fix(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
gradle (source)		minor	9.6.1 → 9.7.0
org.jetbrains.kotlin-wrappers:kotlin-js	dependencies	minor	2026.7.7 → 2026.8.3
tools.jackson.module:jackson-module-kotlin	dependencies	patch	3.2.1 → 3.2.2
tools.jackson.core:jackson-databind (source)	dependencies	patch	3.2.1 → 3.2.2
com.fasterxml.jackson.module:jackson-module-kotlin	dependencies	patch	2.22.1 → 2.22.2
com.diffplug.spotless	plugin	minor	8.9.0 → 8.10.0
com.diffplug.spotless:spotless-plugin-gradle	dependencies	minor	8.9.0 → 8.10.0
com.squareup.okhttp3:mockwebserver (source)	dependencies	minor	5.4.0 → 5.5.0
io.ktor:ktor-serialization-kotlinx-json	dependencies	patch	3.5.1 → 3.5.2
io.ktor:ktor-server-resources	dependencies	patch	3.5.1 → 3.5.2
io.ktor:ktor-server-content-negotiation	dependencies	patch	3.5.1 → 3.5.2
io.ktor:ktor-server-core	dependencies	patch	3.5.1 → 3.5.2
io.ktor:ktor-client-mock	dependencies	patch	3.5.1 → 3.5.2
io.ktor:ktor-server-test-host	dependencies	patch	3.5.1 → 3.5.2
io.ktor:ktor-client-core	dependencies	patch	3.5.1 → 3.5.2
com.google.devtools.ksp:symbol-processing-api (source)	dependencies	patch	2.3.10 → 2.3.11
io.kotest:kotest-property	dependencies	patch	6.2.3 → 6.2.4
io.kotest:kotest-assertions-core	dependencies	patch	6.2.3 → 6.2.4
io.github.classgraph:classgraph	dependencies	patch	4.8.186 → 4.8.192

---

Release Notes

gradle/gradle (gradle)

v9.7.0

Compare Source

JetBrains/kotlin-wrappers (org.jetbrains.kotlin-wrappers:kotlin-js)

v2026.8.3

Compare Source

Full Changelog: JetBrains/kotlin-wrappers@2026.8.2...2026.8.3

v2026.8.2

Compare Source

What's Changed

• Add InsetInline and InsetBlock data class and related properties for inset handling by @​CC007 in #​2874

Full Changelog: JetBrains/kotlin-wrappers@2026.8.1...2026.8.2

v2026.8.1

Compare Source

What's Changed

• CSS. Add clip to Overflow enum by @​CC007 in #​2873
• Use JsUnion for external interfaces with companion object by @​alex28sh in #​2872

New Contributors

• @​CC007 made their first contribution in #​2873
• @​alex28sh made their first contribution in #​2872

Full Changelog: JetBrains/kotlin-wrappers@2026.8.0...2026.8.1

v2026.8.0

Compare Source

Full Changelog: JetBrains/kotlin-wrappers@2026.7.7...2026.8.0

lysine-dev/okhttp (com.squareup.okhttp3:mockwebserver)

v5.5.0

2026-08-16

This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature
improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s
Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re
looking at. With ECH, the router observes only the IP address. This additional privacy is most
effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.

This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37,
released June 2026). When other TLS stacks add ECH support, we'll integrate them.

ECH took a lot of work to implement because the encryption keys are published over DNS in the
[HTTPS resource record], and we needed to write new code to fetch these records. This release
includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not
just IP addresses!), asynchronous streaming results, and in-memory caching.

To opt in, you can use DnsOverHttps:

// DnsOverHttps itself uses OkHttpClient. Build both clients upon the
// same bootstrap client so they share a connection pool and dispatcher.
val bootstrapClient = OkHttpClient()

// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.
val client = bootstrapClient.newBuilder()
  .dns(DnsOverHttps.Builder()
    .client(bootstrapClient)
    .url("https://1.1.1.1/dns-query".toHttpUrl())
    .build())
  .build()

You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are
deficient because its DNS queries are not encrypted by default.

// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.
val client = OkHttpClient.Builder()
  .dns(AndroidDns())
  .build()

• New: OkHttp artifacts is now signed with our [new signing key]. This project and three sibling
  projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
• Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
• Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
• Fix: Closing a multipart part's sink no longer closes the entire request body.
• Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts
  weren’t applied correctly.
• Fix: Follow [RFC 1008]'s requirements for HTTP QUERY redirects.
• Fix: Fall back to no proxy when the system proxy selector throws. Previously this would cause
  the HTTP call to crash.
• Upgrade: [Okio 3.18.1][okio_3_18_1].

ktorio/ktor (io.ktor:ktor-serialization-kotlinx-json)

v3.5.2

Compare Source

Published 31 July 2026

Improvements

• KTOR-8032 RateLimit: Allow limit requests based on authentication result
• KTOR-9719 ApplicationCall.isStaticContent returns false when called from plugin interceptors
• KTOR-8450 ContentNegotiation: it doesn't handle content type suffixes
• KTOR-7892 SwaggerUI: Missing oauth2-redirect.html support in the plugin
• KTOR-9759 Reject whitespace in URL hosts during parsing
• KTOR-9681 Update kotlinx-io to 0.9.1
• KTOR-9743 ByteReadChannel.readLineStrict: Misleading definition of limit parameter in KDocs
• KTOR-9504 Improve KDoc for EmbeddedServer.addShutdownHook

Bugfixes

• KTOR-9741 CIO: request-handler coroutine leak on half-closed idle connection after ≥1MB response
• KTOR-7661 Maven + YAML config file does not work
• KTOR-9585 OpenAPI: JsonSchema title is truncated when it contains a dot
• KTOR-9704 UTF-8 encoding in ktor-io bypasses JVM String.getBytes intrinsics, slowing every text response by 5-7x
• KTOR-9588 SSE client (CIO engine) sends spurious Content-Length: 0 on body-less GET (RFC 9110 § 8.6 violation; rejected by AWS ELB)
• KTOR-9679 ByteReadChannel.readLine corrupts multi-byte UTF-8 by splitting a character at a buffer boundary
• KTOR-9767 ByteReadChannel.readLineTo: Return read bytes count instead of decoded characters count
• KTOR-8992 HoconConfigLoader is not loaded when ktor-server-config-yaml on the classpath
• KTOR-9698 OpenAPI: schema for kotlinx.serialization sealed types omits discriminator property in variant schemas
• KTOR-9690 Netty: in-flight requests are aborted on stop(), ignoring shutdown grace period
• KTOR-8903 Netty: Close channel connection on errors properly
• KTOR-9707 SaveBody performance regression
• KTOR-9703 Inefficient text reading function in DefaultTransform
• KTOR-9711 Netty HTTP/2: a single client-canceled stream (RST_STREAM) breaks response flushing for the whole connection
• KTOR-9688 RateLimit: No access to principal when wrapped with authentication since 3.5.1
• KTOR-9677 Auto-reloading: server is reloaded only once since 3.5.0
• KTOR-9683 Sockets: Canceling a SelectorManager job doesn't close it properly
• KTOR-9671 Darwin: Semicolons in URL path are sanitized

google/ksp (com.google.devtools.ksp:symbol-processing-api)

v2.3.11

Compare Source

What's Changed

• Support org.gradle.isolated-projects for project isolation (#​3051)
• Fix premature kspDebugAndroidTest task skipping on Android library modules (#​3050)
• Fix missing parent declaration exception for @NotNull annotations during incremental compilation (#​3030)
• Clean output directories instead of skipping tasks when processor classpath transitions to empty (#​3046)
• Fix build cache misses by marking KspGradleConfig.logLevel as @Internal (#​3039)
• Add org.gradle.isolated-projects=true to KSP Gradle properties reference table (#​3076)
• Add KSP Gradle properties reference table to README documentation (#​3070)
• Document collection values in KSValueArgument.value (#​3069)
• Update error messaging for ksp.useKSP2 deprecation notice (#​3066)

Contributors

• Thanks to @​simonlebras, @​ChristianKatzmann, @​Yong-yuan-X, @​bacecek, @​KlyneChrysler, @​Shaurya2k06, and everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.10...2.3.11

kotest/kotest (io.kotest:kotest-property)

v6.2.4

Compare Source

What's Changed

• Alex/same time offset date time (#​6180) by @​AlexCue987 in #​6181
• Alex/range intersect details (#​6183) by @​AlexCue987 in #​6184
• Force commons-beanutils to 1.11.0 (CVE-2025-48734) by @​sksamuel in #​6187
• Update kotlinx-datetime to 0.8.0 by @​sksamuel in #​6186
• chore: route a few hardcoded dependency/plugin versions through the version catalog by @​stlpine in #​6189
• check gradle wrapper gh action by @​alfonsoristorato in #​6192
• fix(assertions): state the containExactCopies lower bound as at least 1 by @​mvanhorn in #​6193
• General improvements - framework by @​alfonsoristorato in #​6190
• General improvements - IJ plugin by @​alfonsoristorato in #​6191
• fix jump to source by @​alfonsoristorato in #​6195
• Update dependency net.bytebuddy:byte-buddy to v1.18.11 by @​renovate[bot] in #​6202
• Update dependency io.github.classgraph:classgraph to v4.8.186 by @​renovate[bot] in #​6201
• update docs to clarify that copies in shouldContainExactCopies must be 1 or higher by @​alfonsoristorato in #​6207
• spring extension improvements by @​alfonsoristorato in #​6204
• sourceRef improvements by @​alfonsoristorato in #​6203
• introduce a TeamCity renderer that allows tree view and force it for our legacy IJ plugin by @​alfonsoristorato in #​6210
• fix kdoc on StrictThrowableHandling by @​alfonsoristorato in #​6212
• make ai skill available to users via claude marketplace and tie versioning to kotest releases by @​alfonsoristorato in #​6211
• spec tags cache by @​alfonsoristorato in #​6206
• junit testFinished improvements by @​alfonsoristorato in #​6205
• Add module-factory support to KoinExtension (#​6006) by @​sksamuel in #​6138

New Contributors

• @​stlpine made their first contribution in #​6189

Full Changelog: kotest/kotest@6.2.3...v6.2.4

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Kover Report

Total Project Coverage	48.29%