Update Samples dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
gradle (source)		minor	8.13 -> 8.14.2
io.grpc:grpc-netty	dependencies	minor	1.71.0 -> 1.73.0
org.jetbrains.kotlinx:kotlinx-rpc-grpc-core	dependencies	minor	0.5.1-grpc-39 -> 0.7.0-grpc-56
org.jetbrains.kotlinx:kotlinx-serialization-core	dependencies	minor	1.8.1 -> 1.9.0
org.jetbrains.kotlinx:kotlinx-serialization-json	dependencies	minor	1.8.1 -> 1.9.0
io.ktor.plugin	plugin	minor	3.1.2 -> 3.2.0
io.ktor:ktor-client-js	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-client-cio	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-client-websockets	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-client-core	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-server-test-host	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-server-host-common-jvm	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-server-websockets-jvm	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-server-cors-jvm	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-server-netty-jvm	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-server-core-jvm	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-serialization-kotlinx-json	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-client-serialization	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-client-content-negotiation	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-client-okhttp	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-client-websockets-js	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-server-cio	dependencies	minor	3.1.2 -> 3.2.0
org.jetbrains.compose	plugin	patch	1.8.0-SNAPSHOT+pull-5245 -> 1.8.2
androidx.compose.ui:ui-tooling-preview (source)	dependencies	minor	1.7.8 -> 1.8.3
androidx.compose.ui:ui-tooling (source)	dependencies	minor	1.7.8 -> 1.8.3
androidx.compose:compose-bom	dependencies	minor	2025.04.00 -> 2025.06.01
org.jetbrains.kotlinx.rpc.plugin	plugin	minor	0.6.0 -> 0.7.0
androidx.compose.foundation:foundation (source)	dependencies	minor	1.7.8 -> 1.8.3
androidx.compose.ui:ui-test-junit4 (source)	dependencies	minor	1.7.8 -> 1.8.3
androidx.compose.ui:ui-test-manifest (source)	dependencies	minor	1.7.8 -> 1.8.3
androidx.compose.ui:ui-graphics (source)	dependencies	minor	1.7.8 -> 1.8.3
androidx.compose.ui:ui (source)	dependencies	minor	1.7.8 -> 1.8.3
androidx.appcompat:appcompat (source)	dependencies	patch	1.7.0 -> 1.7.1
org.jetbrains.kotlin-wrappers:kotlin-wrappers-bom	dependencies	minor	2025.4.8 -> 2025.6.14
com.android.library (source)	plugin	minor	8.9.1 -> 8.11.0
com.android.application (source)	plugin	minor	8.9.1 -> 8.11.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

gradle/gradle (gradle)

v8.14.2

Compare Source

v8.14.1

Compare Source

v8.14

Compare Source

grpc/grpc-java (io.grpc:grpc-netty)

v1.73.0

API Changes

xds: Enable least request by default (#​12062)
core: Delete the long-deprecated GRPC_PROXY_EXP env variable (#​11988) (908f9f1). This was experimental and has been warning when used since v1.8.0. Use the Java-standard -Dhttps.proxyHost and -Dhttps.proxyPort instead
api: Remove deprecated SubchannelPicker.requestConnection() (f79ab2f). This API was replaced by LoadBalancer.requestConnection() in v1.22.0

Bug Fixes

config: prevents global stats config freeze in ConfiguratorRegistry.getConfigurators() (#​11991) (d4c46a7)
xds: XdsDepManager should ignore updates after shutdown (25199e9). This fixes a source of java.lang.NullPointerException: Cannot invoke "io.grpc.xds.XdsDependencyManager$RdsUpdateSupplier.getRdsUpdate()" because "routeSource" is null regression introduced in v1.72.0

Improvements

xds: listener type validation (#​11933) (c8d1e6e)
xds: add the missing xds.authority metric defined in gRFC A78 (#​12018) (6cd007d)

New Features

xds: float LRU cache across interceptors (#​11992) (7a08fdb)
xds: propagate audience from cluster resource in gcp auth filter. This completes the gRFC A83, implementation of GCP Authentication Filter. (#​11972) (84c7713)
opentelemetry: Implement grpc.lb.backend_service optional label (9619453). This completes the gRFC A89 implementation, which is enabled when requesting the new label

Documentation

api: Remove mention of "epoch" from Ticker.nanoTime() javadocs (84bd014)

v1.72.0

API Changes

• util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be3). It is rarely used outside of gRPC itself. The configuration is passed as lb policy configuration instead
• xds: Add support for custom per-target credentials on the transport (#​11951) (1958e42)
• xds: Explicitly set request hash key for the ring hash LB policy (892144d)

Bug Fixes

• core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819a)
• xds: Fix cluster selection races when updating config selector (d82613a)
• otel: Fix span names as per the A72 gRFC changes (#​11974) (94f8e93)
• xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#​11997) (8681786)

Improvements

• netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a)
• servlet: Set an explicit description for CANCELLED status (#​11927) (fca1d3c)
• xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c197). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition
• core: Log any exception during channel panic because of exception (3961a92). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the exception that caused the channel panic is the important one, and RPCs will still fail with its details
• util: Graceful switch to new LB when leaving CONNECTING (2e260a4). Previously when using xDS and the configuration changes the LB policy, the old LB policy is used until the new one is READY. Now the old LB policy is used until the new policy becomes READY, TRANSIENT_FAILURE, or IDLE
• core: Use java.time.Time.getNano directly in InstantTimeProvider. Previously reflection was used which would confuse R8 full mode (#​11977) (7507a9e)
• core: Avoid cancellation exceptions when notifying watchers that already have their connections cancelled (#​11934) (350f90e)
• rls: allow maxAge in RLS config to exceed 5 minutes if staleAge is set. Previously, the limit was 5 minutes, which isn't enough for some gRPC clients (#​11931) (c340f4a)
• xds: avoid unnecessary dns lookup for CIDR addresses (#​11932) (602aece)
• netty: Swap to UniformStreamByteDistributor (#​11954) (2f52a00). gRPC will no longer observe the HTTP/2 priorities, which were not used directly by gRPC and deprecated in RFC 9113
• core: Avoid Set.removeAll() when passing a possibly-large List (#​11994) (666136b)
• stub: trailersFromThrowable() metadata should be copied (#​11979) (a6e1c1f)

New Features

• xds: xDS-based HTTP CONNECT configuration (#​11861) (1219706)
• netty: Per-rpc authority verification against peer cert subject names. Overriding transport authority at rpc time is only allowed when using TlsChannelCredentials. The per-rpc authority verification feature is guarded by the environment variable GRPC_ENABLE_PER_RPC_AUTHORITY_CHECK in this release. When this is false or not set, the rpc will not fail when the authority verification fails but a warning will be logged. In a subsequent release the usage of this environment variable will be removed and RPCs will start failing if the authority doesn't match the peer certificate names. The environment variable is temporary; if you are depending on the existing insecure behavior, please file an issue (#​11724) (cdab410)

Thanks to

@​panchenko
@​emmanuel-ferdman
@​JoeCqupt

Kotlin/kotlinx.serialization (org.jetbrains.kotlinx:kotlinx-serialization-core)

v1.9.0

==================

This release updates Kotlin version to 2.2.0, includes several bugfixes and provides serializers for kotlin.time.Instant.

Add kotlin.time.Instant serializers

Instant class was moved from kotlinx-datetime library to Kotlin standard library.
As a result, kotlinx-datetime 0.7.0 no longer has serializers for the Instant class.
To use new kotlin.time.Instant class in your @​Serializable classes,
you can use this 1.9.0 kotlinx-serialization version (Kotlin 2.2 is required).
You can choose between default InstantSerializer which uses its string representation,
or specify InstantComponentSerializer that represents instant as its components.
See details in the PR.

Other bugfixes

• Fix resize in JsonPath (#​2995)
• Fixed proguard rules for obfuscation to work correctly (#​2983)

ktorio/ktor (io.ktor:ktor-client-js)

v3.2.0

Published 12 June 2025

Features

• Dependency injection Ktor extension (KTOR-8267)
• Support Version Catalog (KTOR-8162)
• Unix domain socket support at the Ktor Engine level (KTOR-4766)
• Allow suspend Ktor modules (KTOR-8005)
• Ability to use browser cookie storage (KTOR-539)
• Configuration file deserialization (KTOR-7874)
• HttpCache: Support evicting/clearing cache (KTOR-6653)
• File configuration for dependencies (KTOR-8304)

Improvements

• Excessive allocation of ApplicationConfig when loading multiple files from CLI (KTOR-8563)
• Linux curl engine doesn't work for simultaneous websocket and http request (KTOR-8259)
• ktor-network produces ProGuard warning (KTOR-8525)
• More overloads for StringValuesBuilder.appendAll (KTOR-8573)
• HttpClientCall: Deprecate wrapWithContent and wrap (KTOR-8378)
• Add a way to create an ApplicationCall for testing (KTOR-7607)
• Configuration access API improvements (KTOR-8185)
• Application instance access in testApplication (KTOR-8215)
• The TestApplication client should be configurable and mutable (KTOR-8465)
• Support accessing resolved IP address on an instance of io.ktor.network.sockets.InetSocketAddress (KTOR-8490)
• Deprecate SaveBodyPlugin in favor of HttpClientCall.save (KTOR-8367)
• Obscure log message on server startup (KTOR-8519)
• Routing: accept should return 406 if the Accept header isn't matched (KTOR-8416)
• MicrometerMetrics: the route label can exceed length limit (KTOR-7274)
• Micrometer: Make route label configurable (KTOR-8183)
• Add more common ContentType values (KTOR-7108)

Bugfixes

• Logging/Darwin: IOException is thrown when detecting if body is a binary (KTOR-8581)
• Netty: NoSuchElementException or empty headers when responding with 204 (KTOR-8528)
• YAML configuration: NoSuchElementException when parameter is expanded with curly braces (KTOR-8575)
• ApplicationConfig: Most of the content is absent after merging configs (KTOR-8565)
• Android: "ProtocolException: TRACE does not support writing" when sending TRACE request (KTOR-8352)
• The "Content-Length: 0" header is added for GET requests sent to some servers (KTOR-6508)
• HttpRequestRetry: requests with some IOException's thrown by Java engine aren't retried (KTOR-6770)
• HttpCookies: Encoding of request cookies is not preserved in CookiesStorage (KTOR-8343)
• Url class mangles data URLs (KTOR-5708)
• SaveBodyPlugin: Logging plugin consumes response body (KTOR-6474)
• Config deserialization does not respect testApplication environment (KTOR-8436)
• Resources: Exclude a parent from query params when it is an object (KTOR-8507)
• BearerAuthProvider does not clear token if refreshTokens returns null (KTOR-8470)
• Coroutines launched from RoutingContext are not cancelled upon server shutdown (KTOR-8338)
• Application job is not joined during shutdown (KTOR-8291)
• HttpCache: InvalidCacheStateException thrown when Vary header has different entries is overly severe (KTOR-8345)
• Fix socket channel close handling (KTOR-8201)

v3.1.3

Published 5 May 2025

Improvements

• Implement toString for staticContentRoute (KTOR-8451)
• Don't send Authorization header for requests marked with markAsRefreshTokenRequest (KTOR-8107)
• ByteChannel single-byte operations are slow (KTOR-8412)
• Receiving multipart without Content-Length is very slow (KTOR-8407)
• MicrometerMetrics: different path 404s requests can be abused to trigger OOM (KTOR-8276)
• Compression & Static Content: No Vary Header when serving a compressed resource (KTOR-8326)
• HttpTimeout: Reference to nonexistent INFINITE_TIMEOUT_MS in the exception message (KTOR-8358)

Bugfixes

• Websockets: Unable to send a frame when ktor-serialization-kotlinx-json-jvm dependency is defined in Maven build (KTOR-7662)
• OkHttp: Cancelling of SSE request job doesn't cancel the connection (KTOR-8409)
• OkHttp: Exceptions are not propagated to flow collectors (KTOR-7947)
• OOM in CountedByteReadChannel while copying from multipart/form-data part channel (KTOR-8317)
• Apache5: "ProtocolException: OPTIONS request must have Content-Type header" is thrown when body isn't set (KTOR-8318)
• Netty/Websockets: server processes hanging in CLOSE_WAIT state after many concurrent requests (KTOR-7965)
• Update JTE to the version supporting Kotlin 2.1.0 (KTOR-8030)

JetBrains/compose-jb (org.jetbrains.compose)

v1.8.2

Changes since 1.8.1

Fixes

Multiple Platforms

• Fixed TextField(TextFieldValue) when used with a visual transformation with a non-identity offset mapping (potentially even crashing) #​2130

• Fixed a memory leak and performance degradation when ComposeUiFlags.isRectTrackingEnabled set to true (by default) #​2123

• Fixed caret placement near glyphs if glyphs are compound symbols and part of them are non-spacing marks #​2155

• Support Preview parameters for Previews in common source sets in IJ and AS. Note: IDEs also need to implement support on their end. Please check the respective IDE release notes to confirm this is supported #​5323

  Example usage:

  import androidx.compose.runtime.Composable
  import org.jetbrains.compose.ui.tooling.preview.Preview
  import org.jetbrains.compose.ui.tooling.preview.PreviewParameter
  import org.jetbrains.compose.ui.tooling.preview.PreviewParameterProvider
  
  class MyPreviewParameterProvider : PreviewParameterProvider<String> {
    override val values = sequenceOf("Hello, Compose!", "Hello, World!")
  }
  
  /**
   * This function will generate two preview images with different texts.
   */
  @&#8203;Preview
  @&#8203;Composable
  fun MyPreview(@&#8203;PreviewParameter(MyPreviewParameterProvider::class) text: String) {
    Text(text)
  }
  

Desktop

• Fix the positioning of the IME popup being too far away from the text, on screens with density greater than 1.0 #​2158

Navigation

• Fix the browser navigation integration problem due encoded routes #​2143
• Fix a crash on iOS when a NavHost is located in a scrollable container #​2146

Dependencies

• Gradle Plugin org.jetbrains.compose, version 1.8.2. Based on Jetpack Compose libraries:

  • Runtime 1.8.2
  • UI 1.8.2
  • Foundation 1.8.2
  • Material 1.8.2
  • Material3 1.3.2

• Lifecycle libraries org.jetbrains.androidx.lifecycle:lifecycle-*:2.9.1. Based on Jetpack Lifecycle 2.9.1

• Material3 Adaptive libraries org.jetbrains.compose.material3.adaptive:adaptive*:1.1.2. Based on Jetpack Material3 Adaptive 1.1.0

• Navigation libraries org.jetbrains.androidx.navigation:navigation-*:2.9.0-beta03. Based on Jetpack Navigation 2.9.0

• Savedstate library org.jetbrains.androidx.savedstate:savedstate:1.3.1. Based on Jetpack Savedstate 1.3.0

• WindowManager Core library org.jetbrains.androidx.window:window-core:1.4.0-alpha07. Based on Jetpack WindowManager 1.4.0-alpha04

---

v1.8.1

Changes since 1.8.0

Features

Resources

• Now a Compose library with resources may be built and used as XCFramework (it requires Kotlin Gradle plugin 2.2 or higher) #​5294
• Gradle Plugin DSL to change the generated Res class name #​5296

Fixes

Multiple Platforms

• Fix incorrect pointer position calculation with rotation around unspecified pivot #​2082

iOS

• Fix dialogs after modal view controller presentation #​2085
• Fix issue where androidx.compose.material3.ModalBottomSheet closes after any tap #​2086
• Fix context menu appearance after triple-tap #​2087
• Fix a memory leak in ComposeUIViewController when text input starts #​2088
• Use the cross-fade animation effect when rotating the screen with interop views #​2101
• Show an error message when UIKitViewController inside Popup or Dialog #​2102
• Fix an issue where the keyboard would appear after the second tap when the text input session was intercepted #​2103

Desktop

• [Linux] Fix svgPainter doesn't show any images #​2096
• Fix deadlock between BroadcastFrameClock.lock and Recomposer.stateLock #​2098
• Fix "Serializer for class is not found" using androidx.navigation and running ./gradlew runRelease #​5314
• kotlinx.serialization ProGuard rules are bundled in the Compose Gradle plugin #​5314

Web

• Fixed the positioning and the dimensions of the backing text input (HTML element). The bug used to lead to unexpected scrolls on the page due to the browser trying to bring the HTML element into a view #​2081

Resources

• Fix IDE highlighting/resolution when a generated file with resource accessors is too big #​5298

Dependencies

• Gradle Plugin org.jetbrains.compose, version 1.8.1. Based on Jetpack Compose libraries:

  • Runtime 1.8.1
  • UI 1.8.1
  • Foundation 1.8.1
  • Material 1.8.1
  • Material3 1.3.2

• Lifecycle libraries org.jetbrains.androidx.lifecycle:lifecycle-*:2.9.0. Based on Jetpack Lifecycle 2.9.0

• Navigation libraries org.jetbrains.androidx.navigation:navigation-*:2.9.0-beta02. Based on Jetpack Navigation 2.9.0

• Material3 Adaptive libraries org.jetbrains.compose.material3.adaptive:adaptive*:1.1.1. Based on Jetpack Material3 Adaptive 1.1.0

---

v1.8.0

Changes since 1.7.3

Highlights

Multiple Platforms

• Compose Multiplatform codebase is fully migrated to K2. Please note that native and web klibs can be consumed only with Kotlin 2.1.0 or newer. Also, due to underlying changes in the compiler plugin, it's better to recompile libraries against the new version. Please let us know if you find any compatibility issues during this migration #​1778
• Implement multiplatform BackHandler and PredictiveBackHandler. And use them in material3 widgets and androidx-navigation library #​1771

iOS

• Remove experimental flag from fun enableTraceOSLog() #​1652

Web

• Improves text input support in Safari on mobile and desktop #​1941
• Correct certain text input scenarios on Web targets #​1941

Resources

• Add FontVariation.Settings suppo

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.