deps: bump org.json:json from 20250517 to 20260814 in /android - #22
Closed
dependabot[bot] wants to merge 16 commits into
Closed
dependabot[bot] wants to merge 16 commits into
dependabot[bot] wants to merge 16 commits into
Conversation
A standalone Flutter dashboard for BYD head units (Leopard 8 / DiLink 5.1). Vehicle controls, automations and speech recognition run on the device — no account, no subscription, no hosted API, no MQTT broker, no license check. Every outbound connection sits behind a switch that ships off, and there is no analytics SDK or telemetry. The bundled radio directory (5,166 stations across 212 countries) browses and searches with no network at all; only playing a live stream needs the internet, and only after the driver enables it. Contributors need nothing that is not in this repository: no private submodule, no secrets, no backend access. See docs/ORIENTATION.md to get running on an ordinary Android emulator in about twenty minutes. Host checks: analyzer clean, 1,452 tests passing, debug APK builds, no broken documentation links. Physical head-unit acceptance (fresh install → speech → vehicle execution) has not been completed; docs/offline-first/final-verification.md records what is and is not proven. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01AjhsQbfGjJw2V8j2WmRXpN
The changelog still described the i99dash-era repository and its private archive. Point it at the release-please flow instead, and state plainly that no iLINK release has been cut yet.
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 6 to 7. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@v6...v7) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps com.android.application from 8.11.1 to 8.13.2. --- updated-dependencies: - dependency-name: com.android.application dependency-version: 8.13.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) from 4.34.1 to 4.36.1. - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) --- updated-dependencies: - dependency-name: com.google.protobuf:protobuf-java dependency-version: 4.36.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [flutter_cache_manager](https://github.com/Baseflow/flutter_cache_manager) from 3.4.1 to 3.4.2. - [Release notes](https://github.com/Baseflow/flutter_cache_manager/releases) - [Commits](Baseflow/flutter_cache_manager@v3.4.1...v3.4.2) --- updated-dependencies: - dependency-name: flutter_cache_manager dependency-version: 3.4.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [connectivity_plus](https://github.com/fluttercommunity/plus_plugins/tree/main/packages/connectivity_plus) from 7.1.1 to 7.3.1. - [Release notes](https://github.com/fluttercommunity/plus_plugins/releases) - [Commits](https://github.com/fluttercommunity/plus_plugins/commits/connectivity_plus-v7.3.1/packages/connectivity_plus) --- updated-dependencies: - dependency-name: connectivity_plus dependency-version: 7.3.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [flutter_secure_storage](https://github.com/mogol/flutter_secure_storage) from 10.3.0 to 10.3.1. - [Release notes](https://github.com/mogol/flutter_secure_storage/releases) - [Commits](juliansteenbakker/flutter_secure_storage@v10.3.0...v10.3.1) --- updated-dependencies: - dependency-name: flutter_secure_storage dependency-version: 10.3.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [just_audio](https://github.com/ryanheise/just_audio) from 0.10.5 to 0.10.6. - [Release notes](https://github.com/ryanheise/just_audio/releases) - [Commits](ryanheise/just_audio@just_audio-v0.10.5...just_audio-v0.10.6) --- updated-dependencies: - dependency-name: just_audio dependency-version: 0.10.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Dependabot proposed Gradle 9.7.1 (#13) and it broke the Android build: Plugin 'com.android.internal.application' relies on 'org.gradle.api.problems.internal.InternalProblems', a Gradle internal API that was removed in Gradle 9.6.0. ... or use Gradle 9.5. Gradle 9.6.0 dropped an internal API that every AGP 8.x depends on. AGP is deliberately held at 8.x here because AGP 9 is not Flutter-ready, so the two are coupled: Gradle cannot move past 9.5 until that migration happens. The previous rule only ignored Gradle *majors*, so 9.6+ sailed through as a minor. Nothing would have stopped it: ci.yml runs format, analyze and test, none of which invoke Gradle, so #13's `validate` check passed green while the app could not build at all. Caught by building locally rather than trusting the check. Verified by isolation — Gradle 9.7.1 + AGP 8.13.2 fails; Gradle 9.3.1 with the same AGP 8.13.2 and protobuf 4.36.1 builds. Lift this cap together with the AGP 9 move.
Bumps [org.json:json](https://github.com/douglascrockford/JSON-java) from 20250517 to 20260814. - [Release notes](https://github.com/douglascrockford/JSON-java/releases) - [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md) - [Commits](stleary/JSON-java@2025051...2026081) --- updated-dependencies: - dependency-name: org.json:json dependency-version: '20260814' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
Author
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
dependabot
Bot
deleted the
dependabot/gradle/android/org.json-json-20260814
branch
September 6, 2026 15:46
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps org.json:json from 20250517 to 20260814.
Release notes
Sourced from org.json:json's releases.
... (truncated)
Changelog
Sourced from org.json:json's changelog.
Commits
6c14048Merge pull request #1073 from stleary/pre-release-2026081434efda6pre-release-20260814 initial commit22ab2fbUpdate jar file link in README392a352Fix formatting of the latest release jar file linkb594a32Merge pull request #1070 from dong0713/fix/xml-unescape-whitespace-control-chars94854a1Fix XML.unescape rejecting valid whitespace numeric character references1795e8cMerge pull request #1069 from stleary/pre-release-20260719da757c6pre-release-20260719 oops forgot to update new unit tests for strict moded24bc9epre-release-20260719 initial commit80efb52Merge pull request #1068 from stleary/max-number-length-configDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)