Skip to content

fix(ci): unblock dependabot dependency bump (AGP 9.3.1, androidx.core 1.19.0, protobuf-javalite 4.35.1) - #78

Draft
anchildress1 with Copilot wants to merge 3 commits into
mainfrom
copilot/dependabot-fix-ci-failures
Draft

fix(ci): unblock dependabot dependency bump (AGP 9.3.1, androidx.core 1.19.0, protobuf-javalite 4.35.1)#78
anchildress1 with Copilot wants to merge 3 commits into
mainfrom
copilot/dependabot-fix-ci-failures

Conversation

Copilot AI commented Aug 14, 2026

Copy link
Copy Markdown
Contributor

Fixes CI failures introduced by Dependabot's 17-package group bump (PR for dependabot/gradle/pkg-0f818163c8, commit 142c467). Stacked directly on top of that dependabot commit.

Root causes and fixes:

  1. gradle/verification-metadata.xml was missing checksums for all 17 bumped dependencies (including the AGP 9.3.1 plugin itself), causing Gradle's dependency verification to fail plugin resolution and break the Lint job. Regenerated via ./gradlew --write-verification-metadata sha256,sha512 across the full task graph (help, lintDebug, assembleDebug, verifyNoTelemetry, unit tests, koverVerify).
  2. androidx.core bumped to 1.19.0, which requires compileSdk 37+. Bumped compileSdk from 36 to 37 in app, core-storage, core-inference.
  3. protobuf-javalite bumped to 4.35.1, introducing a new annotation class (Internal$ProtoMethodMayReturnNull) that R8 warns about during release minification (hit by the verifyNoTelemetry task, which builds the release variant). Added a -dontwarn rule matching the existing pattern for sibling protobuf annotation classes.
  4. Robolectric 4.16.1 (currently pinned) tops out at SDK 36; SDK 37 support only lands in 4.17-beta-1. Since compileSdk 37 was now required, unit tests in core-storage/core-inference started failing with targetSdkVersion=37 > maxSdkVersion=36. Pinned testOptions.targetSdk = 36 in both modules so tests keep targeting a supported Robolectric SDK, independent of compileSdk.
  5. Fixed a stale gradle = "9.5.1" entry in gradle/libs.versions.toml to match the actual wrapper distribution (9.7.0).

Verification (local):

  • :app:lintDebug — passes (was failing with dependency verification error)
  • :app:assembleDebug — passes
  • verifyNoTelemetry (release R8 build) — passes (was failing on missing protobuf class)
  • Full unit test suite (core-model:test, core-inference/core-storage/app:testDebugUnitTest, app:testDebugIntegrationTest) + koverXmlReport/koverVerify — all pass (was failing on Robolectric SDK mismatch)
  • ktlint and detekt — unaffected, still pass

dependabot Bot and others added 3 commits August 13, 2026 11:01
Bumps the pkg group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [gradle-wrapper](https://github.com/gradle/gradle) | `9.5.1` | `9.7.0` |
| androidx.core:core-ktx | `1.18.0` | `1.19.0` |
| com.google.protobuf:protobuf-javalite | `4.34.1` | `4.35.1` |
| [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.3` |
| [org.junit.jupiter:junit-jupiter-engine](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.3` |
| [org.junit.vintage:junit-vintage-engine](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.3` |
| [org.junit.platform:junit-platform-launcher](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.3` |
| [io.mockk:mockk](https://github.com/mockk/mockk) | `1.14.9` | `1.14.11` |
| [org.jetbrains.kotlinx:kotlinx-collections-immutable](https://github.com/Kotlin/kotlinx.collections.immutable) | `0.3.7` | `0.5.1` |
| [org.json:json](https://github.com/douglascrockford/JSON-java) | `20251224` | `20260719` |
| com.android.application | `9.2.1` | `9.3.1` |
| com.android.library | `9.2.1` | `9.3.1` |
| com.android.legacy-kapt | `9.2.1` | `9.3.1` |
| [org.jetbrains.kotlin.jvm](https://github.com/JetBrains/kotlin) | `2.3.21` | `2.4.10` |
| [org.jetbrains.kotlin.plugin.compose](https://github.com/JetBrains/kotlin) | `2.3.21` | `2.4.10` |
| [org.jetbrains.kotlinx.kover](https://github.com/Kotlin/kotlinx-kover) | `0.9.8` | `0.9.9` |
| org.sonarqube | `7.3.0.8198` | `7.4.0.8496` |



Updates `gradle-wrapper` from 9.5.1 to 9.7.0
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.5.1...v9.7.0)

Updates `androidx.core:core-ktx` from 1.18.0 to 1.19.0

Updates `com.google.protobuf:protobuf-javalite` from 4.34.1 to 4.35.1

Updates `org.junit.jupiter:junit-jupiter-api` from 6.0.3 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.3...r6.1.3)

Updates `org.junit.jupiter:junit-jupiter-engine` from 6.0.3 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.3...r6.1.3)

Updates `org.junit.vintage:junit-vintage-engine` from 6.0.3 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.3...r6.1.3)

Updates `org.junit.jupiter:junit-jupiter-engine` from 6.0.3 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.3...r6.1.3)

Updates `org.junit.platform:junit-platform-launcher` from 6.0.3 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.3...r6.1.3)

Updates `org.junit.vintage:junit-vintage-engine` from 6.0.3 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.3...r6.1.3)

Updates `io.mockk:mockk` from 1.14.9 to 1.14.11
- [Release notes](https://github.com/mockk/mockk/releases)
- [Commits](mockk/mockk@1.14.9...v1.14.11)

Updates `org.jetbrains.kotlinx:kotlinx-collections-immutable` from 0.3.7 to 0.5.1
- [Release notes](https://github.com/Kotlin/kotlinx.collections.immutable/releases)
- [Changelog](https://github.com/Kotlin/kotlinx.collections.immutable/blob/master/CHANGELOG.md)
- [Commits](Kotlin/kotlinx.collections.immutable@v0.3.7...v0.5.1)

Updates `org.json:json` from 20251224 to 20260719
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](stleary/JSON-java@2025122...2026071)

Updates `com.android.application` from 9.2.1 to 9.3.1

Updates `com.android.library` from 9.2.1 to 9.3.1

Updates `com.android.legacy-kapt` from 9.2.1 to 9.3.1

Updates `com.android.library` from 9.2.1 to 9.3.1

Updates `org.jetbrains.kotlin.jvm` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `org.jetbrains.kotlin.plugin.compose` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `org.jetbrains.kotlin.plugin.compose` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `com.android.legacy-kapt` from 9.2.1 to 9.3.1

Updates `org.jetbrains.kotlinx.kover` from 0.9.8 to 0.9.9
- [Release notes](https://github.com/Kotlin/kotlinx-kover/releases)
- [Changelog](https://github.com/Kotlin/kotlinx-kover/blob/main/CHANGELOG.md)
- [Commits](Kotlin/kotlinx-kover@v0.9.8...v0.9.9)

Updates `org.sonarqube` from 7.3.0.8198 to 7.4.0.8496

---
updated-dependencies:
- dependency-name: gradle-wrapper
  dependency-version: 9.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
- dependency-name: androidx.core:core-ktx
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
- dependency-name: com.google.protobuf:protobuf-javalite
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
- dependency-name: org.junit.jupiter:junit-jupiter-api
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
- dependency-name: org.junit.jupiter:junit-jupiter-engine
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
- dependency-name: org.junit.vintage:junit-vintage-engine
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
- dependency-name: org.junit.jupiter:junit-jupiter-engine
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
- dependency-name: org.junit.platform:junit-platform-launcher
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
- dependency-name: org.junit.vintage:junit-vintage-engine
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
- dependency-name: io.mockk:mockk
  dependency-version: 1.14.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pkg
- dependency-name: org.jetbrains.kotlinx:kotlinx-collections-immutable
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
- dependency-name: org.json:json
  dependency-version: '20260719'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pkg
- dependency-name: com.android.application
  dependency-version: 9.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
- dependency-name: com.android.library
  dependency-version: 9.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
- dependency-name: com.android.legacy-kapt
  dependency-version: 9.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
- dependency-name: com.android.library
  dependency-version: 9.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
- dependency-name: org.jetbrains.kotlin.jvm
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
- dependency-name: org.jetbrains.kotlin.plugin.compose
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
- dependency-name: org.jetbrains.kotlin.plugin.compose
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
- dependency-name: com.android.legacy-kapt
  dependency-version: 9.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
- dependency-name: org.jetbrains.kotlinx.kover
  dependency-version: 0.9.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pkg
- dependency-name: org.sonarqube
  dependency-version: 7.4.0.8496
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pkg
...

Signed-off-by: dependabot[bot] <support@github.com>
… 1.19.0, protobuf-javalite 4.35.1)

Co-authored-by: anchildress1 <6563688+anchildress1@users.noreply.github.com>
Co-authored-by: anchildress1 <6563688+anchildress1@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants