From 3bb56b19f243f1e5541bf3ea6c0b46ff7a76eb5f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 13 Nov 2026 19:54:28 +0000
Subject: [PATCH 1/3] Update dependency org.robolectric:robolectric to v4.18

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 core/build.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/build.gradle b/core/build.gradle
index eb5011cd..3b8debd7 100644
--- a/core/build.gradle
+++ b/core/build.gradle
@@ -48,7 +48,7 @@ dependencies {
 
     testImplementation "junit:junit:$jUnitVersion"
     testImplementation 'androidx.test:core:1.7.0'
-    testImplementation 'org.robolectric:robolectric:4.17'
+    testImplementation 'org.robolectric:robolectric:4.18'
 }
 
 afterEvaluate {

From 1b11c1fe46ad0f46ab00a1ff387e75a01debf976 Mon Sep 17 00:00:00 2001
From: Tobias Kaminsky <tobias@nextcloud.com>
Date: Sat, 14 Nov 2026 01:43:50 +0100
Subject: [PATCH 2/3] fix verification-metadata.xml

Signed-off-by: Tobias Kaminsky <tobias@nextcloud.com>
---
 gradle/verification-metadata.xml | 26 +++++++++++++++++++++++++-
 1 file changed, 25 insertions(+), 1 deletion(-)

diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index b85051b5..8c26c754 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -139,6 +139,7 @@
          <trusted-key id="2FC53E6B1F681184F4CCD637F5C81DE10A0B8ECC">
             <trusting group="org.yaml" name="snakeyaml" version="2.4"/>
             <trusting group="org.yaml" name="snakeyaml" version="2.6"/>
+            <trusting group="org.yaml" name="snakeyaml" version="2.7"/>
          </trusted-key>
          <trusted-key id="3051D45031E13516A6E8FAFF280D66A55F5316C5">
             <trusting group="org.bitbucket.b_c" name="jose4j" version="0.7.0"/>
@@ -154,9 +155,13 @@
          <trusted-key id="3690C240CE51B4670D30AD1C38EE757D69184620" group="org.tukaani" name="xz" version="1.9"/>
          <trusted-key id="3872ED7D5904493D23D78FA2C4C8CB73B1435348" group="com.android.tools.build" name="transform-api" version="2.0.0-deprecated-use-gradle-api"/>
          <trusted-key id="38FD31D9C6FD39D58EF1AB0DE96EF7AE7D967845" group="com.vanniktech"/>
+         <trusted-key id="3EC80CAD1A3D50AFBBEFC136C2B98E64C61147AC" group="org.conscrypt" name="conscrypt-openjdk-uber" version="2.8.0"/>
          <trusted-key id="3F05DDA9F317301E927136D417A27CE7A60FF5F0" group="io.opentelemetry"/>
          <trusted-key id="4021EEEAFF5DE8404DCD0A270AA3E5C3D232E79B" group="jakarta.inject" name="jakarta.inject-api" version="2.0.1"/>
-         <trusted-key id="41CD49B4EF5876F9E9F691DABAC30622339994C4" group="org.jspecify" name="jspecify" version="1.0.0"/>
+         <trusted-key id="41CD49B4EF5876F9E9F691DABAC30622339994C4">
+            <trusting group="org.jspecify" name="jspecify" version="1.0.0"/>
+            <trusting group="org.jspecify" name="jspecify" version="1.0.1"/>
+         </trusted-key>
          <trusted-key id="44FBDBBC1A00FE414F1C1873586654072EAD6677" group="org.sonatype.oss" name="oss-parent" version="9"/>
          <trusted-key id="47504B76CF89C15C0512D9AFE16AB52D79FD224F">
             <trusting group="com.google.api.grpc" name="proto-google-common-protos" version="2.0.1"/>
@@ -309,6 +314,7 @@
          <trusted-key id="E52F07877A5805F9AF4AB0ACD46C5610D06E7001">
             <trusting group="com.ibm.icu" name="icu4j" version="77.1"/>
             <trusting group="com.ibm.icu" name="icu4j" version="78.3"/>
+            <trusting group="com.ibm.icu" name="icu4j" version="79.1"/>
          </trusted-key>
          <trusted-key id="E77417AC194160A3FABD04969A259C7EE636C5ED" group="^com[.]google($|([.].*))" regex="true"/>
          <trusted-key id="E7DC75FC24FB3C8DFE8086AD3D5839A2262CBBFB" group="org.jetbrains.kotlinx"/>
@@ -15045,6 +15051,11 @@
             <sha256 value="9532ca9ba8aceb4cd2067171f981c799988b7f5844e3e274811a3bb757034bc4" origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
+      <component group="com.google.guava" name="guava" version="33.7.2-jre">
+         <artifact name="guava-33.7.2-android.jar">
+            <sha256 value="b949fe975a32421c1a2633c07a4f1578b462f2f467668aa0a4023c5ff7c4a808" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="com.google.guava" name="guava-parent" version="26.0-android">
          <artifact name="guava-parent-26.0-android.pom">
             <sha256 value="f8698ab46ca996ce889c1afc8ca4f25eb8ac6b034dc898d4583742360016cc04" origin="Generated by Gradle"/>
@@ -15382,6 +15393,14 @@
             <sha256 value="4e0e5a353ba2dfe02f12426026181e11f939374b483aa02c8b83d9a3e2fb5cfd" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
          </artifact>
       </component>
+      <component group="com.google.testparameterinjector" name="test-parameter-injector" version="1.25">
+         <artifact name="test-parameter-injector-1.25.jar">
+            <sha256 value="e1b347a1d40f16470e8b23107971f23ad797fe16b1b8eb4e2cf53792e96e2a51" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+         <artifact name="test-parameter-injector-1.25.pom">
+            <sha256 value="d257d443602f894746baf5fbc750e8220370ddf6de28dd940ad30a10459dcafb" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+      </component>
       <component group="com.google.testparameterinjector" name="test-parameter-injector-parent" version="1.18">
          <artifact name="test-parameter-injector-parent-1.18.pom">
             <sha256 value="b4aee6be3f6dfafa68309e9da4fb38af7fbc2f8c3e26197451f1db38dc4a85d0" origin="Generated by Gradle"/>
@@ -15392,6 +15411,11 @@
             <sha256 value="5ef29e2cc0f8e5f3d5aeb802e90992b983deeb6533dabaa3b7df56aad341bda1" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
          </artifact>
       </component>
+      <component group="com.google.testparameterinjector" name="test-parameter-injector-parent" version="1.25">
+         <artifact name="test-parameter-injector-parent-1.25.pom">
+            <sha256 value="9c2f0f24cf03cad93793c49a8678e81337a3957daef8c1dac14610ab23ee5651" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+      </component>
       <component group="com.googlecode.concurrent-trees" name="concurrent-trees" version="2.6.1">
          <artifact name="concurrent-trees-2.6.1.jar">
             <sha256 value="04e3724984e2a5cbf55606cfa372a5bd3d3c5d2a21533a7004e3cde539761fa5" origin="Generated by Gradle"/>

From 88a6dbbb6757f89c35d3e281ebcec424511c4895 Mon Sep 17 00:00:00 2001
From: Tobias Kaminsky <tobias@nextcloud.com>
Date: Sun, 15 Nov 2026 01:35:45 +0100
Subject: [PATCH 3/3] fix verification-metadata.xml

Add conscrypt 2.8.0 signing key (C2B98E64C61147AC) to verification keyring; it is not available on key servers.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tobias Kaminsky <tobias@nextcloud.com>
---
 gradle/verification-keyring.keys | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/gradle/verification-keyring.keys b/gradle/verification-keyring.keys
index 12428f52..bad5fb9e 100644
--- a/gradle/verification-keyring.keys
+++ b/gradle/verification-keyring.keys
@@ -1033,6 +1033,18 @@ lQyC8nl8P5PgkEZ5CHcGymZlpzihR3ECrPJTk39Sb7D3SxCW4WrChV3kVfmLgvc=
 =WqT9
 -----END PGP PUBLIC KEY BLOCK-----
 
+pub    C2B98E64C61147AC
+sub    23B5E29FACD5C2B5
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+xjMEarPb0RYJKwYBBAHaRw8BAQdA6qiu/g5eJg40ejr3AJPP+CH3HIqi7FhGIxI+
+PSKzOofOOARqs9vREgorBgEEAZdVAQUBAQdASBGeSRSN9hsXPH7mYpKN97hb+Wdz
+TYHMkcWFrA/o9GUDAQgHwn4EGBYKACYWIQQ+yAytGj1Qr7vvwTbCuY5kxhFHrAUC
+arPb0QIbDAUJBaOagAAKCRDCuY5kxhFHrKYHAP9dnttijeUN5UV+x4gY5diC8w8Z
+pqNQGAqEYgLGrbYNRgD/fWSvsPhAtGAd6AgxuLSatWVS8BaE7iemGbo5mc6iKQg=
+=E0hd
+-----END PGP PUBLIC KEY BLOCK-----
+
 pub    C3BAB45F4AF71FAB
 uid    Yang Song <songya@google.com>