Update stable dependencies for 20260824 - #1534
Open
jonathanpeppers with Copilot wants to merge 11 commits into
Open
Update stable dependencies for 20260824#1534jonathanpeppers with Copilot wants to merge 11 commits into
jonathanpeppers with Copilot wants to merge 11 commits into
Conversation
Co-authored-by: jonathanpeppers <840039+jonathanpeppers@users.noreply.github.com>
jonathanpeppers
changed the title
jonathanpeppers
marked this pull request as ready for review
August 25, 2026 21:05
There was a problem hiding this comment.
Pull request overview
Updates the repository’s stable dependency set by bumping selected Maven artifact versions in config.json and regenerating the downstream derived inventory files used for governance and documentation.
Changes:
- Bump versions for several stable artifacts (AndroidX DataBinding, Play Services, Firebase, OkHttp, Protobuf, Cronet, etc.) in
config.json. - Regenerate component governance entries in
cgmanifest.jsonto reflect the updated artifacts/versions. - Regenerate the documentation inventory list in
docs/artifact-list-with-versions.md.
Reviewed changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated 4 comments.
| File | Description |
|---|---|
| docs/artifact-list-with-versions.md | Updates the published artifact/version table to match the new stable dependency set. |
| config.json | Bumps Maven + NuGet package version mappings for updated stable dependencies. |
| cgmanifest.json | Regenerates component governance metadata to align with updated artifact versions. |
💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.
1. `androidx.databinding:databindingadapters` - 9.3.1 -> 9.3.2 2. `androidx.databinding:databindingcommon` - 9.3.1 -> 9.3.2 3. `androidx.databinding:databindingruntime` - 9.3.1 -> 9.3.2 4. `androidx.databinding:viewbinding` - 9.3.1 -> 9.3.2 5. `com.google.ads.interactivemedia.v3:interactivemedia` - 3.39.0 -> 3.40.0 6. `com.google.ai.edge.litert:litert` - 2.1.5 -> 2.2.0 7. `com.google.ai.edge.litert:litertapi` - 1.4.2 -> 2.2.0 8. `com.google.android.gms:playservicesbase` - 18.10.0 -> 18.10.1 9. `com.google.android.gms:playservicesbasement` - 18.10.0 -> 18.11.0 10. `com.google.android.libraries.ads.mobile.sdk:adsmobilesdk` - 1.3.1 -> 1.4.0 11. `com.google.firebase:firebaseappcheck` - 19.4.0 -> 19.4.1 12. `com.google.firebase:firebaseappcheckplayintegrity` - 19.4.0 -> 19.4.1 13. `com.google.firebase:firebasemessaging` - 25.1.1 -> 25.1.2 14. `com.google.guava:guava` - 33.6.0android -> 33.7.1android 15. `com.google.protobuf:protobufjavalite` - 4.35.1 -> 4.36.0 16. `com.squareup.okhttp3:logginginterceptor` - 5.4.0 -> 5.5.0 17. `org.chromium.net:cronetapi` - 143.7445.0 -> 500.0.2 18. `org.chromium.net:cronetcommon` - 143.7445.0 -> 500.0.2 19. `org.chromium.net:cronetembedded` - 143.7445.0 -> 500.0.2 20. `org.chromium.net:cronetfallback` - 143.7445.0 -> 500.0.2 21. `org.chromium.net:cronetshared` - 143.7445.0 -> 500.0.2 22. `org.chromium.net:httpenginenativeprovider` - 143.7445.0 -> 500.0.2 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: b1787e09-29d1-403d-9655-970228cbcb7a
Hold LiteRT at versions compatible with the retained GPU artifacts and keep Cronet on its prior packaging model. Update JSpecify to satisfy Guava 33.7.1. 1. `androidx.databinding:databindingadapters` - 9.3.1 -> 9.3.2 2. `androidx.databinding:databindingcommon` - 9.3.1 -> 9.3.2 3. `androidx.databinding:databindingruntime` - 9.3.1 -> 9.3.2 4. `androidx.databinding:viewbinding` - 9.3.1 -> 9.3.2 5. `com.google.ads.interactivemedia.v3:interactivemedia` - 3.39.0 -> 3.40.0 6. `com.google.android.gms:playservicesbase` - 18.10.0 -> 18.10.1 7. `com.google.android.gms:playservicesbasement` - 18.10.0 -> 18.11.0 8. `com.google.android.libraries.ads.mobile.sdk:adsmobilesdk` - 1.3.1 -> 1.4.0 9. `com.google.firebase:firebaseappcheck` - 19.4.0 -> 19.4.1 10. `com.google.firebase:firebaseappcheckplayintegrity` - 19.4.0 -> 19.4.1 11. `com.google.firebase:firebasemessaging` - 25.1.1 -> 25.1.2 12. `com.google.guava:guava` - 33.6.0android -> 33.7.1android 13. `com.google.protobuf:protobufjavalite` - 4.35.1 -> 4.36.0 14. `com.squareup.okhttp3:logginginterceptor` - 5.4.0 -> 5.5.0 15. `org.jspecify:jspecify` - 1.0.0 -> 1.0.1 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: b1787e09-29d1-403d-9655-970228cbcb7a
sheiksyedm
approved these changes
Aug 27, 2026
Firebase Protolite and gRPC depend on Protobuf JavaLite 3.25.x, but our NuGet mapping had independently advanced them to JavaLite 4.x. Starting in JavaLite 4.27, the artifact contains `DescriptorProtos` bytecode that is also embedded in Firebase Protolite, causing D8 duplicate-class failures in consuming Android apps. This change freezes `Xamarin.Protobuf.JavaLite` at the compatible 3.25.8 version while retaining a frozen dependency-only 4.26.1 mapping for MediaPipe, the last compatible 4.x release before the conflicting classes appeared. It bumps every already-published package in the affected Firebase, MediaPipe, and Cronet reverse dependency graphs so their immutable NuGet metadata carries the corrected dependencies; currently unpublished consumers retain their existing versions. Generated artifact documentation and Component Governance metadata are refreshed from the completed config. Fixes #1535 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
jonathanpeppers
approved these changes
Aug 28, 2026
Member
|
@sheiksyedm could you approve again? There is a new policy last committer can't approve. |
jonathanpeppers
enabled auto-merge (squash)
August 28, 2026 13:13
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Updated packages
androidx.databinding:databindingadapters- 9.3.1 -> 9.3.2androidx.databinding:databindingcommon- 9.3.1 -> 9.3.2androidx.databinding:databindingruntime- 9.3.1 -> 9.3.2androidx.databinding:viewbinding- 9.3.1 -> 9.3.2com.google.ads.interactivemedia.v3:interactivemedia- 3.39.0 -> 3.40.0com.google.android.gms:playservicesauth- 21.6.0 -> 22.0.0com.google.android.gms:playservicesauthbase- 18.3.3 -> 18.3.4com.google.android.gms:playservicesbase- 18.10.0 -> 18.10.1com.google.android.gms:playservicesbasement- 18.10.0 -> 18.11.0com.google.android.gms:playservicesfido- 21.3.0 -> 21.3.1com.google.android.gms:playservicesnearby- 19.4.0 -> 19.5.0com.google.android.libraries.ads.mobile.sdk:adsmobilesdk- 1.3.1 -> 1.4.0com.google.firebase:firebaseappcheck- 19.4.0 -> 19.4.1com.google.firebase:firebaseappcheckplayintegrity- 19.4.0 -> 19.4.1com.google.firebase:firebasemessaging- 25.1.1 -> 25.1.2com.google.guava:guava- 33.6.0android -> 33.7.1androidcom.google.protobuf:protobufjavalite- 4.35.1 -> 4.36.0com.squareup.okhttp3:logginginterceptor- 5.4.0 -> 5.5.0org.jspecify:jspecify- 1.0.0 -> 1.0.1Validation
net10.0-android36.0published-namespaces.txtFixes #1533