Skip to content

deps(deps): bump the tests group across 1 directory with 2 updates - #6

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/tests-af08336dde
Open

deps(deps): bump the tests group across 1 directory with 2 updates#6
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/tests-af08336dde

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 16, 2026

Copy link
Copy Markdown

Bumps the tests group with 2 updates in the / directory: com.google.truth:truth and org.robolectric:robolectric.

Updates com.google.truth:truth from 1.4.4 to 1.4.5

Release notes

Sourced from com.google.truth:truth's releases.

1.4.5

  • Changed assertions like assertThat(nullMap).isEmpty() to fail with a useful failure message instead of throwing NullPointerException (and similarly for other "bogus" values, such as negative sizes). (da5d6e96f)
  • Made Kotlin's isInstanceOf(Int::class.java) (and Java's isInstanceOf(int.class)) a valid way to check for Int/Integer instances. (974ef195b)
  • Improved isWithin to pretty-print numbers in its failure messages. (de785536d, 07318c23e)
  • Improved some assertions that print class names to print simpler names (e.g., Integer instead of java.lang.Integer). (0ba72d60fdb384aa97da03e2403a6757f63bf129)
  • Changed ExpectFailure to never generate "value of" lines based on bytecode. This slightly simplifies writing new tests with ExpectFailure and prevents future behavior changes in some ExpectFailure tests that already exist. However, it may also require changes to other existing ExpectFailure tests to remove or change any assertions about the "value of" line. (3caa0e845)
  • Our Android minSdkVersion is now 23 (Marshmallow). This follows the minimum of Google's foundational Android libraries, and we expect it to have no practical impact on users. (c85c75cf4)
  • Changed our GWT/J2CL artifact to omit usages of @NullMarked. This was making all our types non-null in those environments, since we don't yet use @Nullable in the GWT/J2CL artifact. (6392d37e7)
Commits
  • 0c43ea0 Set version number for truth-parent to 1.4.5.
  • 24b5a31 Fix TODO style.
  • 7261f72 Make ActualValueInference see through casts and also recognize some of Kotl...
  • 3caa0e8 In ExpectFailure, never generate "value of" lines based on bytecode.
  • a29e1b2 Attempt to fix Javadoc snapshots:
  • 3a0cf9a Bump the github-actions group with 2 updates
  • 3053945 Use the standard parameter name ("expected") in MultimapSubject.isEqualTo.
  • 079b919 Add a TODO to containsNoDuplicates.
  • b515e71 Show only the duplicate keys in the exception message, not all keys.
  • 534518e Don't bother to explicitly set [publishingServerId](https://central.sonatyp...
  • Additional commits viewable in compare view

Updates org.robolectric:robolectric from 4.13 to 4.16.1

Release notes

Sourced from org.robolectric:robolectric's releases.

Robolectric 4.16.1 is a minor release that fixes some issues when Robolectric is used for Android Platform development. Most notably, it is updated to support the deletion of FingerprintManager in the Android Framework, as well as some improvements to the VirtualDeviceManager shadow.

Full Changelog: robolectric/robolectric@robolectric-4.16...robolectric-4.16.1

Robolectric 4.16 supports Android Baklava (SDK 36), and you need to use JDK 21 if running tests with SDK 36 target. It also removes support for Android L (SDK 21 and 22).

One exciting new feature is native resources (ResourcesMode.NATIVE). Note this is currently only available in SDK 36.

If you have any issues, please file them here.

What's Changed

... (truncated)

Commits
  • 524ea8e Bump version to 4.16.1.
  • 54fd1ee Implement ResTable support for shared libraries
  • 1e35e63 When a top-level exception occurs in the Simulator, print the stack trace and...
  • e2c046f Added custom ThreadFactory to name threads in LocalUIController
  • 7f3165a Add newly required --add-exports arguments to test tasks
  • db54b4b Add VirtualDeviceParamsBuilder to support creating new virtual devices.
  • b73adc3 Implement shadow behavior for VirtualDeviceManager#registerVirtualDeviceListener
  • 1e05fde Create shadow for VirtualDeviceManager$VirtualDevice#createVirtualCamera
  • d160747 Future proof ShadowFingerprintManagerTest.
  • d7a0438 Add maxSdk for ShadowFingerprintManager.
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot @github

dependabot Bot commented on behalf of github May 16, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

gitubpatrice added a commit that referenced this pull request May 16, 2026
User reported 7 issues after v1.3.2 install. This release fixes them all
plus 9 additional findings from a Z+global audit cycle.

USER-FACING FIXES
- Bug #5 (CRITICAL): duplicate empty conversation on SMS receive.
  `ConversationMirror.ensureConversation` now matches 1-to-1 conv by
  8-digit suffix as fallback to exact CSV match. Prevents the
  national/international format mismatch that spawned ghost conv on
  every received SMS.
- Bug #6 (CRITICAL): notifications stacked until tap-on-notif. Notifier
  posts with tag = `com.filestech.sms.conv.<id>`; `markRead` calls
  `cancelAllForConversation` iterating `activeNotifications`. Effective
  when user opens the thread from inside the app.
- Bug #1 (HIGH): voice send failed on SFR > ~90 s. Reverted
  BITRATE_BPS 24 -> 16 kbps + MAX_SIZE_BYTES 450 -> 280 KB. 120 s now
  fits in one MMS UCS-2 segment under all French carrier caps.
- Bug #4 (MEDIUM): SMS Tech absent from system Share chooser. Added
  intent-filter ACTION_SEND / SEND_MULTIPLE to MainActivity with strict
  MIME whitelist. New `IncomingShareHolder` singleton + parser in
  MainActivity. ThreadViewModel consumes after conv hydrates.
- Bug #2 (MEDIUM): received images / files not openable. New
  `MediaAttachmentBubble` Composable. Tap = `Intent.ACTION_VIEW` via
  scheme-aware URI (file → FileProvider, content:// kept as-is).
- Feature #3 (MEDIUM): image thumbnail preview in confirm dialog (Coil).
- UI #7 (MEDIUM): bold `senderLabel` ("You" / contact name) above the
  1st bubble of each burst. Vertical spacing 3 dp -> 8 dp at boundaries.
- Snackbar (UX): custom render forces inverseSurface neutral color
  (red kept for destructive actions only, per user request).

POST-FIX AUDIT Z — 7 additional findings, all fixed before tag
- Z1 (CRITICAL): MediaAttachmentBubble was blanket-wrapping `File(...)`
  on `localUri`. content://mms/part/N URIs (system-imported MMS) would
  silently fail in FileProvider AND Coil. Scheme-aware `toShareableUri`
  helper added.
- Z3 (HIGH): consumeIncomingShareIfAny raced with conversation flow
  hydration. Now suspends on `_state.first { conversation != null }`
  with 5 s timeout before consuming the holder.
- Z4 (HIGH): setGroup without groupSummary creates phantom group
  headers on OneUI/MIUI that survive per-id cancel. Switched to
  tag-based notify/cancel API.
- Z5 (MEDIUM): senderLabel on outgoing AudioMessageBubble used
  cs.onSurfaceVariant over cs.primary = WCAG AA fail. Use
  cs.onPrimary for outgoing.
- Z6 (MEDIUM): MIME whitelist tightened (drop text/*, application/*).
- NotificationActionReceiver: now relies on markRead-driven cancel
  (avoids the legacy per-id cancel that no longer fires with tag-based
  notifs).

GLOBAL AUDIT — 2 high additional fixes
- G1 (HIGH, privacy): after auto/manual purge, conversations whose
  every message was deleted retained their `last_message_preview` in
  clear on the list screen. New `refreshAllConversationPreviewsAfterPurge`
  DAO query recomputes preview + last_message_at from surviving rows.
  Called by both purgeHistoryNow (manual) and TelephonySyncWorker (auto).
- G2 (HIGH, UX): IncomingShareHolder could attach to wrong conv after
  user abandoned the share. Added 60 s TTL on Pending + clear on any
  non-SEND intent (launcher / notification / deep-link).

DEFERRED to v1.3.4
- Multi-attach in composer (user request: stage multiple images/files
  before send instead of immediate dispatch).
- G3-G10 minor cleanups (dead permissions, dead code, polish).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@dependabot dependabot Bot changed the title deps(deps): bump the tests group with 2 updates deps(deps): bump the tests group across 1 directory with 2 updates May 18, 2026
@dependabot
dependabot Bot force-pushed the dependabot/gradle/tests-af08336dde branch 2 times, most recently from 8da39fd to 31a4d3c Compare May 25, 2026 05:26
@dependabot
dependabot Bot force-pushed the dependabot/gradle/tests-af08336dde branch 2 times, most recently from 4eaaace to aedbbb7 Compare June 8, 2026 04:22
@dependabot
dependabot Bot force-pushed the dependabot/gradle/tests-af08336dde branch 2 times, most recently from 356751e to a0ceba1 Compare June 22, 2026 04:20
@dependabot
dependabot Bot force-pushed the dependabot/gradle/tests-af08336dde branch 2 times, most recently from 110292e to c239832 Compare July 20, 2026 04:20
@dependabot
dependabot Bot force-pushed the dependabot/gradle/tests-af08336dde branch from c239832 to 830bd82 Compare July 27, 2026 04:19
@dependabot dependabot Bot changed the title deps(deps): bump the tests group across 1 directory with 2 updates deps(deps): Bump the tests group across 1 directory with 2 updates Aug 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/gradle/tests-af08336dde branch from 830bd82 to de9831f Compare August 3, 2026 04:17
Bumps the tests group with 2 updates in the / directory: [com.google.truth:truth](https://github.com/google/truth) and [org.robolectric:robolectric](https://github.com/robolectric/robolectric).


Updates `com.google.truth:truth` from 1.4.4 to 1.4.5
- [Release notes](https://github.com/google/truth/releases)
- [Commits](google/truth@v1.4.4...v1.4.5)

Updates `org.robolectric:robolectric` from 4.13 to 4.16.1
- [Release notes](https://github.com/robolectric/robolectric/releases)
- [Commits](robolectric/robolectric@robolectric-4.13...robolectric-4.16.1)

---
updated-dependencies:
- dependency-name: com.google.truth:truth
  dependency-version: 1.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: tests
- dependency-name: org.robolectric:robolectric
  dependency-version: 4.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tests
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title deps(deps): Bump the tests group across 1 directory with 2 updates deps(deps): bump the tests group across 1 directory with 2 updates Aug 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/gradle/tests-af08336dde branch from de9831f to dbccc52 Compare August 10, 2026 04:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants