chore(deps): bump the android-runtime group with 5 updates

[dependabot]

Bumps the android-runtime group with 5 updates:

Package	From	To
androidx.compose:compose-bom	2026.05.01	2026.06.00
androidx.core:core-ktx	1.18.0	1.19.0
io.coil-kt.coil3:coil-compose	3.4.0	3.5.0
io.coil-kt.coil3:coil-gif	3.4.0	3.5.0
com.google.crypto.tink:tink-android	1.21.0	1.22.0

Updates androidx.compose:compose-bom from 2026.05.01 to 2026.06.00

Updates androidx.core:core-ktx from 1.18.0 to 1.19.0

Updates io.coil-kt.coil3:coil-compose from 3.4.0 to 3.5.0

Release notes

Sourced from io.coil-kt.coil3:coil-compose's releases.

3.5.0

See CHANGELOG.md.

3.5.0-beta01

See CHANGELOG.md.

Changelog

Sourced from io.coil-kt.coil3:coil-compose's changelog.

[3.5.0] - June 10, 2026

Changes since 3.4.0:

• Important: Remove iosX64 and macosX64 targets. (#3386)
• Important: Increase Android's minimum SDK version to 23. (#3283)
• New: Add fast WebP size extraction on JS/WASM to avoid falling back to a full Skia decode. (#3341)
• Remove experimental annotation from ImageLoader.Builder.memoryCacheMaxSizePercentWhileInBackground. (#3439)
• Fix CacheStrategy implementations being unable to refresh cached failure responses (e.g. expired cached 404 responses). (#3401)
• Look up ContinuationInterceptor instead of CoroutineDispatcher in coroutine contexts. (#3415)
• Update the Android compile SDK to 36.
• Update the Kotlin language version to 2.2.
• Update Kotlin to 2.4.0.
• Update Compose to 1.11.1.
• Update Okio to 3.17.0.
• Update Skiko to 0.144.6.
• Update androidx.annotation to 1.10.0.

Changes since 3.5.0-beta01:

• Remove experimental annotation from ImageLoader.Builder.memoryCacheMaxSizePercentWhileInBackground. (#3439)
• Look up ContinuationInterceptor instead of CoroutineDispatcher in coroutine contexts. (#3415)
• Update the Kotlin language version to 2.2.
• Update Kotlin to 2.4.0.
• Update Compose to 1.11.1.
• Update Skiko to 0.144.6.

[3.5.0-beta01] - May 4, 2026

• Remove iosX64 and macosX64 targets. (#3386)
• Increase Android's minimum SDK version to 23. (#3283)
• Add fast WebP size extraction on JS/WASM to avoid falling back to a full Skia decode. (#3341)
• Fix CacheStrategy implementations being unable to refresh cached failure responses (e.g. expired cached 404 responses). (#3401)
• Update compile SDK to 36.
• Update Kotlin to 2.3.21.
• Update Compose to 1.11.0-beta03.
• Update Okio to 3.17.0.
• Update Skiko to 0.144.5.
• Update androidx.annotation to 1.10.0.

Commits

• ce5df14 Prepare version 3.5.0.
• 256c59a Update copyright headers to 2026. (#3444)
• 82105de chore(deps): update plugin poko to v0.23.1 (#3442)
• 45a5f5b Handle iOS insets for Compose sample (#3441)
• adaa208 Stabilize ImageLoader.Builder.memoryCacheMaxSizePercentWhileInBackground and ...
• 282986b chore(deps): update plugin poko to v0.23.0 (#3440)
• 619ea72 fix(deps): update kotlin monorepo to v2.4.0 (#3437)
• 47a1dc4 fix(deps): update jetbrains.compose to v1.11.1 (#3435)
• 8dbfad4 fix(deps): update dependency org.jetbrains.kotlinx:atomicfu-gradle-plugin to ...
• 86e70e1 chore(deps): update plugin spotless to v8.6.0 (#3432)
• Additional commits viewable in compare view

Updates io.coil-kt.coil3:coil-gif from 3.4.0 to 3.5.0

Release notes

Sourced from io.coil-kt.coil3:coil-gif's releases.

3.5.0

See CHANGELOG.md.

3.5.0-beta01

See CHANGELOG.md.

Changelog

Sourced from io.coil-kt.coil3:coil-gif's changelog.

[3.5.0] - June 10, 2026

Changes since 3.4.0:

• Important: Remove iosX64 and macosX64 targets. (#3386)
• Important: Increase Android's minimum SDK version to 23. (#3283)
• New: Add fast WebP size extraction on JS/WASM to avoid falling back to a full Skia decode. (#3341)
• Remove experimental annotation from ImageLoader.Builder.memoryCacheMaxSizePercentWhileInBackground. (#3439)
• Fix CacheStrategy implementations being unable to refresh cached failure responses (e.g. expired cached 404 responses). (#3401)
• Look up ContinuationInterceptor instead of CoroutineDispatcher in coroutine contexts. (#3415)
• Update the Android compile SDK to 36.
• Update the Kotlin language version to 2.2.
• Update Kotlin to 2.4.0.
• Update Compose to 1.11.1.
• Update Okio to 3.17.0.
• Update Skiko to 0.144.6.
• Update androidx.annotation to 1.10.0.

Changes since 3.5.0-beta01:

• Remove experimental annotation from ImageLoader.Builder.memoryCacheMaxSizePercentWhileInBackground. (#3439)
• Look up ContinuationInterceptor instead of CoroutineDispatcher in coroutine contexts. (#3415)
• Update the Kotlin language version to 2.2.
• Update Kotlin to 2.4.0.
• Update Compose to 1.11.1.
• Update Skiko to 0.144.6.

[3.5.0-beta01] - May 4, 2026

• Remove iosX64 and macosX64 targets. (#3386)
• Increase Android's minimum SDK version to 23. (#3283)
• Add fast WebP size extraction on JS/WASM to avoid falling back to a full Skia decode. (#3341)
• Fix CacheStrategy implementations being unable to refresh cached failure responses (e.g. expired cached 404 responses). (#3401)
• Update compile SDK to 36.
• Update Kotlin to 2.3.21.
• Update Compose to 1.11.0-beta03.
• Update Okio to 3.17.0.
• Update Skiko to 0.144.5.
• Update androidx.annotation to 1.10.0.

Commits

• ce5df14 Prepare version 3.5.0.
• 256c59a Update copyright headers to 2026. (#3444)
• 82105de chore(deps): update plugin poko to v0.23.1 (#3442)
• 45a5f5b Handle iOS insets for Compose sample (#3441)
• adaa208 Stabilize ImageLoader.Builder.memoryCacheMaxSizePercentWhileInBackground and ...
• 282986b chore(deps): update plugin poko to v0.23.0 (#3440)
• 619ea72 fix(deps): update kotlin monorepo to v2.4.0 (#3437)
• 47a1dc4 fix(deps): update jetbrains.compose to v1.11.1 (#3435)
• 8dbfad4 fix(deps): update dependency org.jetbrains.kotlinx:atomicfu-gradle-plugin to ...
• 86e70e1 chore(deps): update plugin spotless to v8.6.0 (#3432)
• Additional commits viewable in compare view

Updates io.coil-kt.coil3:coil-gif from 3.4.0 to 3.5.0

Release notes

Sourced from io.coil-kt.coil3:coil-gif's releases.

3.5.0

See CHANGELOG.md.

3.5.0-beta01

See CHANGELOG.md.

Changelog

Sourced from io.coil-kt.coil3:coil-gif's changelog.

[3.5.0] - June 10, 2026

Changes since 3.4.0:

• Important: Remove iosX64 and macosX64 targets. (#3386)
• Important: Increase Android's minimum SDK version to 23. (#3283)
• New: Add fast WebP size extraction on JS/WASM to avoid falling back to a full Skia decode. (#3341)
• Remove experimental annotation from ImageLoader.Builder.memoryCacheMaxSizePercentWhileInBackground. (#3439)
• Fix CacheStrategy implementations being unable to refresh cached failure responses (e.g. expired cached 404 responses). (#3401)
• Look up ContinuationInterceptor instead of CoroutineDispatcher in coroutine contexts. (#3415)
• Update the Android compile SDK to 36.
• Update the Kotlin language version to 2.2.
• Update Kotlin to 2.4.0.
• Update Compose to 1.11.1.
• Update Okio to 3.17.0.
• Update Skiko to 0.144.6.
• Update androidx.annotation to 1.10.0.

Changes since 3.5.0-beta01:

• Remove experimental annotation from ImageLoader.Builder.memoryCacheMaxSizePercentWhileInBackground. (#3439)
• Look up ContinuationInterceptor instead of CoroutineDispatcher in coroutine contexts. (#3415)
• Update the Kotlin language version to 2.2.
• Update Kotlin to 2.4.0.
• Update Compose to 1.11.1.
• Update Skiko to 0.144.6.

[3.5.0-beta01] - May 4, 2026

• Remove iosX64 and macosX64 targets. (#3386)
• Increase Android's minimum SDK version to 23. (#3283)
• Add fast WebP size extraction on JS/WASM to avoid falling back to a full Skia decode. (#3341)
• Fix CacheStrategy implementations being unable to refresh cached failure responses (e.g. expired cached 404 responses). (#3401)
• Update compile SDK to 36.
• Update Kotlin to 2.3.21.
• Update Compose to 1.11.0-beta03.
• Update Okio to 3.17.0.
• Update Skiko to 0.144.5.
• Update androidx.annotation to 1.10.0.

Commits

• ce5df14 Prepare version 3.5.0.
• 256c59a Update copyright headers to 2026. (#3444)
• 82105de chore(deps): update plugin poko to v0.23.1 (#3442)
• 45a5f5b Handle iOS insets for Compose sample (#3441)
• adaa208 Stabilize ImageLoader.Builder.memoryCacheMaxSizePercentWhileInBackground and ...
• 282986b chore(deps): update plugin poko to v0.23.0 (#3440)
• 619ea72 fix(deps): update kotlin monorepo to v2.4.0 (#3437)
• 47a1dc4 fix(deps): update jetbrains.compose to v1.11.1 (#3435)
• 8dbfad4 fix(deps): update dependency org.jetbrains.kotlinx:atomicfu-gradle-plugin to ...
• 86e70e1 chore(deps): update plugin spotless to v8.6.0 (#3432)
• Additional commits viewable in compare view

Updates com.google.crypto.tink:tink-android from 1.21.0 to 1.22.0

Release notes

Sourced from com.google.crypto.tink:tink-android's releases.

Tink Java v1.22.0

Tink is a multi-language, cross-platform library that provides simple and misuse-proof APIs for common cryptographic tasks.

This is Tink Java 1.22.0

The complete list of changes since 1.21.0 can be found here.

• In MutableKeyDerivationRegistry, key derivation no longer occurs within a synchronized block.
• Maven signatures are now more usual ASCII-armored GPG signatures instead of binary signatures.
• Added predefined signature parameters for SLH-DSA.
• Added support for ML-DSA-44 signature primitive and PEM import.
• Added SignatureJwkSetConverter, which is a utility library that converts signature public keys from and to a JWK set.
• Tink now correctly contains class files which target Java Version 11 (major version 55). Tink requires Java 11 since Tink 1.19: https://github.com/tink-crypto/tink-java/releases/tag/v1.19.0. See also tink-crypto/tink-java#68.
• Stop running tests on API 23, in preparation for increasing Tink's minSdkVersion to 24 in line with androidx. See https://issuetracker.google.com/issues/474169350
• Added more no-prefix variants to predefined MAC and Signature parameters.

Maven:

<dependency>
    <groupId>com.google.crypto.tink</groupId>
    <artifactId>tink</artifactId>
    <version>1.22.0</version>
</dependency>

Gradle:

dependencies {
  implementation 'com.google.crypto.tink:tink-android:1.22.0'
}

Bazel:

Using bzlmod

bazel_dep(name = "tink_java")
git_override(

module_name = "tink_java",

remote = "https://github.com/tink-crypto/tink-java",

tag = "v1.22.0",

)

Commits

• 7305a6a Bump tink-java version to 1.22.0
• 148b67b Add XWing HPKE to HpkePrivateKeyManager.
• d574ca6 Change ProtoKeySerializer to take ProtoParametersSerialization instead of Bytes.
• 1b3d38a Change Configuration.get to getOrNull.
• 3313952 Cleanups.
• dcd184e Move the class ProtoParametersSerialization from internal to Tink's public API.
• e77c6ea Use the RegistryConfig instead of MutableSerializationRegistry to parse/seria...
• f778324 Use Parsing with Fallback in the RegistryConfiguration.
• 61a8d22 Also register a parameters serializer for LegacyProtoParameters in the Mutabl...
• 0ed0822 Remove Serialization.java.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions