Update Samples dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
gradle (source)		minor	8.13 -> 8.14.2
io.grpc:grpc-netty	dependencies	minor	1.71.0 -> 1.73.0
org.jetbrains.kotlinx:kotlinx-rpc-grpc-core	dependencies	minor	0.5.1-grpc-39 -> 0.7.0-grpc-56
io.ktor.plugin	plugin	minor	3.1.2 -> 3.2.0
io.ktor:ktor-client-js	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-client-cio	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-client-websockets	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-client-core	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-server-test-host	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-server-host-common-jvm	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-server-websockets-jvm	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-server-cors-jvm	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-server-netty-jvm	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-server-core-jvm	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-serialization-kotlinx-json	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-client-serialization	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-client-content-negotiation	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-client-okhttp	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-client-websockets-js	dependencies	minor	3.1.2 -> 3.2.0
io.ktor:ktor-server-cio	dependencies	minor	3.1.2 -> 3.2.0
org.jetbrains.compose	plugin	patch	1.8.0-SNAPSHOT+pull-5245 -> 1.8.1
androidx.compose.ui:ui-tooling-preview (source)	dependencies	minor	1.7.8 -> 1.8.2
androidx.compose.ui:ui-tooling (source)	dependencies	minor	1.7.8 -> 1.8.2
androidx.compose:compose-bom	dependencies	minor	2025.04.00 -> 2025.06.00
org.jetbrains.kotlinx.rpc.plugin	plugin	minor	0.6.0 -> 0.7.0
androidx.compose.foundation:foundation (source)	dependencies	minor	1.7.8 -> 1.8.2
androidx.compose.ui:ui-test-junit4 (source)	dependencies	minor	1.7.8 -> 1.8.2
androidx.compose.ui:ui-test-manifest (source)	dependencies	minor	1.7.8 -> 1.8.2
androidx.compose.ui:ui-graphics (source)	dependencies	minor	1.7.8 -> 1.8.2
androidx.compose.ui:ui (source)	dependencies	minor	1.7.8 -> 1.8.2
androidx.appcompat:appcompat (source)	dependencies	patch	1.7.0 -> 1.7.1
org.jetbrains.kotlin-wrappers:kotlin-wrappers-bom	dependencies	minor	2025.4.8 -> 2025.6.4
com.android.library (source)	plugin	minor	8.9.1 -> 8.10.1
com.android.application (source)	plugin	minor	8.9.1 -> 8.10.1

---

Release Notes

gradle/gradle (gradle)

v8.14.2

Compare Source

v8.14.1

Compare Source

v8.14

Compare Source

grpc/grpc-java (io.grpc:grpc-netty)

v1.73.0

API Changes

xds: Enable least request by default (#​12062)
core: Delete the long-deprecated GRPC_PROXY_EXP env variable (#​11988) (908f9f1). This was experimental and has been warning when used since v1.8.0. Use the Java-standard -Dhttps.proxyHost and -Dhttps.proxyPort instead
api: Remove deprecated SubchannelPicker.requestConnection() (f79ab2f). This API was replaced by LoadBalancer.requestConnection() in v1.22.0

Bug Fixes

config: prevents global stats config freeze in ConfiguratorRegistry.getConfigurators() (#​11991) (d4c46a7)
xds: XdsDepManager should ignore updates after shutdown (25199e9). This fixes a source of java.lang.NullPointerException: Cannot invoke "io.grpc.xds.XdsDependencyManager$RdsUpdateSupplier.getRdsUpdate()" because "routeSource" is null regression introduced in v1.72.0

Improvements

xds: listener type validation (#​11933) (c8d1e6e)
xds: add the missing xds.authority metric defined in gRFC A78 (#​12018) (6cd007d)

New Features

xds: float LRU cache across interceptors (#​11992) (7a08fdb)
xds: propagate audience from cluster resource in gcp auth filter. This completes the gRFC A83, implementation of GCP Authentication Filter. (#​11972) (84c7713)
opentelemetry: Implement grpc.lb.backend_service optional label (9619453). This completes the gRFC A89 implementation, which is enabled when requesting the new label

Documentation

api: Remove mention of "epoch" from Ticker.nanoTime() javadocs (84bd014)

v1.72.0

API Changes

• util: Remove deprecated method GracefulSwitchLb.switchTo() (f207be3). It is rarely used outside of gRPC itself. The configuration is passed as lb policy configuration instead
• xds: Add support for custom per-target credentials on the transport (#​11951) (1958e42)
• xds: Explicitly set request hash key for the ring hash LB policy (892144d)

Bug Fixes

• core: Apply ManagedChannelImpl's updateBalancingState() immediately (ca4819a)
• xds: Fix cluster selection races when updating config selector (d82613a)
• otel: Fix span names as per the A72 gRFC changes (#​11974) (94f8e93)
• xds: ClusterResolverLoadBalancer handle update for both resolved addresses and errors via ResolutionResult (#​11997) (8681786)

Improvements

• netty: Avoid allocating an exception on transport shutdown. This reduces allocation rate for connection-heavy workloads/load testing (a57c14a)
• servlet: Set an explicit description for CANCELLED status (#​11927) (fca1d3c)
• xds: gRFC A74 xDS Config Tears implementation in the XdsNameResolver (e80c197). While there is more remaining, users may already see reduced latency when resources are replaced. For example, if changing a route from one backend service to another, RPCs may see less latency during the transition
• core: Log any exception during channel panic because of exception (3961a92). This prevents the exception from propagating up the stack on an arbitrary thread. Such exceptions are rarely interesting. Instead, the exception that caused the channel panic is the important one, and RPCs will still fail with its details
• util: Graceful switch to new LB when leaving CONNECTING (2e260a4). Previously when using xDS and the configuration changes the LB policy, the old LB policy is used until the new one is READY. Now the old LB policy is used until the new policy becomes READY, TRANSIENT_FAILURE, or IDLE
• core: Use java.time.Time.getNano directly in InstantTimeProvider. Previously reflection was used which would confuse R8 full mode (#​11977) (7507a9e)
• core: Avoid cancellation exceptions when notifying watchers that already have their connections cancelled (#​11934) (350f90e)
• rls: allow maxAge in RLS config to exceed 5 minutes if staleAge is set. Previously, the limit was 5 minutes, which isn't enough for some gRPC clients (#​11931) (c340f4a)
• xds: avoid unnecessary dns lookup for CIDR addresses (#​11932) (602aece)
• netty: Swap to UniformStreamByteDistributor (#​11954) (2f52a00). gRPC will no longer observe the HTTP/2 priorities, which were not used directly by gRPC and deprecated in RFC 9113
• core: Avoid Set.removeAll() when passing a possibly-large List (#​11994) (666136b)
• stub: trailersFromThrowable() metadata should be copied (#​11979) (a6e1c1f)

New Features

• xds: xDS-based HTTP CONNECT configuration (#​11861) (1219706)
• netty: Per-rpc authority verification against peer cert subject names. Overriding transport authority at rpc time is only allowed when using TlsChannelCredentials. The per-rpc authority verification feature is guarded by the environment variable GRPC_ENABLE_PER_RPC_AUTHORITY_CHECK in this release. When this is false or not set, the rpc will not fail when the authority verification fails but a warning will be logged. In a subsequent release the usage of this environment variable will be removed and RPCs will start failing if the authority doesn't match the peer certificate names. The environment variable is temporary; if you are depending on the existing insecure behavior, please file an issue (#​11724) (cdab410)

Thanks to

@​panchenko
@​emmanuel-ferdman
@​JoeCqupt

ktorio/ktor (io.ktor:ktor-client-js)

v3.2.0

Published 12 June 2025

Features

• Dependency injection Ktor extension (KTOR-8267)
• Support Version Catalog (KTOR-8162)
• Unix domain socket support at the Ktor Engine level (KTOR-4766)
• Allow suspend Ktor modules (KTOR-8005)
• Ability to use browser cookie storage (KTOR-539)
• Configuration file deserialization (KTOR-7874)
• HttpCache: Support evicting/clearing cache (KTOR-6653)
• File configuration for dependencies (KTOR-8304)

Improvements

• Excessive allocation of ApplicationConfig when loading multiple files from CLI (KTOR-8563)
• Linux curl engine doesn't work for simultaneous websocket and http request (KTOR-8259)
• ktor-network produces ProGuard warning (KTOR-8525)
• More overloads for StringValuesBuilder.appendAll (KTOR-8573)
• HttpClientCall: Deprecate wrapWithContent and wrap (KTOR-8378)
• Add a way to create an ApplicationCall for testing (KTOR-7607)
• Configuration access API improvements (KTOR-8185)
• Application instance access in testApplication (KTOR-8215)
• The TestApplication client should be configurable and mutable (KTOR-8465)
• Support accessing resolved IP address on an instance of io.ktor.network.sockets.InetSocketAddress (KTOR-8490)
• Deprecate SaveBodyPlugin in favor of HttpClientCall.save (KTOR-8367)
• Obscure log message on server startup (KTOR-8519)
• Routing: accept should return 406 if the Accept header isn't matched (KTOR-8416)
• MicrometerMetrics: the route label can exceed length limit (KTOR-7274)
• Micrometer: Make route label configurable (KTOR-8183)
• Add more common ContentType values (KTOR-7108)

Bugfixes

• Logging/Darwin: IOException is thrown when detecting if body is a binary (KTOR-8581)
• Netty: NoSuchElementException or empty headers when responding with 204 (KTOR-8528)
• YAML configuration: NoSuchElementException when parameter is expanded with curly braces (KTOR-8575)
• ApplicationConfig: Most of the content is absent after merging configs (KTOR-8565)
• Android: "ProtocolException: TRACE does not support writing" when sending TRACE request (KTOR-8352)
• The "Content-Length: 0" header is added for GET requests sent to some servers (KTOR-6508)
• HttpRequestRetry: requests with some IOException's thrown by Java engine aren't retried (KTOR-6770)
• HttpCookies: Encoding of request cookies is not preserved in CookiesStorage (KTOR-8343)
• Url class mangles data URLs (KTOR-5708)
• SaveBodyPlugin: Logging plugin consumes response body (KTOR-6474)
• Config deserialization does not respect testApplication environment (KTOR-8436)
• Resources: Exclude a parent from query params when it is an object (KTOR-8507)
• BearerAuthProvider does not clear token if refreshTokens returns null (KTOR-8470)
• Coroutines launched from RoutingContext are not cancelled upon server shutdown (KTOR-8338)
• Application job is not joined during shutdown (KTOR-8291)
• HttpCache: InvalidCacheStateException thrown when Vary header has different entries is overly severe (KTOR-8345)
• Fix socket channel close handling (KTOR-8201)

v3.1.3

Published 5 May 2025

Improvements

• Implement toString for staticContentRoute (KTOR-8451)
• Don't send Authorization header for requests marked with markAsRefreshTokenRequest (KTOR-8107)
• ByteChannel single-byte operations are slow (KTOR-8412)
• Receiving multipart without Content-Length is very slow (KTOR-8407)
• MicrometerMetrics: different path 404s requests can be abused to trigger OOM (KTOR-8276)
• Compression & Static Content: No Vary Header when serving a compressed resource (KTOR-8326)
• HttpTimeout: Reference to nonexistent INFINITE_TIMEOUT_MS in the exception message (KTOR-8358)

Bugfixes

• Websockets: Unable to send a frame when ktor-serialization-kotlinx-json-jvm dependency is defined in Maven build (KTOR-7662)
• OkHttp: Cancelling of SSE request job doesn't cancel the connection (KTOR-8409)
• OkHttp: Exceptions are not propagated to flow collectors (KTOR-7947)
• OOM in CountedByteReadChannel while copying from multipart/form-data part channel (KTOR-8317)
• Apache5: "ProtocolException: OPTIONS request must have Content-Type header" is thrown when body isn't set (KTOR-8318)
• Netty/Websockets: server processes hanging in CLOSE_WAIT state after many concurrent requests (KTOR-7965)
• Update JTE to the version supporting Kotlin 2.1.0 (KTOR-8030)

JetBrains/compose-jb (org.jetbrains.compose)

v1.8.1

Changes since 1.8.0

Features

Resources

• Now a Compose library with resources may be built and used as XCFramework (it requires Kotlin Gradle plugin 2.2 or higher) #​5294
• Gradle Plugin DSL to change the generated Res class name #​5296

Fixes

Multiple Platforms

• Fix incorrect pointer position calculation with rotation around unspecified pivot #​2082

iOS

• Fix dialogs after modal view controller presentation #​2085
• Fix issue where androidx.compose.material3.ModalBottomSheet closes after any tap #​2086
• Fix context menu appearance after triple-tap #​2087
• Fix a memory leak in ComposeUIViewController when text input starts #​2088
• Use the cross-fade animation effect when rotating the screen with interop views #​2101
• Show an error message when UIKitViewController inside Popup or Dialog #​2102
• Fix an issue where the keyboard would appear after the second tap when the text input session was intercepted #​2103

Desktop

• [Linux] Fix svgPainter doesn't show any images #​2096
• Fix deadlock between BroadcastFrameClock.lock and Recomposer.stateLock #​2098
• Fix "Serializer for class is not found" using androidx.navigation and running ./gradlew runRelease #​5314
• kotlinx.serialization ProGuard rules are bundled in the Compose Gradle plugin #​5314

Web

• Fixed the positioning and the dimensions of the backing text input (HTML element). The bug used to lead to unexpected scrolls on the page due to the browser trying to bring the HTML element into a view #​2081

Resources

• Fix IDE highlighting/resolution when a generated file with resource accessors is too big #​5298

Dependencies

• Gradle Plugin org.jetbrains.compose, version 1.8.1. Based on Jetpack Compose libraries:

  • Runtime 1.8.1
  • UI 1.8.1
  • Foundation 1.8.1
  • Material 1.8.1
  • Material3 1.3.2

• Lifecycle libraries org.jetbrains.androidx.lifecycle:lifecycle-*:2.9.0. Based on Jetpack Lifecycle 2.9.0

• Navigation libraries org.jetbrains.androidx.navigation:navigation-*:2.9.0-beta02. Based on Jetpack Navigation 2.9.0

• Material3 Adaptive libraries org.jetbrains.compose.material3.adaptive:adaptive*:1.1.1. Based on Jetpack Material3 Adaptive 1.1.0

---

v1.8.0

Changes since 1.7.3

Highlights

Multiple Platforms

• Compose Multiplatform codebase is fully migrated to K2. Please note that native and web klibs can be consumed only with Kotlin 2.1.0 or newer. Also, due to underlying changes in the compiler plugin, it's better to recompile libraries against the new version. Please let us know if you find any compatibility issues during this migration #​1778
• Implement multiplatform BackHandler and PredictiveBackHandler. And use them in material3 widgets and androidx-navigation library #​1771

iOS

• Remove experimental flag from fun enableTraceOSLog() #​1652

Web

• Improves text input support in Safari on mobile and desktop #​1941
• Correct certain text input scenarios on Web targets #​1941

Resources

• Add FontVariation.Settings support to the resources library #​5183

Breaking Changes

Tests

• runOnIdle will now execute action on the UI thread aligning the behavior with Android #​1601
• runOnIdle will no longer call waitForIdle after executing the action aligning the behavior with Android #​1601
• Advancing mainClock such that it doesn't reach the next frame, will no longer cause a recomposition #​1618
• IdlingResource interface was moved from commonMain to android and desktop source sets. The related experimental methods of ComposeUiTest were moved too. They are not available for Web and iOS anymore. Consider using waitUntil function as an alternative. Note: it's a breaking change only for Web and iOS, but not for Desktop and Android #​1822

Multiple Platforms

• Multiplatform lifecycle was migrated from a internal core-bundle module to the androidx SavedState. Libraries that use org.jetbrains.androidx.lifecycle:lifecycle-viewmodel-savedstate or org.jetbrains.androidx.savedstate:savedstate should migrate to the latest version #​1850
• A custom implementation for deprecated LocalTextInputService is no longer supported #​1974

iOS

• Update AccessibilitySyncOptions and remove AccessibilityDebugLogger from public API #​1604
• Remove obsolete Canvas Layers mode on iOS #​1680
• Add Composable annotation to the WindowInsets.Companion.waterfall getter to match the expected API #​1919

Desktop

• Deprecated/experimental Modifier.onExternalDrag has been removed - common Modifier.dragAndDropTarget API should be used instead #​1606

Migration Notes

Multiple Platforms

• Google Maven now contains some artifacts for all Kotlin targets including Wasm and JS. Compose Multiplatform now depends on those artifacts and user projects might need to add google() repo to repositories {...} block if it is not there yet #​1819
• material/material3 libraries no longer add a dependency to material-icons-core so if your project relied on that, you will have to explicitly add that dependency in your build.gradle[.kts] files: #​2030
  implementation("org.jetbrains.compose.material:material-icons-core:1.7.3")

iOS

• LocalUIViewController moved to the androidx.compose.ui.uikit module #​1608
• ComposeUIViewControllerDelegate marked as deprecated. Use the parent view controller to override the methods of the UIViewController class #​1651
• Experimental classes CupertinoScrollDecayAnimationSpec and CupertinoOverscrollEffect are removed from public API #​1806

Gradle Plugin

• The Compose Gradle Plugin requires Kotlin Gradle Plugin 2.+ version now. Old org.jetbrains.compose.compiler is not supported anymore and the API to configure it was removed #​5293

Features

Multiple Platforms

• Support configurable vertical text centering via LineHeightStyle.Alignment #​1569
• Support Variable Fonts In All Platforms #​1623
• Update skia to m132 #​1823
• Adopt a new Clipboard interface with suspend functions, which work correctly on all targets including Web. The ClipboardManager was deprecated because it was not possible to correctly implement it for Web #​1796

iOS

• Support state announcements for scrollable lists in VoiceOver #​1644
• Support for accessibility gestures for left-to-right languages #​1663
• (Experimental) ComposeUIViewControllerConfiguration.useSeparateRenderThreadWhenPossible flag that allows offloading GPU commands encoding to the separate thread and improving performance #​1694
• Initial Drag&Drop support #​1690
• Align Compose components semantics with UIKit views accessibility #​1719
• Accessibility navigation uses safe area to calculate when focused rect is out of bounds #​1745
• Support VoiceControl on iOS #​1780
• AccessibilitySyncOptions removed. The accessibility tree is built on demand #​1780
• Calculate the order and location of semantic elements in the same way as it's done on Android #​1809
• Support UIAccessibilityContainerTypeSemanticGroup for traversal groups [#​1809](https://redirect.github.com/Je

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.