[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
gradle (source)		patch	9.8.0 → 9.8.2
androidx.navigation3:navigation3-ui (source)	dependencies	patch	1.2.0 → 1.2.1
androidx.navigation3:navigation3-runtime (source)	dependencies	patch	1.2.0 → 1.2.1
com.google.devtools.ksp (source)	plugin	patch	2.3.12 → 2.3.13
org.jetbrains.kotlin.plugin.serialization	plugin	patch	2.4.20 → 2.4.21
org.jetbrains.kotlin.plugin.compose	plugin	patch	2.4.20 → 2.4.21
com.android.application (source)	plugin	minor	9.4.1 → 9.5.0

---

Release Notes

gradle/gradle (gradle)

v9.8.2: 9.8.2

Compare Source

The Gradle team is excited to announce Gradle 9.8.2.

Here are the highlights of this release:

• Java 27 support
• Maven mirror settings reuse
• Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aman Gautam,
Björn Kautler,
Eng Zer Jun,
Hashim Khan,
Julian Krannich,
KBS,
Labh R Jethe,
Mark Dodgson,
Maxim,
monkey,
nataphon-ktsystems,
Paul King,
Qiu Tian,
rg_sandesh,
Roberto Perez Alcolea,
Sean,
Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.2 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.2 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v9.8.1: 9.8.1

Compare Source

This is a patch release for Gradle 9.8.0. We recommend using 9.8.1 instead of 9.8.0.

This release addresses three high rated vulnerabilities:

• Unauthenticated worker-to-daemon channel deserializes untrusted Java objects
• Deserialization of untrusted Java objects before authentication in the client - daemon communication
• Failure to disable repositories failing to establish an SSL connection can expose builds to malicious artifacts

The following issues were resolved:

• [Gradle 9.8.0 complains again about invalid Toolchains on Debian / Ubuntu packaged systems]- (#​39358)
• Gradle 9.8.0 removes root java.util.logging handlers installed by a custom LogManager (breaks Quarkus test log capture)
• Dependency resolution regression

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aman Gautam,
Björn Kautler,
Eng Zer Jun,
Hashim Khan,
Julian Krannich,
KBS,
Labh R Jethe,
Mark Dodgson,
Maxim,
monkey,
nataphon-ktsystems,
Paul King,
Qiu Tian,
rg_sandesh,
Roberto Perez Alcolea,
Sean,
Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

google/ksp (com.google.devtools.ksp)

v2.3.13

Compare Source

What's Changed

• Add KSContextParameter and KSFunctionDeclaration.contextParameters to the API (#​3216)
• Improve diagnostics by returning last round dismissible errors when KSP fails (#​3196)
• Add opt-in processor classloader caching (ksp.classloader.cache.processors=true) to speed up multi-module builds (#​3210)
• Avoid clearing binary and library caches between KSP rounds (#​3235)
• Optimize classpath scanning, dependency indexing, and package directory lookups during incremental compilation (#​3254)
• Backport IntelliJ Platform CoreJarHandler to prevent non-deterministic missing jar entries (#​3240)
• Fix getting annotation default values from KLibs in Kotlin Multiplatform (#​2356)
• Fix resolving aliased annotations in PsiResolutionStrategy (#​2997)
• Fix Gradle project isolation detection when configured via command-line flags (#​3188)
• Fix duplicate declaration generation in intermediate Kotlin Multiplatform metadata compilations (#​3229)

Contributors

• Thanks to @​alfonsocv12, @​bacecek, @​bcorso, @​cushon, and everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.12...2.4.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.