From 24a1a39050d27b3cffeab466a31154d065ca648c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 4 Jan 2026 11:36:47 +0000
Subject: [PATCH 1/3] Bump the lib-and-app group across 1 directory with 5
 updates

Bumps the lib-and-app group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| androidx.activity:activity-compose | `1.12.0` | `1.12.2` |
| androidx.compose:compose-bom | `2025.11.01` | `2025.12.01` |
| [io.mockk:mockk-android](https://github.com/mockk/mockk) | `1.14.6` | `1.14.7` |
| com.android.application | `8.13.1` | `8.13.2` |
| com.android.library | `8.13.1` | `8.13.2` |



Updates `androidx.activity:activity-compose` from 1.12.0 to 1.12.2

Updates `androidx.compose:compose-bom` from 2025.11.01 to 2025.12.01

Updates `io.mockk:mockk-android` from 1.14.6 to 1.14.7
- [Release notes](https://github.com/mockk/mockk/releases)
- [Commits](https://github.com/mockk/mockk/compare/1.14.6...1.14.7)

Updates `com.android.application` from 8.13.1 to 8.13.2

Updates `com.android.library` from 8.13.1 to 8.13.2

Updates `com.android.library` from 8.13.1 to 8.13.2

---
updated-dependencies:
- dependency-name: androidx.activity:activity-compose
  dependency-version: 1.12.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: lib-and-app
- dependency-name: androidx.compose:compose-bom
  dependency-version: 2025.12.01
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: lib-and-app
- dependency-name: io.mockk:mockk-android
  dependency-version: 1.14.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: lib-and-app
- dependency-name: com.android.application
  dependency-version: 8.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: lib-and-app
- dependency-name: com.android.library
  dependency-version: 8.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: lib-and-app
- dependency-name: com.android.library
  dependency-version: 8.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: lib-and-app
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 gradle/libs.versions.toml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 1a4e4f5..88cc4ae 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -1,6 +1,6 @@
 [versions]
-agp = "8.13.1"
-androidx-activityCompose = "1.12.0"
+agp = "8.13.2"
+androidx-activityCompose = "1.12.2"
 androidx-appcompat = "1.7.1"
 androidx-core = "1.17.0"
 androidx-lifecycle = "2.10.0"
@@ -8,11 +8,11 @@ androidx-test-core = "1.7.0"
 androidx-test-runner = "1.7.0"
 androidx-test-rules = "1.7.0"
 conscrypt = "2.5.3"
-compose-bom = "2025.11.01"
+compose-bom = "2025.12.01"
 dokka = "2.1.0"
 junit = "4.13.2"
 kotlin = "2.2.21"
-mockk = "1.14.6"
+mockk = "1.14.7"
 okhttp = "5.3.2"
 
 [libraries]

From 422e239afa1b9071e399ad915d6683505b4ba347 Mon Sep 17 00:00:00 2001
From: Ricki Hirner <hirner@bitfire.at>
Date: Sun, 4 Jan 2026 12:44:01 +0100
Subject: [PATCH 2/3] Don't require SDK 26 (ignore mockk requirement)

---
 lib/src/androidTest/AndroidManifest.xml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/lib/src/androidTest/AndroidManifest.xml b/lib/src/androidTest/AndroidManifest.xml
index 7dbbe52..4c6abb5 100644
--- a/lib/src/androidTest/AndroidManifest.xml
+++ b/lib/src/androidTest/AndroidManifest.xml
@@ -1,6 +1,12 @@
 <?xml version="1.0" encoding="utf-8"?>
-<manifest xmlns:android="http://schemas.android.com/apk/res/android">
+<manifest xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:tools="http://schemas.android.com/tools">
 
     <uses-permission android:name="android.permission.INTERNET"/>
 
+    <!--
+    Since Mockk 1.14.7 it's required to use minSdk 26. We use 23 (because DAVx5 is still on 24), so override for tests.
+    -->
+    <uses-sdk tools:overrideLibrary="io.mockk.android,io.mockk.proxy.android" />
+
 </manifest>

From 67bbd07618709445f0482414ffe4dedad40634e6 Mon Sep 17 00:00:00 2001
From: Ricki Hirner <hirner@bitfire.at>
Date: Sun, 4 Jan 2026 13:01:16 +0100
Subject: [PATCH 3/3] Use CodeQL autobuild

---
 .github/workflows/codeql.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 1b886d7..af4e536 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -49,11 +49,11 @@ jobs:
 
     # Autobuild attempts to build any compiled languages  (C/C++, C#, Go, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
-    # - name: Autobuild
-    #   uses: github/codeql-action/autobuild@v2
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v4
 
-    - name: Build
-      run: ./gradlew --no-daemon --configuration-cache --build-cache lib:assemble
+    #- name: Build
+    #  run: ./gradlew --no-daemon --configuration-cache lib:assemble
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v4