chore(deps): bump com.tencent:mmkv from 1.3.16 to 2.4.2 in /MikuRay

[dependabot]

Bumps com.tencent:mmkv from 1.3.16 to 2.4.2.

Release notes

Sourced from com.tencent:mmkv's releases.

v2.4.2 / 2026-08-21

This is a hotfix release based on v2.4.1. It adds targeted encrypted-write and backup/restore checks, fixes Kotlin Multiplatform consistency issues, and repairs native package build/link regressions.

Changes for All Platforms

• Fix: Hardened cryptographic random-IV generation, secure key cleanup, encryption-mode changes, and bounded protobuf writes.
• Fix: Prevented self-backup/restore through equivalent directory aliases, fixed uncached backup locking, rejected incomplete restore sources, and handled IDs ending in .crc.
• Fix: Corrected the one-year expiration constant, which previously represented 30 years on Android, iOS/macOS, HarmonyOS NEXT, Flutter, and Go.
• Fix: Made directory walking work with long paths and made PBUtility.h include its MMBuffer dependency directly.

Kotlin Multiplatform

• Fix: Preserved empty byte arrays and UTF-8 string values consistently across supported targets.
• Fix: Aligned key validation and expiration behavior across Android and iOS, including consistent rejection of embedded NUL keys.

iOS/macOS

• Fix: Fixed secure key wiping compilation on Apple platforms (#1675).

HarmonyOS NEXT

• Change: Added the package author email to OHPM metadata.

Flutter

• Fix: Fixed Swift Package Manager builds so Dart FFI entry points remain linked and exported on iOS/macOS (#1676).

Win32

• Fix: Fixed the C bridge build with MSVC and its UTF-8/wide-path boundaries (#1681).

Build

• Change: Added a reusable, guarded cleanup script for generated artifacts.

v2.4.1 / 2026-07-30

This is a maintenance release based on v2.4.0. It focuses on data-safety fixes, encrypted-file compatibility, packaging/build cleanup, and experimental Kotlin Multiplatform support for Android and iOS.

Changes for All Platforms

• Fix: Improved MMKV instance lifecycle handling with safer wrapper ownership, native lock teardown, and clarified destructive close() semantics.
• Fix: Fixed an oversized-key corruption bug where keys longer than the internal uint16_t holder limit could overflow key/value metadata and corrupt subsequent reads.
• Fix: Fixed an expireDuration overflow bug (#1665). Very large expiration durations are now clamped safely instead of wrapping around.
• Fix: Improved encrypted MMKV random-IV upgrade behavior. Existing encrypted files using the older IV format now trigger a full writeback when possible so they are upgraded to the random-IV format.
• Fix: Added safer random-IV reset behavior when clearing memory cache for encrypted instances.
• Fix: Fixed -Wmissing-braces warnings in Android, Win32, and POSIX demo code.
• Change: Added extra mmap/munmap logging to help diagnose file mapping lifecycle issues.
• Feature: Added a universal C interface (Core/cbridge) for MMKV Core, with NameSpace support and a pure C demo. The C bridge is also used by the KMP iOS package.

Kotlin Multiplatform

• Experimental: Added Kotlin Multiplatform support for Android and iOS via the Gradle package com.tencent:mmkv-kmp:2.4.1. The API and artifact layout may change in a future release.
• Supported targets: Android, iosArm64, iosSimulatorArm64, and iosX64.
• Android delegates to the native com.tencent:mmkv:2.4.1 AAR. iOS embeds MMKV Core through the C bridge in the published native KLIBs.
• Fix: Added platform-parity buffer/state APIs, preserved empty byte arrays on iOS, respected handler notification preferences, and added Android device plus Kotlin/Native smoke tests.
• Fix: Improved MMKV instance lifecycle handling and clarified destructive close() semantics.

... (truncated)

Changelog

Sourced from com.tencent:mmkv's changelog.

v2.4.2 / 2026-08-21

This is a hotfix release based on v2.4.1. It adds targeted encrypted-write and backup/restore checks, fixes Kotlin Multiplatform consistency issues, and repairs native package build/link regressions.

Changes for All Platforms

• Fix: Hardened cryptographic random-IV generation, secure key cleanup, encryption-mode changes, and bounded protobuf writes.
• Fix: Prevented self-backup/restore through equivalent directory aliases, fixed uncached backup locking, rejected incomplete restore sources, and handled IDs ending in .crc.
• Fix: Corrected the one-year expiration constant, which previously represented 30 years on Android, iOS/macOS, HarmonyOS NEXT, Flutter, and Go.
• Fix: Made directory walking work with long paths and made PBUtility.h include its MMBuffer dependency directly.

Kotlin Multiplatform

• Fix: Preserved empty byte arrays and UTF-8 string values consistently across supported targets.
• Fix: Aligned key validation and expiration behavior across Android and iOS, including consistent rejection of embedded NUL keys.

iOS/macOS

• Fix: Fixed secure key wiping compilation on Apple platforms (#1675).

HarmonyOS NEXT

• Change: Added the package author email to OHPM metadata.

Flutter

• Fix: Fixed Swift Package Manager builds so Dart FFI entry points remain linked and exported on iOS/macOS (#1676).

Win32

• Fix: Fixed the C bridge build with MSVC and its UTF-8/wide-path boundaries (#1681).

Build

• Change: Added a reusable, guarded cleanup script for generated artifacts.

v2.4.1 / 2026-07-30

This is a maintenance release based on v2.4.0. It focuses on data-safety fixes, encrypted-file compatibility, packaging/build cleanup, and experimental Kotlin Multiplatform support for Android and iOS.

Changes for All Platforms

• Fix: Improved MMKV instance lifecycle handling with safer wrapper ownership, native lock teardown, and clarified destructive close() semantics.
• Fix: Fixed an oversized-key corruption bug where keys longer than the internal uint16_t holder limit could overflow key/value metadata and corrupt subsequent reads.
• Fix: Fixed an expireDuration overflow bug (#1665). Very large expiration durations are now clamped safely instead of wrapping around.
• Fix: Improved encrypted MMKV random-IV upgrade behavior. Existing encrypted files using the older IV format now trigger a full writeback when possible so they are upgraded to the random-IV format.
• Fix: Added safer random-IV reset behavior when clearing memory cache for encrypted instances.
• Fix: Fixed -Wmissing-braces warnings in Android, Win32, and POSIX demo code.
• Change: Added extra mmap/munmap logging to help diagnose file mapping lifecycle issues.
• Feature: Added a universal C interface (Core/cbridge) for MMKV Core, with NameSpace support and a pure C demo. The C bridge is also used by the KMP iOS package.

Kotlin Multiplatform

• Experimental: Added Kotlin Multiplatform support for Android and iOS via the Gradle package com.tencent:mmkv-kmp:2.4.1. The API and artifact layout may change in a future release.
• Supported targets: Android, iosArm64, iosSimulatorArm64, and iosX64.
• Android delegates to the native com.tencent:mmkv:2.4.1 AAR. iOS embeds MMKV Core through the C bridge in the published native KLIBs.
• Fix: Added platform-parity buffer/state APIs, preserved empty byte arrays on iOS, respected handler notification preferences, and added Android device plus Kotlin/Native smoke tests.
• Fix: Improved MMKV instance lifecycle handling and clarified destructive close() semantics.

... (truncated)

Commits

• ad7657e Merge pull request #1683 from Tencent/dev
• 79b6c97 udpate date of v2.4.2
• 3938c95 Use do-while for random IV reads
• baf36b8 Refine v2.4.2 hardening fixes
• 6df31b7 Prepare for v2.4.2 hotfix
• b911a9c Merge pull request #1682 from naivetoby/fix/flutter-mmkv-spm-linking
• 4517b25 fix(flutter): 修复 SwiftPM 动态链接 MMKV
• e239b30 Fix Flutter SwiftPM FFI symbol exports #1676
• cae12b2 Add reusable generated-artifact cleanup script
• 86d1fe6 Fix Windows C bridge compilation #1681
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)