Update all non-major dependencies (except kotlin)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
gradle (source)		minor	9.5.1 → 9.6.1
androidx.hilt:hilt-navigation-compose (source)	dependencies	minor	1.3.0 → 1.4.0
io.ktor:ktor-client-mock	dependencies	patch	3.5.0 → 3.5.1
io.ktor:ktor-serialization-kotlinx-json	dependencies	patch	3.5.0 → 3.5.1
io.ktor:ktor-client-okhttp	dependencies	patch	3.5.0 → 3.5.1
io.ktor:ktor-client-logging-jvm	dependencies	patch	3.5.0 → 3.5.1
io.ktor:ktor-client-json	dependencies	patch	3.5.0 → 3.5.1
io.ktor:ktor-client-core	dependencies	patch	3.5.0 → 3.5.1
io.ktor:ktor-client-content-negotiation	dependencies	patch	3.5.0 → 3.5.1
org.junit:junit-bom (source)	dependencies	patch	6.1.0 → 6.1.2
com.autonomousapps.dependency-analysis	plugin	minor	3.15.0 → 3.17.0
com.google.dagger.hilt.android	plugin	minor	2.59.2 → 2.60.1
com.google.dagger:hilt-android-gradle-plugin	dependencies	minor	2.59.2 → 2.60.1
com.google.dagger:hilt-compiler	dependencies	minor	2.59.2 → 2.60.1
com.google.dagger:hilt-android-compiler	dependencies	minor	2.59.2 → 2.60.1
com.google.dagger:hilt-android	dependencies	minor	2.59.2 → 2.60.1
com.google.dagger:dagger	dependencies	minor	2.59.2 → 2.60.1
androidx.compose:compose-bom	dependencies	minor	2026.05.01 → 2026.06.01
androidx.lifecycle:lifecycle-viewmodel-ktx (source)	dependencies	minor	2.10.0 → 2.11.0
androidx.lifecycle:lifecycle-viewmodel-compose (source)	dependencies	minor	2.10.0 → 2.11.0
androidx.lifecycle:lifecycle-runtime-compose (source)	dependencies	minor	2.10.0 → 2.11.0
com.android.tools.build:gradle (source)	dependencies	minor	9.2.1 → 9.3.0

---

Release Notes

gradle/gradle (gradle)

v9.6.1

Compare Source

v9.6.0

Compare Source

ktorio/ktor (io.ktor:ktor-client-mock)

v3.5.1

Compare Source

Published 25 June 2026

Improvements

• KTOR-9492 OpenAPI plugin: handle requireXxx functions in compiler plugin
• KTOR-9569 Add more details for KDoc of BearerAuthConfig.sendWithoutRequest
• KTOR-9571 Add KDoc for BearerAuthConfig.realm
• KTOR-9570 Add Kdoc for BearerAuthConfig.refreshTokens

Bugfixes

• KTOR-9646 Fix Kotlin 2.4.0 compiler plugin breaking changes
• KTOR-9585 OpenAPI: JsonSchema title is truncated when it contains a dot
• KTOR-9591 OpenAPI: @JsonClassDiscriminator on sealed types is ignored when generating OpenAPI discriminator schema
• KTOR-9597 OpenAPI: Schema name collisions because@SerialName of sealed subtypes is used as components.schemas key
• KTOR-9601 OpenAPI: nullable @​JvmInline value class loses nullability in generated schema
• KTOR-9620 Some issues related to digest authentication in 3.5.0
• KTOR-9623 Digest Auth: server must respond with one WWW-Authenticate header for each supported algorithm
• KTOR-9624 Digest Auth: "Unsupported charset in digest authentication header" for a charset name in lowercase
• KTOR-9630 Digest Auth: The plugin sends incorrect nonce when server responds with multiple WWW-Authenticate headers
• KTOR-9565 WebRTC: Peer stops receiving messages after a while on iOS
• KTOR-9610 WebRtcPeerConnection::close causes ClosedReceiveChannelException for other peer
• KTOR-9633 WebRTC statistics fetching race condition
• KTOR-9603 Structured concurrency is violated in WebRTC tests
• KTOR-9671 Darwin: Semicolons in URL path are sanitized
• KTOR-9639 Darwin: WebSocket client crashes the process when a PONG arrives after the session is closed
• KTOR-9575 Darwin: findCharset("UTF-16") maps to NSUTF16LittleEndianStringEncoding causing decoding failure for UTF-16 content with BOM
• KTOR-9661 HttpCache: InvalidCacheStateException is thrown on 304 when no cached entry matches varyKeys
• KTOR-9673 Caching always missing with Content Negotiation
• KTOR-9596 HttpTimeout: HttpRequestTimeoutException on any request with runTest and request timeout defined since 3.5.0
• KTOR-9632 HttpRequestBuilder.timeout call removes capabilities set in DefaultRequest
• KTOR-9252 ContentEncoding: Incomplete gzip response causes client/server to hang indefinitely
• KTOR-9670 Compression: The plugin ignores Accept-Encoding q=0 and most-specific matching
• KTOR-9614 Zstd Compression: "Destination buffer is too small" exception for a particular sequence of bytes
• KTOR-9636 CORS plugin drops OPTIONS preflight requests when allowSameOrigin is on
• KTOR-9659 CORS is skipped when the Origin header contains an IPv6 address
• KTOR-9574 ContentNegotiation: The charset of Accept-Charset header is used for response deserialization
• KTOR-9606 KotlinxSerializationConverter: it fails to deserialize an empty channel closed with a delay
• KTOR-9617 OutputStreamContent and WriterContent can exhaust Dispatchers.IO
• KTOR-9629 RawSourceChannel: coroutine cancellation is not propagated to the RawSource
• KTOR-8870 File.readChannel: do not close a non-opened file and ignore closing exceptions
• KTOR-9460 Curl: Can't build shared library with Ktor 3.4.2
• KTOR-9607 Crash on Android 7: NoSuchMethodError getInstanceStrong() since 3.5.0
• KTOR-9595 CIO: The engine imports node:net statically and breaks wasmJsBrowser webpack build
• KTOR-9615 Apache5: The underlying request is not aborted when coroutine Job is cancelled
• KTOR-8443 RoutingBuilder.contentType does not use parameters when matching
• KTOR-9425 SessionTransportTransformerEncrypt init block uses wrong IV size for AES-256 (regression of KTOR-661)
• KTOR-9621 RateLimit plugin is bypassed when the nested authenticate block rejects the request
• KTOR-8766 DI: The close method is called twice on cleanup of AutoCloseable
• KTOR-8695 GMTDate() being offset by 369 years on Windows
• KTOR-9589 Duplicate PROPERTY_SETTER target in @​InternalAPI annotation
• KTOR-9602 Gradle plugin environment variable is not included in the image

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.