Skip to content

Auto-update dependencies.#2803

Merged
thatfiredev merged 3 commits into
masterfrom
dpebot-repositorygardener
Jun 8, 2026
Merged

Auto-update dependencies.#2803
thatfiredev merged 3 commits into
masterfrom
dpebot-repositorygardener

Conversation

@dpebot

@dpebot dpebot commented Jun 3, 2026

Copy link
Copy Markdown
Collaborator

Brought to you by your friendly Repository Gardener.

@wiz-9635d3485b

wiz-9635d3485b Bot commented Jun 3, 2026

Copy link
Copy Markdown

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities 1 High 2 Medium 1 Low
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 1 High 2 Medium 1 Low

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the androidx.core:core-ktx dependency version from 1.18.0 to 1.19.0 and the Kotlin version to 2.4.0 in the Gradle version catalog. The reviewer recommends using the version catalog reference (libs.androidx.core.ktx) in both firestore and messaging build files instead of hardcoding the dependency and duplicating the version.

Comment thread firestore/app/build.gradle.kts Outdated
implementation("androidx.activity:activity-ktx:1.13.0")
implementation("androidx.appcompat:appcompat:1.7.1")
implementation("androidx.core:core-ktx:1.18.0")
implementation("androidx.core:core-ktx:1.19.0")

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

Instead of hardcoding the dependency and duplicating the version, use the version catalog reference libs.androidx.core.ktx which is already defined in gradle/libs.versions.toml.

    implementation(libs.androidx.core.ktx)

Comment thread messaging/app/build.gradle.kts Outdated
implementation("androidx.annotation:annotation:1.10.0")
implementation("androidx.vectordrawable:vectordrawable-animated:1.2.0")
implementation("androidx.core:core-ktx:1.18.0")
implementation("androidx.core:core-ktx:1.19.0")

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

Instead of hardcoding the dependency and duplicating the version, use the version catalog reference libs.androidx.core.ktx which is already defined in gradle/libs.versions.toml.

    implementation(libs.androidx.core.ktx)

@dpebot dpebot force-pushed the dpebot-repositorygardener branch 4 times, most recently from 0f13332 to 9617f64 Compare June 7, 2026 22:11
@dpebot dpebot force-pushed the dpebot-repositorygardener branch from 9617f64 to b84dc03 Compare June 8, 2026 22:13
Comment thread gradle/libs.versions.toml Outdated
Comment thread firestore/app/build.gradle.kts Outdated
Comment thread messaging/app/build.gradle.kts Outdated
Co-authored-by: Rosário P. Fernandes <rosariofernandes51@gmail.com>
@thatfiredev thatfiredev merged commit 0e79d4f into master Jun 8, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants