fix(deps): update gradle plugins

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.openapi.generator	7.19.0 → 7.24.0
org.springframework.boot	4.1.0-M1 → 4.1.0
org.openrewrite.rewrite	7.25.0 → 7.37.0
io.freefair.lombok	9.2.0 → 9.5.0
com.google.cloud.tools.jib	3.5.3 → 3.5.4
com.google.devtools.ksp (source)	2.3.5 → 2.3.10
org.jetbrains.kotlinx.kover	0.9.6 → 0.9.9
com.github.spotbugs	6.4.8 → 6.5.9
org.cyclonedx.bom	3.1.0 → 3.3.0
com.autonomousapps.dependency-analysis	3.5.1 → 3.17.0
com.vanniktech.maven.publish	0.36.0 → 0.37.0
com.gradle.plugin-publish	2.0.0 → 2.1.1
com.gradleup.shadow	9.3.1 → 9.6.1
org.gradlex.extra-java-module-info	1.14 → 1.14.2
org.gradlex.java-module-testing	1.8 → 1.8.1
org.gradlex.java-module-dependencies	1.12 → 1.13.1
org.jetbrains.dokka	2.2.0-Beta → 2.2.0
dev.detekt	2.0.0-alpha.2 → 2.0.0-alpha.5
com.diffplug.spotless	8.2.1 → 8.8.0
com.gradle.develocity	4.3.2 → 4.5.0
net.ltgt.nullaway	3.0.0 → 3.1.0
net.ltgt.errorprone	5.0.0 → 5.1.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

google/ksp (com.google.devtools.ksp)

v2.3.10

Compare Source

What's Changed

• Fix OOMs caused by unstopped coroutine Dispatcher threads by moving KSP task cache to a gradle build service (#​2817)
• Sanitize ':' in internal-name module suffix so KSP works with Kotlin 2.4.0 default module names (#​2964)
• Filter source file trees in KspAATask to restore NO-SOURCE skipping behaviour (#​2947)
• Fix R-class resolution in KSP when AGP 9 built-in Kotlin is enabled (#​2857)
• Fix KSP2 incremental cache path normalization mismatch (#​2854)
• Normalize line endings for KspAATask source roots to prevent cross-platform remote build cache misses (#​2849)
• Fix bug where KSP incremental compilation does not consider library class references in annotations (#​3011)
• Consume all Kotlin sources in KSP to support other code generators (#​3001)
• Fix configuration cache invalidation in klib cross-compilation check (#​3014)
• Memoized hash code for KSTypeImpl to speed up processing (#​2896)
• Fix incorrect name generation for data classes annotated with @JvmRecord (#​2813)
• Include kotlinx.coroutines in the distributed uber jar symbol-processing-aa-embeddable (#​2938)
• New debugging features for incremental compilation, including additional logging and dependency graph visualization (#​3015)
• Deprecate the ksp(...) Gradle configuration in Kotlin Multiplatform (KMP) projects in favor of target-specific configurations (#​2956). Note: Non-KMP projects are also affected. For migration details, see the documentation.

Contributors

• Thanks to @​mvanhorn, @​Yong-yuan-X, @​MariusVolkhart, @​shmuelr and everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.9...2.3.10

v2.3.9

Compare Source

What's Changed

• Cleaned up native cross-compilation support checks to prevent Gradle Configuration Cache invalidation (#​2953)
• Fixed a compilation performance regression in in PsiResolutionStrategy introduced in 2.3.8 (#​2948)

Contributors

• Thanks to everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.8...2.3.9

v2.3.8

Compare Source

What's Changed

• Enabled new default annotation use-site rules in Kotlin's Analysis API (see KEEP 402) for more information. Note: KSP was already mostly compatible with KEEP 402, so there shouldn't be any visible changes for users. (#​2888)
• Enabled ksp.project.isolation by default when Gradle isolated projects are enabled (#​2866)
• Improved getSymbolsWithAnnotation performance by implementing a new PSI-based resolution strategy (#​2816)

Contributors

• Thanks to @​hugoncosta and everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.7...2.3.8

v2.3.7

Compare Source

What's Changed

• Bumped Kotlin target language version to 2.3 (#​2821)
• Fixed crash caused by upstream dependency (#​2856)
• Fixed support for Gradle Isolated Projects (#​2844)

Contributors

• Thanks to everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.6...2.3.7

v2.3.6

Compare Source

What's Changed

• Fixed an issue where module recompilation would fail on Windows environments when KSP2 was enabled (#​2774)
• Resolved an issue where generated Java sources were ignored when using Android Kotlin Multiplatform with IP-compatible paths (#​2744)
• Fixed a KSP version 2.3.5 CI error exception that does not break build checks (#​2763)
• Added symbol-processing-api and common-deps to compile dependencies (#​2789)
• Improved the detection of built-in Kotlin by removing the reliance on KotlinBaseApiPlugin (#​2772)
• A back-port of a performance optimization in the Intellij / Analysis API (2785 )
• Added support for nested typealias Kotlin language feature #​2588
• Exclude jdbc package from log4j to prevent vulnerability issue #​2651

Contributors

• Thanks to @​salmanmkc, @​jaschdoc, @​gurusai-voleti and everyone who reported bugs and participated in discussions!

Full Changelog: google/ksp@2.3.5...2.3.6

Kotlin/kotlinx-kover (org.jetbrains.kotlinx.kover)

v0.9.9

===================

Kover Gradle Plugin

Bugfixes

• #818 Fixed Gradle 9.6.0 deprecation warning
• #810 Fix 0% coverage for classes in com.android.* packages

v0.9.8

===================

Kover Gradle Plugin

Internal features

• Updated publish plugin and declare configuration cache compatibility
• #782 Filled Implementation fields Vendor/Title/Version in MANIFEST.MF

Bugfixes

• #799 #772 Fixed Android multiplatform library support in case of the violation of the project isolation

v0.9.7

===================

Kover Gradle Plugin

Bugfixes

• #747 Fixed a recurring issue in support of Android KMP libraries

vanniktech/gradle-maven-publish-plugin (com.vanniktech.maven.publish)

v0.37.0

Compare Source

• When publishing to Maven Central, redundant checksum files are now excluded by default: checksums of .asc
  signature files (gradle/gradle#20232) and the sha256/sha512
  checksums, which are never read by Gradle or Maven Central. The published checksums can be configured through
  checksums(...) in the DSL or the mavenCentralChecksums Gradle property (default md5,sha1). Signature checksum
  exclusion can be controlled through excludeSignatureChecksums() or the mavenCentralExcludeSignatureChecksums
  Gradle property.
• Maven Central deployment id is being logged after upload.

Minimum supported versions

• JDK 17
• Gradle 9.0.0
• Android Gradle Plugin 8.13.0
• Kotlin Gradle Plugin 2.2.0

Compatibility tested up to

• JDK 26
• Gradle 9.6.0
• Gradle 9.7.0-milestone-1
• Android Gradle Plugin 9.2.1
• Android Gradle Plugin 9.3.0-rc01
• Android Gradle Plugin 9.4.0-alpha01
• Kotlin Gradle Plugin 2.4.0

---

Configuration

📅 Schedule: (in timezone America/Havana)

• Branch creation
  • "after 10pm every weekday,before 5am every weekday,every weekend"
• Automerge
  • "before 4am on the first day of the month"

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: gradle/libs.versions.toml

Command failed: ./gradlew -Dorg.gradle.jvmargs=-Xms512m -Xmx512m --console=plain --dependency-verification lenient -q properties
e: java.lang.OutOfMemoryError: GC overhead limit exceeded
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.splitToCalleeAndReceiver(PsiRawFirBuilder.kt:3336)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.visitCallExpression(PsiRawFirBuilder.kt:3408)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.visitCallExpression(PsiRawFirBuilder.kt:204)
	at org.jetbrains.kotlin.psi.KtCallExpression.accept(KtCallExpression.kt:21)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.convertElement(PsiRawFirBuilder.kt:289)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.toFirExpression(PsiRawFirBuilder.kt:3778)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.visitQualifiedExpression(PsiRawFirBuilder.kt:3468)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.visitQualifiedExpression(PsiRawFirBuilder.kt:204)
	at org.jetbrains.kotlin.psi.KtVisitor.visitDotQualifiedExpression(KtVisitor.java:339)
	at org.jetbrains.kotlin.psi.KtDotQualifiedExpression.accept(KtDotQualifiedExpression.kt:22)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.convertElement(PsiRawFirBuilder.kt:289)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.configureBlockWithoutBuilding(PsiRawFirBuilder.kt:5042)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.visitLambdaExpression(PsiRawFirBuilder.kt:2193)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.visitLambdaExpression(PsiRawFirBuilder.kt:204)
	at org.jetbrains.kotlin.psi.KtLambdaExpression.accept(KtLambdaExpression.java:39)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.convertElement(PsiRawFirBuilder.kt:289)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.toFirExpression(PsiRawFirBuilder.kt:3749)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.toFirExpression(PsiRawFirBuilder.kt:316)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.toFirExpression(PsiRawFirBuilder.kt:523)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.extractArgumentsTo(PsiRawFirBuilder.kt:1007)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.visitCallExpression(PsiRawFirBuilder.kt:3422)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.visitCallExpression(PsiRawFirBuilder.kt:204)
	at org.jetbrains.kotlin.psi.KtCallExpression.accept(KtCallExpression.kt:21)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.convertElement(PsiRawFirBuilder.kt:289)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.toFirExpression(PsiRawFirBuilder.kt:3778)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.visitQualifiedExpression(PsiRawFirBuilder.kt:3468)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.visitQualifiedExpression(PsiRawFirBuilder.kt:204)
	at org.jetbrains.kotlin.psi.KtVisitor.visitDotQualifiedExpression(KtVisitor.java:339)
	at org.jetbrains.kotlin.psi.KtDotQualifiedExpression.accept(KtDotQualifiedExpression.kt:22)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.convertElement(PsiRawFirBuilder.kt:289)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.toFirExpression(PsiRawFirBuilder.kt:3778)
	at org.jetbrains.kotlin.fir.builder.PsiRawFirBuilder$Visitor.visitReturnExpression(PsiRawFirBuilder.kt:2816)


FAILURE: Build failed with an exception.

* What went wrong:
Execution failed for task ':build-logic:compileKotlin'.
> A failure occurred while executing org.jetbrains.kotlin.compilerRunner.GradleCompilerRunnerWithWorkers$GradleKotlinCompilerWorkAction
   > Not enough memory to run compilation. Try to increase it via 'gradle.properties':
     kotlin.daemon.jvmargs=-Xmx<size>

* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Run with --scan to get full insights from a Build Scan (powered by Develocity).
> Get more help at https://help.gradle.org.

BUILD FAILED in 3m 56s

[github-actions]

✅ Contributor Report

User: @renovate[bot]
Status: Trusted contributor (whitelisted)

This user is on the trusted contributors list and was automatically approved.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud