[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.conscrypt:conscrypt-android (source)	2.8.0 → 2.9.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

google/conscrypt (org.conscrypt:conscrypt-android)

v2.9.0

Compare Source

Conscrypt Version 2.9.0.

This is a new release of conscrypt-openjdk, conscrypt-openjdk-uber and conscrypt-android on maven.

It includes the following changes:

• Update the built-in SPKI certificate blocklist from Chromium and enable it by default on OpenJDK and unbundled Android to block the compromised eMudhra intermediate CA certificates (#​1554).
• Expose the negotiated TLS group/curve name via Conscrypt.getGroupName(SSLSocket) and Conscrypt.getGroupName(SSLEngine) (#​1552).
• Return a defensive copy from OpenSSLCipher.engineGetIV() and allow getParameters() in cipher and RSA-PSS implementations to work without installing Conscrypt globally.
• Bug fixes, error handling improvements, and cleanups.

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: gradle/libs.versions.toml

Command failed: ./gradlew -Dorg.gradle.jvmargs=-Xms512m -Xmx512m --console=plain --dependency-verification lenient -q --write-verification-metadata sha256,pgp dependencies

FAILURE: Build completed with 2 failures.

1: Task failed with an exception.
-----------
* Where:
Build file '/tmp/renovate/repos/github/nextcloud/android/build.gradle.kts' line: 7

* What went wrong:
Plugin [id: 'com.google.devtools.ksp', version: '2.3.12', apply: false] was not found in any of the following sources:

- Gradle Core Plugins (plugin is not in 'org.gradle' namespace)
- Included Builds (No included builds contain this plugin)
- Plugin Repositories (could not resolve plugin artifact 'com.google.devtools.ksp:com.google.devtools.ksp.gradle.plugin:2.3.12')
  Searched in the following repositories:
    Google
    Gradle Central Plugin Repository
    MavenRepo

* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Run with --scan to get full insights from a Build Scan (powered by Develocity).
> Get more help at https://help.gradle.org.
==============================================================================

2: Task failed with an exception.
-----------
* Where:
Build file '/tmp/renovate/repos/github/nextcloud/android/build.gradle.kts' line: 7

* What went wrong:
Plugin [id: 'com.google.devtools.ksp', version: '2.3.12', apply: false] was not found in any of the following sources:

- Gradle Core Plugins (plugin is not in 'org.gradle' namespace)
- Included Builds (No included builds contain this plugin)
- Plugin Repositories (could not resolve plugin artifact 'com.google.devtools.ksp:com.google.devtools.ksp.gradle.plugin:2.3.12')
  Searched in the following repositories:
    Google
    Gradle Central Plugin Repository
    MavenRepo

* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Run with --scan to get full insights from a Build Scan (powered by Develocity).
> Get more help at https://help.gradle.org.
==============================================================================

BUILD FAILED in 53s

[github-actions]

master-IT test failed, but no output was generated. Maybe a preliminary stage failed.

[github-actions]

stable35-IT test failed, but no output was generated. Maybe a preliminary stage failed.

[github-actions]

stable22-IT test failed, but no output was generated. Maybe a preliminary stage failed.

[github-actions]

📱 QA build

Download	app-qa-debug.apk
QR code	Open the QR code for this download
Commit	30574d5
Version	17991
Available until	7 days after this build

The QA build installs alongside a released Nextcloud app, so you can keep
using your existing install while testing.

Downloading the file requires a GitHub account, so open this link on the
device you want to test on, or transfer the APK to it.

[github-actions]

SpotBugs

Category	Base	New
Bad practice	24	24
Correctness	48	48
Dodgy code	128	128
Experimental	1	1
Malicious code vulnerability	1	1
Multithreaded correctness	13	13
Performance	26	26
Security	15	15
Total	256	256

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!