Bump dev.detekt from 2.0.0-alpha.3 to 2.0.0-alpha.5#92
Conversation
Bumps [dev.detekt](https://github.com/detekt/detekt) from 2.0.0-alpha.3 to 2.0.0-alpha.5. - [Release notes](https://github.com/detekt/detekt/releases) - [Commits](detekt/detekt@v2.0.0-alpha.3...v2.0.0-alpha.5) --- updated-dependencies: - dependency-name: dev.detekt dependency-version: 2.0.0-alpha.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
📝 WalkthroughWalkthroughThe Gradle version catalog updates the ChangesDetekt version update
Estimated code review effort: 1 (Trivial) | ~2 minutes Suggested reviewers: 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@gradle/libs.versions.toml`:
- Line 34: Align the detekt version in the version catalog with the pinned
Kotlin toolchain: either verify that detekt 2.0.0-alpha.5 works with the
existing Kotlin 2.3.x versions and retain it only if CI passes, or update the
relevant Kotlin version entries to the compatible 2.4.0 toolchain alongside the
Detekt bump.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: defaults
Review profile: CHILL
Plan: Pro Plus
Run ID: ad0c368e-2873-446a-9d46-37df478e768c
📒 Files selected for processing (1)
gradle/libs.versions.toml
| ktlint = "1.8.0" | ||
| ktlintGradle = "14.2.0" | ||
| detekt = "2.0.0-alpha.3" | ||
| detekt = "2.0.0-alpha.5" |
There was a problem hiding this comment.
🩺 Stability & Availability | 🟡 Minor | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -euo pipefail
rg -n '^(kotlin|kotlinRuntime|detekt)\s*=' gradle/libs.versions.toml
fd -g 'gradle-wrapper.properties' -x sed -n '1,120p' {}
rg -n -C2 'detekt|dev\.detekt' --glob '*.gradle.kts' --glob '*.toml'Repository: Insaner1980/runcheck
Length of output: 630
🌐 Web query:
Detekt 2.0.0-alpha.5 compatibility Kotlin 2.3.0 2.4.0 official docs
💡 Result:
According to the official Detekt documentation and compatibility tables, Detekt version 2.0.0-alpha.5 is explicitly built against and officially supports Kotlin 2.4.0 [1][2][3]. Regarding compatibility with other versions: - Kotlin 2.4.0: This is the primary target version for Detekt 2.0.0-alpha.5 [1][2][3]. - Kotlin 2.3.0: Detekt 2.0.0-alpha.5 is not built against Kotlin 2.3.0. Earlier alpha releases, such as 2.0.0-alpha.2, were built against Kotlin 2.3.0 [1][2][3]. The official compatibility documentation advises users to align their tool versions with those used to compile the Detekt Gradle Plugin to ensure the best support [2]. For Detekt 2.0.0-alpha.5, the recommended toolset includes Gradle 9.5.1 and Android Gradle Plugin (AGP) 9.2.1 [1][2][3]. Detekt relies on compile-only dependencies for the Kotlin and Android Gradle plugins, which provides some flexibility for users to select versions, though backward compatibility across minor Kotlin versions is not always guaranteed [1][2].
Citations:
- 1: https://github.com/detekt/detekt/blob/main/website/docs/introduction/compatibility.md
- 2: https://detekt.dev/docs/introduction/compatibility/
- 3: https://github.com/detekt/detekt?tab=readme-ov-file
Align the Detekt bump with the Kotlin toolchain Detekt 2.0.0-alpha.5 targets Kotlin 2.4.0, while this catalog still pins Kotlin 2.3.0 / 2.3.20. Keep the upgrade only if CI passes with the current toolchain, or update Kotlin alongside this bump.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@gradle/libs.versions.toml` at line 34, Align the detekt version in the
version catalog with the pinned Kotlin toolchain: either verify that detekt
2.0.0-alpha.5 works with the existing Kotlin 2.3.x versions and retain it only
if CI passes, or update the relevant Kotlin version entries to the compatible
2.4.0 toolchain alongside the Detekt bump.
Qodana for JVMIt seems all right 👌 No new problems were found according to the checks applied View the detailed Qodana reportTo be able to view the detailed Qodana report, you can either:
To get - name: 'Qodana Scan'
uses: JetBrains/qodana-action@v2026.1.3
with:
upload-result: trueContact Qodana teamContact us at qodana-support@jetbrains.com
|
Bumps dev.detekt from 2.0.0-alpha.3 to 2.0.0-alpha.5.
Release notes
Sourced from dev.detekt's releases.
... (truncated)
Commits
9c6ced6Stop accepting unsupported API or language versions passed to CLI (#9410)44526f4fix: exclude gradle-public-api from published POM (#9408)6bad2e8fix: stop leaking ktlint-repackage as a transitive dependency (#9391)fd5683eUpdate dependency path-to-regexp to v0.2.5 (#9397)7865b27fix: resolve npm security vulnerabilities in website and bots dependencies (#...bb582d5Unbreak snapshot publishing (#9394)69866ddUpdate caniuse browser definitions (#9393)bfd3b5dAdd Docs for 2.0.0-alpha.4 (#9388)60300b2Switch to vanniktech/gradle-maven-publish-plugin for publishing (#9357)63e0777Update gradle/actions digest to 3f131e8 (#9386)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by CodeRabbit