Skip to content

Conversation

@mikehardy
Copy link
Member

@mikehardy mikehardy commented Dec 27, 2025

Purpose / Description

Peeled out of regular dependency-updates conveyor belt because CodeQL isn't quite ready for kotlin 2.3.0 yet - if we keep this on the side it won't block other deps

Whenever it is ready upstream (expectation set upstream for early February 2026), should rebase this against whatever current dependency-updates branch is, that'll clean out the commit history etc which isn't perfect here (yet), but also isn't important to have perfect yet

Fixes

Approach

rebased our dependency-updates branch to drop this commit while keeping the commit in a separate branch as basis for this PR

How Has This Been Tested?

Our tests all work it's just the CodeQL scanning CI check that will fail until resolved upstream

Learning (optional, can help others)

The steady march of progress is not without hiccups ecosystem wide...

Checklist

Please, go through these checks before submitting the PR.

  • You have a descriptive commit message with a short title (first line, max 50 chars).
  • You have commented your code, particularly in hard-to-understand areas
  • You have performed a self-review of your own code
  • UI changes: include screenshots of all affected screens (in particular showing any new or changed strings)
  • UI Changes: You have tested your change using the Google Accessibility Scanner

@mikehardy mikehardy marked this pull request as draft December 27, 2025 17:30
@mikehardy mikehardy added upstream-issue Blocked by dependency Currently blocked by some other dependent / related change labels Dec 27, 2025
@mikehardy
Copy link
Member Author

Upstream issue has this note now:

Thanks for the offer to help @sgammon. We have been making progress and expect to have a working solution this week. > Support for Kotlin 2.3 is expected to be available in CodeQL 2.24.1 (Early February)

@mikehardy mikehardy added the dependencies used for automated dependency PRs label Jan 14, 2026
@mikehardy mikehardy force-pushed the dependency-updates branch 4 times, most recently from 8e081b8 to 70dadd0 Compare January 21, 2026 23:28
mikehardy and others added 2 commits February 5, 2026 08:14
these were non-null properties and do not need safe access,
it is flagged as a warning (which we fail on with -Werror)
in new kotlin
Bumps `kotlin` from 2.2.10 to 2.3.0.

Updates `org.jetbrains.kotlin:kotlin-stdlib` from 2.2.10 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](https://github.com/JetBrains/kotlin/commits)

Updates `org.jetbrains.kotlin:kotlin-reflect` from 2.2.10 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](https://github.com/JetBrains/kotlin/commits)

Updates `org.jetbrains.kotlin:kotlin-test` from 2.2.10 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](https://github.com/JetBrains/kotlin/commits)

Updates `org.jetbrains.kotlin:kotlin-test-junit` from 2.2.10 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](https://github.com/JetBrains/kotlin/commits)

Updates `org.jetbrains.kotlin:kotlin-test-junit5` from 2.2.10 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](https://github.com/JetBrains/kotlin/commits)

Updates `org.jetbrains.kotlin.android` from 2.2.10 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](https://github.com/JetBrains/kotlin/commits)

Updates `org.jetbrains.kotlin.plugin.parcelize` from 2.2.10 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](https://github.com/JetBrains/kotlin/commits)

Updates `org.jetbrains.kotlin.jvm` from 2.2.10 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](https://github.com/JetBrains/kotlin/commits)

Updates `org.jetbrains.kotlin.plugin.serialization` from 2.2.10 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](https://github.com/JetBrains/kotlin/commits)

---
updated-dependencies:
- dependency-name: org.jetbrains.kotlin:kotlin-stdlib
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.jetbrains.kotlin:kotlin-reflect
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.jetbrains.kotlin:kotlin-test
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.jetbrains.kotlin:kotlin-test-junit
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.jetbrains.kotlin:kotlin-test-junit5
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.jetbrains.kotlin.android
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.jetbrains.kotlin.plugin.parcelize
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.jetbrains.kotlin.jvm
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.jetbrains.kotlin.plugin.serialization
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump kotlin from 2.3.0 to 2.3.10
@mikehardy
Copy link
Member Author

mikehardy commented Feb 5, 2026

Just waiting on codeql release 2.24.1 to show up here and be live - estimated today - then this is ready to go

https://codeql.github.com/docs/codeql-overview/codeql-changelog/

PR re-groomed to be merge-able with current dependency-updates branch

Note that this workflow will only run on attempted pulls or pushes to main or *release* branch refs, so it won't be possible to see if this works on merge to dependency updates, until dependency-updates branch is queued for PR into main

It is possible to see via codeql advanced workflow runs what version of codeql is effective though, so it's possible to know when to attempt this

currently still 2.24.0

https://github.com/ankidroid/Anki-Android/actions/runs/21710353893/job/62612055838#step:6:85

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Blocked by dependency Currently blocked by some other dependent / related change dependencies used for automated dependency PRs upstream-issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant