build(deps): bump the maven group with 5 updates

[dependabot]

Bumps the maven group with 5 updates:

Package	From	To
org.eclipse.jgit:org.eclipse.jgit	7.3.0.202506031305-r	7.4.0.202509020913-r
com.android.tools.build:apksig	8.0.2	8.13.1
com.squareup.retrofit2:retrofit	2.9.0	3.0.0
com.squareup.retrofit2:converter-moshi	2.9.0	3.0.0
com.squareup.moshi:moshi-kotlin	1.15.0	1.15.2

Updates org.eclipse.jgit:org.eclipse.jgit from 7.3.0.202506031305-r to 7.4.0.202509020913-r

Commits

• 78b1ccb JGit v7.4.0.202509020913-r
• a783908 Merge branch 'master' into stable-7.4
• b1afc19 Merge "RevWalk: use SystemReader instead of System.getProperty()"
• ba209b9 MultiPackIndexWriter: report also object count and ordered packs
• 22bbd3d MultiPackIndex: add getObjectCount() method
• 09ad00d MultiPackIndex: add findPosition method
• e28c064 Merge "MultipackIndex.PackOffset: add public static constructor"
• a9bb14a MultipackIndex.PackOffset: add public static constructor
• 9d48b26 RevWalk: use SystemReader instead of System.getProperty()
• acd1eff PendingGenerator: drop only buffers loaded in the generator
• Additional commits viewable in compare view

Updates com.android.tools.build:apksig from 8.0.2 to 8.13.1

Updates com.squareup.retrofit2:retrofit from 2.9.0 to 3.0.0

Release notes

Sourced from com.squareup.retrofit2:retrofit's releases.

3.0.0

Changed

• Upgrade to OkHttp 4.12 (from 3.14).

  This is the version of OkHttp that is written in Kotlin, and as a result Retrofit now has a transitive Kotlin dependency. However, this is also the supported version of OkHttp whereas the previous version was out of support for nearly 4 years.

Note: The 3.x versions of Retrofit maintain forward binary-compatibility with the 2.x versions. This means libraries compiled against 2.x can still be used with the 3.x versions.

2.12.0

New

• First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

  The following converters support this feature through a new withStreaming() factory method:

  • Gson
  • Jackson
  • Moshi
  • Protobuf
  • Wire

Fixed

• Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.

2.11.0

New

• The built-in OptionalConverterFactory is now public to allow installing it before other converters which consume all types (e.g., Moshi, Gson, Jackson, etc.).

Fixed

• Ensure that exceptions thrown from failure to parse method annotations can be observed by multiple threads/callers. Previously only the first caller would see the actual parsing exception and other callers would get a cryptic ClassCastException.

2.10.0

New

• Support using Unit as a response type. This can be used for non-body HTTP methods like HEAD or body-containing HTTP methods like GET where the body will be discarded without deserialization.

• kotlinx.serialization converter!

  This was imported from github.com/JakeWharton/retrofit2-kotlinx-serialization-converter/ and remains unchanged from its 1.0.0 release.

  The Maven coordinates are com.squareup.retrofit2:converter-kotlinx-serialization.

• JAXB 3 converter!

... (truncated)

Changelog

Sourced from com.squareup.retrofit2:retrofit's changelog.

3.0.0 - 2025-05-15

Changed

• Upgrade to OkHttp 4.12 (from 3.14).

  This is the version of OkHttp that is written in Kotlin, and as a result Retrofit now has a transitive Kotlin dependency. However, this is also the supported version of OkHttp whereas the previous version was out of support for nearly 4 years.

Note: The 3.x versions of Retrofit maintain forward binary-compatibility with the 2.x versions. This means libraries compiled against 2.x can still be used with the 3.x versions.

2.12.0 - 2025-05-15

New

• First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

  The following converters support this feature through a new withStreaming() factory method:

  • Gson
  • Jackson
  • Moshi
  • Protobuf
  • Wire

Fixed

• Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.

[2.11.0] - 2024-03-28

New

• The built-in OptionalConverterFactory is now public to allow installing it before other converters which consume all types (e.g., Moshi, Gson, Jackson, etc.).

Fixed

• Ensure that exceptions thrown from failure to parse method annotations can be observed by multiple threads/callers. Previously only the first caller would see the actual parsing exception and other callers would get a cryptic ClassCastException.

[2.10.0] - 2024-03-18

New

• Support using Unit as a response type. This can be used for non-body HTTP methods like HEAD or body-containing HTTP methods like GET where the body will be discarded without deserialization.
• kotlinx.serialization converter!

... (truncated)

Commits

• 3ab0f1a Prepare version 3.0.0
• e5c02d0 Commit 2.x docs (#4378)
• 5bc3f18 Fix links on the proudction site (#4377)
• 7c3b229 Remove compileOnly stdlib dependency (#4376)
• 8418547 Update okhttp monorepo to v4 (major) (#4375)
• 06216a3 Try to fix removal of latest dir during release
• 1697bdc Prepare next development version
• 5a6ce36 Prepare version 2.12.0
• 4fb8aed Fix artifact name (#4372)
• bf11ef4 Dedicated website build, final status job (#4371)
• Additional commits viewable in compare view

Updates com.squareup.retrofit2:converter-moshi from 2.9.0 to 3.0.0

Release notes

Sourced from com.squareup.retrofit2:converter-moshi's releases.

3.0.0

Changed

• Upgrade to OkHttp 4.12 (from 3.14).

  This is the version of OkHttp that is written in Kotlin, and as a result Retrofit now has a transitive Kotlin dependency. However, this is also the supported version of OkHttp whereas the previous version was out of support for nearly 4 years.

Note: The 3.x versions of Retrofit maintain forward binary-compatibility with the 2.x versions. This means libraries compiled against 2.x can still be used with the 3.x versions.

2.12.0

New

• First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

  The following converters support this feature through a new withStreaming() factory method:

  • Gson
  • Jackson
  • Moshi
  • Protobuf
  • Wire

Fixed

• Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.

2.11.0

New

• The built-in OptionalConverterFactory is now public to allow installing it before other converters which consume all types (e.g., Moshi, Gson, Jackson, etc.).

Fixed

• Ensure that exceptions thrown from failure to parse method annotations can be observed by multiple threads/callers. Previously only the first caller would see the actual parsing exception and other callers would get a cryptic ClassCastException.

2.10.0

New

• Support using Unit as a response type. This can be used for non-body HTTP methods like HEAD or body-containing HTTP methods like GET where the body will be discarded without deserialization.

• kotlinx.serialization converter!

  This was imported from github.com/JakeWharton/retrofit2-kotlinx-serialization-converter/ and remains unchanged from its 1.0.0 release.

  The Maven coordinates are com.squareup.retrofit2:converter-kotlinx-serialization.

• JAXB 3 converter!

... (truncated)

Changelog

Sourced from com.squareup.retrofit2:converter-moshi's changelog.

3.0.0 - 2025-05-15

Changed

• Upgrade to OkHttp 4.12 (from 3.14).

  This is the version of OkHttp that is written in Kotlin, and as a result Retrofit now has a transitive Kotlin dependency. However, this is also the supported version of OkHttp whereas the previous version was out of support for nearly 4 years.

Note: The 3.x versions of Retrofit maintain forward binary-compatibility with the 2.x versions. This means libraries compiled against 2.x can still be used with the 3.x versions.

2.12.0 - 2025-05-15

New

• First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

  The following converters support this feature through a new withStreaming() factory method:

  • Gson
  • Jackson
  • Moshi
  • Protobuf
  • Wire

Fixed

• Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.

[2.11.0] - 2024-03-28

New

• The built-in OptionalConverterFactory is now public to allow installing it before other converters which consume all types (e.g., Moshi, Gson, Jackson, etc.).

Fixed

• Ensure that exceptions thrown from failure to parse method annotations can be observed by multiple threads/callers. Previously only the first caller would see the actual parsing exception and other callers would get a cryptic ClassCastException.

[2.10.0] - 2024-03-18

New

• Support using Unit as a response type. This can be used for non-body HTTP methods like HEAD or body-containing HTTP methods like GET where the body will be discarded without deserialization.
• kotlinx.serialization converter!

... (truncated)

Commits

• 3ab0f1a Prepare version 3.0.0
• e5c02d0 Commit 2.x docs (#4378)
• 5bc3f18 Fix links on the proudction site (#4377)
• 7c3b229 Remove compileOnly stdlib dependency (#4376)
• 8418547 Update okhttp monorepo to v4 (major) (#4375)
• 06216a3 Try to fix removal of latest dir during release
• 1697bdc Prepare next development version
• 5a6ce36 Prepare version 2.12.0
• 4fb8aed Fix artifact name (#4372)
• bf11ef4 Dedicated website build, final status job (#4371)
• Additional commits viewable in compare view

Updates com.squareup.moshi:moshi-kotlin from 1.15.0 to 1.15.2

Changelog

Sourced from com.squareup.moshi:moshi-kotlin's changelog.

Version 1.15.2

2024-12-05

• Do not generate conditional shrinker rules (i.e., -if) when the rule is already predicated on the presence of the target type (as -keepnames and -keepclassmembers are). This will improve shrinker performance for projects with hundreds of model types, as conditional rules are more expensive to evaluate.

Version 1.15.1

2024-01-30

• Upgrade to Okio 3.7.0

Commits

• 7f957b1 Prepare version 1.15.2
• 8feae55 Remove redundant preconditions from generated ProGuard rules (#1913)
• 932807e Prepare next development version
• ee55c10 Prepare version 1.15.1
• 9ea3d52 Latest Okio
• 637bf02 Publish empty Javadoc for moshi-kotlin-codegen (#1674)
• 5225006 Prepare next development version.
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions