chore(deps): bump ksp from 2.2.20-2.0.2 to 2.2.20-2.0.3

[dependabot]

Bumps ksp from 2.2.20-2.0.2 to 2.2.20-2.0.3.
Updates com.google.devtools.ksp:symbol-processing-gradle-plugin from 2.2.20-2.0.2 to 2.2.20-2.0.3

Release notes

Sourced from com.google.devtools.ksp:symbol-processing-gradle-plugin's releases.

2.2.20-2.0.3

What's Changed

• Removed usages of deprecated KGP ApiVersion - #2400
• Android integration for KSP has moved on to the new Variant API - #2250
• Runtime warning was added for projects that opt out of KSP2 - #2538
• AGP version against which KSP is compiled has been upgraded - #2552

Contributors

Thanks to everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.1.21-2.0.2...2.2.20-2.0.3

Commits

• ce9849f UPDATE_KOTLIN_VERSION: 2.2.20
• 783f41f Update shadow-validate-baselin.txt
• 4b38d15 UPDATE_AA_VERSION: 2.3.0-dev-7225
• c7b1dbb UPDATE_AA_VERSION: 2.3.0-dev-1330
• c968f23 UPDATE_AA_VERSION: 2.3.0-dev-704
• c9e170a UPDATE_AA_VERSION: 2.2.20-dev-7701
• c920aa5 Do not minimize embeddable jars
• 5a0035a Bump BUILD Kotlin and KSP to 2.2.10-2.0.2
• d7883e7 Do not manually wire ksp task for android target
• 7729eaf Rename to jvm parameters
• Additional commits viewable in compare view

Updates com.google.devtools.ksp from 2.2.20-2.0.2 to 2.2.20-2.0.3

Release notes

Sourced from com.google.devtools.ksp's releases.

2.2.20-2.0.3

What's Changed

• Removed usages of deprecated KGP ApiVersion - #2400
• Android integration for KSP has moved on to the new Variant API - #2250
• Runtime warning was added for projects that opt out of KSP2 - #2538
• AGP version against which KSP is compiled has been upgraded - #2552

Contributors

Thanks to everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.1.21-2.0.2...2.2.20-2.0.3

Commits

• ce9849f UPDATE_KOTLIN_VERSION: 2.2.20
• 783f41f Update shadow-validate-baselin.txt
• 4b38d15 UPDATE_AA_VERSION: 2.3.0-dev-7225
• c7b1dbb UPDATE_AA_VERSION: 2.3.0-dev-1330
• c968f23 UPDATE_AA_VERSION: 2.3.0-dev-704
• c9e170a UPDATE_AA_VERSION: 2.2.20-dev-7701
• c920aa5 Do not minimize embeddable jars
• 5a0035a Bump BUILD Kotlin and KSP to 2.2.10-2.0.2
• d7883e7 Do not manually wire ksp task for android target
• 7729eaf Rename to jvm parameters
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[kcw-grunt]

LGTM

[josikie]

Amazing! We have dependabots

[JosephSanjaya]

ohh right this update request will trigger 1 time only per month @kcw-grunt, and max of 5 PR.

we can change this setting later. for now its havent been used by main repo only build logic repo only so it will not affecting production.

cc @josikie

[kcw-grunt]

ohh right this update request will trigger 1 time only per month @kcw-grunt, and max of 5 PR.

we can change this setting later. for now its havent been used by main repo only build logic repo only so it will not affecting production.

cc @josikie

Is this a duplicate workflow from CirclCI @JosephSanjaya ? I need to wrap my head around the whole release workflow process to reduce costs and complexity

[JosephSanjaya]

ohh right this update request will trigger 1 time only per month @kcw-grunt, and max of 5 PR.
we can change this setting later. for now its havent been used by main repo only build logic repo only so it will not affecting production.
cc @josikie

Is this a duplicate workflow from CirclCI @JosephSanjaya ? I need to wrap my head around the whole release workflow process to reduce costs and complexity

Dependabot is actually native to GitHub, so this workflow doesn’t add CircleCI costs or complexity. The config lives in .github/dependabot.yml (link to file
), and GitHub handles everything automatically.

If we were to wire this through CircleCI, we’d need to build custom jobs to check for outdated deps, open PRs, and handle scheduling which is way more overhead. Using GitHub’s built-in Dependabot keeps things simple and free.

@kcw-grunt

[kcw-grunt]

ohh right this update request will trigger 1 time only per month @kcw-grunt, and max of 5 PR.
we can change this setting later. for now its havent been used by main repo only build logic repo only so it will not affecting production.
cc @josikie

Is this a duplicate workflow from CirclCI @JosephSanjaya ? I need to wrap my head around the whole release workflow process to reduce costs and complexity

Dependabot is actually native to GitHub, so this workflow doesn’t add CircleCI costs or complexity. The config lives in .github/dependabot.yml (link to file ), and GitHub handles everything automatically.

If we were to wire this through CircleCI, we’d need to build custom jobs to check for outdated deps, open PRs, and handle scheduling which is way more overhead. Using GitHub’s built-in Dependabot keeps things simple and free.

@kcw-grunt

Ok thanks.