[dependabot]

Bumps the android-minor-and-patch group in /android-compose with 14 updates:

Package	From	To
com.android.application	9.4.1	9.5.1
com.android.library	9.4.1	9.5.1
com.google.devtools.ksp	2.3.12	2.3.13
io.sentry.android.gradle	6.24.0	6.26.0
org.jsoup:jsoup	1.23.2	1.24.1
dev.chrisbanes.haze:haze	2.0.1	2.1.0
dev.chrisbanes.haze:haze-blur	2.0.1	2.1.0
net.zetetic:sqlcipher-android	4.19.1	4.20.0
com.squareup.okhttp3:okhttp	5.5.0	5.5.1
com.squareup.okhttp3:okhttp-urlconnection	5.5.0	5.5.1
com.squareup.okhttp3:logging-interceptor	5.5.0	5.5.1
org.jetbrains.kotlinx:kotlinx-serialization-json	1.11.0	1.12.0
io.sentry:sentry-okhttp	8.61.0	8.63.0
gradle-wrapper	9.8.1	9.9.0

Updates com.android.application from 9.4.1 to 9.5.1

Updates com.android.library from 9.4.1 to 9.5.1

Updates com.google.devtools.ksp from 2.3.12 to 2.3.13

Release notes

Sourced from com.google.devtools.ksp's releases.

2.3.13

Defect in release

This release has a regression described in issue 3286 which may cause issues for concurrent executions of KSP. We are working on a fix and will release a new version soon.

What's Changed

• Add KSContextParameter and KSFunctionDeclaration.contextParameters to the API (#3216)
• Improve diagnostics by returning last round dismissible errors when KSP fails (#3196)
• Add opt-in processor classloader caching (ksp.classloader.cache.processors=true) to speed up multi-module builds (#3210)
• Avoid clearing binary and library caches between KSP rounds (#3235)
• Optimize classpath scanning, dependency indexing, and package directory lookups during incremental compilation (#3254)
• Backport IntelliJ Platform CoreJarHandler to prevent non-deterministic missing jar entries (#3240)
• Fix getting annotation default values from KLibs in Kotlin Multiplatform (#2356)
• Fix resolving aliased annotations in PsiResolutionStrategy (#2997)
• Fix Gradle project isolation detection when configured via command-line flags (#3188)
• Fix duplicate declaration generation in intermediate Kotlin Multiplatform metadata compilations (#3229)

Contributors

• Thanks to @​alfonsocv12, @​bacecek, @​bcorso, @​cushon, and everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.12...2.4.0

Commits

• 879aa7d Fix errors in CONTRIBUTING.md
• db9b089 Drop KSObjectManager caches in finally block
• e0228b5 Add test showing missing implementation for KSBackingField in `mapToJvmSign...
• 9c2b150 Add test for KSTypeParameterImpl.bounds on type alias
• a1d9933 Update testVarargAnnotationApplication with more cases
• 7401d5e Add test for vararg annotation application
• 4d87803 Add negative test for incremental compilation with Java classpath references
• 8fc84de Delegate PackageIndex lookups to IncrementalJavaFileManager dependencies index
• f4f3029 Document TARGET_BACKEND and WITH_FIXED_TARGET directives in CONTRIBUTING.md
• 0a4efcf Share IncrementalJavaFileManager dependencies index with finder services
• Additional commits viewable in compare view

Updates io.sentry.android.gradle from 6.24.0 to 6.26.0

Release notes

Sourced from io.sentry.android.gradle's releases.

6.26.0

Dependencies

• Bump ComposablePreviewScanner from v0.9.3 to v0.10.0 (#1493)
  • changelog
  • diff
• Bump Android SDK from v8.62.0 to v8.63.0 (#1495)
  • changelog
  • diff

6.25.0

Dependencies

• Bump CLI from v3.8.0 to v3.8.2 (#1476, #1478)
  • changelog
  • diff
• Bump Android SDK from v8.61.0 to v8.62.0 (#1477, #1482)
  • changelog
  • diff

Changelog

Sourced from io.sentry.android.gradle's changelog.

6.26.0

Dependencies

• Bump ComposablePreviewScanner from v0.9.3 to v0.10.0 (#1493)
  • changelog
  • diff
• Bump Android SDK from v8.62.0 to v8.63.0 (#1495)
  • changelog
  • diff

6.25.0

Dependencies

• Bump CLI from v3.8.0 to v3.8.2 (#1476, #1478)
  • changelog
  • diff
• Bump Android SDK from v8.61.0 to v8.62.0 (#1477, #1482)
  • changelog
  • diff

Commits

• 493272b release: 6.26.0
• b54bdc1 chore: update scripts/update-android.sh to 8.63.0 (#1495)
• ae59a68 chore: update plugin-build/composable-preview-scanner.properties to 0.10.0 (#...
• 1de1b54 ci(release): Bump craft to 3.9.0 and update config (#1494)
• eaae439 Merge commit 'dd4c323794fff4f9ac79669c526b3c7022564e5e'
• dd4c323 release: 6.25.0
• 41d630f chore(deps): update actions/create-github-app-token action to v3.3.0 (#1487)
• 0fdb5d3 fix(deps): update dependency org.ow2.asm:asm to v9.11.1 (#1486)
• 9cd1319 chore(deps): update getsentry/craft digest to 0ff7589 (#1481)
• 39ae3a0 chore(deps): update actions/setup-python digest to 6d4fd22 (#1480)
• Additional commits viewable in compare view

Updates org.jsoup:jsoup from 1.23.2 to 1.24.1

Release notes

Sourced from org.jsoup:jsoup's releases.

jsoup 1.24.1

jsoup 1.24.1 is out now, with major improvements to CSS selectors and HTML parsing.

This release introduces an opt-in Web query mode, bringing selector behavior closer to CSS and browser DOM standards. It also adds new selectors and improves the correctness and performance of :has() queries. Web mode will become the default in 1.25.1; the selector migration guide explains how to get ready.

HTML parsing is now more closely aligned with the current HTML standard, including improvements to tables, formatting elements, templates, and customizable select elements. This release also adds processing instruction support, and includes a number of performance improvements and bug fixes.

There are some changes to existing behavior, including :root matching and limits on Response.bodyStream(). Please make sure to review the changes below before upgrading.

jsoup is a Java library for working with real-world HTML and XML. It provides a very convenient API for extracting and manipulating data, using the best of HTML5 DOM methods and CSS selectors.

Download jsoup now.

Improvements

• Added an opt-in Web query mode to align jsoup's selectors with CSS and Web DOM standards. See the selector migration guide for more details. #2642
  • Enable with System.setProperty("jsoup.queryMode", "web"). Queries return matching descendants only, can match surrounding ancestors, and follow HTML/XML case rules. Attribute ~= matches whitespace separated tokens instead of regexes.
  • You can jsoup.queryMode=check to help prepare for Web mode. Selectors return legacy results and print differences to stderr, with caller locations to help identify affected code.
  • Added :scope, :matchesAttr(name, regex), |= attribute matching, and attribute case flags i and s. These work in both legacy and Web modes, so queries can be updated before switching modes.
  • Web mode will become the default in 1.25.1 and the only mode in 1.26.1.
• Added support for parsing processing instructions in HTML and XML, as ProcessingInstruction nodes. This supports marker nodes such as <?marker name="country-options"?>, matched by \<template for="country-options"> in the HTML Standard's new declarative streaming syntax. Processing instructions can be selected with ::pi or ::pi(target), and their data can be read and changed through the node's attribute methods. Change: when using the XML parser, ordinary <?target ...?> nodes are now represented by ProcessingInstruction instead of XmlDeclaration; the <?xml ...?> declaration remains an XmlDeclaration. #2613
• Added Parser.parseAttributes(String) to parse an attribute fragment using that parser's settings.
• :has() selectors with child and sibling combinators now run faster by limiting the search to the parts of the document where they can match. This particularly improves selectors such as :has(> a), :has(+ dd), and :has(+ div span). #2610
• SVG-specific tag and attribute names are now automatically case corrected (e.g. pathlength becomes pathLength) when parsing HTML. #2630
• Improved the HTML parse across document boundaries by handling whitespace separately from subsequent text. This better preserves the input's whitespace through parse and serialize round-trips. #2632
• Improved HTML parsing performance for documents with misplaced elements, and DOM update performance. #2646

Changes

• Removed APIs previously deprecated and scheduled for removal in 1.24.1. #2597
• Response.bodyStream() now observes the configured max body size and request timeout, consistent with the other response body methods. The default max size is 2 MB. You can configure that with maxBodySize(0) before executing the request to disable the cap. Response.isTruncated() reports when the decoded response content exceeded the configured limit. #2598
• Query selector parsing now limits each query to 128 structural steps, counting combinators, node selectors, and :has(), :is(), and :not() expressions together. More complex queries throw SelectorParseException during parsing.
• Attributes.equals() and hashCode() now exclude internal attributes, such as source ranges and user data. #2633

Bug Fixes

• Corrected :root to match the tree's root element in both query modes. Previously, it matched the element the query was called on. Use :scope to refer to that element.
• Standardized parser normalization of tag and attribute names so that HTML comparisons use ASCII-only case folding, and accepted control characters are preserved, aligning name handling to the HTML and XML specs. #2594
• Named character references without a semicolon before - or _ now decode correctly in attribute values, matching HTML and browser behavior (e.g., &copy- becomes ©-). #2588
• Support downloads > 2GB via Response.bodyStream() when maxBodySize(0) is configured. #2593
• Updated table and table-fragment parsing to place misnested content correctly per the HTML5 spec. For example, <table><b><p>X</b> places the paragraph before the table. #2601
• StreamParser now preserves its progress if you use the same Parser to parse another document, or call Element.append(String) on a streamed element. Previously, these operations replaced the active parse state and prevented streaming from continuing correctly. #2605
• Updated the adoption-agency algorithm to match the current HTML5 spec and to preserve formatting order when recovering misnested elements. #2604
• :has() now correctly matches sibling alternatives and descendants of siblings. Given <div id=a></div><div><span></span></div>, both #a:has(+ div, > span) and #a:has(+ div span) select #a. #2610
• Within node selectors, :not() now correctly applies :contains() and :matches() to the node value. For example, ::comment:not(:contains(foo)) excludes comments containing foo. #2610
• Updated <select> parsing to the current HTML spec, retaining elements such as buttons and other markup that the previous rules discarded. #2611
• Template parsing now closes unclosed templates at EOF and handles forms correctly in template documents and fragments. #2614
• Fixed handling of null characters and initial newlines in HTML to better match the HTML spec, including pre, listing, and textarea elements. Leading newlines in these elements' text are preserved when saving and reparsing HTML. #2616
• Fixed several HTML parsing edge cases across malformed doctypes, misplaced text in tables, and whitespace in framesets to match the HTML spec. #2618
• If a HTML void element ends up with children (via DOM manipulation), those are no longer serialized in html(). #2619
• Fixed a ConcurrentModificationException when emptying and reading separate childless elements concurrently. #2620
• Removed the old command, device, and menuitem tags, as they are no longer in the HTML spec. #2621
• Double-escaped script tags in body were being closed too early. #2627

... (truncated)

Changelog

Sourced from org.jsoup:jsoup's changelog.

1.24.1 (2026-Nov-03)

Improvements

• Added an opt-in Web query mode to align jsoup's selectors with CSS and Web DOM standards. See the selector migration guide for more details. #2642
  • Enable with System.setProperty("jsoup.queryMode", "web"). Queries return matching descendants only, can match surrounding ancestors, and follow HTML/XML case rules. Attribute ~= matches whitespace separated tokens instead of regexes.
  • You can jsoup.queryMode=check to help prepare for Web mode. Selectors return legacy results and print differences to stderr, with caller locations to help identify affected code.
  • Added :scope, :matchesAttr(name, regex), |= attribute matching, and attribute case flags i and s. These work in both legacy and Web modes, so queries can be updated before switching modes.
  • Web mode will become the default in 1.25.1 and the only mode in 1.26.1.
• Added support for parsing processing instructions in HTML and XML, as ProcessingInstruction nodes. This supports marker nodes such as <?marker name="country-options"?>, matched by \<template for="country-options"> in the HTML Standard's new declarative streaming syntax. Processing instructions can be selected with ::pi or ::pi(target), and their data can be read and changed through the node's attribute methods. Change: when using the XML parser, ordinary <?target ...?> nodes are now represented by ProcessingInstruction instead of XmlDeclaration; the <?xml ...?> declaration remains an XmlDeclaration. #2613
• Added Parser.parseAttributes(String) to parse an attribute fragment using that parser's settings.
• :has() selectors with child and sibling combinators now run faster by limiting the search to the parts of the document where they can match. This particularly improves selectors such as :has(> a), :has(+ dd), and :has(+ div span). #2610
• SVG-specific tag and attribute names are now automatically case corrected (e.g. pathlength becomes pathLength) when parsing HTML. #2630
• Improved the HTML parse across document boundaries by handling whitespace separately from subsequent text. This better preserves the input's whitespace through parse and serialize round-trips. #2632
• Improved HTML parsing performance for documents with misplaced elements, and DOM update performance. #2646

Changes

• Removed APIs previously deprecated and scheduled for removal in 1.24.1. #2597
• Response.bodyStream() now observes the configured max body size and request timeout, consistent with the other response body methods. The default max size is 2 MB. You can configure that with maxBodySize(0) before executing the request to disable the cap. Response.isTruncated() reports when the decoded response content exceeded the configured limit. #2598
• Query selector parsing now limits each query to 128 structural steps, counting combinators, node selectors, and :has(), :is(), and :not() expressions together. More complex queries throw SelectorParseException during parsing.
• Attributes.equals() and hashCode() now exclude internal attributes, such as source ranges and user data. #2633

Bug Fixes

• Corrected :root to match the tree's root element in both query modes. Previously, it matched the element the query was called on. Use :scope to refer to that element.
• Standardized parser normalization of tag and attribute names so that HTML comparisons use ASCII-only case folding, and accepted control characters are preserved, aligning name handling to the HTML and XML specs. #2594
• Named character references without a semicolon before - or _ now decode correctly in attribute values, matching HTML and browser behavior (e.g., &copy- becomes ©-). #2588
• Support downloads > 2GB via Response.bodyStream() when maxBodySize(0) is configured. #2593
• Updated table and table-fragment parsing to place misnested content correctly per the HTML5 spec. For example, <table><b><p>X</b> places the paragraph before the table. #2601
• StreamParser now preserves its progress if you use the same Parser to parse another document, or call Element.append(String) on a streamed element. Previously, these operations replaced the active parse state and prevented streaming from continuing correctly. #2605
• Updated the adoption-agency algorithm to match the current HTML5 spec and to preserve formatting order when recovering misnested elements. #2604
• :has() now correctly matches sibling alternatives and descendants of siblings. Given <div id=a></div><div><span></span></div>, both #a:has(+ div, > span) and #a:has(+ div span) select #a. #2610
• Within node selectors, :not() now correctly applies :contains() and :matches() to the node value. For example, ::comment:not(:contains(foo)) excludes comments containing foo. #2610
• Updated <select> parsing to the current HTML spec, retaining elements such as buttons and other markup that the previous rules discarded. #2611
• Template parsing now closes unclosed templates at EOF and handles forms correctly in template documents and fragments. #2614
• Fixed handling of null characters and initial newlines in HTML to better match the HTML spec, including pre, listing, and textarea elements. Leading newlines in these elements' text are preserved when saving and reparsing HTML. #2616
• Fixed several HTML parsing edge cases across malformed doctypes, misplaced text in tables, and whitespace in framesets to match the HTML spec. #2618
• If a HTML void element ends up with children (via DOM manipulation), those are no longer serialized in html(). #2619
• Fixed a ConcurrentModificationException when emptying and reading separate childless elements concurrently. #2620
• Removed the old command, device, and menuitem tags, as they are no longer in the HTML spec. #2621
• Double-escaped script tags in body were being closed too early. #2627
• Node.before(Node) and Node.after(Node) now leave the document unchanged when given the node itself, instead of throwing a NullPointerException. #2628
• Fixed HTML parse of <dialog>, <main>, and <search> so their start and end tags close open paragraphs correctly. #2629
• Updated the parse of malformed end tags such as </ COMMENT > to match the spec (<!-- COMMENT -->). #2631
• Source position tracking no longer impacts the adoption algo when repeated HTML formatting tags are reconstructed after a paragraph closes. #2633
• Fixed fragment parsing to ignore <body> and <frameset> start tags when the second open element is not body, matching the HTML spec. #2634
• Updated how the tokeniser handles malformed doctypes, to remove duplicative tokens and error messages. #2635
• Corrected HTML tokenisation of malformed comments such as <!---x and incomplete start tags such as <p id=, and improved their error reporting. #2636
• Fixed FormElement.empty() retaining associations with removed controls. If an input node removed by empty() was subsequently inserted outside its original form, it could incorrectly reappear in that form's elements() and formData() results. #2646

Commits

• 5e3c284 [maven-release-plugin] prepare release jsoup-1.24.1
• 5d63820 Link fix
• 55aa51e Bump org.sonatype.central:central-publishing-maven-plugin from 0.11.0 to 0.12...
• 3203485 Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.26.3 to 0.26.5 (#2...
• fdbfd44 Bump github/codeql-action from 4.38.3 to 4.39.0 (#2649)
• 6fedf39 Bump actions/setup-java from 6.0.1 to 6.1.0 (#2650)
• 0c508f1 Improve Selector javadoc
• 6feca03 Detach nested form controls on .empty()
• e1d48ba Improve query complexity accounting
• 76c125d Improve exception handling when parsing selectors across buffer boundaries.
• Additional commits viewable in compare view

Updates dev.chrisbanes.haze:haze from 2.0.1 to 2.1.0

Release notes

Sourced from dev.chrisbanes.haze:haze's releases.

2.1.0

See CHANGELOG.md for details.

Changelog

Sourced from dev.chrisbanes.haze:haze's changelog.

2.1.0 2026-11-02 { id="2.1.0" }

Added

• Glass surfaces can merge into connected shapes and animate as members join or leave. Use hazeGlassContainer for nearby surfaces or group related controls into one shape. New container samples show these interactions in practice (#1409, #1447). See the Glass containers guide.
• Apps with several effects over the same source can reduce repeated source rendering on Android with experimental HazeInputSharing. It is off by default, uses more GPU memory, and clips the source to its bounds plus any configured outsets (#1611). See the input-sharing trade-offs.
• Glass optics are easier to customize: start from GlassOptics.regular or GlassOptics.clear and use optics { copy(...) } to change selected values without replacing the rest of a style.

Changed

• Glass is now stable in both haze-glass and haze-glass-material3, with no @ExperimentalHazeApi opt-in required.
• Blur and Glass styles can respond to animated state without rebuilding the style or recomposing the effect's call site. Remember a style once, then read animated values inside its block. Blur support contributed by Mohammad Jaber (#1602).
• Glass better respects reduced-transparency preferences: it obscures background detail with stronger blur and a more opaque appearance. Apps can customize the opaque fallback color (#1549).
• Blur and Glass do less repeated rendering work and reuse more of their retained output. See the performance guide for measurements and trade-offs; Glass containers can still add substantial cost to dense scrolling layouts.
• Blur and Glass use less peak GPU memory on Android. In the sample workloads on a Pixel 8a, Glass used about 7% less than in 2.0.1, and Blur Quality, where it was recorded, used at least 9% less.
• Updated Kotlin to 2.4.21 and Compose Multiplatform to 1.12.2.
• When upgrading from experimental Glass in 2.0.x, recompile code that uses it. GlassOptics and GlassAccessibilitySettings no longer support destructuring, and GlassDefaults.positionAnimationSpec is now GlassDefaults.interactionPositionAnimationSpec.
• Remember or hoist HazeBlurStyle { } instances: they now compare by identity rather than value. Material presets continue to compare by value.

Removed

• GlassDefaults.optics; use GlassOptics.regular.
• The parameter-based GlassStyleScope.optics(...) overload; use optics { copy(...) } or pass a GlassOptics value.
• GlassStyle.Material3() overloads; use GlassStyle.material3() or style.material3().

Fixed

... (truncated)

Commits

• ca21ff2 Prepare for release 2.1.0
• 6160e76 Fix scaled Blur capture edges (#1729)
• 70475f3 Refresh performance-mode benchmark results for 2.1.0 (#1725)
• fa333e8 Update Glass container showcase themes and demo video (#1724)
• 193c077 Update ktor monorepo to v3.6.1 (#1722)
• 41d048e Update Android baseline profiles (#1721)
• a53c8d4 Fix source sampling across sibling Android ComposeViews (#1720)
• cc982cb Link changelog entries to relevant issues (#1719)
• bac0b12 Update agp to v9.5.0 (#1717)
• afe5faf Reduce Glass container scroll drawing cost (#1716)
• Additional commits viewable in compare view

Updates dev.chrisbanes.haze:haze-blur from 2.0.1 to 2.1.0

Release notes

Sourced from dev.chrisbanes.haze:haze-blur's releases.

2.1.0

See CHANGELOG.md for details.

Changelog

Sourced from dev.chrisbanes.haze:haze-blur's changelog.

2.1.0 2026-11-02 { id="2.1.0" }

Added

• Glass surfaces can merge into connected shapes and animate as members join or leave. Use hazeGlassContainer for nearby surfaces or group related controls into one shape. New container samples show these interactions in practice (#1409, #1447). See the Glass containers guide.
• Apps with several effects over the same source can reduce repeated source rendering on Android with experimental HazeInputSharing. It is off by default, uses more GPU memory, and clips the source to its bounds plus any configured outsets (#1611). See the input-sharing trade-offs.
• Glass optics are easier to customize: start from GlassOptics.regular or GlassOptics.clear and use optics { copy(...) } to change selected values without replacing the rest of a style.

Changed

• Glass is now stable in both haze-glass and haze-glass-material3, with no @ExperimentalHazeApi opt-in required.
• Blur and Glass styles can respond to animated state without rebuilding the style or recomposing the effect's call site. Remember a style once, then read animated values inside its block. Blur support contributed by Mohammad Jaber (#1602).
• Glass better respects reduced-transparency preferences: it obscures background detail with stronger blur and a more opaque appearance. Apps can customize the opaque fallback color (#1549).
• Blur and Glass do less repeated rendering work and reuse more of their retained output. See the performance guide for measurements and trade-offs; Glass containers can still add substantial cost to dense scrolling layouts.
• Blur and Glass use less peak GPU memory on Android. In the sample workloads on a Pixel 8a, Glass used about 7% less than in 2.0.1, and Blur Quality, where it was recorded, used at least 9% less.
• Updated Kotlin to 2.4.21 and Compose Multiplatform to 1.12.2.
• When upgrading from experimental Glass in 2.0.x, recompile code that uses it. GlassOptics and GlassAccessibilitySettings no longer support destructuring, and GlassDefaults.positionAnimationSpec is now GlassDefaults.interactionPositionAnimationSpec.
• Remember or hoist HazeBlurStyle { } instances: they now compare by identity rather than value. Material presets continue to compare by value.

Removed

• GlassDefaults.optics; use GlassOptics.regular.
• The parameter-based GlassStyleScope.optics(...) overload; use optics { copy(...) } or pass a GlassOptics value.
• GlassStyle.Material3() overloads; use GlassStyle.material3() or style.material3().

Fixed

... (truncated)

Commits

• ca21ff2 Prepare for release 2.1.0
• 6160e76 Fix scaled Blur capture edges (#1729)
• 70475f3 Refresh performance-mode benchmark results for 2.1.0 (#1725)
• fa333e8 Update Glass container showcase themes and demo video (#1724)
• 193c077 Update ktor monorepo to v3.6.1 (#1722)
• 41d048e Update Android baseline profiles (#1721)
• a53c8d4 Fix source sampling across sibling Android ComposeViews (#1720)
• cc982cb Link changelog entries to relevant issues (#1719)
• bac0b12 Update agp to v9.5.0 (#1717)
• afe5faf Reduce Glass container scroll drawing cost (#1716)
• Additional commits viewable in compare view

Updates net.zetetic:sqlcipher-android from 4.19.1 to 4.20.0

Release notes

Sourced from net.zetetic:sqlcipher-android's releases.

v4.20.0

This is a maintenance release includes these changes:

• Updates the SQLite baseline to 3.54.1
• Avoids a deferred error when PRAGMA cipher_migrate fails before migrating
• Skips the .fini_array finalizer on WebAssembly

For additional details and release notes please consult release announcement.

Full Changelog: sqlcipher/sqlcipher-android@v4.19.1...v4.20.0

Commits

• 94bdf25 Adjust library version to 4.20.0
• 6066950 Adjust LTC to 476a9579ae94f32b9ea9e2747bfb04b302370259
• 6f0fc24 Revert "Adjust library version to 4.20.0"
• f35de3e Update README for 4.20.0 release
• f1a2be0 Adjust library version to 4.20.0
• df036b8 Checkout SQLCipher core to v4.20.0
• 898c9af Checkout LTC to v2026.09.09
• 8dbff38 Fix getId() warning from current thread
• 5c2fb41 Close cursor in SQLCipherStatement (Room 3)
• db8a037 Update README for for 4.19.1
• See full diff in compare view

Updates com.squareup.okhttp3:okhttp from 5.5.0 to 5.5.1

Changelog

Sourced from com.squareup.okhttp3:okhttp's changelog.

Version 5.5.1

2026_10_22

• Fix: [Block 8 compromised eMudhra intermediate certificates][Mozilla_eMudhra]. Note that this update is not necessary for Android devices with Google Play Services as Google has issued an [automatic update][Google_eMudhra]. This change protects JVMs and AOSP devices that are exposed to the compromised certificates.

Commits

• be5151a Prepare for release 5.5.1.
• 6db9802 OkHttp 5.5.x: Blocklist 8 certificates for CVE-2026-111943 (#9805)
• See full diff in compare view

Updates com.squareup.okhttp3:okhttp-urlconnection from 5.5.0 to 5.5.1

Changelog

Sourced from com.squareup.okhttp3:okhttp-urlconnection's changelog.

Version 5.5.1

2026_10_22

• Fix: [Block 8 compromised eMudhra intermediate certificates][Mozilla_eMudhra]. Note that this update is not necessary for Android devices with Google Play Services as Google has issued an [automatic update][Google_eMudhra]. This change protects JVMs and AOSP devices that are exposed to the compromised certificates.

Commits

• be5151a Prepare for release 5.5.1.
• 6db9802 OkHttp 5.5.x: Blocklist 8 certificates for CVE-2026-111943 (#9805)
• See full diff in compare view

Updates com.squareup.okhttp3:logging-interceptor from 5.5.0 to 5.5.1

Changelog

Sourced from com.squareup.okhttp3:logging-interceptor's changelog.

Version 5.5.1

2026_10_22

• Fix: [Block 8 compromised eMudhra intermediate certificates][Mozilla_eMudhra]. Note that this update is not necessary for Android devices with Google Play Services as Google has issued an [automatic update][Google_eMudhra]. This change protects JVMs and AOSP devices that are exposed to the compromised certificates.

Commits

• be5151a Prepare for release 5.5.1.
• 6db9802 OkHttp 5.5.x: Blocklist 8 certificates for CVE-2026-111943 (#9805)
• See full diff in compare view

Updates org.jetbrains.kotlinx:kotlinx-serialization-json from 1.11.0 to 1.12.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's releases.

v1.12.0

This release is based on Kotlin 2.4.10 and contains all of the changes from 1.12.0-RC.

Additionally, it includes a fix removing unnecessary leading whitespaces from Proguard rules (#3270), and two changes stabilizing kotlin.uuid.Uuid serializer (#3263) and kotlin.time.Instant serializers (#3261).

For your convenience, the changelog for 1.12.0-RC is duplicated below:

API stabilization and deprecations

A big portion of the Json and Core APIs has been stabilized. Most important ones include: @KeepGeneratedSerializer and @SerialInfo annotations, JsonNamingStrategy, and ContextualSerializer. Additionally, various descriptor builders such as listDescriptor and JsonElementBuilder's addAll functions are also stable and can be freely used. There is also one deprecation: ChunkedDecoder interface. Since there is no demand for it, we plan to remove it in the future. See details in the #3238, #3239, and #3216.

Also, kotlin.time.Instant and kotlin.uuid.Uuid serializers are no longer annotated with experimental annotations from the Kotlin standard library (see #3261 and #3263)

Performance improvements

We also improved performance in various areas. ASCII-specific parser (#3225) brings performance of decoding from Okio and kotlinx-io sources closer to decoding performance from String. #3220 makes decoding significantly faster in case JsonElement present in your serializable classes. And #3248 should bring overall performance improvements (up to 30%) on large strings.

Exceptions rework

We continue to improve exception handling in Json encoders and decoders. #3235 makes a big change around custom serializers and @Serializable classes constructors: from now on, every exception thrown during deserialization is wrapped by decoder into a JsonException. This way, it is more predictable to write a catch and it is easier to understand what went wrong: JsonDecodingException also includes context information such as Json path and input. Besides that, #3246 limits maximum nesting depth of Json document, so you will get a proper JsonDecodingException instead of a random stack overflow error.

CBOR improvements

CBOR format also gets many improvements in this release. The most important one is memory optimization for definitely-sized collections (#3191, #3192).

The others include:

• Encode unsigned integer types as positive integers (#3194) (thanks to Eyüp Can Akman)
• Correctly decode CborLabel values (#3195)
• Include actual tag info into CborDecodingException (#3197)

Protobuf improvements

Protocol buffers format received a big new feature: support for unknown fields. Using a new ProtoUnknownFieldHolder class, you can now decode and store unknown fields in Protobuf messages to retransmit them back later. See documentation updates and #2860 for details.

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's changelog.

1.12.0 / 2026-10-19

This release is based on Kotlin 2.4.10 and contains all of the changes from 1.12.0-RC.

Additionally, it includes a fix removing unnecessary leading whitespaces from Proguard rules (#3270), and two changes stabilizing kotlin.uuid.Uuid serializer (#3263) and kotlin.time.Instant serializers (#3261).

For your convenience, the changelog for 1.12.0-RC is duplicated below:

API stabilization and deprecations

A big portion of the Json and Core APIs has been stabilized. Most important ones include: @KeepGeneratedSerializer and @SerialInfo annotations, JsonNamingStrategy, and ContextualSerializer. Additionally, various descriptor builders such as listDescriptor and JsonElementBuilder's addAll functions are also stable and can be freely used. There is also one deprecation: ChunkedDecoder interface. Since there is no demand for it, we plan to remove it in the future. See details in the #3238...

Description has been truncated