From d0e2cf18a445190d1e9554ff0f088754d1320071 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 13 Nov 2026 22:00:58 +0000
Subject: [PATCH 1/3] Update dependency org.robolectric:robolectric to v4.18

---
 app/build.gradle.kts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/build.gradle.kts b/app/build.gradle.kts
index 939460d47..e746e6a0e 100644
--- a/app/build.gradle.kts
+++ b/app/build.gradle.kts
@@ -199,7 +199,7 @@ dependencies {
     testImplementation("androidx.arch.core:core-testing:2.2.0")
     testImplementation("junit:junit:4.13.2")
     testImplementation("org.mockito:mockito-core:5.24.0")
-    testImplementation("org.robolectric:robolectric:4.17")
+    testImplementation("org.robolectric:robolectric:4.18")
 }
 
 configurations.configureEach {

From 9bee9b98fc2a7f93148e58a3b3af52078c6b7ddc Mon Sep 17 00:00:00 2001
From: Tobias Kaminsky <tobias@nextcloud.com>
Date: Sat, 14 Nov 2026 01:43:53 +0100
Subject: [PATCH 2/3] fix verification-metadata.xml

Signed-off-by: Tobias Kaminsky <tobias@nextcloud.com>
---
 gradle/verification-metadata.xml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index dd469b5fe..0b02f2530 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -130,6 +130,7 @@
             <trusting group="org.yaml" name="snakeyaml" version="2.3"/>
             <trusting group="org.yaml" name="snakeyaml" version="2.4"/>
             <trusting group="org.yaml" name="snakeyaml" version="2.6"/>
+            <trusting group="org.yaml" name="snakeyaml" version="2.7"/>
          </trusted-key>
          <trusted-key id="3051D45031E13516A6E8FAFF280D66A55F5316C5">
             <trusting group="org.bitbucket.b_c" name="jose4j" version="0.7.0"/>
@@ -148,6 +149,7 @@
             <trusting group="com.vanniktech"/>
             <trusting group="com.vanniktech" name="ui-android" version="0.9.0"/>
          </trusted-key>
+         <trusted-key id="3EC80CAD1A3D50AFBBEFC136C2B98E64C61147AC" group="org.conscrypt" name="conscrypt-openjdk-uber" version="2.8.0"/>
          <trusted-key id="3F05DDA9F317301E927136D417A27CE7A60FF5F0" group="io.opentelemetry"/>
          <trusted-key id="4021EEEAFF5DE8404DCD0A270AA3E5C3D232E79B" group="jakarta.inject" name="jakarta.inject-api" version="2.0.1"/>
          <trusted-key id="41CD49B4EF5876F9E9F691DABAC30622339994C4">
@@ -312,6 +314,7 @@
          <trusted-key id="E52F07877A5805F9AF4AB0ACD46C5610D06E7001">
             <trusting group="com.ibm.icu" name="icu4j" version="77.1"/>
             <trusting group="com.ibm.icu" name="icu4j" version="78.3"/>
+            <trusting group="com.ibm.icu" name="icu4j" version="79.1"/>
          </trusted-key>
          <trusted-key id="E77417AC194160A3FABD04969A259C7EE636C5ED" group="com.google.errorprone"/>
          <trusted-key id="E7DC75FC24FB3C8DFE8086AD3D5839A2262CBBFB" group="org.jetbrains.kotlinx"/>
@@ -16585,6 +16588,14 @@
             <sha256 value="4e0e5a353ba2dfe02f12426026181e11f939374b483aa02c8b83d9a3e2fb5cfd" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
          </artifact>
       </component>
+      <component group="com.google.testparameterinjector" name="test-parameter-injector" version="1.25">
+         <artifact name="test-parameter-injector-1.25.jar">
+            <sha256 value="e1b347a1d40f16470e8b23107971f23ad797fe16b1b8eb4e2cf53792e96e2a51" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+         <artifact name="test-parameter-injector-1.25.pom">
+            <sha256 value="d257d443602f894746baf5fbc750e8220370ddf6de28dd940ad30a10459dcafb" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+      </component>
       <component group="com.google.testparameterinjector" name="test-parameter-injector-parent" version="1.18">
          <artifact name="test-parameter-injector-parent-1.18.pom">
             <sha256 value="b4aee6be3f6dfafa68309e9da4fb38af7fbc2f8c3e26197451f1db38dc4a85d0" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
@@ -16595,6 +16606,11 @@
             <sha256 value="5ef29e2cc0f8e5f3d5aeb802e90992b983deeb6533dabaa3b7df56aad341bda1" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
          </artifact>
       </component>
+      <component group="com.google.testparameterinjector" name="test-parameter-injector-parent" version="1.25">
+         <artifact name="test-parameter-injector-parent-1.25.pom">
+            <sha256 value="9c2f0f24cf03cad93793c49a8678e81337a3957daef8c1dac14610ab23ee5651" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+      </component>
       <component group="com.googlecode.juniversalchardet" name="juniversalchardet" version="1.0.3">
          <artifact name="juniversalchardet-1.0.3.jar">
             <sha256 value="757bfe906193b8b651e79dc26cd67d6b55d0770a2cdfb0381591504f779d4a76" origin="Generated by Gradle"/>

From 8b3e8c0020f139105d2302cc4ab55b73cdb12829 Mon Sep 17 00:00:00 2001
From: Tobias Kaminsky <tobias@nextcloud.com>
Date: Sun, 15 Nov 2026 01:35:48 +0100
Subject: [PATCH 3/3] fix verification-metadata.xml

Add conscrypt 2.8.0 signing key (C2B98E64C61147AC) to verification keyring; it is not available on key servers.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tobias Kaminsky <tobias@nextcloud.com>
---
 gradle/verification-keyring.keys | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/gradle/verification-keyring.keys b/gradle/verification-keyring.keys
index efe50afdb..1025f9d5b 100644
--- a/gradle/verification-keyring.keys
+++ b/gradle/verification-keyring.keys
@@ -978,6 +978,18 @@ eQh3BspmZac4oUdxAqzyU5N/Um+w90sQluFqwoVd5FX5i4L3
 =jVt7
 -----END PGP PUBLIC KEY BLOCK-----
 
+pub    C2B98E64C61147AC
+sub    23B5E29FACD5C2B5
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+xjMEarPb0RYJKwYBBAHaRw8BAQdA6qiu/g5eJg40ejr3AJPP+CH3HIqi7FhGIxI+
+PSKzOofOOARqs9vREgorBgEEAZdVAQUBAQdASBGeSRSN9hsXPH7mYpKN97hb+Wdz
+TYHMkcWFrA/o9GUDAQgHwn4EGBYKACYWIQQ+yAytGj1Qr7vvwTbCuY5kxhFHrAUC
+arPb0QIbDAUJBaOagAAKCRDCuY5kxhFHrKYHAP9dnttijeUN5UV+x4gY5diC8w8Z
+pqNQGAqEYgLGrbYNRgD/fWSvsPhAtGAd6AgxuLSatWVS8BaE7iemGbo5mc6iKQg=
+=E0hd
+-----END PGP PUBLIC KEY BLOCK-----
+
 pub    C3BAB45F4AF71FAB
 uid    Yang Song <songya@google.com>