Skip to content

Validate November build and runtime dependency updates - #127

Merged
silverpoetry merged 14 commits into
mainfrom
codex/dependencies-20261108
Nov 8, 2026
Merged

silverpoetry merged 14 commits into
mainfrom
codex/dependencies-20261108

Conversation

@silverpoetry

@silverpoetry silverpoetry commented Nov 8, 2026 •

Copy link
Copy Markdown
Owner

范围

将 #116–#121 的原始 Dependabot 提交合并到独立分支验证,不包含 Android 15 诊断、SWARMOO 或 Sennheiser 维护代码。基线为已合入 OnePlus / FloS2 的 main 9e8e4f2。

依赖 旧版 新版
setup-java 6.0.1 6.1.0
Kotlin 2.4.20 2.4.21
AGP 9.4.1 9.5.0
Kotlin serialization 1.11.0 1.12.0
AndroidX Core 1.19.0 1.19.1
Gradle 9.6.0 9.8.2

核对

  • AGP 9.5.0 官方要求 Gradle ≥9.6、JDK 17,支持 SDK 37;当前组合满足,未修改应用最低系统版本。
  • serialization 1.12.0 基于 Kotlin 2.4.10,重点回归既有请求/状态 JSON 封装及异常输入拒绝。
  • Wrapper JAR SHA-256 与 Gradle 官方 3b8a25775a69158b5ad2b1d17a80a88dc7b40a352a73eb27d06c612a7ce68e98 一致。
  • Windows 脚本与 v9.8.2 官方脚本比对,除项目原有 JVM 默认参数未额外加编码外,内容一致;新版迁移安全段和退出逻辑来自上游。发行包校验值已固定。

验证

  • Windows 11 / JDK 21:Wrapper 9.8.2 启动及请求、状态序列化定向回归通过。
  • Linux / JDK 17:组合 CI的全部单元测试、协议测试 App、Release Lint 与构建通过。
  • 最终提交 fdaec34e715b411aa686555a27b9221a9e88b83e:官方签名构建通过;下载验证 APK。
  • Wrapper 下载曾在远端网络阶段超时;超时改为有界 60 秒后,重跑成功。Windows 脚本按仓库属性规范化换行,语义不变。

验证已完成,可作为独立依赖更新合入;原六个 Dependabot 提交完整保留。

参考:AGP 9.5、Gradle 9.8.2、serialization 1.12。

dependabot Bot and others added 14 commits November 1, 2026 15:17
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 6.0.1 to 6.1.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@v6.0.1...v6.1.0)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps `kotlin` from 2.4.20 to 2.4.21.

Updates `org.jetbrains.kotlin.plugin.compose` from 2.4.20 to 2.4.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.4.20...v2.4.21)

Updates `org.jetbrains.kotlin.plugin.serialization` from 2.4.20 to 2.4.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.4.20...v2.4.21)

---
updated-dependencies:
- dependency-name: org.jetbrains.kotlin.plugin.compose
  dependency-version: 2.4.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.jetbrains.kotlin.plugin.serialization
  dependency-version: 2.4.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps `agp` from 9.4.1 to 9.5.0.

Updates `com.android.application` from 9.4.1 to 9.5.0

Updates `com.android.library` from 9.4.1 to 9.5.0

---
updated-dependencies:
- dependency-name: com.android.application
  dependency-version: 9.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: com.android.library
  dependency-version: 9.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [org.jetbrains.kotlinx:kotlinx-serialization-json](https://github.com/Kotlin/kotlinx.serialization) from 1.11.0 to 1.12.0.
- [Release notes](https://github.com/Kotlin/kotlinx.serialization/releases)
- [Changelog](https://github.com/Kotlin/kotlinx.serialization/blob/master/CHANGELOG.md)
- [Commits](Kotlin/kotlinx.serialization@v1.11.0...v1.12.0)

---
updated-dependencies:
- dependency-name: org.jetbrains.kotlinx:kotlinx-serialization-json
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps androidx.core:core-ktx from 1.19.0 to 1.19.1.

---
updated-dependencies:
- dependency-name: androidx.core:core-ktx
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [gradle-wrapper](https://github.com/gradle/gradle) from 9.6.0 to 9.8.2.
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.6.0...v9.8.2)

---
updated-dependencies:
- dependency-name: gradle-wrapper
  dependency-version: 9.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@silverpoetry
silverpoetry marked this pull request as ready for review November 8, 2026 12:17
Copilot AI balanced review requested due to automatic review settings November 8, 2026 12:17
@silverpoetry
silverpoetry merged commit fabd125 into main Nov 8, 2026
2 of 3 checks passed

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota. Try requesting a review at a lower effort level.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants