From 21221a35a01d33408fb925461f718589334df761 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 16 Oct 2026 17:13:27 +0000 Subject: [PATCH 1/2] fix(deps): update dependency com.google.crypto.tink:tink to v1.24.0 Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- app/build.gradle.kts | 2 +- gradle/verification-metadata.xml | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/app/build.gradle.kts b/app/build.gradle.kts index f42971eddb..e2a0788ab3 100644 --- a/app/build.gradle.kts +++ b/app/build.gradle.kts @@ -383,7 +383,7 @@ dependencies { testImplementation("org.jetbrains.kotlinx:kotlinx-coroutines-test:$coroutinesVersion") testImplementation("org.junit.vintage:junit-vintage-engine:6.1.3") // DO NOT REMOVE - testImplementation("com.google.crypto.tink:tink:1.23.0") + testImplementation("com.google.crypto.tink:tink:1.24.0") testImplementation("androidx.room:room-testing:$roomVersion") testImplementation("com.squareup.okhttp3:mockwebserver:$okhttpVersion") testImplementation("com.squareup.okhttp3:okhttp-tls:$okhttpVersion") diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml index 2d51ad5ae5..bc68efd5c3 100644 --- a/gradle/verification-metadata.xml +++ b/gradle/verification-metadata.xml @@ -309,6 +309,7 @@ + From 896a1de99a49e8c1686b422d35dde477d83c00ea Mon Sep 17 00:00:00 2001 From: Andy Scherzinger Date: Sat, 17 Oct 2026 17:38:37 +0200 Subject: [PATCH 2/2] test: use the tink version shipped via UnifiedPush WebPushEncryptionTest checks the WebPush crypto that the app gets from tink, pulled in by org.unifiedpush.android:connector (runtime scope). Pinning a newer tink for tests only made them run against a different version than the app ships. Declare the test dependency without a version, so consistent resolution aligns it with the app's runtime classpath, and drop the now unused 1.24.0 verification entry. Assisted-by: Claude Code:claude-opus-5-5 Signed-off-by: Andy Scherzinger --- app/build.gradle.kts | 3 ++- gradle/verification-metadata.xml | 1 - 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/app/build.gradle.kts b/app/build.gradle.kts index e2a0788ab3..5965f04f1c 100644 --- a/app/build.gradle.kts +++ b/app/build.gradle.kts @@ -383,7 +383,8 @@ dependencies { testImplementation("org.jetbrains.kotlinx:kotlinx-coroutines-test:$coroutinesVersion") testImplementation("org.junit.vintage:junit-vintage-engine:6.1.3") // DO NOT REMOVE - testImplementation("com.google.crypto.tink:tink:1.24.0") + // no version: consistent resolution aligns it with the tink that org.unifiedpush.android:connector ships + testImplementation("com.google.crypto.tink:tink") testImplementation("androidx.room:room-testing:$roomVersion") testImplementation("com.squareup.okhttp3:mockwebserver:$okhttpVersion") testImplementation("com.squareup.okhttp3:okhttp-tls:$okhttpVersion") diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml index bc68efd5c3..2d51ad5ae5 100644 --- a/gradle/verification-metadata.xml +++ b/gradle/verification-metadata.xml @@ -309,7 +309,6 @@ -