chore(deps): bump the maven-dependencies group across 1 directory with 20 updates

[dependabot]

Bumps the maven-dependencies group with 20 updates in the / directory:

Package	From	To
androidx.compose.material3:material3-android	1.5.0-alpha17	1.5.0-alpha19
androidx.lifecycle:lifecycle-process	2.8.7	2.10.0
gradle-wrapper	9.2.0	9.5.1
androidx.activity:activity-compose	1.11.0	1.13.0
androidx.webkit:webkit	1.14.0	1.16.0
androidx.biometric:biometric	1.2.0-alpha05	1.4.0-alpha07
androidx.compose:compose-bom	2025.11.00	2026.05.00
androidx.lifecycle:lifecycle-runtime-ktx	2.9.4	2.10.0
androidx.lifecycle:lifecycle-runtime-compose	2.9.4	2.10.0
androidx.lifecycle:lifecycle-viewmodel-compose	2.9.4	2.10.0
org.jetbrains.kotlinx:kotlinx-coroutines-core	1.10.2	1.11.0
com.google.code.gson:gson	2.10.1	2.14.0
com.patrykandpatrick.vico:compose-m3	2.0.0-alpha.13	3.2.0-next.4
org.lsposed.libcxx:libcxx	28.1.13356709	29.0.14206865
com.android.application	8.13.1	9.2.1
com.android.library	8.13.1	9.2.1
org.jetbrains.kotlin.android	2.2.21	2.3.21
org.jetbrains.kotlin.plugin.compose	2.2.21	2.3.21
com.google.devtools.ksp	2.3.1	2.3.8
org.lsposed.lsplugin.cmaker	1.2	1.4

Updates androidx.compose.material3:material3-android from 1.5.0-alpha17 to 1.5.0-alpha19

Updates androidx.lifecycle:lifecycle-process from 2.8.7 to 2.10.0

Updates gradle-wrapper from 9.2.0 to 9.5.1

Release notes

Sourced from gradle-wrapper's releases.

9.5.1

The Gradle team is excited to announce Gradle 9.5.1.

Here are the highlights of this release:

• Task provenance in reports and failure messages
• Type-safe accessors for precompiled Kotlin Settings plugins

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: atm1020, mataha, Adam, Attila Kelemen, Benedikt Ritter, Björn Kautler, Caro Silva Rode, CHANHAN, Dmitry Nezavitin, Eng Zer Jun, KugelLibelle, Madalin Valceleanu, Markus Gaisbauer, Oliver Kopp, Philip Wedemann, ploober, Roberto Perez Alcolea, Rohit Anand, Suvrat Acharya, Ujwal Suresh Vanjare, Victor Merkulov

Upgrade instructions

Switch your build to use Gradle 9.5.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.5.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.5.0

... (truncated)

Commits

• fd78213 Update Documentation Infrastructure: Fix scrolling issue in user manual (#37861)
• 7758437 fix scroll
• 2fd605f Only try to run as worker thread in DefaultBuildOperationQueue (#37845)
• af69849 Release notes for Gradle 9.5.1 (#37853)
• f4d9d03 Release notes for Gradle 9.5.1
• 01eda3a Address review feedback on worker-lease retry changes
• 7024e15 Revert enrich file visitor with size info on release branch (#37848)
• d51476f Fix tryRunAsWorkerThread null-return test to match contract
• 090ebab Revert "Add getLength() to FilePropertyVisitor.VisitState"
• bceab24 Revert "Fix annotation"
• Additional commits viewable in compare view

Updates androidx.activity:activity-compose from 1.11.0 to 1.13.0

Updates androidx.webkit:webkit from 1.14.0 to 1.16.0

Updates androidx.biometric:biometric from 1.2.0-alpha05 to 1.4.0-alpha07

Updates androidx.compose:compose-bom from 2025.11.00 to 2026.05.00

Updates androidx.lifecycle:lifecycle-runtime-ktx from 2.9.4 to 2.10.0

Updates androidx.lifecycle:lifecycle-runtime-compose from 2.9.4 to 2.10.0

Updates androidx.lifecycle:lifecycle-viewmodel-compose from 2.9.4 to 2.10.0

Updates androidx.lifecycle:lifecycle-runtime-compose from 2.9.4 to 2.10.0

Updates androidx.lifecycle:lifecycle-viewmodel-compose from 2.9.4 to 2.10.0

Updates org.jetbrains.kotlinx:kotlinx-coroutines-core from 1.10.2 to 1.11.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-coroutines-core's releases.

1.11.0

Various

• Kotlin was updated to 2.2.20 (#4545).
• Improved the published jar files (#3842, #4599).
• Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

Breaking changes and deprecations

• Moved Promise-related functions from JS and Wasm/JS to the new web target. On Wasm/JS, this is a breaking change. Before the change, Promise on Wasm/JS could work with arbitrary Kotlin types, but now, only JsAny subtypes are accepted (#4563).
• Changed handling of coroutine exceptions that can't be propagated on JS and Wasm/JS. B efore, exceptions were logged, but now, they are reported to the JS runtime (#4451, #4631).
• Deprecated using CoroutineDispatcher as the coroutine context key; now, ContinuationInterceptor has to be used instead (#4333).
• Advanced the deprecation levels on kotlinx-coroutines-test APIs (#4604).
• Added lint functions that mark passing a Job to coroutine builders as deprecated (#4435).

Bug fixes and improvements

• Added a callsInPlace(EXACTLY_ONCE) contract to runBlocking in code shared between JVM and Native (#4368).
• Added a callsInPlace(EXACTLY_ONCE) contract to suspendCancellableCoroutine (#4574).
• Fixed flowOn incorrectly handling ThreadContextElement updates (#4403).
• Fixed exceptions in user-supplied Thread.UncaughtExceptionHandler instances causing the internal coroutines machinery to fail (#4516).
• Fixed CoroutineDispatcher.asScheduler in the RxJava integration not cancelling outstanding work when a Worker gets cancelled, which led to memory leaks in some scenarios (#4615).
• Fixed SharedFlow entering an invalid state when a subscriber and an emitter are cancelled simultaneously (#4583).
• Fixed an R8 optimization leading to shareIn/stateIn coroutines getting garbage-collected (#4646). Thanks, @​solevic!

Small additions

• Added CompletableDeferred.asDeferred for obtaining a read-only Deferred view (#4408).
• Added SharedFlow.asFlow for obtaining a Flow view with hidden hot flow semantics (#4530). Thanks, @​g000sha256!
• Added a StateFlow.collectLatest overload returning Nothing to assist with finding unreachable code (#4454).
• Added ReceiveChannel.consumeTo for consuming a ReceiveChannel into a MutableCollection (#4520).
• Added a StateFlow<T>.onSubscription overload returning a StateFlow<T>, similar to SharedFlow<T>.onSubscription returning SharedFlow<T> (#4275). Thanks, @​xit0c!
• Added terminal Flow operators for collecting a Flow to a Map (#1541).

Changelog relative to version 1.11.0

No changes, only the version is increased.

1.11.0-rc02

Restored binary compatibility with 1.10.2 and older versions on Wasm/JS for usages of Promise-related functions (#4661).

1.11.0-rc01

Various

• Kotlin was updated to 2.2.20 (#4545).
• Improved the published jar files (#3842, #4599).
• Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

Breaking changes and deprecations

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-coroutines-core's changelog.

Version 1.11.0

Various

• Kotlin was updated to 2.2.20 (#4545).
• Improved the published jar files (#3842, #4599).
• Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

Breaking changes and deprecations

• Moved Promise-related functions from JS and Wasm/JS to the new web target. On Wasm/JS, this is a breaking change. Before the change, Promise on Wasm/JS could work with arbitrary Kotlin types, but now, only JsAny subtypes are accepted (#4563).
• Changed handling of coroutine exceptions that can't be propagated on JS and Wasm/JS. Before, exceptions were logged, but now, they are reported to the JS runtime (#4451, #4631).
• Deprecated using CoroutineDispatcher as the coroutine context key; now, ContinuationInterceptor has to be used instead (#4333).
• Advanced the deprecation levels on kotlinx-coroutines-test APIs (#4604).
• Added lint functions that mark passing a Job to coroutine builders as deprecated (#4435).

Bug fixes and improvements

• Added a callsInPlace(EXACTLY_ONCE) contract to runBlocking in code shared between JVM and Native (#4368).
• Added a callsInPlace(EXACTLY_ONCE) contract to suspendCancellableCoroutine (#4574).
• Fixed flowOn incorrectly handling ThreadContextElement updates (#4403).
• Fixed exceptions in user-supplied Thread.UncaughtExceptionHandler instances causing the internal coroutines machinery to fail (#4516).
• Fixed CoroutineDispatcher.asScheduler in the RxJava integration not cancelling outstanding work when a Worker gets cancelled, which led to memory leaks in some scenarios (#4615).
• Fixed SharedFlow entering an invalid state when a subscriber and an emitter are cancelled simultaneously (#4583).
• Fixed an R8 optimization leading to shareIn/stateIn coroutines getting garbage-collected (#4646). Thanks, @​solevic!

Small additions

• Added CompletableDeferred.asDeferred for obtaining a read-only Deferred view (#4408).
• Added SharedFlow.asFlow for obtaining a Flow view with hidden hot flow semantics (#4530). Thanks, @​g000sha256!
• Added a StateFlow.collectLatest overload returning Nothing to assist with finding unreachable code (#4454).
• Added ReceiveChannel.consumeTo for consuming a ReceiveChannel into a MutableCollection (#4520).
• Added a StateFlow<T>.onSubscription overload returning a StateFlow<T>, similar to SharedFlow<T>.onSubscription returning SharedFlow<T> (#4275). Thanks, @​xit0c!
• Added terminal Flow operators for collecting a Flow to a Map (#1541).

Changelog relative to version 1.11.0

No changes, only the version is increased.

Version 1.11.0-rc02

Restored binary compatibility with 1.10.2 and older versions on Wasm/JS for usages of Promise-related functions (#4661).

Version 1.11.0-rc01

Various

• Kotlin was updated to 2.2.20 (#4545).
• Improved the published jar files (#3842, #4599).
• Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

... (truncated)

Commits

• 8564f65 Version 1.11.0
• a4c6af9 Merge remote-tracking branch 'origin/master' into develop
• ef917b4 KT-84955: mark apple x64 tagets as deprecated error (#4645)
• 5ebc421 Update the release procedure description (#4670)
• 95f46a0 Remove old maven repository settings (#4672)
• b4f4f0a Fix package name of ToMapCollectionSamplesTest. (#4674)
• 86738dc Added templates to the issue creation wizard (#4654)
• 330fcc2 Version 1.11.0-rc02
• e31cef6 Merge remote-tracking branch 'origin/master' into develop
• dc6e9f6 Restore Promise-related functions on Wasm/JS as HIDDEN (#4661)
• Additional commits viewable in compare view

Updates com.google.code.gson:gson from 2.10.1 to 2.14.0

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.14.0

What's Changed

• Add type adapters for java.time classes by @​eamonnmcmanus in google/gson#2948

  When the java.time API is available, Gson automatically can read and write instances of classes like Instant and Duration. The format it uses essentially freezes the JSON representation that ReflectiveTypeAdapterFactory established by default, based on the private fields of java.time classes. That's not a great representation, but it is understandable. Changing it to anything else would break compatibility with systems that are expecting the current format.

  With this change, Gson no longer tries to access private fields of these classes using reflection. So it is no longer necessary to run with --add-opens for these classes on recent JDKs.

• Remove com.google.gson.graph by @​eamonnmcmanus in google/gson#2990.

  This package was not part of any released artifact and depended on Gson internals in potentially problematic ways.

• Validate that strings being parsed as integers consist of ASCII characters by @​eamonnmcmanus in google/gson#2995

  Previously, strings could contain non-ASCII Unicode digits and still be parsed as integers. That's inconsistent with how JSON numbers are treated.

• Fix duplicate key detection when first value is null by @​andrewstellman in google/gson#3006

  This could potentially break code that was relying on the incorrect behaviour. For example, this JSON string was previously accepted but will no longer be: {"foo": null, "foo": bar}.

• Remove Serializable from internal Type implementation classes. by @​eamonnmcmanus in google/gson#3011

  The nested classes ParameterizedTypeImpl, GenericArrayTypeImpl, and WildcardTypeImpl in GsonTypes are implementations of the corresponding types (without Impl) in java.lang.reflect. For some reason, they were serializable, even though the java.lang.reflect implementations are not. Having unnecessarily serializable classes could conceivably have been a security problem if they were part of a larger exploit using serialization. (We do not consider this a likely scenario and do not suggest that you need to update Gson just to get this change.)

• Add LegacyProtoTypeAdapterFactory. by @​eamonnmcmanus in google/gson#3014

  This is not part of any released artifact, but may be of use when trying to fix code that is currently accessing the internals of protobuf classes via reflection.

• Make AppendableWriter do flush and close if delegation object supports by @​MukjepScarlet in google/gson#2925

Other less visible changes

• Add default capacity to EnumTypeAdapter maps by @​MukjepScarlet in google/gson#2959
• refactor: move derived adapters from Gson to TypeAdapters by @​MukjepScarlet in google/gson#2951
• Optimize new Gson() by @​MukjepScarlet in google/gson#2864

New Contributors

• @​ThirdGoddess made their first contribution in google/gson#2944
• @​lmj798 made their first contribution in google/gson#2988
• @​Eng-YasminKotb made their first contribution in google/gson#3005
• @​andrewstellman made their first contribution in google/gson#3006

Full Changelog: google/gson@gson-parent-2.13.2...gson-parent-2.14.0

Gson 2.13.2

The main changes in this release are just newer dependencies.

... (truncated)

Commits

• 3ff35d6 [maven-release-plugin] prepare release gson-parent-2.14.0
• a3024fd Bump the maven group with 13 updates (#3002)
• 5689ffe Bump the github-actions group across 1 directory with 3 updates (#3018)
• 48db33c Add LegacyProtoTypeAdapterFactory. (#3014)
• 53d703e Update outdated comment regarding serializable types (#3012)
• 0189b72 Remove Serializable from internal Type implementation classes. (#3011)
• f4d371d Fix duplicate key detection when first value is null (#3006)
• 27d9ba1 Fix typo in README (JPMS dependencies section) (#3005)
• 1fa9b7a Validate that strings being parsed as integers consist of ASCII characters (#...
• b7d5954 Add iterator fail-fast tests for LinkedTreeMap.clear() (#2992)
• Additional commits viewable in compare view

Updates com.patrykandpatrick.vico:compose-m3 from 2.0.0-alpha.13 to 3.2.0-next.4

Release notes

Sourced from com.patrykandpatrick.vico:compose-m3's releases.

v3.2.0-next.3

Overview

• breaking changes: none
• addressed: #1320

Common

• Fixed the default x-step ignoring minimum-x overrides. getXStep has new minX and maxX parameters; the single-parameter variant is deprecated.

v3.2.0-next.2

Overview

• breaking changes: none
• addressed: #1436

compose

• Fixed VerticalAxis using titleComponent instead of label for Size.Text.

v3.2.0-next.1

Overview

• breaking changes: none
• addressed: #1391, #1412, #1416, #1425, #1426
• external contributors: @​rubixhacker

Common

• Added visiblePadding to LineCartesianLayer.Interpolator.
• Prevented the built-in CartesianLayer implementations from trimming their data to their reported x-ranges (sometimes incompletely).

compose

• Added a compose-glance module, which provides CartesianChartImage and PieChartImage composables for Glance widgets.
• Fixed an issue where single-slice pie charts could render blank.
• Fixed ShapeComponent ignoring margins.
• Fixed zero-duration automatic scrolls being delayed by a frame.
• Fixed an issue where charts with markers could needlessly consume taps and long presses, blocking upstream detection.

v3.1.0

Overview

• breaking changes: none
• addressed: #339, #426, #647, #1208, #1391, #1396, #1404

Common

1. Added pie charts. See the “Basic pie chart” sample chart (Compose, views) and the API reference (Compose, views) for details. Pie charts are experimental; they’ll remain available, but breaking changes are more likely.
2. In LineCartesianLayer, deprecated PointConnector and introduced Interpolator. The new interface receives all points, enabling true polyline-level interpolation (e.g., Catmull–Rom splines). Interpolator has three built-in singletons and factory functions: Sharp and cubic, functionally identical to their PointConnector counterparts, and catmullRom. Compared to cubic, catmullRom produces straight line segments instead of steps for collinear points.

... (truncated)

Commits

• See full diff in compare view

Updates org.lsposed.libcxx:libcxx from 28.1.13356709 to 29.0.14206865

Commits

• 730cd76 29.0.14206865
• de88339 29.0.13599879-beta2
• 64befa9 29.0.13113456-beta1
• See full diff in compare view

Updates com.android.application from 8.13.1 to 9.2.1

Updates com.android.library from 8.13.1 to 9.2.1

Updates com.android.library from 8.13.1 to 9.2.1

Updates org.jetbrains.kotlin.android from 2.2.21 to 2.3.21

Updates org.jetbrains.kotlin.plugin.compose from 2.2.21 to 2.3.21

Updates com.google.devtools.ksp from 2.3.1 to 2.3.8

Release notes

Sourced from com.google.devtools.ksp's releases.

2.3.8

What's Changed

• Enabled new default annotation use-site rules in Kotlin's Analysis API (see KEEP 402) for more information. Note: KSP was already mostly compatible with KEEP 402, so there shouldn't be any visible changes for users. (#2888)
• Enabled ksp.project.isolation by default when Gradle isolated projects are enabled (#2866)
• Improved getSymbolsWithAnnotation performance by implementing a new PSI-based resolution strategy (#2816)

Contributors

• Thanks to @​hugoncosta made and everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.7...2.3.8

2.3.7

What's Changed

• Bumped Kotlin target language version to 2.3 (#2821)
• Fixed crash caused by upstream dependency (#2856)
• Fixed support for Gradle Isolated Projects (#2844)

Contributors

• Thanks to everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.6...2.3.7

2.3.6

What's Changed

• Fixed an issue where module recompilation would fail on Windows environments when KSP2 was enabled (#2774)
• Resolved an issue where generated Java sources were ignored when using Android Kotlin Multiplatform with IP-compatible paths (#2744)
• Fixed a KSP version 2.3.5 CI error exception that does not break build checks (#2763)
• Added symbol-processing-api and common-deps to compile dependencies (#2789)
• Improved the detection of built-in Kotlin by removing the reliance on KotlinBaseApiPlugin (#2772)
• A back-port of a performance optimization in the Intellij / Analysis API (2785 )
• Added support for nested typealias Kotlin language feature #2588
• Exclude jdbc package from log4j to prevent vulnerability issue #2651

Contributors

• Thanks to @​salmanmkc, @​jaschdoc, @​gurusai-voleti and everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.5...2.3.6

2.3.5

What's Changed

• KSPCoreEnvironment.instance_prop leaks memory when used programmatically #2742
• Missing first annotation argument when toByte is used #2672
• Fix circular dependency between KSP and KAPT in AGP 9.0 #2743

Contributors

• Thanks to everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.4...2.3.5

2.3.4

... (truncated)

Commits

• 2f796a7 Add test for context parameters
• 927c7cf Merge test directories
• 10ca297 Add test for Java class implementing property getter
• 72099da Override toString in InternalKSPException
• abe09e6 Refactor errors into InternalKSPException
• 96655c5 Add missing copyright header
• c1409e9 Refactor CollectAnnotatedSymbolsPsiVisitor
• a1f0fff Add PSI element implementations of KSDeclarations.
• 6f1fcdc Fix 'no element found' issue in KtAnnotationEntry.qualifiedName
• c3d3aa2 Add test for enum modifiers
• Additional commits viewable in compare view

Updates org.lsposed.lsplugin.cmaker from 1.2 to 1.4

Commits

• See full diff in compare view

Updates org.jetbrains.kotlin.plugin.compose from 2.2.21 to 2.3.21