Bump the okio group with 2 updates

[dependabot]

Bumps the okio group with 2 updates: com.squareup.okio:okio and com.squareup.okio:okio-jvm.

Updates com.squareup.okio:okio from 3.17.0 to 3.18.0

Changelog

Sourced from com.squareup.okio:okio's changelog.

Version 3.18.0

2026-07-21

• Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.
• Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a FileNotFoundException.
• Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in NodeJS, causing our WasiFileSystem to be unable to access files!
• New: Optionally ignore whitespace when decoding hexadecimal.
• New: Optionally omit padding when encoding Base64.
• New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte, UShort and ULong. Also add support for unsigned and little-endian.
• New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.
• New: Source.limit() returns a wrapped source with a strict limit on how many bytes are returned.
• New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.

Commits

• 6604edb Prepare for release 3.18.0.
• 8ade5ec New API, BufferedSink.utf8Appendable() (#1825)
• 90ae671 Fix broken/outdated links (#1827)
• 2a902d8 Optionally ignore whitespace when decoding hex (#1826)
• 304f508 Make FixedLengthSource public API (#1823)
• 987cb4a Pass preopen-relative paths to WASI path_* functions (#1821)
• 0f770dd Update dependency macos to v26 (#1811)
• 4164f29 Update Gradle to v9.6.1 (#1820)
• d1fc3f6 Add unsigned numbers extensions. (#1779)
• e2604cc Update dependency com.vanniktech:gradle-maven-publish-plugin to v0.37.0 (#1819)
• Additional commits viewable in compare view

Updates com.squareup.okio:okio-jvm from 3.17.0 to 3.18.0

Changelog

Sourced from com.squareup.okio:okio-jvm's changelog.

Version 3.18.0

2026-07-21

• Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.
• Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a FileNotFoundException.
• Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in NodeJS, causing our WasiFileSystem to be unable to access files!
• New: Optionally ignore whitespace when decoding hexadecimal.
• New: Optionally omit padding when encoding Base64.
• New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte, UShort and ULong. Also add support for unsigned and little-endian.
• New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.
• New: Source.limit() returns a wrapped source with a strict limit on how many bytes are returned.
• New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.

Commits

• 6604edb Prepare for release 3.18.0.
• 8ade5ec New API, BufferedSink.utf8Appendable() (#1825)
• 90ae671 Fix broken/outdated links (#1827)
• 2a902d8 Optionally ignore whitespace when decoding hex (#1826)
• 304f508 Make FixedLengthSource public API (#1823)
• 987cb4a Pass preopen-relative paths to WASI path_* functions (#1821)
• 0f770dd Update dependency macos to v26 (#1811)
• 4164f29 Update Gradle to v9.6.1 (#1820)
• d1fc3f6 Add unsigned numbers extensions. (#1779)
• e2604cc Update dependency com.vanniktech:gradle-maven-publish-plugin to v0.37.0 (#1819)
• Additional commits viewable in compare view

Updates com.squareup.okio:okio-jvm from 3.17.0 to 3.18.0

Changelog

Sourced from com.squareup.okio:okio-jvm's changelog.

Version 3.18.0

2026-07-21

• Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.
• Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a FileNotFoundException.
• Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in NodeJS, causing our WasiFileSystem to be unable to access files!
• New: Optionally ignore whitespace when decoding hexadecimal.
• New: Optionally omit padding when encoding Base64.
• New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte, UShort and ULong. Also add support for unsigned and little-endian.
• New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.
• New: Source.limit() returns a wrapped source with a strict limit on how many bytes are returned.
• New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.

Commits

• 6604edb Prepare for release 3.18.0.
• 8ade5ec New API, BufferedSink.utf8Appendable() (#1825)
• 90ae671 Fix broken/outdated links (#1827)
• 2a902d8 Optionally ignore whitespace when decoding hex (#1826)
• 304f508 Make FixedLengthSource public API (#1823)
• 987cb4a Pass preopen-relative paths to WASI path_* functions (#1821)
• 0f770dd Update dependency macos to v26 (#1811)
• 4164f29 Update Gradle to v9.6.1 (#1820)
• d1fc3f6 Add unsigned numbers extensions. (#1779)
• e2604cc Update dependency com.vanniktech:gradle-maven-publish-plugin to v0.37.0 (#1819)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Test Results

24 files  +16  24 suites  +16   20s ⏱️ +19s
21 tests ± 0  20 ✅ + 9   1 💤  -  9  0 ❌ ±0 
63 runs  +42  40 ✅ +29  23 💤 +13  0 ❌ ±0 

Results for commit 34b7ce0. ± Comparison against base commit a45a4fa.