From 45107c07d77ed5b34346b6763bd986b837df61dc Mon Sep 17 00:00:00 2001 From: Claude Date: Wed, 9 Sep 2026 12:03:21 +0000 Subject: [PATCH] build(deps): Kotlin 2.4.20 and dependency-submission action v6 Two independent version bumps, both to the newest stable. Kotlin 2.4.10 -> 2.4.20 in llama-kotlin. workspace/crossrepostatus.md rejected this one with "newer is an RC only", and that was true when it was written -- Central now carries 2.4.20 after 2.4.20-Beta1/2 and -RC/-RC2/-RC3, so the rationale has expired and the release is plain stable. Moves the one property, which drives both kotlin-stdlib and kotlin-maven-plugin. Deliberately NOT touched: android-llmservice/settings.gradle.kts pins the Compose compiler plugin at 2.4.10. That is a different pin against a different Kotlin -- AGP 9.x supplies its own built-in Kotlin (2.2.10+) for that build, which never sees llama-kotlin's property -- so the two do not have to move together, and moving it would be an untested AGP/Compose change riding along with a library bump. advanced-security/maven-dependency-submission-action v5 -> v6, closing cross-repo drift: Dependabot opened this bump in streambuffer only (#156, merged), leaving the other three at v5 until their own weekly run. v6.0.0 moves the action runtime from Node 20 to Node 24 and is already proven here -- streambuffer's Report job, which is where the action runs and which does not tolerate a step failure, went green on it. Verified: mvn -pl llama-kotlin -am install then -pl llama-kotlin test is green, 6/6, and the build log confirms the compiler that actually ran is kotlin:2.4.20:compile rather than a silent fallback. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01AnNYn8W1xuVxVJtyL34GyH --- .github/workflows/publish.yml | 2 +- llama-kotlin/pom.xml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 03df5cf0..f1d4e099 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -3356,7 +3356,7 @@ jobs: - uses: actions/download-artifact@v8 with: { name: jacoco-report, path: target/site/jacoco/ } continue-on-error: true - - uses: advanced-security/maven-dependency-submission-action@v5 + - uses: advanced-security/maven-dependency-submission-action@v6 - name: Coveralls uses: coverallsapp/github-action@v2 with: diff --git a/llama-kotlin/pom.xml b/llama-kotlin/pom.xml index d89b0c13..96fa1b35 100644 --- a/llama-kotlin/pom.xml +++ b/llama-kotlin/pom.xml @@ -60,7 +60,7 @@ SPDX-License-Identifier: MIT - 2.4.10 + 2.4.20 1.11.0 6.1.3 3.0