Skip to content

Bump com.facebook.android:facebook-android-sdk from 4.2.0 to 18.2.3 in /Android#6

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/Android/com.facebook.android-facebook-android-sdk-18.2.3
Open

Bump com.facebook.android:facebook-android-sdk from 4.2.0 to 18.2.3 in /Android#6
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/Android/com.facebook.android-facebook-android-sdk-18.2.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 25, 2026

Copy link
Copy Markdown
Contributor

Bumps com.facebook.android:facebook-android-sdk from 4.2.0 to 18.2.3.

Release notes

Sourced from com.facebook.android:facebook-android-sdk's releases.

sdk-version-18.2.3

Changelog

sdk-version-18.1.3

Changelog

sdk-version-18.0.3

Changelog

sdk-version-18.0.2

Changelog

sdk-version-18.0.1

Changelog

sdk-version-18.0.0

Changelog

sdk-version-17.0.2

Changelog

sdk-version-17.0.1

Changelog

sdk-version-17.0.0

Changelog

sdk-version-16.0.0

Changelog

Facebook SDK sdk-version-15.2.0

sdk-version-15.2.0

Consult Changelog

Facebook SDK sdk-version-15.1.0

sdk-version-15.1.0

Consult Changelog

Facebook SDK sdk-version-15.0.2

sdk-version-15.0.2

Consult Changelog

Facebook SDK sdk-version-15.0.1

sdk-version-15.0.1

Consult Changelog

... (truncated)

Changelog

Sourced from com.facebook.android:facebook-android-sdk's changelog.

[18.2.3]

Added

  • Added redirect_uri support for secure login flows across WebView, CustomTab, and native app (Katana) handlers
  • Added intent_uri_package_target parameter support for CustomTab and Katana login flows
  • Added protected data metadata flag for Integrity
  • Added banned params manager to send banned param names for Integrity
  • Added referrer for Deep Link requests
  • Added Build.VERSION.SDK_INT check before using AdServices APIs

Fixed

  • Fixed ConcurrentModificationException in FetchedAppGateKeepersManager
  • Avoided Kotlin reflection during FetchedAppGateKeepersManager static init
  • Fixed AtomicBoolean misuse in AttributionIdentifiers
  • Fixed identity comparison in ImageDownloader RequestKey.equals
  • Fixed logic bug in FileLruCache content tag check
  • Fixed thread safety by adding @​Volatile to shared mutable fields across multiple classes
  • Fixed variable shadowing in LegacyTokenHelper and Utility
  • Fixed CustomRedirectWebDialog WebView sizing regression
  • Fixed token refresh to execute requests individually for Gaming Graph tokens
  • Only warn about missing FacebookActivity when facebook-common is present

Changed

  • Updated to Gradle 8.5
  • Updated install-referrer dependency
  • Replaced deprecated CookieSyncManager and removeExpiredCookie usage
  • Replaced deprecated BigDecimal.ROUND_HALF_UP with RoundingMode.HALF_UP
  • Replaced java.util.Random with SecureRandom for security compliance
  • Removed SSL bypass flag code path in WebDialog
  • Stopped persisting Access Token with Events
  • Used debug-gated logd() instead of Log.d() in catch block logging
  • Improved resource management with Kotlin .use{} for I/O operations
  • Added logging to previously empty catch blocks

[18.1.3]

Added

  • Added the support for external ID

[18.0.3]

Changed

  • Modified how we pass the content id of purchases in custom events

Added

  • Added permissions ACCESS_ADSERVICES_TOPICS to access Google Privacy Sandbox AdServices API. If you need to disable any of the permissions, please include the tools:node="remove" node marker for the particular permissions.

[18.0.2]

Changed

  • Upgraded a variety of dependencies including Kotlin, Gradle, and the Android Gradle Plugin

Added

... (truncated)

Commits
  • 1a089fe Fix NoClassDefFoundError for OutcomeReceiver in GpsAraTriggersManager
  • 3f93d9a Re-sync with internal repository
  • 3706323 Version Bump + Change Log
  • 3d3bc11 Update changelog after 18.1.3
  • f5ee695 Avoid Kotlin reflection during FetchedAppGateKeepersManager static init
  • 3f82851 Execute token refresh requests individually for Gaming Graph tokens
  • 72abce0 Add Build.VERSION.SDK_INT check before using AdServices APIs
  • a9a3d60 Use debug-gated logd() instead of Log.d() in catch block logging
  • a802ec5 Remove SSL bypass flag code path in WebDialog
  • afdf847 Fix KotlinSampleApp compileSdk and buildTools to use version catalog
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.facebook.android:facebook-android-sdk](https://github.com/facebook/facebook-android-sdk) from 4.2.0 to 18.2.3.
- [Release notes](https://github.com/facebook/facebook-android-sdk/releases)
- [Changelog](https://github.com/facebook/facebook-android-sdk/blob/main/CHANGELOG.md)
- [Commits](facebook/facebook-android-sdk@sdk-version-4.2.0...sdk-version-18.2.3)

---
updated-dependencies:
- dependency-name: com.facebook.android:facebook-android-sdk
  dependency-version: 18.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Apr 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants