which replaces the deprecated build method.

Maven:

<dependency>
    <groupId>com.google.crypto.tink</groupId>
    <artifactId>tink</artifactId>
    <version>1.21.0</version>
</dependency>

Gradle:

dependencies {
  implementation 'com.google.crypto.tink:tink-android:1.21.0'
}

Bazel:

Using bzlmod

bazel_dep(name = "tink_java")
git_override(

module_name = "tink_java",

remote = "https://github.com/tink-crypto/tink-java",

tag = "v1.21.0",

)

Commits

• 0be5717 Bump tink-java version to 1.21.0
• def2eff Improve error reporting in SignaturePemKeysetReader.
• 65e722a Introduce CompositeMlDsa parameters to Tink Java.
• 68a030c Add support for ML-DSA-87 in SignaturePemKeysetReader.
• 484229d Fix the Java Doc comment to reflect the introduction of ML-DSA-87.
• 43f0886 Automated change
• 1efca99 Declare variables on their first use.
• 18cee3b Deprecate SignaturePemKeysetReader.Builder.build.
• 9817254 Automated change
• 1b1cfde Automated change.
• Additional commits viewable in compare view

Updates androidx.work:work-runtime-ktx from 2.11.1 to 2.11.2

Updates androidx.work:work-testing from 2.11.1 to 2.11.2

Updates androidx.work:work-testing from 2.11.1 to 2.11.2

Updates com.google.android.gms:play-services-ads from 25.0.0 to 25.2.0

Updates com.android.application from 9.1.0 to 9.1.1

Updates org.jetbrains.kotlin.plugin.compose from 2.3.10 to 2.3.20

Release notes

Sourced from org.jetbrains.kotlin.plugin.compose's releases.

Kotlin 2.3.20

Changelog

Analysis API. FIR

New Features

• KT-78090 Implement stubs support for new conditional returns and holdsIn contracts

Fixes

• KT-82948 'FirRegularClass' expected as a containing declaration, got 'FirTypeAliasImpl'
• KT-83467 Package-level JSpecify annotations are ignored when coming from jars or libraries
• KT-82057 K2. Cannot infer type parameter 'R' in Ktor routing post() function with explicit response type
• KT-82846 AA: unresolved KtExpression.expressionType for the reference to the parameter with default value
• KT-80485 False positive UNRESOLVED_REFERENCE on nested interface from super-super class in the super type position inside an anonymous object
• KT-82772 Flaky false positive deprecation warning on PersistentMap.put in Kotlin repo in IDE mode
• KT-76487 StdLibSourcesLazyDeclarationResolveTestGenerated.testWrappedInt is unstable
• KT-82618 Various tests are failing with NPE in kt-master after updating the compiler on 19.11.25
• KT-82076 Error querying members of JavaClass created for SymbolLightClassForAnnotationClass during library analysis
• KT-71596 Include Js/Wasi checkers in AbstractLLFirDiagnosticsCollector
• KT-82085 No OUTER_CLASS_ARGUMENTS_REQUIRED on type parameter bound in IDE
• KT-81873 Provide a way of including traces in phase JFR events
• KT-71929 Consider leaving the non-post-compute version at EnhancementSymbolsCache.enhancedFunctions

Analysis API. Infrastructure

• KT-83173 Analysis API Tests: Library names with RC versions aren't sanitised
• KT-65140 LL FIR: Implement AbstractFirPsiJsDiagnosticTest for LL FIR
• KT-82212 [Analysis API, LL FIR] Implement AbstractDiagnosticsFirWasmTest and AbstractDiagnosticsFirWasmWasiTest for LL FIR

Analysis API. Light Classes

• KT-82227 Value classes should expose regular static methods

Analysis API. PSI

• KT-81710 'KtTypeReference.getTypeText' does not account for 'suspend' modifier on suspend lambdas
• KT-82258 Prepare PSI for migration from context receivers to context parameters
• KT-81074 KDoc: List rendering is broken

Analysis API. Providers and Caches

• KT-82449 K2 IDE Analysis Freezes During Gradle Sync (Recursive Module Dependency Computation in KotlinModuleDependentsProviderBase.computeTransitiveDependents)
• KT-82629 'collectDiagnostics' returns stale syntax error after editor fix
• KT-74907 Analysis API: Apply platform-based library module content restrictions consistently

Analysis API. Standalone

• KT-81107 AA: KtSourceModuleBuilder.sourceRoots doesn't works with symbolic links

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin.plugin.compose's changelog.

2.3.20

Analysis API. FIR

New Features

• KT-78090 Implement stubs support for new conditional returns and holdsIn contracts

Fixes

• KT-82948 'FirRegularClass' expected as a containing declaration, got 'FirTypeAliasImpl'
• KT-83467 Package-level JSpecify annotations are ignored when coming from jars or libraries
• KT-82057 K2. Cannot infer type parameter 'R' in Ktor routing post() function with explicit response type
• KT-82846 AA: unresolved KtExpression.expressionType for the reference to the parameter with default value
• KT-80485 False positive UNRESOLVED_REFERENCE on nested interface from super-super class in the super type position inside an anonymous object
• KT-82772 Flaky false positive deprecation warning on PersistentMap.put in Kotlin repo in IDE mode
• KT-76487 StdLibSourcesLazyDeclarationResolveTestGenerated.testWrappedInt is unstable
• KT-82618 Various tests are failing with NPE in kt-master after updating the compiler on 19.11.25
• KT-82076 Error querying members of JavaClass created for SymbolLightClassForAnnotationClass during library analysis
• KT-71596 Include Js/Wasi checkers in AbstractLLFirDiagnosticsCollector
• KT-82085 No OUTER_CLASS_ARGUMENTS_REQUIRED on type parameter bound in IDE
• KT-81873 Provide a way of including traces in phase JFR events
• KT-71929 Consider leaving the non-post-compute version at EnhancementSymbolsCache.enhancedFunctions

Analysis API. Infrastructure

• KT-83173 Analysis API Tests: Library names with RC versions aren't sanitised
• KT-65140 LL FIR: Implement AbstractFirPsiJsDiagnosticTest for LL FIR
• KT-82212 [Analysis API, LL FIR] Implement AbstractDiagnosticsFirWasmTest and AbstractDiagnosticsFirWasmWasiTest for LL FIR

Analysis API. Light Classes

• KT-82227 Value classes should expose regular static methods

Analysis API. PSI

• KT-81710 'KtTypeReference.getTypeText' does not account for 'suspend' modifier on suspend lambdas
• KT-82258 Prepare PSI for migration from context receivers to context parameters
• KT-81074 KDoc: List rendering is broken

Analysis API. Providers and Caches

• KT-82449 K2 IDE Analysis Freezes During Gradle Sync (Recursive Module Dependency Computation in KotlinModuleDependentsProviderBase.computeTransitiveDependents)
• KT-82629 'collectDiagnostics' returns stale syntax error after editor fix
• KT-74907 Analysis API: Apply platform-based library module content restrictions consistently

Analysis API. Standalone

• KT-81107 AA: KtSourceModuleBuilder.sourceRoots doesn't works with symbolic links

... (truncated)

Commits

• d57eb4a Add ChangeLog for 2.3.20-RC3
• 41886bb [Gradle] Update KGP npm tooling dependency versions
• 210a9bd [Native] Do not mark iosX64 target as deprecate in DSL
• 7ed446e Add ChangeLog for 2.3.20-RC2
• 520eade [K/JVM] Fix incorrect optimization of local delegation
• 7ef8bcc Reflection: add LazyKProperty to fix recent performance regression
• 9fa7cf2 [Gradle] Link NoActiveThreadsAfterCompilerInvocationIT with KT-84566
• d410596 [Gradle] Shutdown coroutines dispatcher threads after compiler invocation
• 348430b [BTA] Fix compatibility between API 2.3.20 and KC 2.3.10
• 4058f3c [CMP] HiddenFromObjC remove outdated offset check
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions