Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/bitwarden/passwordless-android).

## Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

- [ ] [deps]: Lock file maintenance

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [[deps]: Update gh minor](../pull/122) (`actions/checkout`, `actions/setup-java`, `gradle/actions`)
- [ ] [[deps]: Update gradle minor](../pull/113) (`com.google.code.gson:gson`, `com.squareup.retrofit2:retrofit`, `com.squareup.retrofit2:converter-gson`, `androidx.navigation:navigation-ui-ktx`, `androidx.navigation:navigation-fragment-ktx`, `org.mockito:mockito-core`, `com.google.android.material:material`, `org.jetbrains.kotlinx:kotlinx-coroutines-test`, `org.jetbrains.kotlinx:kotlinx-coroutines-play-services`, `org.jetbrains.kotlin.android`, `com.auth0.android:jwtdecode`, `com.google.dagger.hilt.android`, `com.google.dagger:hilt-android-compiler`, `com.google.dagger:hilt-android`, `androidx.test.ext:junit`, `androidx.test.espresso:espresso-core`, `io.gitlab.arturbosch.detekt`, `io.gitlab.arturbosch.detekt:detekt-rules-libraries`, `io.gitlab.arturbosch.detekt:detekt-formatting`, `androidx.credentials:credentials-play-services-auth`, `androidx.credentials:credentials`, `androidx.constraintlayout:constraintlayout`, `androidx.appcompat:appcompat`, `com.android.application`, `androidx.core:core-ktx`)
- [ ] [[deps]: Update Gradle to v8.14.5](../pull/114)
- [ ] [[deps]: Update actions/checkout action to v7](../pull/136)
- [ ] [[deps]: Update actions/setup-java action to v6](../pull/138)
- [ ] [[deps]: Update android-actions/setup-android action to v4](../pull/133)
- [ ] [[deps]: Update com.android.application to v9](../pull/131)
- [ ] [[deps]: Update Gradle to v9](../pull/123)
- [ ] [[deps]: Update okhttp.logging.interceptor to v5](../pull/137) (`com.squareup.okhttp3:logging-interceptor`, `com.squareup.okhttp3:mockwebserver`)
- [ ] [[deps]: Update org.sonarqube to v7](../pull/100)
- [ ] [[deps]: Update retrofit monorepo to v3](../pull/117) (`com.squareup.retrofit2:retrofit`, `com.squareup.retrofit2:converter-gson`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

github-actions (2)

.github/workflows/android.yml (6)

- `actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683` → [Updates: `v4.4.0`, `v7.0.1`]
- `actions/setup-java v4.6.0@7a6d8a8234af8eb26422e24e3006232cccaa061b` → [Updates: `v4.9.1`, `v6.0.0`]
- `android-actions/setup-android v3.2.2@9fc6c4e9069bf8d3d10b2204b1fb8f6ef7065407` → [Updates: `v4.0.1`]
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`

.github/workflows/release.yml (7)

- `actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683` → [Updates: `v4.4.0`, `v7.0.1`]
- `gradle/actions v6.1.0@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e` → [Updates: `v6.3.0`]
- `actions/setup-java v4.6.0@7a6d8a8234af8eb26422e24e3006232cccaa061b` → [Updates: `v4.9.1`, `v6.0.0`]
- `android-actions/setup-android v3.2.2@9fc6c4e9069bf8d3d10b2204b1fb8f6ef7065407` → [Updates: `v4.0.1`]
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`
- `bitwarden/gh-actions main`

gradle (6)

app/build.gradle.kts

build.gradle.kts

gradle.properties

gradle/libs.versions.toml (30)

- `androidx.core:core-ktx 1.15.0` → [Updates: `1.19.0`]
- `androidx.appcompat:appcompat 1.7.0` → [Updates: `1.8.0`]
- `androidx.constraintlayout:constraintlayout 2.2.0` → [Updates: `2.2.2`]
- `com.squareup.retrofit2:converter-gson 2.11.0` → [Updates: `2.12.0`, `3.0.0`]
- `androidx.credentials:credentials 1.3.0` → [Updates: `1.6.0`]
- `androidx.credentials:credentials-play-services-auth 1.3.0` → [Updates: `1.6.0`]
- `io.gitlab.arturbosch.detekt:detekt-formatting 1.23.7` → [Updates: `1.23.8`]
- `io.gitlab.arturbosch.detekt:detekt-rules-libraries 1.23.7` → [Updates: `1.23.8`]
- `androidx.test.espresso:espresso-core 3.6.1` → [Updates: `3.7.0`]
- `androidx.test.ext:junit 1.2.1` → [Updates: `1.3.0`]
- `com.google.code.gson:gson 2.11.0` → [Updates: `2.14.0`]
- `com.google.dagger:hilt-android 2.55` → [Updates: `2.60.1`]
- `com.google.dagger:hilt-android-compiler 2.55` → [Updates: `2.60.1`]
- `junit:junit 4.13.2`
- `com.auth0.android:jwtdecode 2.0.2` → [Updates: `2.1.0`]
- `org.jetbrains.kotlinx:kotlinx-coroutines-play-services 1.10.1` → [Updates: `1.11.0`]
- `org.jetbrains.kotlinx:kotlinx-coroutines-test 1.10.1` → [Updates: `1.11.0`]
- `com.google.android.material:material 1.12.0` → [Updates: `1.14.0`]
- `org.mockito:mockito-core 5.15.2` → [Updates: `5.23.0`]
- `com.squareup.okhttp3:mockwebserver 4.12.0` → [Updates: `5.5.0`]
- `androidx.navigation:navigation-fragment-ktx 2.8.5` → [Updates: `2.10.0`]
- `androidx.navigation:navigation-ui-ktx 2.8.5` → [Updates: `2.10.0`]
- `com.squareup.okhttp3:logging-interceptor 4.12.0` → [Updates: `5.5.0`]
- `androidx.preference:preference-ktx 1.2.1`
- `com.squareup.retrofit2:retrofit 2.11.0` → [Updates: `2.12.0`, `3.0.0`]
- `com.android.application 8.8.0` → [Updates: `8.13.2`, `9.4.0`]
- `io.gitlab.arturbosch.detekt 1.23.7` → [Updates: `1.23.8`]
- `com.google.dagger.hilt.android 2.55` → [Updates: `2.60.1`]
- `org.jetbrains.kotlin.android 2.1.0` → [Updates: `2.4.20`]
- `org.sonarqube 5.1.0.4882` → [Updates: `7.5.0.8588`]

passwordless/build.gradle.kts

settings.gradle.kts

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

- `gradle 8.12` → [Updates: `8.14.5`, `9.7.1`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the Dependency Dashboard, then inspect the dependency files it lists: .github/workflows/android.yml, .github/workflows/release.yml, app/build.gradle.kts, gradle/libs.versions.toml, and gradle/wrapper/gradle-wrapper.properties. Review the linked pull requests and Renovate documentation first; done would require resolving the selected pending updates and confirming the resulting Android build and workflows remain valid.

Written by the indexing model from the issue text.