Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/nextcloud/android).

## Repository Problems

These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/nextcloud/android).

- ⚠️ WARN: Maven Central rate limiting detected despite Redis caching.
- ⚠️ WARN: Release interceptor failed
- ⚠️ WARN: Package lookup failures

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [Update dependency org.jetbrains.kotlin.plugin.parcelize to v2.4.20](../pull/17614)
- [ ] [Update roomVersion to v2.8.5](../pull/17634) (`androidx.room:room-testing`, `androidx.room:room-compiler`, `androidx.room:room-runtime`)
- [ ] [Update dependency org.bouncycastle:bcpkix-jdk18on to v1.86](../pull/17339)
- [ ] [Update dependency org.conscrypt:conscrypt-android to v2.7.0](../pull/17558)

## Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

- [ ] Update ubuntu:resolute Docker digest to cd21a4f
- [ ] Update dependency com.github.nextcloud-releases:android-openssl to v3.5.6.1
- [ ] Update dependency java-jdk to v21.0.12+101.0.LTS
- [ ] Update codecov/codecov-action action to v7.1.0
- [ ] Update dependency java-jdk to v25

---

> [!WARNING]
> Renovate failed to look up the following dependencies: `Failed to look up maven package shot:shot.gradle.plugin: no-result`.
>
> Files affected: `gradle/libs.versions.toml`

---

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update dependency com.google.devtools.ksp to v2.3.12](../pull/17630)
- [ ] [Update kotlin monorepo to v2.4.20](../pull/17612) (`org.jetbrains.kotlin.plugin.serialization`, `org.jetbrains.kotlin.plugin.compose`, `org.jetbrains.kotlin:kotlin-stdlib`)
- [ ] [Update androidCommonLibraryVersion to v0.33.2](../pull/17603) (`com.github.nextcloud.android-common:core`, `com.github.nextcloud.android-common:ui`)
- [ ] [Update dependency fastlane to v2.239.0](../pull/17648)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [Update dependency org.apache.jackrabbit:jackrabbit-webdav to v2.22.4](../pull/17450)
- [ ] [Update mockito monorepo to v5.23.0](../pull/16693) (`org.mockito:mockito-core`, `org.mockito:mockito-android`)

## Detected Dependencies

bundler (1)

Gemfile (1)

- `fastlane lock file @ 2.238.0` → [Updates: `undefined`]

dockerfile (1)

.devcontainer/Dockerfile (1)

- `ubuntu resolute@sha256:513c074113a871b51a8d16ab445c88779d6452d937a164fb5cc479f32668a41d` → [Updates: `resolute`]

github-actions (17)

.github/workflows/ai-policy.yml (1)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`

.github/workflows/analysis.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-java v6.0.1@de7274f081f381c8f8158605e0321c36c376e2e6`
- `java-jdk 21` → [Updates: `21.0.12+101.0.LTS`, `25.0.4+101.0.LTS`]

.github/workflows/assembleFlavors.yml (4)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-java v6.0.1@de7274f081f381c8f8158605e0321c36c376e2e6`
- `gradle/actions v6.3.0@9c971963bec38e04b3d30dcc455b5382be2fdbfb`
- `java-jdk 21` → [Updates: `21.0.12+101.0.LTS`, `25.0.4+101.0.LTS`]

.github/workflows/autoApproveSync.yml (1)

- `hmarr/auto-approve-action v4.0.0@f0939ea97e9205ef24d872e76833fa908a770363`

.github/workflows/check.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-java v6.0.1@de7274f081f381c8f8158605e0321c36c376e2e6`
- `java-jdk 21` → [Updates: `21.0.12+101.0.LTS`, `25.0.4+101.0.LTS`]

.github/workflows/codeql.yml (6)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `pierotofy/set-swap-space v1.0@49819abfb41bd9b44fb781159c033dba90353a7c`
- `github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63`
- `actions/setup-java v6.0.1@de7274f081f381c8f8158605e0321c36c376e2e6`
- `github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63`
- `java-jdk 21` → [Updates: `21.0.12+101.0.LTS`, `25.0.4+101.0.LTS`]

.github/workflows/detectNewJavaFiles.yml (1)

- `trilom/file-changes-action v1.2.4@a6ca26c14274c33b15e6499323aac178af06ad4b`

.github/workflows/detectWrongSettings.yml (4)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-java v6.0.1@de7274f081f381c8f8158605e0321c36c376e2e6`
- `ubuntu 24.04`
- `java-jdk 21` → [Updates: `21.0.12+101.0.LTS`, `25.0.4+101.0.LTS`]

.github/workflows/garm.yml (6)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-java v6.0.1@de7274f081f381c8f8158605e0321c36c376e2e6`
- `reactivecircus/android-emulator-runner v2.38.0@a421e43855164a8197daf9d8d40fe71c6996bb0d`
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `ubuntu 24.04`
- `java-jdk 21` → [Updates: `21.0.12+101.0.LTS`, `25.0.4+101.0.LTS`]

.github/workflows/lint-translations.yml (1)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`

.github/workflows/pr-feedback.yml (2)

- `marcelklehr/get-github-handles-from-website-action v1.0.1@06b2239db0a48fe1484ba0bfd966a3ab81a08308`
- `nextcloud/pr-feedback-action main@4709fa5b3e1821559d4c312ef937b61f1567aa44`

.github/workflows/qa.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-java v6.0.1@de7274f081f381c8f8158605e0321c36c376e2e6`
- `java-jdk 21` → [Updates: `21.0.12+101.0.LTS`, `25.0.4+101.0.LTS`]

.github/workflows/renovate-approve-merge.yml (3)

- `mdecoleman/pr-branch-name v3.0.0@55795d86b4566d300d237883103f052125cc7508`
- `hmarr/auto-approve-action v4.0.0@f0939ea97e9205ef24d872e76833fa908a770363`
- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`

.github/workflows/reuse.yml (2)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `fsfe/reuse-action v6.0.0@676e2d560c9a403aa252096d99fcab3e1132b0f5`

.github/workflows/scorecard.yml (3)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc`
- `github/codeql-action v4.38.0@b96794f015dfd88f77b49b1c93e0fa7110f94c63`

.github/workflows/stale.yml (1)

- `actions/stale v11.0.0@4391f3da665fdf50b6810c1a66712fb9ba21aa93`

.github/workflows/unit-tests.yml (6)

- `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1`
- `actions/setup-java v6.0.1@de7274f081f381c8f8158605e0321c36c376e2e6`
- `gradle/actions v6.3.0@9c971963bec38e04b3d30dcc455b5382be2fdbfb`
- `codecov/codecov-action v7.0.0@fb8b3582c8e4def4969c97caa2f19720cb33a72f` → [Updates: `v7.1.0`]
- `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a`
- `java-jdk 21` → [Updates: `21.0.12+101.0.LTS`, `25.0.4+101.0.LTS`]

gradle (7)

app/build.gradle.kts

appscan/build.gradle.kts

build.gradle.kts

gradle.properties

gradle/libs.versions.toml (117)

- `com.github.nextcloud:android-library 8cbaa7e8a834f5c2fa6d1f24bd3b9923aa079f28`
- `com.github.nextcloud-releases:android-openssl 3.5.6` → [Updates: `3.5.6.1`]
- `org.conscrypt:conscrypt-android 2.6.3` → [Updates: `2.7.0`]
- `org.bouncycastle:bcpkix-jdk18on 1.84` → [Updates: `1.86`]
- `androidx.browser:browser 1.10.0`
- `androidx.appcompat:appcompat 1.8.0`
- `androidx.cardview:cardview 1.0.0`
- `androidx.test:core-ktx 1.7.0`
- `com.github.Hazzatur:Document-Scanning-Android-SDK 1.3.0`
- `androidx.fragment:fragment-ktx 1.9.0`
- `androidx.exifinterface:exifinterface 1.4.2`
- `androidx.compose.material:material-icons-core 1.7.8`
- `androidx.webkit:webkit 1.17.0`
- `androidx.core:core-splashscreen 1.2.0`
- `com.github.nextcloud-deps:sectioned-recyclerview 0.6.1`
- `androidx.legacy:legacy-support-v4 1.0.0`
- `me.zhanghai.android.fastscroll:library 1.3.0`
- `io.github.elye:loaderviewlibrary 3.0.0`
- `com.github.Baseflow:PhotoView 2.3.0`
- `com.google.android.material:material 1.14.0`
- `pl.droidsonroids.gif:android-gif-drawable 1.2.32`
- `com.vanniktech:android-image-cropper 4.7.0`
- `com.caverock:androidsvg-aar 1.4`
- `io.coil-kt:coil 2.7.0`
- `androidx.constraintlayout:constraintlayout 2.2.2`
- `com.vanniktech:emoji-google 0.24.1`
- `org.jetbrains.kotlinx:kotlinx-serialization-json 1.11.0`
- `org.jetbrains.kotlinx:kotlinx-coroutines-test 1.11.0`
- `androidx.annotation:annotation 1.10.0`
- `com.google.code.findbugs:annotations 3.0.1`
- `commons-httpclient:commons-httpclient 3.1`
- `commons-io:commons-io 2.22.0`
- `com.github.tmurakami:dexopener 2.0.5`
- `com.jakewharton:disklrucache 2.0.2`
- `org.greenrobot:eventbus 3.3.1`
- `io.noties.markwon:ext-strikethrough 4.6.2`
- `io.noties.markwon:ext-tables 4.6.2`
- `io.noties.markwon:ext-tasklist 4.6.2`
- `com.googlecode.ez-vcard:ez-vcard 0.12.2`
- `com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0`
- `com.mebigfatguy.fb-contrib:fb-contrib 7.7.4`
- `com.google.firebase:firebase-messaging 25.1.3`
- `com.google.android.flexbox:flexbox 3.0.0`
- `com.google.code.gson:gson 2.14.0`
- `io.noties.markwon:html 4.6.2`
- `org.mnode.ical4j:ical4j 4.3.0`
- `org.apache.jackrabbit:jackrabbit-webdav 2.13.5` → [Updates: `2.22.4`]
- `org.json:json 20250517`
- `com.github.albfernandez:juniversalchardet 2.5.0`
- `org.jetbrains.kotlin:kotlin-stdlib 2.4.10` → [Updates: `2.4.20`]
- `com.squareup.leakcanary:leakcanary-android 2.14`
- `org.lukhnos:nnio 0.3.1`
- `org.jbundle.util.osgi.wrapped:org.jbundle.util.osgi.wrapped.org.apache.http.client 4.1.2`
- `org.osmdroid:osmdroid-android 6.1.20`
- `com.google.android.gms:play-services-base 18.10.1`
- `com.google.android.play:review-ktx 2.0.2`
- `org.slf4j:jcl-over-slf4j 2.0.19`
- `org.mockito:mockito-android 5.22.0` → [Updates: `5.23.0`]
- `org.mockito:mockito-core 5.22.0` → [Updates: `5.23.0`]
- `org.mockito.kotlin:mockito-kotlin 6.3.0`
- `io.mockk:mockk-android 1.14.11`
- `io.mockk:mockk 1.14.11`
- `com.google.dagger:dagger 2.60.1`
- `com.google.dagger:dagger-compiler 2.60.1`
- `com.google.dagger:dagger-android-processor 2.60.1`
- `com.google.dagger:dagger-android 2.60.1`
- `com.google.dagger:dagger-android-support 2.60.1`
- `com.github.bumptech.glide:glide 5.0.9`
- `androidx.lifecycle:lifecycle-runtime-ktx 2.11.0`
- `androidx.lifecycle:lifecycle-service 2.11.0`
- `androidx.lifecycle:lifecycle-viewmodel-ktx 2.11.0`
- `com.github.bumptech.glide:ksp 5.0.9`
- `androidx.compose:compose-bom 2026.09.00`
- `androidx.media3:media3-datasource-okhttp 1.11.1`
- `androidx.media3:media3-exoplayer 1.11.1`
- `androidx.media3:media3-session 1.11.1`
- `androidx.media3:media3-ui 1.11.1`
- `androidx.room:room-runtime 2.8.4` → [Updates: `2.8.5`]
- `androidx.room:room-compiler 2.8.4` → [Updates: `2.8.5`]
- `androidx.room:room-testing 2.8.4` → [Updates: `2.8.5`]
- `androidx.test.espresso:espresso-accessibility 3.7.0`
- `androidx.test.espresso:espresso-contrib 3.7.0`
- `androidx.test.espresso:espresso-core 3.7.0`
- `androidx.test.espresso:espresso-idling-resource 3.7.0`
- `androidx.test.espresso:espresso-intents 3.7.0`
- `androidx.test.espresso:espresso-web 3.7.0`
- `androidx.test.ext:junit 1.3.0`
- `androidx.arch.core:core-testing 2.2.0`
- `androidx.test:orchestrator 1.6.1`
- `androidx.test:rules 1.7.0`
- `androidx.test:runner 1.7.0`
- `androidx.test:core 1.7.0`
- `junit:junit 4.13.2`
- `tools.fastlane:screengrab 2.1.1`
- `com.facebook.testing.screenshot:core 0.15.0`
- `com.karumi:shot 6.1.0`
- `com.github.stateless4j:stateless4j 2.6.0`
- `io.noties.markwon:syntax-highlight 4.6.2`
- `io.noties.markwon:core 4.6.2`
- `io.noties:prism4j 2.0.0`
- `com.github.nextcloud.android-common:ui f46fb3b6789dee1f476269903da61e9b48c99587` → [Updates: `0.33.2`]
- `com.github.nextcloud.android-common:core f46fb3b6789dee1f476269903da61e9b48c99587` → [Updates: `0.33.2`]
- `com.github.nextcloud-deps:qrcodescanner 0.1.2.4`
- `androidx.work:work-runtime 2.11.2`
- `androidx.work:work-runtime-ktx 2.11.2`
- `androidx.compose.foundation:foundation 1.12.1`
- `org.jetbrains.kotlinx:kotlinx-coroutines-core 1.11.0`
- `com.android.application 9.4.0`
- `com.android.library 9.4.0`
- `org.jetbrains.kotlin.plugin.parcelize 2.4.10` → [Updates: `2.4.20`]
- `com.github.spotbugs 6.5.11`
- `org.jetbrains.kotlin.plugin.compose 2.4.10` → [Updates: `2.4.20`]
- `com.diffplug.spotless 8.10.2`
- `com.google.devtools.ksp 2.3.11` → [Updates: `2.3.12`]
- `io.gitlab.arturbosch.detekt 1.23.8`
- `shot 6.1.0`
- `org.jetbrains.kotlin.plugin.serialization 2.4.10` → [Updates: `2.4.20`]

jacoco.gradle.kts

settings.gradle.kts

gradle-wrapper (1)

gradle/wrapper/gradle-wrapper.properties (1)

- `gradle 9.7.1`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository