chore(deps): update dependency com.google.devtools.ksp to v2.3.6

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
com.google.devtools.ksp (source)	2.3.5 → 2.3.6

---

Release Notes

google/ksp (com.google.devtools.ksp)

v2.3.6

Compare Source

What's Changed

• Fixed an issue where module recompilation would fail on Windows environments when KSP2 was enabled (#​2774)
• Resolved an issue where generated Java sources were ignored when using Android Kotlin Multiplatform with IP-compatible paths (#​2744)
• Fixed a KSP version 2.3.5 CI error exception that does not break build checks (#​2763)
• Added symbol-processing-api and common-deps to compile dependencies (#​2789)
• Improved the detection of built-in Kotlin by removing the reliance on KotlinBaseApiPlugin (#​2772)
• A back-port of a performance optimization in the Intellij / Analysis API (2785 )
• Added support for nested typealias Kotlin language feature #​2588
• Exclude jdbc package from log4j to prevent vulnerability issue #​2651

Contributors

• Thanks to @​salmanmkc, @​jaschdoc, @​gurusai-voleti and everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.5...2.3.6

---

Configuration

📅 Schedule: Branch creation - "before 9am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

Claude finished @renovate[bot]'s task in 54s —— View job

---

PR Review: KSP 2.3.5 → 2.3.6

• Read changed file and diff
• Analyze release notes
• Post review feedback

---

Summary

This is a safe, patch-level dependency bump of KSP (com.google.devtools.ksp) from 2.3.5 to 2.3.6. The single change is on gradle/libs.versions.toml:13.

Verdict: ✅ Approve — recommended update.

---

Change Analysis

gradle/libs.versions.toml:13

- ksp = "2.3.5"
+ ksp = "2.3.6"

The project uses Kotlin 2.2.21 (line 21), and KSP 2.3.5 was already compatible with it. The 2.3.6 patch maintains that compatibility — no breaking changes expected.

---

KSP 2.3.6 Release Highlights

Category	Detail
🐛 Bug fix	Module recompilation failures on Windows with KSP2 enabled (#2774)
🐛 Bug fix	Generated Java sources ignored in Android KMP with IP-compatible paths (#2744)
🐛 Bug fix	CI error exception from 2.3.5 that didn't break builds (#2763)
🔒 Security	Excludes the jdbc package from log4j to prevent a known vulnerability (#2651)
⚡ Performance	Back-ported Analysis API performance optimization from IntelliJ (#2785)
✨ Feature	Support for nested typealias Kotlin language feature (#2588)

The security fix (log4j jdbc exclusion) makes this update particularly worthwhile, even for projects like this one that may not directly use log4j at runtime.

---

Notes

• No action required beyond merging — the version catalog change correctly flows through to all consumers of the ksp plugin.
• This project doesn't appear to rely on the deprecated KSP1 behavior affected by any of these fixes, so no migration steps are needed.

[github-actions]

Qodana for JVM

It seems all right 👌

No new problems were found according to the checks applied

💡 Qodana analysis was run in the pull request mode: only the changed files were checked
☁️ View the detailed Qodana report

Contact Qodana team

Contact us at qodana-support@jetbrains.com

• Or via our issue tracker: https://jb.gg/qodana-issue
• Or share your feedback: https://jb.gg/qodana-discussions