Update all non-major dependencies

[infinum-renovate-github-app]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
gradle (source)		patch	9.7.0 → 9.7.1
renovatebot/github-action	action	patch	v46.2.2 → v46.2.5
com.squareup.okhttp3:okhttp (source)	dependencies	minor	5.4.0 → 5.5.0
jacoco (source)	dependencies	patch	0.8.14 → 0.8.15
com.android.tools.build:gradle (source)	dependencies	patch	9.3.1 → 9.3.2

---

Release Notes

gradle/gradle (gradle)

v9.7.1: 9.7.1

Compare Source

The Gradle team is excited to announce Gradle 9.7.1.

This is a patch release for 9.7.0. We recommend using 9.7.1 instead of 9.7.0.

Here are the highlights of 9.7.0 release:

• Isolated Projects graduates to incubating
• Broader Configuration Cache compatibility
• Resilient Sync helps you fix broken builds
• More source locations in problem reports

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
Aman Gautam,
Aman Kumar,
Anton Dubrouski,
Aurimas,
gbhavya07,
Josh Friend,
nicklauslittle-gov,
Pragati,
project516,
Qin Mi,
Ravi,
sk-reddy17,
Suvrat Acharya,
Yongshun Ye.

Upgrade instructions

Switch your build to use Gradle 9.7.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.7.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

renovatebot/github-action (renovatebot/github-action)

v46.2.5

Compare Source

Documentation

• update references to renovatebot/github-action to v46.2.4 (c2ba0df)

Miscellaneous Chores

• deps: update node.js to v24.20.0 (8bff989)

Build System

• deps: lock file maintenance (40119c0)

Continuous Integration

• deps: update ghcr.io/renovatebot/renovate docker tag to v44.40.0 (7776f7b)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.43.1 (1a8a884)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.44.0 (94a8afa)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.45.2 (91a1ccd)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.45.3 (9df3426)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.45.4 (c0c2060)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.46.0 (246e8c4)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.46.1 (a2cef85)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.46.2 (3ce659c)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.46.4 (cd8ceb2)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.46.5 (8f94c87)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.46.6 (7997c61)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.48.0 (a60af3a)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.48.1 (508cd10)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.48.2 (cca913a)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.48.3 (d450fc2)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.49.0 (0afb379)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.49.1 (c409f02)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.50.1 (dbb0a9b)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.50.2 (f51cd98)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.50.3 (34b46a4)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.51.0 (ea6c45c)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.51.2 (9774ab2)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.52.0 (e753d3e)
• deps: update ghcr.io/zizmorcore/zizmor docker tag to v1.30.0 (92becf5)
• deps: update zizmorcore/zizmor-action action to v0.6.3 (ea548b4)

v46.2.4

Compare Source

Documentation

• update references to renovatebot/github-action to v46.2.3 (42d0056)

Build System

• deps: lock file maintenance (e3c0c2e)

v46.2.3

Compare Source

Documentation

• update references to renovatebot/github-action to v46.2.2 (49f4ea0)

Miscellaneous Chores

• deps: update actions/cache action to v6 (#​1070) (90e0199)
• deps: update actions/setup-node action to v7 (#​1071) (498e972)
• deps: update commitlint monorepo to v21 (#​1073) (22967b6)
• deps: update dependency @​semantic-release/git to v11 (#​1074) (bea653f)
• deps: update dependency @​tsconfig/node24 to v24.0.5 (72cf06d)
• deps: update dependency esbuild to v0.28.2 (0e6d970)
• deps: update dependency eslint-plugin-json to v5 (#​1075) (63f2879)
• deps: update dependency globals to v17.10.0 (d402615)
• deps: update dependency globals to v17.11.0 (675198d)
• deps: update dependency semantic-release to v25.0.9 (ac9a74d)
• deps: update dependency typescript-eslint to v8.66.0 (af5132f)
• deps: update dependency typescript-eslint to v8.67.0 (39cdfd1)
• fix zizmor errors (#​1072) (613ec41)

Build System

• deps: lock file maintenance (7df1c30)

Continuous Integration

• deps: update dependency actions/checkout to v7 (#​1077) (d6180bb)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.17.2 (8695952)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.17.3 (82eda2d)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.20.1 (f478bc0)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.22.0 (755e0d3)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.23.0 (3cb9274)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.23.3 (4436421)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.24.2 (15b3538)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.24.3 (489f1d0)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.25.0 (3683bf4)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.26.0 (e133651)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.27.0 (e22f3f6)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.28.0 (2057af5)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.29.2 (56c415f)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.29.4 (88330ca)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.29.5 (cf40db9)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.30.0 (359d861)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.30.1 (be07738)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.30.2 (4c3519a)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.30.3 (a08a921)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.30.4 (fff9ff0)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.31.0 (e5d35d4)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.32.1 (be027ab)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.32.2 (e5b51b4)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.32.5 (21f4128)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.32.6 (c3a9bd4)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.33.2 (ef454f0)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.34.0 (ec74cb7)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.34.3 (ba4c5a2)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.35.0 (7313a0d)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.35.1 (4e11059)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.35.2 (3ae4864)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.35.3 (f0c13d2)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.35.4 (c16c31c)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.36.0 (8778c4a)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.37.1 (aaaf809)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.38.0 (67e8c5f)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.39.0 (a7eb6cf)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.39.1 (faf9cdc)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.39.2 (2e028a9)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.39.3 (7359be7)

lysine-dev/okhttp (com.squareup.okhttp3:okhttp)

v5.5.0

2026-08-16

This release introduces opt-in support for [Encrypted Client Hello (ECH)]. This new feature
improves user privacy by encrypting domain names in transit. With regular TLS, your coffee shop’s
Wi-Fi router can see that you’re visiting wikipedia.com, but it cannot see which page you’re
looking at. With ECH, the router observes only the IP address. This additional privacy is most
effective on sites hosted by big CDNs because the IP address doesn’t imply a particular website.

This requires ECH support in the platform’s TLS stack. Today this is only Android 17 (API 37,
released June 2026). When other TLS stacks add ECH support, we'll integrate them.

ECH took a lot of work to implement because the encryption keys are published over DNS in the
[HTTPS resource record], and we needed to write new code to fetch these records. This release
includes a major update to OkHttp’s DNS API: it now supports multiple resource record types (not
just IP addresses!), asynchronous streaming results, and in-memory caching.

To opt in, you can use DnsOverHttps:

// DnsOverHttps itself uses OkHttpClient. Build both clients upon the
// same bootstrap client so they share a connection pool and dispatcher.
val bootstrapClient = OkHttpClient()

// This sample uses Cloudflare's 1.1.1.1 DnsOverHttps service.
val client = bootstrapClient.newBuilder()
  .dns(DnsOverHttps.Builder()
    .client(bootstrapClient)
    .url("https://1.1.1.1/dns-query".toHttpUrl())
    .build())
  .build()

You could also opt in with our new AndroidDns API. Unfortunately, the privacy benefits of ECH are
thwarted because its DNS queries are not encrypted by default.

// AndroidDns fetches the HTTPS DNS resource records necessary for ECH.
val client = OkHttpClient.Builder()
  .dns(AndroidDns())
  .build()

• New: OkHttp artifacts are now signed with our [new signing key]. This project and three sibling
  projects ([Retrofit], [Okio], and [SQLDelight]) recently joined [the Commonhaus Foundation].
• Fix: MockWebServer’s @StartStop annotation now supports @Nested JUnit 5 tests.
• Fix: Our default TLS hostname verifier now reject hosts that fail IP canonicalization.
• Fix: Closing a multipart part's sink no longer closes the entire request body.
• Fix: Flush HTTP/1 request bodies before detaching the timeout. We had a bug where timeouts
  weren’t applied correctly.
• Fix: Follow [RFC 1008]'s requirements for HTTP QUERY redirects.
• Fix: Fall back to no proxy when the system proxy selector throws. Previously this would cause
  the HTTP call to crash.
• Upgrade: [Okio 3.18.1][okio_3_18_1].

jacoco/jacoco (jacoco)

v0.8.15: 0.8.15

New Features

• JaCoCo now officially supports Java 26 (GitHub #​2076).
• Experimental support for Java 27 class files (GitHub #​2004).
• Compatibility methods generated by Kotlin compiler for functions defined in interfaces are filtered out during generation of report (GitHub #​1905).
• Compatibility methods generated by Kotlin compiler for exposed boxed inline value classes (JvmExposeBoxed annotation) are filtered out during generation of report (GitHub #​1944).
• Methods generated by the Kotlin compiler for functions with JvmStatic annotation are filtered out during generation of report (GitHub #​2097).
• Improved filtering of bytecode generated by Kotlin compiler for when expressions and statements with kotlin.String subject where first branch condition contains string with largest hash (GitHub #​2098).
• Part of bytecode that javac versions from 24 to 26 generate for switch statements and expressions with selector expression of type java.lang.String inside lambdas is filtered out during generation of report (GitHub #​2023).
• Improved performance of Kotlin files analysis by parsing SMAPs only once per class (GitHub #​2114).
• For better performance agent output methods tcpclient and tcpserver use BufferedOutputStream to write execution data to socket. Maven plugin, Ant tasks, CLI, API usage examples, and ExecDumpClient API use BufferedInputStream to read execution data from socket. Third-party integrations should do the same to benefit from this change in agent (GitHub #​2089).

Fixed bugs

• Fixed processing of Kotlin SMAP in synthetic classes (GitHub #​1985).
• Multiple JaCoCo runtimes within one JVM writing to the same output file should not cause data corruption when running on JDK versions from 6 to 10 affected by JDK-8166253 (GitHub #​2065, #​2074).
• For better performance agent writes to output file via BufferedOutputStream, this fixes regression introduced in version 0.6.2 (GitHub #​2073).
• Fixed NullPointerException when JaCoCo agent is loaded by non system class loader, for example when loaded by JBoss Modules (GitHub #​1651).

Non-functional Changes

• JaCoCo now depends on ASM 9.10.1 (GitHub #​2134).

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud