Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: github.com token 401 unauthorized
• ⚠️ WARN: Package lookup failures

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• [deps]: Update firebaseBom to v34.14.1
• [deps]: Update protobuf monorepo to v4.35.1 (com.google.protobuf:protoc, com.google.protobuf:protobuf-javalite)
• [deps]: Update sonarqube to v7.3.1.8318
• [deps]: Update androidxCore to v1.19.0
• [deps]: Update kotlin (org.jetbrains.kotlinx:kotlinx-collections-immutable, org.jetbrains.kotlin.plugin.serialization, org.jetbrains.kotlin.plugin.parcelize, org.jetbrains.kotlin.plugin.compose)
• [deps]: Update okhttp monorepo to v5.4.0
• [deps]: Update codecov/codecov-action action to v7
• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• [deps]: Update googleBilling to v9.1.0
• [deps]: Update googleServices to v4.5.0
• [deps]: Update nkf to v0.3.0
• [deps]: Update actions/checkout action to v7

---

Warning

Renovate failed to look up the following dependencies: Failed to look up github-digest package bitwarden/android: no-result.

Files affected: .github/workflows/_version.yml, .github/workflows/build-authenticator.yml, .github/workflows/build-testharness.yml, .github/workflows/build.yml, .github/workflows/publish-store.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• [deps]: Update gh minor (actions/checkout, codecov/codecov-action, crowdin/github-action, gradle/actions, ruby/setup-ruby)
• [deps]: Update fastlane to v2.236.1
• [deps]: Lock file maintenance
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• [deps]: Update glideCompose to v1.0.0-beta09

Detected Dependencies

bundler (1)

Gemfile (8)

• fastlane '2.233.1' → [Updates: '2.236.1']
• time '0.4.2'
• abbrev '0.1.2'
• logger '1.7.0'
• mutex_m '0.3.0'
• csv '3.3.5'
• nkf '0.2.0' → [Updates: '0.3.0']
• ostruct '0.6.3'

github-actions (23)

.github/actions/setup-android-build/action.yml (3)

• gradle/actions v6.1.0@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e → [Updates: v6.1.1]
• ruby/setup-ruby v1.307.0@6aaa311d81eba98ae12eaffbcb63296ace0efcde → [Updates: v1.313.0]
• actions/setup-java v5.2.0@be666c2fcd27ec809703dec50e508c2fdc7f6654 → [Updates: v5.3.0]

.github/workflows/_version.yml (3)

• bitwarden/android main
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/build-authenticator.yml (9)

• bitwarden/android main
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/build-testharness.yml (5)

• bitwarden/android main
• bitwarden/android main
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/build.yml (23)

• bitwarden/android main
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

.github/workflows/cron-sync-google-priviledged-browsers.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]

.github/workflows/crowdin-pull.yml (7)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• crowdin/github-action v2.16.2@8868a33591d21088edfc398968173a3b98d51706 → [Updates: v2.16.3]

.github/workflows/crowdin-push.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• crowdin/github-action v2.16.2@8868a33591d21088edfc398968173a3b98d51706 → [Updates: v2.16.3]
• bitwarden/gh-actions main

.github/workflows/github-release.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main

.github/workflows/publish-github-release-bwa.yml (1)

• bitwarden/gh-actions main

.github/workflows/publish-github-release-bwpm.yml (1)

• bitwarden/gh-actions main

.github/workflows/publish-store.yml (6)

• bitwarden/android main
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• ruby/setup-ruby v1.307.0@6aaa311d81eba98ae12eaffbcb63296ace0efcde → [Updates: v1.313.0]
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main

.github/workflows/release-branch.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]

.github/workflows/respond.yml (1)

• bitwarden/gh-actions main

.github/workflows/review-code.yml (1)

• bitwarden/gh-actions main

.github/workflows/scan-ci.yml (2)

• bitwarden/gh-actions main
• bitwarden/gh-actions main

.github/workflows/scan.yml (3)

• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main

.github/workflows/sdlc-enforce-labels.yml

.github/workflows/sdlc-gh-release-update-issue.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]

.github/workflows/sdlc-label-pr.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]

.github/workflows/sdlc-sdk-update.yml (6)

• bitwarden/gh-actions main
• bitwarden/gh-actions main
• bitwarden/gh-actions main
• actions/create-github-app-token v3.2.0@bcd2ba49218906704ab6c1aa796996da409d3eb1
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]

.github/workflows/test-device.yml

.github/workflows/test.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd → [Updates: v6.0.3, v7.0.0]
• codecov/codecov-action v6.0.0@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 → [Updates: v6.0.2, v7.0.0]
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• codecov/codecov-action v6.0.0@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 → [Updates: v6.0.2, v7.0.0]

gradle (14)

annotation/build.gradle.kts

app/build.gradle.kts

authenticator/build.gradle.kts

authenticatorbridge/build.gradle.kts

build.gradle.kts

core/build.gradle.kts

cxf/build.gradle.kts

data/build.gradle.kts

gradle.properties

gradle/libs.versions.toml (68)

• androidx.activity:activity-compose 1.13.0
• androidx.appcompat:appcompat 1.7.1
• androidx.autofill:autofill 1.3.0
• androidx.biometric:biometric 1.2.0-alpha05
• androidx.browser:browser 1.10.0
• androidx.camera:camera-camera2 1.6.1
• androidx.camera:camera-compose 1.6.1
• androidx.camera:camera-lifecycle 1.6.1
• androidx.camera:camera-view 1.6.1
• androidx.compose:compose-bom 2026.05.01 → [Updates: 2026.06.00]
• androidx.core:core-ktx 1.18.0 → [Updates: 1.19.0]
• androidx.credentials:credentials 1.6.0
• androidx.credentials.providerevents:providerevents 1.0.0-alpha06
• androidx.credentials.providerevents:providerevents-play-services 1.0.0-alpha06
• androidx.hilt:hilt-navigation-compose 1.3.0
• androidx.lifecycle:lifecycle-process 2.10.0 → [Updates: 2.11.0]
• androidx.lifecycle:lifecycle-runtime-compose 2.10.0 → [Updates: 2.11.0]
• androidx.lifecycle:lifecycle-runtime-ktx 2.10.0 → [Updates: 2.11.0]
• androidx.navigation:navigation-compose 2.9.8
• androidx.room:room-compiler 2.8.4
• androidx.room:room-ktx 2.8.4
• androidx.room:room-runtime 2.8.4
• androidx.security:security-crypto 1.1.0
• androidx.core:core-splashscreen 1.2.0
• androidx.work:work-runtime-ktx 2.11.2
• com.github.bumptech.glide:compose 1.0.0-beta01 → [Updates: 1.0.0-beta09]
• com.github.bumptech.glide:okhttp3-integration 5.0.7
• com.github.bumptech.glide:ksp 5.0.7
• io.gitlab.arturbosch.detekt:detekt-formatting 1.23.8
• io.gitlab.arturbosch.detekt:detekt-rules-libraries 1.23.8
• com.android.billingclient:billing 9.0.0 → [Updates: 9.1.0]
• com.google.firebase:firebase-bom 34.14.0 → [Updates: 34.14.1]
• com.google.guava:guava 33.6.0-jre
• com.google.mlkit:text-recognition 16.0.1
• com.google.dagger:hilt-android 2.59.2
• com.google.dagger:hilt-android-testing 2.59.2
• com.google.dagger:hilt-android-compiler 2.59.2
• com.google.android.play:review 2.0.2
• com.google.protobuf:protobuf-javalite 4.35.0 → [Updates: 4.35.1]
• com.google.protobuf:protoc 4.35.0 → [Updates: 4.35.1]
• org.junit:junit-bom 6.1.0
• org.jetbrains.kotlinx:kotlinx-collections-immutable 0.4.0 → [Updates: 0.5.0]
• org.jetbrains.kotlinx:kotlinx-coroutines-android 1.11.0
• org.jetbrains.kotlinx:kotlinx-coroutines-core 1.11.0
• org.jetbrains.kotlinx:kotlinx-coroutines-test 1.11.0
• org.jetbrains.kotlinx:kotlinx-serialization-json 1.11.0
• io.mockk:mockk 1.14.11
• org.robolectric:robolectric 4.16.1
• com.squareup.okhttp3:okhttp-bom 5.3.2 → [Updates: 5.4.0]
• com.squareup.retrofit2:retrofit-bom 3.0.0
• app.cash.turbine:turbine 1.2.1
• com.jakewharton.timber:timber 5.0.1
• com.google.zxing:core 3.5.4
• org.testng:testng 7.12.0
• com.android.application 9.2.1
• com.android.library 9.2.1
• androidx.room 2.8.4
• com.google.firebase.crashlytics 3.0.7
• io.gitlab.arturbosch.detekt 1.23.8
• com.google.protobuf 0.10.0
• com.google.gms.google-services 4.4.4 → [Updates: 4.5.0]
• com.google.dagger.hilt.android 2.59.2
• org.jetbrains.kotlin.plugin.compose 2.3.21 → [Updates: 2.4.0]
• org.jetbrains.kotlin.plugin.parcelize 2.3.21 → [Updates: 2.4.0]
• org.jetbrains.kotlin.plugin.serialization 2.3.21 → [Updates: 2.4.0]
• org.jetbrains.kotlinx.kover 0.9.8
• com.google.devtools.ksp 2.3.9
• org.sonarqube 7.3.0.8198 → [Updates: 7.3.1.8318]

network/build.gradle.kts

settings.gradle.kts

testharness/build.gradle.kts

ui/build.gradle.kts

---

• Check this box to trigger a request for Renovate to run again on this repository

[Huaian666]

just tried this out and wow the setup was actually painless. was not expecting that lol. the defaults are solid out of the box.