Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/bitwarden/android).

## Repository Problems

These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/bitwarden/android).

- ⚠️ WARN: github.com token 401 unauthorized
- ⚠️ WARN: Package lookup failures

## Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

- [ ] [deps]: Update gh minor (`actions/setup-java`, `anthropics/claude-code-action`, `crowdin/github-action`, `gradle/actions`, `ruby/setup-ruby`)

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [[deps]: Update kotlin](../pull/7387) (`org.jetbrains.kotlinx:kotlinx-collections-immutable`, `org.jetbrains.kotlin.plugin.serialization`, `org.jetbrains.kotlin.plugin.parcelize`, `org.jetbrains.kotlin.plugin.compose`, `org.jetbrains.kotlin:kotlin-metadata-jvm`)

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] [deps]: Update androidxCredentialsProviderEvents to v1.0.0-beta01 (`androidx.credentials.providerevents:providerevents-play-services`, `androidx.credentials.providerevents:providerevents`)
- [ ] [deps]: Update androidxRoom to v2.8.5 (`androidx.room`, `androidx.room:room-runtime`, `androidx.room:room-ktx`, `androidx.room:room-compiler`)
- [ ] [deps]: Update androidx.compose:compose-bom to v2026.09.00
- [ ] [deps]: Update com.google.firebase:firebase-bom to v34.19.0
- [ ] [deps]: Update nkf to v0.3.0
- [ ] [deps]: Update org.robolectric:robolectric to v4.17

---

> [!WARNING]
> Renovate failed to look up the following dependencies: `Failed to look up github-digest package bitwarden/android: no-result`.
>
> Files affected: `.github/workflows/_version.yml`, `.github/workflows/build-authenticator.yml`, `.github/workflows/build-testharness.yml`, `.github/workflows/build.yml`

---

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [[deps]: Update protobuf monorepo to v4.36.1](../pull/7388) (`com.google.protobuf:protoc`, `com.google.protobuf:protobuf-javalite`)
- [ ] [[deps]: Update androidx.navigation:navigation-compose to v2.10.0](../pull/7389)
- [ ] [[deps]: Update fastlane to v2.239.0](../pull/7390)
- [ ] [[deps]: Update actions/setup-java action to v6](../pull/7391)
- [ ] [[deps]: Update crowdin/github-action action to v3](../pull/7392)
- [ ] [[deps]: Lock file maintenance](../pull/7393)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [[deps]: Update com.github.bumptech.glide:compose to v1.0.0-beta10](../pull/7328)

## Detected Dependencies

bundler (1)

Gemfile (8)

- `fastlane '2.238.0'` → [Updates: `'2.239.0'`]
- `time '0.4.2'`
- `abbrev '0.1.2'`
- `logger '1.7.0'`
- `mutex_m '0.3.0'`
- `csv '3.3.6'`
- `nkf '0.2.0'` → [Updates: `'0.3.0'`]
- `ostruct '0.6.3'`

github-actions (21)

.github/actions/setup-android-build/action.yml (3)

- `gradle/actions v6.2.0@3f131e8634966bd73d06cc69884922b02e6faf92` → [Updates: `v6.3.0`]
- `ruby/setup-ruby v1.314.0@9eb537ca036ebaed86729dcb9309076e4c5c3b74` → [Updates: `v1.321.0`]
- `actions/setup-java v5.3.0@ad2b38190b15e4d6bdf0c97fb4fca8412226d287` → [Updates: `v5.7.0`, `v6.0.0`]

.github/workflows/_version.yml (3)

- `bitwarden/android main`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`

.github/workflows/build-authenticator.yml (9)

- `bitwarden/android main`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`

.github/workflows/build-testharness.yml (8)

- `bitwarden/android main`
- `bitwarden/android main`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`

.github/workflows/build.yml (23)

- `bitwarden/android main`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`

.github/workflows/cron-sync-google-priviledged-browsers.yml (1)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`

.github/workflows/crowdin-pull.yml (7)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1`
- `crowdin/github-action v2.16.3@52aa776766211d83d975df51f3b9c53c2f8ba35f` → [Updates: `v2.17.1`, `v3.0.2`]

.github/workflows/crowdin-push.yml (5)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `crowdin/github-action v2.16.3@52aa776766211d83d975df51f3b9c53c2f8ba35f` → [Updates: `v2.17.1`, `v3.0.2`]
- `bitwarden/gh-actions main`

.github/workflows/github-release.yml (4)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`

.github/workflows/release-branch.yml (1)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`

.github/workflows/respond.yml (1)

- `bitwarden/gh-actions main`

.github/workflows/review-code.yml (1)

- `bitwarden/gh-actions main`

.github/workflows/sdlc-enforce-labels.yml

.github/workflows/sdlc-gh-release-update-issue.yml (1)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`

.github/workflows/sdlc-label-pr.yml (1)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`

.github/workflows/sdlc-sdk-update-evaluate.yml (6)

- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `anthropics/claude-code-action v1.0.183@be7b93b1907a4abad570368f3c74b6fe3807510b` → [Updates: `v1.0.217`]

.github/workflows/sdlc-sdk-update.yml (6)

- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`

.github/workflows/send_slack_notification.yml (4)

- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `slackapi/slack-github-action v4.0.0@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d`

.github/workflows/test-device.yml

.github/workflows/test.yml (4)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f`

.github/workflows/workflow-placeholder.yml

gradle (14)

annotation/build.gradle.kts

app/build.gradle.kts

authenticator/build.gradle.kts

authenticatorbridge/build.gradle.kts

build.gradle.kts

core/build.gradle.kts

cxf/build.gradle.kts

data/build.gradle.kts

gradle.properties

gradle/libs.versions.toml (68)

- `androidx.activity:activity-compose 1.13.0`
- `androidx.appcompat:appcompat 1.8.0`
- `androidx.autofill:autofill 1.3.0`
- `androidx.biometric:biometric 1.2.0-alpha05`
- `androidx.browser:browser 1.10.0`
- `androidx.camera:camera-camera2 1.6.2`
- `androidx.camera:camera-compose 1.6.2`
- `androidx.camera:camera-lifecycle 1.6.2`
- `androidx.camera:camera-view 1.6.2`
- `androidx.compose:compose-bom 2026.08.00` → [Updates: `2026.09.00`]
- `androidx.core:core-ktx 1.19.0`
- `androidx.credentials:credentials 1.6.0`
- `androidx.credentials.providerevents:providerevents 1.0.0-alpha06` → [Updates: `1.0.0-beta01`]
- `androidx.credentials.providerevents:providerevents-play-services 1.0.0-alpha06` → [Updates: `1.0.0-beta01`]
- `androidx.hilt:hilt-navigation-compose 1.4.0`
- `androidx.lifecycle:lifecycle-process 2.11.0`
- `androidx.lifecycle:lifecycle-runtime-compose 2.11.0`
- `androidx.lifecycle:lifecycle-runtime-ktx 2.11.0`
- `androidx.navigation:navigation-compose 2.9.8` → [Updates: `2.10.0`]
- `androidx.room:room-compiler 2.8.4` → [Updates: `2.8.5`]
- `androidx.room:room-ktx 2.8.4` → [Updates: `2.8.5`]
- `androidx.room:room-runtime 2.8.4` → [Updates: `2.8.5`]
- `androidx.security:security-crypto 1.1.0`
- `androidx.core:core-splashscreen 1.2.0`
- `androidx.work:work-runtime-ktx 2.11.2`
- `com.github.bumptech.glide:compose 1.0.0-beta01` → [Updates: `1.0.0-beta10`]
- `com.github.bumptech.glide:okhttp3-integration 5.0.9`
- `com.github.bumptech.glide:ksp 5.0.9`
- `io.gitlab.arturbosch.detekt:detekt-formatting 1.23.8`
- `io.gitlab.arturbosch.detekt:detekt-rules-libraries 1.23.8`
- `com.android.billingclient:billing 9.1.0`
- `com.google.firebase:firebase-bom 34.18.0` → [Updates: `34.19.0`]
- `com.google.guava:guava 33.7.1-jre`
- `com.google.mlkit:text-recognition 16.0.1`
- `com.google.dagger:hilt-android 2.60.1`
- `com.google.dagger:hilt-android-testing 2.60.1`
- `com.google.dagger:hilt-android-compiler 2.60.1`
- `com.google.android.play:review 2.0.2`
- `com.google.protobuf:protobuf-javalite 4.36.0` → [Updates: `4.36.1`]
- `com.google.protobuf:protoc 4.36.0` → [Updates: `4.36.1`]
- `org.junit:junit-bom 6.1.3`
- `org.jetbrains.kotlinx:kotlinx-collections-immutable 0.5.1` → [Updates: `0.5.2`]
- `org.jetbrains.kotlinx:kotlinx-coroutines-android 1.11.0`
- `org.jetbrains.kotlinx:kotlinx-coroutines-core 1.11.0`
- `org.jetbrains.kotlinx:kotlinx-coroutines-test 1.11.0`
- `org.jetbrains.kotlin:kotlin-metadata-jvm 2.4.10` → [Updates: `2.4.20`]
- `org.jetbrains.kotlinx:kotlinx-serialization-json 1.11.0`
- `io.mockk:mockk 1.14.11`
- `org.robolectric:robolectric 4.16.1` → [Updates: `4.17`]
- `com.squareup.okhttp3:okhttp-bom 5.5.0`
- `com.squareup.retrofit2:retrofit-bom 3.0.0`
- `app.cash.turbine:turbine 1.2.1`
- `com.jakewharton.timber:timber 5.0.1`
- `com.google.zxing:core 3.5.4`
- `org.testng:testng 7.12.0`
- `com.android.application 9.4.0`
- `com.android.library 9.4.0`
- `androidx.room 2.8.4` → [Updates: `2.8.5`]
- `com.google.firebase.crashlytics 3.0.8`
- `io.gitlab.arturbosch.detekt 1.23.8`
- `com.google.protobuf 0.10.0`
- `com.google.gms.google-services 4.5.0`
- `com.google.dagger.hilt.android 2.60.1`
- `org.jetbrains.kotlin.plugin.compose 2.4.10` → [Updates: `2.4.20`]
- `org.jetbrains.kotlin.plugin.parcelize 2.4.10` → [Updates: `2.4.20`]
- `org.jetbrains.kotlin.plugin.serialization 2.4.10` → [Updates: `2.4.20`]
- `org.jetbrains.kotlinx.kover 0.9.9`
- `com.google.devtools.ksp 2.3.11` → [Updates: `2.3.12`]

network/build.gradle.kts

settings.gradle.kts

testharness/build.gradle.kts

ui/build.gradle.kts

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository