Skip to content

Bump the libs group across 1 directory with 19 updates#515

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/libs-08261658b7
Open

Bump the libs group across 1 directory with 19 updates#515
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/libs-08261658b7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 9, 2026 •
edited
Loading

Bumps the libs group with 19 updates in the / directory:

Package From To
gradle-wrapper 9.3.0 9.4.0
org.jetbrains.kotlin:kotlin-bom 2.3.0 2.3.10
org.jetbrains.kotlin.jvm 2.3.0 2.3.10
org.jetbrains.kotlin.plugin.spring 2.3.0 2.3.10
org.jetbrains.kotlin.plugin.serialization 2.3.0 2.3.10
org.jetbrains.kotlinx:kotlinx-serialization-bom 1.9.0 1.10.0
io.arrow-kt:arrow-stack 2.2.1.1 2.2.2
com.nimbusds:nimbus-jose-jwt 10.0.2 10.8
com.nimbusds:oauth2-oidc-sdk 11.23.1 11.34
org.bouncycastle:bcpkix-jdk18on 1.80 1.83
org.webjars:bootstrap 5.3.3 5.3.8
com.google.crypto.tink:tink 1.17.0 1.20.0
id.walt.mdoc-credentials:waltid-mdoc-credentials-jvm 0.11.0 1.13.0
com.eygraber:uri-kmp 0.0.19 0.0.21
com.google.zxing:javase 3.5.3 3.5.4
org.springframework.boot 4.0.1 4.0.3
com.diffplug.spotless 7.0.2 8.3.0
org.owasp.dependencycheck 12.1.1 12.2.0
org.jetbrains.kotlinx.kover 0.9.4 0.9.7

Updates gradle-wrapper from 9.3.0 to 9.4.0

Updates org.jetbrains.kotlin:kotlin-bom from 2.3.0 to 2.3.10

Release notes

Sourced from org.jetbrains.kotlin:kotlin-bom's releases.

Kotlin 2.3.10

Changelog

Compiler

  • KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
  • KT-83317 ClassCastException: with cast kotlin.UInt to java.lang.Number when defining constant
  • KT-83031 K2: unstable resolution of EnhancedNullability from type-use NotNull in presence of unused code
  • KT-81700 flaky overload resolution behaviors (false-positive errors, different final candidates, compile-time failures)
  • KT-83983 Revert of KT-83081
  • KT-83314 JSpecify @NullMarked changes Java equals(Object) to equals(Any?) causing override conflict in Kotlin 2.3
  • KT-82863 @NoInfer regression since 2.2.20
  • KT-82841 "kotlin.NoWhenBranchMatchedException" in when with !is check & non-sealed class in the middle of hierarchy

JVM. Reflection

  • KT-83608 Kotlin-reflect: "Unknown origin of public abstract operator fun invoke(p1: P1, p2: P2): R"
  • KT-83361 "KotlinReflectionInternalError: Type parameter not found: 0" on super types with Kotlin 2.3.0
  • KT-42199 "KotlinReflectionInternalError: Unknown origin of public abstract operator fun invoke" on function reference to FunctionN.invoke
  • KT-81024 Reflection: New KType implementation fails on arguments comparison for a Nothing type parameter

Tools. Compiler Plugins

  • KT-83266 "Unsupported class file major version 69" for "produceReleaseComposeMapping" task with Kotlin 2.3
  • KT-83099 Compose compiler does not generate stack trace mappings for project files

Tools. Gradle

  • KT-83070 The KGP api reference is missing a description
  • KT-82459 Improve iOS simulator boot implementation

Tools. Gradle. JS

  • KT-82946 Js, Wasm: Upgrade NPM dependencies

Tools. Gradle. Multiplatform

  • KT-83687 Revert deprecation of 'androidTarget' for AGP lower than 9

Kotlin 2.3.10-RC2

ChangeLog

Compiler

  • KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
  • KT-83983 Revert of KT-83081

Kotlin 2.3.10-RC

Changelog

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin:kotlin-bom's changelog.

2.3.10

Compiler

  • KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
  • KT-83317 ClassCastException: with cast kotlin.UInt to java.lang.Number when defining constant
  • KT-83031 K2: unstable resolution of EnhancedNullability from type-use NotNull in presence of unused code
  • KT-81700 flaky overload resolution behaviors (false-positive errors, different final candidates, compile-time failures)
  • KT-83983 Revert of KT-83081
  • KT-83314 JSpecify @NullMarked changes Java equals(Object) to equals(Any?) causing override conflict in Kotlin 2.3
  • KT-82863 @NoInfer regression since 2.2.20
  • KT-82841 "kotlin.NoWhenBranchMatchedException" in when with !is check & non-sealed class in the middle of hierarchy

JVM. Reflection

  • KT-83608 Kotlin-reflect: "Unknown origin of public abstract operator fun invoke(p1: P1, p2: P2): R"
  • KT-83361 "KotlinReflectionInternalError: Type parameter not found: 0" on super types with Kotlin 2.3.0
  • KT-42199 "KotlinReflectionInternalError: Unknown origin of public abstract operator fun invoke" on function reference to FunctionN.invoke
  • KT-81024 Reflection: New KType implementation fails on arguments comparison for a Nothing type parameter

Tools. Compiler Plugins

  • KT-83266 "Unsupported class file major version 69" for "produceReleaseComposeMapping" task with Kotlin 2.3
  • KT-83099 Compose compiler does not generate stack trace mappings for project files

Tools. Gradle

  • KT-83070 The KGP api reference is missing a description
  • KT-82459 Improve iOS simulator boot implementation

Tools. Gradle. JS

  • KT-82946 Js, Wasm: Upgrade NPM dependencies

Tools. Gradle. Multiplatform

  • KT-83687 Revert deprecation of 'androidTarget' for AGP lower than 9
Commits
  • 679366a Add ChangeLog for 2.3.10-RC2
  • 14ba833 Serialization: remove potential data race during extension registration
  • fb8d334 Revert "K2: implement equality for ConeAttribute.EnhancedNullability"
  • 412afb7 Add ChangeLog for 2.3.10-RC
  • edea41e [Gradle] Un-deprecate 'androidTarget()'
  • 0946452 Bump version of the ASM dependency
  • 655fb78 Reflection: always compute JVM signature of built-in functions manually
  • 58d3875 Fix mergeReleaseComposeMapping task failure when build cache is enabled
  • 56e0a79 Copy R8 outputs to Compose folder when transforming obfuscation file
  • e0eb174 Fix classId for detecting protobuf enums
  • Additional commits viewable in compare view

Updates org.jetbrains.kotlin.jvm from 2.3.0 to 2.3.10

Release notes

Sourced from org.jetbrains.kotlin.jvm's releases.

Kotlin 2.3.10

Changelog

Compiler

  • KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
  • KT-83317 ClassCastException: with cast kotlin.UInt to java.lang.Number when defining constant
  • KT-83031 K2: unstable resolution of EnhancedNullability from type-use NotNull in presence of unused code
  • KT-81700 flaky overload resolution behaviors (false-positive errors, different final candidates, compile-time failures)
  • KT-83983 Revert of KT-83081
  • KT-83314 JSpecify @NullMarked changes Java equals(Object) to equals(Any?) causing override conflict in Kotlin 2.3
  • KT-82863 @NoInfer regression since 2.2.20
  • KT-82841 "kotlin.NoWhenBranchMatchedException" in when with !is check & non-sealed class in the middle of hierarchy

JVM. Reflection

  • KT-83608 Kotlin-reflect: "Unknown origin of public abstract operator fun invoke(p1: P1, p2: P2): R"
  • KT-83361 "KotlinReflectionInternalError: Type parameter not found: 0" on super types with Kotlin 2.3.0
  • KT-42199 "KotlinReflectionInternalError: Unknown origin of public abstract operator fun invoke" on function reference to FunctionN.invoke
  • KT-81024 Reflection: New KType implementation fails on arguments comparison for a Nothing type parameter

Tools. Compiler Plugins

  • KT-83266 "Unsupported class file major version 69" for "produceReleaseComposeMapping" task with Kotlin 2.3
  • KT-83099 Compose compiler does not generate stack trace mappings for project files

Tools. Gradle

  • KT-83070 The KGP api reference is missing a description
  • KT-82459 Improve iOS simulator boot implementation

Tools. Gradle. JS

  • KT-82946 Js, Wasm: Upgrade NPM dependencies

Tools. Gradle. Multiplatform

  • KT-83687 Revert deprecation of 'androidTarget' for AGP lower than 9

Kotlin 2.3.10-RC2

ChangeLog

Compiler

  • KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
  • KT-83983 Revert of KT-83081

Kotlin 2.3.10-RC

Changelog

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin.jvm's changelog.

2.3.10

Compiler

  • KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
  • KT-83317 ClassCastException: with cast kotlin.UInt to java.lang.Number when defining constant
  • KT-83031 K2: unstable resolution of EnhancedNullability from type-use NotNull in presence of unused code
  • KT-81700 flaky overload resolution behaviors (false-positive errors, different final candidates, compile-time failures)
  • KT-83983 Revert of KT-83081
  • KT-83314 JSpecify @NullMarked changes Java equals(Object) to equals(Any?) causing override conflict in Kotlin 2.3
  • KT-82863 @NoInfer regression since 2.2.20
  • KT-82841 "kotlin.NoWhenBranchMatchedException" in when with !is check & non-sealed class in the middle of hierarchy

JVM. Reflection

  • KT-83608 Kotlin-reflect: "Unknown origin of public abstract operator fun invoke(p1: P1, p2: P2): R"
  • KT-83361 "KotlinReflectionInternalError: Type parameter not found: 0" on super types with Kotlin 2.3.0
  • KT-42199 "KotlinReflectionInternalError: Unknown origin of public abstract operator fun invoke" on function reference to FunctionN.invoke
  • KT-81024 Reflection: New KType implementation fails on arguments comparison for a Nothing type parameter

Tools. Compiler Plugins

  • KT-83266 "Unsupported class file major version 69" for "produceReleaseComposeMapping" task with Kotlin 2.3
  • KT-83099 Compose compiler does not generate stack trace mappings for project files

Tools. Gradle

  • KT-83070 The KGP api reference is missing a description
  • KT-82459 Improve iOS simulator boot implementation

Tools. Gradle. JS

  • KT-82946 Js, Wasm: Upgrade NPM dependencies

Tools. Gradle. Multiplatform

  • KT-83687 Revert deprecation of 'androidTarget' for AGP lower than 9
Commits
  • 679366a Add ChangeLog for 2.3.10-RC2
  • 14ba833 Serialization: remove potential data race during extension registration
  • fb8d334 Revert "K2: implement equality for ConeAttribute.EnhancedNullability"
  • 412afb7 Add ChangeLog for 2.3.10-RC
  • edea41e [Gradle] Un-deprecate 'androidTarget()'
  • 0946452 Bump version of the ASM dependency
  • 655fb78 Reflection: always compute JVM signature of built-in functions manually
  • 58d3875 Fix mergeReleaseComposeMapping task failure when build cache is enabled
  • 56e0a79 Copy R8 outputs to Compose folder when transforming obfuscation file
  • e0eb174 Fix classId for detecting protobuf enums
  • Additional commits viewable in compare view

Updates org.jetbrains.kotlin.plugin.spring from 2.3.0 to 2.3.10

Release notes

Sourced from org.jetbrains.kotlin.plugin.spring's releases.

Kotlin 2.3.10

Changelog

Compiler

  • KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
  • KT-83317 ClassCastException: with cast kotlin.UInt to java.lang.Number when defining constant
  • KT-83031 K2: unstable resolution of EnhancedNullability from type-use NotNull in presence of unused code
  • KT-81700 flaky overload resolution behaviors (false-positive errors, different final candidates, compile-time failures)
  • KT-83983 Revert of KT-83081
  • KT-83314 JSpecify @NullMarked changes Java equals(Object) to equals(Any?) causing override conflict in Kotlin 2.3
  • KT-82863 @NoInfer regression since 2.2.20
  • KT-82841 "kotlin.NoWhenBranchMatchedException" in when with !is check & non-sealed class in the middle of hierarchy

JVM. Reflection

  • KT-83608 Kotlin-reflect: "Unknown origin of public abstract operator fun invoke(p1: P1, p2: P2): R"
  • KT-83361 "KotlinReflectionInternalError: Type parameter not found: 0" on super types with Kotlin 2.3.0
  • KT-42199 "KotlinReflectionInternalError: Unknown origin of public abstract operator fun invoke" on function reference to FunctionN.invoke
  • KT-81024 Reflection: New KType implementation fails on arguments comparison for a Nothing type parameter

Tools. Compiler Plugins

  • KT-83266 "Unsupported class file major version 69" for "produceReleaseComposeMapping" task with Kotlin 2.3
  • KT-83099 Compose compiler does not generate stack trace mappings for project files

Tools. Gradle

  • KT-83070 The KGP api reference is missing a description
  • KT-82459 Improve iOS simulator boot implementation

Tools. Gradle. JS

  • KT-82946 Js, Wasm: Upgrade NPM dependencies

Tools. Gradle. Multiplatform

  • KT-83687 Revert deprecation of 'androidTarget' for AGP lower than 9

Kotlin 2.3.10-RC2

ChangeLog

Compiler

  • KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
  • KT-83983 Revert of KT-83081

Kotlin 2.3.10-RC

Changelog

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin.plugin.spring's changelog.

2.3.10

Compiler

  • KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
  • KT-83317 ClassCastException: with cast kotlin.UInt to java.lang.Number when defining constant
  • KT-83031 K2: unstable resolution of EnhancedNullability from type-use NotNull in presence of unused code
  • KT-81700 flaky overload resolution behaviors (false-positive errors, different final candidates, compile-time failures)
  • KT-83983 Revert of KT-83081
  • KT-83314 JSpecify @NullMarked changes Java equals(Object) to equals(Any?) causing override conflict in Kotlin 2.3
  • KT-82863 @NoInfer regression since 2.2.20
  • KT-82841 "kotlin.NoWhenBranchMatchedException" in when with !is check & non-sealed class in the middle of hierarchy

JVM. Reflection

  • KT-83608 Kotlin-reflect: "Unknown origin of public abstract operator fun invoke(p1: P1, p2: P2): R"
  • KT-83361 "KotlinReflectionInternalError: Type parameter not found: 0" on super types with Kotlin 2.3.0
  • KT-42199 "KotlinReflectionInternalError: Unknown origin of public abstract operator fun invoke" on function reference to FunctionN.invoke
  • KT-81024 Reflection: New KType implementation fails on arguments comparison for a Nothing type parameter

Tools. Compiler Plugins

  • KT-83266 "Unsupported class file major version 69" for "produceReleaseComposeMapping" task with Kotlin 2.3
  • KT-83099 Compose compiler does not generate stack trace mappings for project files

Tools. Gradle

  • KT-83070 The KGP api reference is missing a description
  • KT-82459 Improve iOS simulator boot implementation

Tools. Gradle. JS

  • KT-82946 Js, Wasm: Upgrade NPM dependencies

Tools. Gradle. Multiplatform

  • KT-83687 Revert deprecation of 'androidTarget' for AGP lower than 9
Commits
  • 679366a Add ChangeLog for 2.3.10-RC2
  • 14ba833 Serialization: remove potential data race during extension registration
  • fb8d334 Revert "K2: implement equality for ConeAttribute.EnhancedNullability"
  • 412afb7 Add ChangeLog for 2.3.10-RC
  • edea41e [Gradle] Un-deprecate 'androidTarget()'
  • 0946452 Bump version of the ASM dependency
  • 655fb78 Reflection: always compute JVM signature of built-in functions manually
  • 58d3875 Fix mergeReleaseComposeMapping task failure when build cache is enabled
  • 56e0a79 Copy R8 outputs to Compose folder when transforming obfuscation file
  • e0eb174 Fix classId for detecting protobuf enums
  • Additional commits viewable in compare view

Updates org.jetbrains.kotlin.plugin.serialization from 2.3.0 to 2.3.10

Release notes

Sourced from org.jetbrains.kotlin.plugin.serialization's releases.

Kotlin 2.3.10

Changelog

Compiler

  • KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
  • KT-83317 ClassCastException: with cast kotlin.UInt to java.lang.Number when defining constant
  • KT-83031 K2: unstable resolution of EnhancedNullability from type-use NotNull in presence of unused code
  • KT-81700 flaky overload resolution behaviors (false-positive errors, different final candidates, compile-time failures)
  • KT-83983 Revert of KT-83081
  • KT-83314 JSpecify @NullMarked changes Java equals(Object) to equals(Any?) causing override conflict in Kotlin 2.3
  • KT-82863 @NoInfer regression since 2.2.20
  • KT-82841 "kotlin.NoWhenBranchMatchedException" in when with !is check & non-sealed class in the middle of hierarchy

JVM. Reflection

  • KT-83608 Kotlin-reflect: "Unknown origin of public abstract operator fun invoke(p1: P1, p2: P2): R"
  • KT-83361 "KotlinReflectionInternalError: Type parameter not found: 0" on super types with Kotlin 2.3.0
  • KT-42199 "KotlinReflectionInternalError: Unknown origin of public abstract operator fun invoke" on function reference to FunctionN.invoke
  • KT-81024 Reflection: New KType implementation fails on arguments comparison for a Nothing type parameter

Tools. Compiler Plugins

  • KT-83266 "Unsupported class file major version 69" for "produceReleaseComposeMapping" task with Kotlin 2.3
  • KT-83099 Compose compiler does not generate stack trace mappings for project files

Tools. Gradle

  • KT-83070 The KGP api reference is missing a description
  • KT-82459 Improve iOS simulator boot implementation

Tools. Gradle. JS

  • KT-82946 Js, Wasm: Upgrade NPM dependencies

Tools. Gradle. Multiplatform

  • KT-83687 Revert deprecation of 'androidTarget' for AGP lower than 9

Kotlin 2.3.10-RC2

ChangeLog

Compiler

  • KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
  • KT-83983 Revert of KT-83081

Kotlin 2.3.10-RC

Changelog

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin.plugin.serialization's changelog.

2.3.10

Compiler

  • KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
  • KT-83317 ClassCastException: with cast kotlin.UInt to java.lang.Number when defining constant
  • KT-83031 K2: unstable resolution of EnhancedNullability from type-use NotNull in presence of unused code
  • KT-81700 flaky overload resolution behaviors (false-positive errors, different final candidates, compile-time failures)
  • KT-83983 Revert of KT-83081
  • KT-83314 JSpecify @NullMarked changes Java equals(Object) to equals(Any?) causing override conflict in Kotlin 2.3
  • KT-82863 @NoInfer regression since 2.2.20
  • KT-82841 "kotlin.NoWhenBranchMatchedException" in when with !is check & non-sealed class in the middle of hierarchy

JVM. Reflection

  • KT-83608 Kotlin-reflect: "Unknown origin of public abstract operator fun invoke(p1: P1, p2: P2): R"
  • KT-83361 "KotlinReflectionInternalError: Type parameter not found: 0" on super types with Kotlin 2.3.0
  • KT-42199 "KotlinReflectionInternalError: Unknown origin of public abstract operator fun invoke" on function reference to FunctionN.invoke
  • KT-81024 Reflection: New KType implementation fails on arguments comparison for a Nothing type parameter

Tools. Compiler Plugins

  • KT-83266 "Unsupported class file major version 69" for "produceReleaseComposeMapping" task with Kotlin 2.3
  • KT-83099 Compose compiler does not generate stack trace mappings for project files

Tools. Gradle

  • KT-83070 The KGP api reference is missing a description
  • KT-82459 Improve iOS simulator boot implementation

Tools. Gradle. JS

  • KT-82946 Js, Wasm: Upgrade NPM dependencies

Tools. Gradle. Multiplatform

  • KT-83687 Revert deprecation of 'androidTarget' for AGP lower than 9
Commits
  • 679366a Add ChangeLog for 2.3.10-RC2
  • 14ba833 Serialization: remove potential data race during extension registration
  • fb8d334 Revert "K2: implement equality for ConeAttribute.EnhancedNullability"
  • 412afb7 Add ChangeLog for 2.3.10-RC
  • edea41e [Gradle] Un-deprecate 'androidTarget()'
  • 0946452 Bump version of the ASM dependency
  • 655fb78 Reflection: always compute JVM signature of built-in functions manually
  • 58d3875 Fix mergeReleaseComposeMapping task failure when build cache is enabled
  • 56e0a79 Copy R8 outputs to Compose folder when transforming obfuscation file
  • e0eb174 Fix classId for detecting protobuf enums
  • Additional commits viewable in compare view

Updates org.jetbrains.kotlinx:kotlinx-serialization-bom from 1.9.0 to 1.10.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-bom's releases.

1.10.0

This release is based on Kotlin 2.3.0 and contains all of the changes from 1.10.0-RC. The only additional change is a fix for ProtoBuf packing of Kotlin unsigned types (#3079). Big thanks to KosmX for contributing the fix.

For your convenience, the changelog for 1.10.0-RC is duplicated below:

Stabilization of APIs

kotlinx-serialization 1.10 and subsequent releases will be focused on stabilization of existing APIs. The following APIs and configuration options are no longer experimental because they're widely used without any known major issues:

  • Json configuration options: decodeEnumsCaseInsensitive, allowTrailingComma, allowComments, and prettyPrintIndent. (#3100)
  • @EncodeDefault annotation and its modes. (#3106)
  • JsonUnquotedLiteral constructor function (#2900)
  • JsonPrimitive constructor function overloads that accept unsigned types. (#3117)
  • JSON DSL functions on JsonElement with Nothing? overloads. (#3117)

Readiness for return value checker

Kotlin 2.3.0 introduces a new feature aimed at helping you to catch bugs related to the accidentally ignored return value of the function. kotlinx-serialization 1.10.0-RC code is fully marked for this feature, meaning that you can get warnings for unused function calls like Json.encodeToString(...). To get the warnings, the feature has to be enabled in your project as described here.

Polymorphism improvements

Polymorphic serialization received a couple of improvements in this release:

New subclassesOfSealed utility to automatically register sealed subclasses serializers in polymorphic modules (#2201).

Use it in your SerializersModule when configuring a polymorphic hierarchy which contains both abstract and sealed classes. For example, when root of your hierarchy is an interface, but most of your inheritors are sealed classes. The new function will register all known sealed subclasses for you, so you don’t need to list them one by one. This makes writing your SerializerModules much faster and simpler. Big thanks to Paul de Vrieze for contributing this feature.

Class discriminator conflict check rework (#3105).

If a payload already contains a property with the same name as the configured discriminator (for example, type), it is called a class discriminator conflict. To produce a correct output and allow more inputs to be deserialized at the same time, the following changes were made:

  • Conflicts introduced by JsonNamingStrategy transformations are now detected during serialization as well and will cause SerializationException. It also affects non-polymorphic classes.
  • Conflicts from ClassDisciminatorMode.ALL_JSON_OBJECTS and SerializersModuleBuilder.polymorphicDefaultSerializer are also detected.
  • It is allowed to deserialize such a conflicting key for both sealed and open polymorphic hierarchies. Previously, it was possible in the sealed hierarchies alone due to missing assertion. See #1664 for details.

General improvements

  • Add .serialName to MissingFieldException for clearer diagnostics. (#3114)
  • Generate unique Automatic-Module-Name entries for metadata JARs. (#3109)
  • Revised ProGuard rules and added R8 tests. (#3041)
  • CBOR: Improved error message when a byte string/array type mismatch is encountered. (#3052)

Bugfixes

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-bom's changelog.

1.10.0 / 2026-01-21

This release is based on Kotlin 2.3.0 and contains all of the changes from 1.10.0-RC. The only additional change is a fix for ProtoBuf packing of Kotlin unsigned types (#3079). Big thanks to KosmX for contributing the fix.

For your convenience, the changelog for 1.10.0-RC is duplicated below:

Stabilization of APIs

kotlinx-serialization 1.10 and subsequent releases will be focused on stabilization of existing APIs. The following APIs and configuration options are no longer experimental because they're widely used without any known major issues:

  • Json configuration options: decodeEnumsCaseInsensitive, allowTrailingComma, allowComments, and prettyPrintIndent. (#3100)
  • @EncodeDefault annotation and its modes. (#3106)
  • JsonUnquotedLiteral constructor function (#2900)
  • JsonPrimitive constructor function overloads that accept unsigned types. (#3117)
  • JSON DSL functions on JsonElement with Nothing? overloads. (#3117)

Readiness for return value checker

Kotlin 2.3.0 introduces a new feature aimed at helping you to catch bugs related to the accidentally ignored return value of the function. kotlinx-serialization 1.10.0-RC code is fully marked for this feature, meaning that you can get warnings for unused function calls like Json.encodeToString(...). To get the warnings, the feature has to be enabled in your project as described here.

Polymorphism improvements

Polymorphic serialization received a couple of improvements in this release:

New subclassesOfSealed utility to automatically register sealed subclasses serializers in polymorphic modules (#2201). Use it in your SerializersModule when configuring a polymorphic hierarchy which contains both abstract and sealed classes. For example, when root of your hierarchy is an interface, but most of your inheritors are sealed classes. The new function will register all known sealed subclasses for you, so you don’t need to list them one by one. This makes writing your SerializerModules much faster and simpler. Big thanks to Paul de Vrieze for contributing this feature.

Class discriminator conflict check rework (#3105). If a payload already contains a property with the same name as the configured discriminator (for example, type), it is called a class discriminator conflict. To produce a correct output and allow more inputs to be deserialized at the same time, the following changes were made:

  • Conflicts introduced by JsonNamingStrategy transformations are now detected during serialization as well and will cause SerializationException. It also affects non-polymorphic classes.
  • Conflicts from ClassDisciminatorMode.ALL_JSON_OBJECTS and SerializersModuleBuilder.polymorphicDefaultSerializer are also detected.
  • It is allowed to deserialize such a conflicting key for both sealed and open polymorphic hierarchies. Previously, it was possible in the sealed hierarchies alone due to missing assertion. See #1664 for details.

General improvements

... (truncated)

Commits
  • 370c4e3 Prepare 1.10.0 release (#3142)
  • eaa4b0b Merge remote-tracking branch 'origin/master' into dev
  • 0311f16 Fix ProtoBuf packing for kotlin unsigned types (#3079)
  • a19df8c Add a disclaimer to "Other community-supported formats" section and slightly ...
  • 2f8a874 Add JSON5 to community-supported formats (#3134)
  • 975af2c Actualize releasing process document
  • e8be81f Prepare 1.10.0-RC release
  • e334d1c [CBOR] Fix various bugs in the decoder implementation
  • d7ca108 Merge remote-tracking branch 'origin/master' into dev
  • a5a3c97 IR inliner: Enable intra-module mode for kotlinx.serialization (#3128)
  • Additional commits viewable in compare view

Updates io.arrow-kt:arrow-stack from 2.2.1.1 to 2.2.2

Release notes

Sourced from io.arrow-kt:arrow-stack's releases.

2.2.2

This release is mostly about bugfixing, although it also enables supports for more platforms, and exposes additional APIs using context parameters.

What's Changed

New Contributors

Full Changelog: arrow-kt/arrow@2.2.1.1...2.2.2

Commits

Updates com.nimbusds:nimbus-jose-jwt from 10.0.2 to 10.8

Changelog

Sourced from com.nimbusds:nimbus-jose-jwt's changelog.

10.0.2 (2025-02-25) * Updates JSONObjectUtils.parse and JSONArrayUtils.parse to reject JSON strings with object and array nesting deeper than 255. This is intended to prevent StackOverflowError's in Gson when a parsed JSON string with excessive nesting is serialised, for example to log the claims of a parsed JWT. Note that in Gson the JSON reader is not susceptible to StackOverflowError's, only the serialisation. The nesting limit of depth 255 is introduced in Gson 2.12.0 (iss #583). * Updates GSon to 2.12.1.

10.1 (2025-04-03) * Restores module-info.java. * Adds ExpiredJWTException extends BadJWTException to enable easy programmatic detection whether a JWT has expired (iss #585). * Adds URLBasedJWKSetSource getJWKSetURL and getResourceRetriever methods to ease class extension.

10.2 (2025-04-07) * Gson is made a direct instead of a shaded dependency to address module issues introduced in 10.1 (iss #550).

10.3 (2025-05-09) * Restores the Gson shading, adding placeholder interfaces to prevent NoClassDefFoundError occurrences at runtime when the JAR is used on a module path (iss #550).

10.3.1 (2025-07-01) * OctetKeyPairGenerator with Curve.Ed25519 should use the provided SecureRandom (iss #590).

10.4 (2025-07-19) * Creates a hierarchy of Option interfaces, extended by JWSSignerOption, JWEEncrypterOption and JWEDecrypterOption. Intended to provide optional configuration parameters to RSASSASigner, ECDSASigner, RSADecrypter, etc. * Introduces CipherMode implementing JWEEncrypterOption and JWEDecrypterOption, to specify a preferred JCA Cipher mode, such as MODE_ENCRYPT / MODE_DECRYPT when the default MODE_WRAP / MODE_UNWRAP is not supported by the JCA provider (iss #576). * Updates RSAEncrypter and RSADecrypter to support the JWEEncrypterOption CipherMode.ENCRYPT_DECRYPT (iss #576). * Factors out OptionUtils.ensureMinRSAPrivateKeySize. * Deprecates OptionUtils.optionIsPresent.

10.4.1 (2025-08-05) * Adds "requires java.sql" to module com.nimbusds.jose.jwt (iss #595).

10.4.2 (2025-08-14) * Updates GSon to 2.13.1. * Updates BouncyCastle to 1.81.

... (truncated)

Commits
  • 73a8489 [maven-release-plugin] prepare release 10.4
  • adf2576 [maven-release-plugin] prepare for next development iteration
  • 436fb18 Add tests for JWKSourceBuilder and RefreshAheadCachingJWKSetSource
  • d4137db Adds "requires java.sql" to module com.nimbusds.jose.jwt (iss #595)
  • c6c8025 [maven-releas...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Mar 9, 2026
@dependabot dependabot Bot force-pushed the dependabot/gradle/libs-08261658b7 branch from 8b3eb3d to bf36a75 Compare March 13, 2026 11:45
@dependabot dependabot Bot force-pushed the dependabot/gradle/libs-08261658b7 branch from bf36a75 to a8f9589 Compare March 23, 2026 03:14
@dependabot
Bump the libs group across 1 directory with 19 updates
8eb87d1 
Bumps the libs group with 19 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| gradle-wrapper | `9.3.0` | `9.4.0` |
| [org.jetbrains.kotlin:kotlin-bom](https://github.com/JetBrains/kotlin) | `2.3.0` | `2.3.10` |
| [org.jetbrains.kotlin.jvm](https://github.com/JetBrains/kotlin) | `2.3.0` | `2.3.10` |
| [org.jetbrains.kotlin.plugin.spring](https://github.com/JetBrains/kotlin) | `2.3.0` | `2.3.10` |
| [org.jetbrains.kotlin.plugin.serialization](https://github.com/JetBrains/kotlin) | `2.3.0` | `2.3.10` |
| [org.jetbrains.kotlinx:kotlinx-serialization-bom](https://github.com/Kotlin/kotlinx.serialization) | `1.9.0` | `1.10.0` |
| [io.arrow-kt:arrow-stack](https://github.com/arrow-kt/arrow) | `2.2.1.1` | `2.2.2` |
| [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `10.0.2` | `10.8` |
| [com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions) | `11.23.1` | `11.34` |
| [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) | `1.80` | `1.83` |
| [org.webjars:bootstrap](https://github.com/webjars/bootstrap) | `5.3.3` | `5.3.8` |
| [com.google.crypto.tink:tink](https://github.com/tink-crypto/tink-java) | `1.17.0` | `1.20.0` |
| id.walt.mdoc-credentials:waltid-mdoc-credentials-jvm | `0.11.0` | `1.13.0` |
| [com.eygraber:uri-kmp](https://github.com/eygraber/uri-kmp) | `0.0.19` | `0.0.21` |
| [com.google.zxing:javase](https://github.com/zxing/zxing) | `3.5.3` | `3.5.4` |
| [org.springframework.boot](https://github.com/spring-projects/spring-boot) | `4.0.1` | `4.0.3` |
| com.diffplug.spotless | `7.0.2` | `8.3.0` |
| org.owasp.dependencycheck | `12.1.1` | `12.2.0` |
| [org.jetbrains.kotlinx.kover](https://github.com/Kotlin/kotlinx-kover) | `0.9.4` | `0.9.7` |



Updates `gradle-wrapper` from 9.3.0 to 9.4.0

Updates `org.jetbrains.kotlin:kotlin-bom` from 2.3.0 to 2.3.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.0...v2.3.10)

Updates `org.jetbrains.kotlin.jvm` from 2.3.0 to 2.3.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.0...v2.3.10)

Updates `org.jetbrains.kotlin.plugin.spring` from 2.3.0 to 2.3.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.0...v2.3.10)

Updates `org.jetbrains.kotlin.plugin.serialization` from 2.3.0 to 2.3.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.0...v2.3.10)

Updates `org.jetbrains.kotlinx:kotlinx-serialization-bom` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/Kotlin/kotlinx.serialization/releases)
- [Changelog](https://github.com/Kotlin/kotlinx.serialization/blob/master/CHANGELOG.md)
- [Commits](Kotlin/kotlinx.serialization@v1.9.0...v1.10.0)

Updates `io.arrow-kt:arrow-stack` from 2.2.1.1 to 2.2.2
- [Release notes](https://github.com/arrow-kt/arrow/releases)
- [Changelog](https://github.com/arrow-kt/arrow/blob/main/RELEASE.md)
- [Commits](arrow-kt/arrow@2.2.1.1...2.2.2)

Updates `com.nimbusds:nimbus-jose-jwt` from 10.0.2 to 10.8
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.8..10.0.2)

Updates `com.nimbusds:oauth2-oidc-sdk` from 11.23.1 to 11.34
- [Changelog](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.34..11.23.1)

Updates `org.bouncycastle:bcpkix-jdk18on` from 1.80 to 1.83
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.webjars:bootstrap` from 5.3.3 to 5.3.8
- [Commits](webjars/bootstrap@bootstrap-5.3.3...bootstrap-5.3.8)

Updates `com.google.crypto.tink:tink` from 1.17.0 to 1.20.0
- [Release notes](https://github.com/tink-crypto/tink-java/releases)
- [Commits](tink-crypto/tink-java@v1.17.0...v1.20.0)

Updates `id.walt.mdoc-credentials:waltid-mdoc-credentials-jvm` from 0.11.0 to 1.13.0

Updates `com.eygraber:uri-kmp` from 0.0.19 to 0.0.21
- [Release notes](https://github.com/eygraber/uri-kmp/releases)
- [Commits](eygraber/uri-kmp@0.0.19...0.0.21)

Updates `com.google.zxing:javase` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/zxing/zxing/releases)
- [Changelog](https://github.com/zxing/zxing/blob/master/CHANGES)
- [Commits](zxing/zxing@zxing-3.5.3...zxing-3.5.4)

Updates `org.springframework.boot` from 4.0.1 to 4.0.3
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.1...v4.0.3)

Updates `com.diffplug.spotless` from 7.0.2 to 8.3.0

Updates `org.jetbrains.kotlin.jvm` from 2.3.0 to 2.3.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.0...v2.3.10)

Updates `org.jetbrains.kotlin.plugin.spring` from 2.3.0 to 2.3.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.0...v2.3.10)

Updates `org.jetbrains.kotlin.plugin.serialization` from 2.3.0 to 2.3.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.0...v2.3.10)

Updates `org.owasp.dependencycheck` from 12.1.1 to 12.2.0

Updates `org.jetbrains.kotlinx.kover` from 0.9.4 to 0.9.7
- [Release notes](https://github.com/Kotlin/kotlinx-kover/releases)
- [Changelog](https://github.com/Kotlin/kotlinx-kover/blob/main/CHANGELOG.md)
- [Commits](Kotlin/kotlinx-kover@v0.9.4...v0.9.7)

---
updated-dependencies:
- dependency-name: gradle-wrapper
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: libs
- dependency-name: org.jetbrains.kotlin:kotlin-bom
  dependency-version: 2.3.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: libs
- dependency-name: org.jetbrains.kotlin.jvm
  dependency-version: 2.3.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: libs
- dependency-name: org.jetbrains.kotlin.plugin.spring
  dependency-version: 2.3.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: libs
- dependency-name: org.jetbrains.kotlin.plugin.serialization
  dependency-version: 2.3.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: libs
- dependency-name: org.jetbrains.kotlinx:kotlinx-serialization-bom
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: libs
- dependency-name: io.arrow-kt:arrow-stack
  dependency-version: 2.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: libs
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-version: '10.8'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: libs
- dependency-name: com.nimbusds:oauth2-oidc-sdk
  dependency-version: '11.34'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: libs
- dependency-name: org.bouncycastle:bcpkix-jdk18on
  dependency-version: '1.83'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: libs
- dependency-name: org.webjars:bootstrap
  dependency-version: 5.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: libs
- dependency-name: com.google.crypto.tink:tink
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: libs
- dependency-name: id.walt.mdoc-credentials:waltid-mdoc-credentials-jvm
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: libs
- dependency-name: com.eygraber:uri-kmp
  dependency-version: 0.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: libs
- dependency-name: com.google.zxing:javase
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: libs
- dependency-name: org.springframework.boot
  dependency-version: 4.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: libs
- dependency-name: com.diffplug.spotless
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: libs
- dependency-name: org.jetbrains.kotlin.jvm
  dependency-version: 2.3.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: libs
- dependency-name: org.jetbrains.kotlin.plugin.spring
  dependency-version: 2.3.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: libs
- dependency-name: org.jetbrains.kotlin.plugin.serialization
  dependency-version: 2.3.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: libs
- dependency-name: org.owasp.dependencycheck
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: libs
- dependency-name: org.jetbrains.kotlinx.kover
  dependency-version: 0.9.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: libs
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/gradle/libs-08261658b7 branch from a8f9589 to 8eb87d1 Compare April 13, 2026 03:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants