From 25b4074877a22bda0c463d204667bfac72b4a327 Mon Sep 17 00:00:00 2001 From: Anatoliy Babushka Date: Thu, 6 Aug 2026 10:47:48 +0200 Subject: [PATCH 1/2] fix(deps): force patched kotlin-stdlib and koin-core versions Aikido flagged kotlin-stdlib 1.8.21 (AIKIDO-2026-188556, AIKIDO-2026-550292, medium) and koin-core 3.5.6 (AIKIDO-2025-10040, low), both pulled in transitively via analyticssdk. Forces resolution to the patched versions as an immediate mitigation; the koin-core root cause is being fixed upstream in appanalytics-android-sdk#14. Co-Authored-By: Claude Sonnet 5 --- android/app/build.gradle | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/android/app/build.gradle b/android/app/build.gradle index 8e73679..612c1a1 100644 --- a/android/app/build.gradle +++ b/android/app/build.gradle @@ -119,3 +119,13 @@ dependencies { implementation jscFlavor } } + +// Aikido flagged kotlin-stdlib 1.8.21 (AIKIDO-2026-188556, AIKIDO-2026-550292) and +// koin-core 3.5.6 (AIKIDO-2025-10040) pulled in transitively via analyticssdk. Force +// resolution to the patched versions until analyticssdk republishes with the fix. +configurations.all { + resolutionStrategy { + force "org.jetbrains.kotlin:kotlin-stdlib:2.4.20" + force "io.insert-koin:koin-core:4.0.2" + } +} From 958e4195d5ef4dceb079e9364642be6007ea6baa Mon Sep 17 00:00:00 2001 From: Anatoliy Babushka Date: Thu, 6 Aug 2026 10:54:23 +0200 Subject: [PATCH 2/2] =?UTF-8?q?fix(deps):=20address=20Copilot=20review=20?= =?UTF-8?q?=E2=80=94=20align=20kotlin=20plugin/stdlib,=20use=20configureEa?= =?UTF-8?q?ch?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Bump kotlinVersion (Kotlin Gradle plugin) to 2.4.20 to match the forced kotlin-stdlib version; a plugin/stdlib mismatch causes build-time ABI/metadata errors. - Force kotlin-stdlib off rootProject.ext.kotlinVersion instead of a hardcoded literal so the two can't drift apart again. - Switch configurations.all to configurations.configureEach to keep Gradle's configuration-avoidance benefits. Co-Authored-By: Claude Sonnet 5 --- android/app/build.gradle | 6 ++++-- android/build.gradle | 4 +++- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/android/app/build.gradle b/android/app/build.gradle index 612c1a1..d770735 100644 --- a/android/app/build.gradle +++ b/android/app/build.gradle @@ -123,9 +123,11 @@ dependencies { // Aikido flagged kotlin-stdlib 1.8.21 (AIKIDO-2026-188556, AIKIDO-2026-550292) and // koin-core 3.5.6 (AIKIDO-2025-10040) pulled in transitively via analyticssdk. Force // resolution to the patched versions until analyticssdk republishes with the fix. -configurations.all { +// kotlin-stdlib is forced to rootProject.ext.kotlinVersion, not a hardcoded literal, +// so it can never drift out of lockstep with the Kotlin Gradle plugin version. +configurations.configureEach { resolutionStrategy { - force "org.jetbrains.kotlin:kotlin-stdlib:2.4.20" + force "org.jetbrains.kotlin:kotlin-stdlib:${rootProject.ext.kotlinVersion}" force "io.insert-koin:koin-core:4.0.2" } } diff --git a/android/build.gradle b/android/build.gradle index a9ea023..bd72bfc 100644 --- a/android/build.gradle +++ b/android/build.gradle @@ -5,7 +5,9 @@ buildscript { compileSdkVersion = 35 targetSdkVersion = 34 ndkVersion = "26.1.10909125" - kotlinVersion = "1.9.24" + // Kept in lockstep with the kotlin-stdlib force in app/build.gradle — + // a plugin/stdlib version mismatch causes ABI/metadata errors at build time. + kotlinVersion = "2.4.20" } repositories { google()