Skip to content

Auto-update dependencies.#2819

Open
dpebot wants to merge 1 commit into
masterfrom
dpebot-repositorygardener
Open

Auto-update dependencies.#2819
dpebot wants to merge 1 commit into
masterfrom
dpebot-repositorygardener

Conversation

@dpebot

@dpebot dpebot commented Jul 14, 2026

Copy link
Copy Markdown
Collaborator

Brought to you by your friendly Repository Gardener.

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the Android Gradle Plugin (AGP) to version 9.3.0 and Kotlin to 2.4.10 in the version catalog, and bumps the Android Lint dependencies to 32.3.0. The reviewer recommends migrating these hardcoded Lint dependencies, as well as the JUnit dependency, to the Gradle Version Catalog (gradle/libs.versions.toml) to establish a single source of truth and avoid version drift.

Comment on lines +12 to +14
compileOnly("com.android.tools.lint:lint-api:32.3.0")
testImplementation("com.android.tools.lint:lint:32.3.0")
testImplementation("com.android.tools.lint:lint-tests:32.3.0")

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

To maintain a single source of truth for all dependencies and avoid version drift, these Android Lint dependencies should be defined in the Gradle Version Catalog (gradle/libs.versions.toml) instead of being hardcoded here.\n\nYou can add the following to gradle/libs.versions.toml:\n\ntoml\n[versions]\nandroidLint = "32.3.0"\n\n[libraries]\nandroid-tools-lint-api = { module = "com.android.tools.lint:lint-api", version.ref = "androidLint" }\nandroid-tools-lint = { module = "com.android.tools.lint:lint", version.ref = "androidLint" }\nandroid-tools-lint-tests = { module = "com.android.tools.lint:lint-tests", version.ref = "androidLint" }\n\n\nAdditionally, since junit is already defined in the version catalog, you can also migrate testImplementation("junit:junit:4.13.2") to testImplementation(libs.junit).

    compileOnly(libs.android.tools.lint.api)
    testImplementation(libs.android.tools.lint)
    testImplementation(libs.android.tools.lint.tests)

@dpebot
dpebot force-pushed the dpebot-repositorygardener branch from 86d2e1a to e2a087d Compare July 15, 2026 22:12
@wiz-9635d3485b

Copy link
Copy Markdown

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities 4 Medium
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 4 Medium

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant