build(deps): Bump the networking group with 4 updates

[dependabot]

Bumps the networking group with 4 updates: com.squareup.retrofit2:retrofit, com.squareup.okhttp3:okhttp, com.squareup.okhttp3:logging-interceptor and com.squareup.okhttp3:mockwebserver.

Updates com.squareup.retrofit2:retrofit from 2.11.0 to 3.0.0

Release notes

Sourced from com.squareup.retrofit2:retrofit's releases.

3.0.0

Changed

• Upgrade to OkHttp 4.12 (from 3.14).

  This is the version of OkHttp that is written in Kotlin, and as a result Retrofit now has a transitive Kotlin dependency. However, this is also the supported version of OkHttp whereas the previous version was out of support for nearly 4 years.

Note: The 3.x versions of Retrofit maintain forward binary-compatibility with the 2.x versions. This means libraries compiled against 2.x can still be used with the 3.x versions.

2.12.0

New

• First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

  The following converters support this feature through a new withStreaming() factory method:

  • Gson
  • Jackson
  • Moshi
  • Protobuf
  • Wire

Fixed

• Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.

Changelog

Sourced from com.squareup.retrofit2:retrofit's changelog.

3.0.0 - 2025-05-15

Changed

• Upgrade to OkHttp 4.12 (from 3.14).

  This is the version of OkHttp that is written in Kotlin, and as a result Retrofit now has a transitive Kotlin dependency. However, this is also the supported version of OkHttp whereas the previous version was out of support for nearly 4 years.

Note: The 3.x versions of Retrofit maintain forward binary-compatibility with the 2.x versions. This means libraries compiled against 2.x can still be used with the 3.x versions.

2.12.0 - 2025-05-15

New

• First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

  The following converters support this feature through a new withStreaming() factory method:

  • Gson
  • Jackson
  • Moshi
  • Protobuf
  • Wire

Fixed

• Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.

Commits

• 3ab0f1a Prepare version 3.0.0
• e5c02d0 Commit 2.x docs (#4378)
• 5bc3f18 Fix links on the proudction site (#4377)
• 7c3b229 Remove compileOnly stdlib dependency (#4376)
• 8418547 Update okhttp monorepo to v4 (major) (#4375)
• 06216a3 Try to fix removal of latest dir during release
• 1697bdc Prepare next development version
• 5a6ce36 Prepare version 2.12.0
• 4fb8aed Fix artifact name (#4372)
• bf11ef4 Dedicated website build, final status job (#4371)
• Additional commits viewable in compare view

Updates com.squareup.okhttp3:okhttp from 4.12.0 to 5.4.0

Changelog

Sourced from com.squareup.okhttp3:okhttp's changelog.

Version 5.4.0

2026-06-08

• New: Add superpowers to interceptors. Interceptors can now override anything settable on OkHttpClient.Builder, such as the cache, connection pool, socket factory, and DNS. We expect this will allow most users to use interceptors everywhere, insted of mixing and matching interceptors with custom Call.Factory wrappers.
• Fix: Limit each HTTP/2 response to 256 KiB of total headers.
• Upgrade: [kotlinx.coroutines 1.11.0][coroutines_1_11_0]. This is used by the optional okhttp-coroutines artifact.
• Upgrade: [GraalVM 25.0.3][graalvm_25].
• Upgrade: [Okio 3.17.0][okio_3_17_0].

Version 5.3.2

2025-11-18

• Fix: Don't delay triggering timeouts. In Okio 3.16.0 we introduced a regression that caused timeouts to fire later than they were supposed to.

• Upgrade: [Okio 3.16.4][okio_3_16_4].

Version 5.3.1

2025-11-16

This release is the same as 5.3.0. Okio 3.16.3 didn't have a necessary fix!

• Upgrade: [Okio 3.16.3][okio_3_16_3].

Version 5.3.0

2025-10-30

• New: Add tags to Call, including computable tags. Use this to attach application-specific metadata to a Call in an EventListener or Interceptor. The tag can be read in any other EventListener or Interceptor.

    override fun intercept(chain: Interceptor.Chain): Response {
      chain.call().tag(MyAnalyticsTag::class) {
        MyAnalyticsTag(...)
      }
  return chain.proceed(chain.request())
  
  }

... (truncated)

Commits

• 61423f4 Prepare for release 5.4.0.
• d7e6eff Update eclipse.osgi to v3.24.200 (#9480)
• 7a35098 Update bnd to v7.3.0 (#9475)
• 0c5a45b Update dependency com.puppycrawl.tools:checkstyle to v13.5.0 (#9468)
• 113ad17 Update dependency macos to v26 (#9457)
• 84f601a Update shadow.plugin to v9.4.2 (#9466)
• 7d463f4 Update spotless.plugin to v8.6.0 (#9464)
• 3bf00f5 Update plugin com.diffplug.spotless to v8.6.0 (#9463)
• cfc45a3 Update spotless.plugin to v8.5.1 (#9456)
• 81c5006 Apply gradle lint correctly (#9459)
• Additional commits viewable in compare view

Updates com.squareup.okhttp3:logging-interceptor from 4.12.0 to 5.4.0

Changelog

Sourced from com.squareup.okhttp3:logging-interceptor's changelog.

Version 5.4.0

2026-06-08

• New: Add superpowers to interceptors. Interceptors can now override anything settable on OkHttpClient.Builder, such as the cache, connection pool, socket factory, and DNS. We expect this will allow most users to use interceptors everywhere, insted of mixing and matching interceptors with custom Call.Factory wrappers.
• Fix: Limit each HTTP/2 response to 256 KiB of total headers.
• Upgrade: [kotlinx.coroutines 1.11.0][coroutines_1_11_0]. This is used by the optional okhttp-coroutines artifact.
• Upgrade: [GraalVM 25.0.3][graalvm_25].
• Upgrade: [Okio 3.17.0][okio_3_17_0].

Version 5.3.2

2025-11-18

• Fix: Don't delay triggering timeouts. In Okio 3.16.0 we introduced a regression that caused timeouts to fire later than they were supposed to.

• Upgrade: [Okio 3.16.4][okio_3_16_4].

Version 5.3.1

2025-11-16

This release is the same as 5.3.0. Okio 3.16.3 didn't have a necessary fix!

• Upgrade: [Okio 3.16.3][okio_3_16_3].

Version 5.3.0

2025-10-30

• New: Add tags to Call, including computable tags. Use this to attach application-specific metadata to a Call in an EventListener or Interceptor. The tag can be read in any other EventListener or Interceptor.

    override fun intercept(chain: Interceptor.Chain): Response {
      chain.call().tag(MyAnalyticsTag::class) {
        MyAnalyticsTag(...)
      }
  return chain.proceed(chain.request())
  
  }

... (truncated)

Commits

• 61423f4 Prepare for release 5.4.0.
• d7e6eff Update eclipse.osgi to v3.24.200 (#9480)
• 7a35098 Update bnd to v7.3.0 (#9475)
• 0c5a45b Update dependency com.puppycrawl.tools:checkstyle to v13.5.0 (#9468)
• 113ad17 Update dependency macos to v26 (#9457)
• 84f601a Update shadow.plugin to v9.4.2 (#9466)
• 7d463f4 Update spotless.plugin to v8.6.0 (#9464)
• 3bf00f5 Update plugin com.diffplug.spotless to v8.6.0 (#9463)
• cfc45a3 Update spotless.plugin to v8.5.1 (#9456)
• 81c5006 Apply gradle lint correctly (#9459)
• Additional commits viewable in compare view

Updates com.squareup.okhttp3:logging-interceptor from 4.12.0 to 5.4.0

Changelog

Sourced from com.squareup.okhttp3:logging-interceptor's changelog.

Version 5.4.0

2026-06-08

• New: Add superpowers to interceptors. Interceptors can now override anything settable on OkHttpClient.Builder, such as the cache, connection pool, socket factory, and DNS. We expect this will allow most users to use interceptors everywhere, insted of mixing and matching interceptors with custom Call.Factory wrappers.
• Fix: Limit each HTTP/2 response to 256 KiB of total headers.
• Upgrade: [kotlinx.coroutines 1.11.0][coroutines_1_11_0]. This is used by the optional okhttp-coroutines artifact.
• Upgrade: [GraalVM 25.0.3][graalvm_25].
• Upgrade: [Okio 3.17.0][okio_3_17_0].

Version 5.3.2

2025-11-18

• Fix: Don't delay triggering timeouts. In Okio 3.16.0 we introduced a regression that caused timeouts to fire later than they were supposed to.

• Upgrade: [Okio 3.16.4][okio_3_16_4].

Version 5.3.1

2025-11-16

This release is the same as 5.3.0. Okio 3.16.3 didn't have a necessary fix!

• Upgrade: [Okio 3.16.3][okio_3_16_3].

Version 5.3.0

2025-10-30

• New: Add tags to Call, including computable tags. Use this to attach application-specific metadata to a Call in an EventListener or Interceptor. The tag can be read in any other EventListener or Interceptor.

    override fun intercept(chain: Interceptor.Chain): Response {
      chain.call().tag(MyAnalyticsTag::class) {
        MyAnalyticsTag(...)
      }
  return chain.proceed(chain.request())
  
  }

... (truncated)

Commits

• 61423f4 Prepare for release 5.4.0.
• d7e6eff Update eclipse.osgi to v3.24.200 (#9480)
• 7a35098 Update bnd to v7.3.0 (#9475)
• 0c5a45b Update dependency com.puppycrawl.tools:checkstyle to v13.5.0 (#9468)
• 113ad17 Update dependency macos to v26 (#9457)
• 84f601a Update shadow.plugin to v9.4.2 (#9466)
• 7d463f4 Update spotless.plugin to v8.6.0 (#9464)
• 3bf00f5 Update plugin com.diffplug.spotless to v8.6.0 (#9463)
• cfc45a3 Update spotless.plugin to v8.5.1 (#9456)
• 81c5006 Apply gradle lint correctly (#9459)
• Additional commits viewable in compare view

Updates com.squareup.okhttp3:mockwebserver from 4.12.0 to 5.4.0

Changelog

Sourced from com.squareup.okhttp3:mockwebserver's changelog.

Version 5.4.0

2026-06-08

• New: Add superpowers to interceptors. Interceptors can now override anything settable on OkHttpClient.Builder, such as the cache, connection pool, socket factory, and DNS. We expect this will allow most users to use interceptors everywhere, insted of mixing and matching interceptors with custom Call.Factory wrappers.
• Fix: Limit each HTTP/2 response to 256 KiB of total headers.
• Upgrade: [kotlinx.coroutines 1.11.0][coroutines_1_11_0]. This is used by the optional okhttp-coroutines artifact.
• Upgrade: [GraalVM 25.0.3][graalvm_25].
• Upgrade: [Okio 3.17.0][okio_3_17_0].

Version 5.3.2

2025-11-18

• Fix: Don't delay triggering timeouts. In Okio 3.16.0 we introduced a regression that caused timeouts to fire later than they were supposed to.

• Upgrade: [Okio 3.16.4][okio_3_16_4].

Version 5.3.1

2025-11-16

This release is the same as 5.3.0. Okio 3.16.3 didn't have a necessary fix!

• Upgrade: [Okio 3.16.3][okio_3_16_3].

Version 5.3.0

2025-10-30

• New: Add tags to Call, including computable tags. Use this to attach application-specific metadata to a Call in an EventListener or Interceptor. The tag can be read in any other EventListener or Interceptor.

    override fun intercept(chain: Interceptor.Chain): Response {
      chain.call().tag(MyAnalyticsTag::class) {
        MyAnalyticsTag(...)
      }
  return chain.proceed(chain.request())
  
  }

... (truncated)

Commits

• 61423f4 Prepare for release 5.4.0.
• d7e6eff Update eclipse.osgi to v3.24.200 (#9480)
• 7a35098 Update bnd to v7.3.0 (#9475)
• 0c5a45b Update dependency com.puppycrawl.tools:checkstyle to v13.5.0 (#9468)
• 113ad17 Update dependency macos to v26 (#9457)
• 84f601a Update shadow.plugin to v9.4.2 (#9466)
• 7d463f4 Update spotless.plugin to v8.6.0 (#9464)
• 3bf00f5 Update plugin com.diffplug.spotless to v8.6.0 (#9463)
• cfc45a3 Update spotless.plugin to v8.5.1 (#9456)
• 81c5006 Apply gradle lint correctly (#9459)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions