Bump the github-dependencies group with 6 updates

[dependabot]

Bumps the github-dependencies group with 6 updates:

Package	From	To
io.sentry:sentry	6.32.0	8.31.0
org.assertj:assertj-core	3.27.0	3.27.7
org.jetbrains.kotlin.jvm	2.1.0	2.3.0
org.jetbrains.intellij.platform	2.6.0	2.11.0
org.jetbrains.changelog	2.2.1	2.5.0
gradle-wrapper	8.5	9.3.0

Updates io.sentry:sentry from 6.32.0 to 8.31.0

Release notes

Sourced from io.sentry:sentry's releases.

8.31.0

Features

• Added io.sentry.ndk.sdk-name Android manifest option to configure the native SDK's name (#5027)
• Replace sentry.trace.parent_span_id attribute with spanId property on SentryLogEvent (#5040)

Fixes

• Only attach user attributes to logs if sendDefaultPii is enabled (#5036)
• Reject new logs if LoggerBatchProcessor is shutting down (#5041)
• Downgrade protobuf-javalite dependency from 4.33.1 to 3.25.8 (#5044)

Dependencies

• Bump Native SDK from v0.12.2 to v0.12.3 (#5012)
  • changelog
  • diff

8.30.0

Fixes

• Fix ANRs when collecting device context (#4970)
  • IMPORTANT: This disables collecting external storage size (total/free) by default, to enable it back use options.isCollectExternalStorageContext = true or <meta-data android:name="io.sentry.external-storage-context" android:value="true" />
• Fix NullPointerException when reading ANR marker (#4979)
• Report discarded log in batch processor as log_byte (#4971)

Improvements

• Expose MAX_EVENT_SIZE_BYTES constant in SentryOptions (#4962)
• Discard envelopes on 4xx and 5xx response (#4950)
  • This aims to not overwhelm Sentry after an outage or load shedding (including HTTP 429) where too many events are sent at once

Feature

• Add a Tombstone integration that detects native crashes without relying on the NDK integration, but instead using ApplicationExitInfo.REASON_CRASH_NATIVE on Android 12+. (#4933)
  • Currently exposed via options as an internal API only.
  • If enabled alongside the NDK integration, crashes will be reported as two separate events. Users should enable only one; deduplication between both integrations will be added in a future release.
• Add Sentry Metrics to Java SDK (#5026)
  • Metrics are enabled by default
  • APIs are namespaced under Sentry.metrics()
  • We offer the following APIs:
    • count: A metric that increments counts
    • gauge: A metric that tracks a value that can go up or down
    • distribution: A metric that tracks the statistical distribution of values
  • For more details, see the Metrics documentation: https://docs.sentry.io/product/explore/metrics/getting-started/

8.29.0 (Stable)

Fixes

... (truncated)

Changelog

Sourced from io.sentry:sentry's changelog.

8.31.0

Features

• Added io.sentry.ndk.sdk-name Android manifest option to configure the native SDK's name (#5027)
• Replace sentry.trace.parent_span_id attribute with spanId property on SentryLogEvent (#5040)

Fixes

• Only attach user attributes to logs if sendDefaultPii is enabled (#5036)
• Reject new logs if LoggerBatchProcessor is shutting down (#5041)
• Downgrade protobuf-javalite dependency from 4.33.1 to 3.25.8 (#5044)

Dependencies

• Bump Native SDK from v0.12.2 to v0.12.3 (#5012)
  • changelog
  • diff

8.30.0

Fixes

• Fix ANRs when collecting device context (#4970)
  • IMPORTANT: This disables collecting external storage size (total/free) by default, to enable it back use options.isCollectExternalStorageContext = true or <meta-data android:name="io.sentry.external-storage-context" android:value="true" />
• Fix NullPointerException when reading ANR marker (#4979)
• Report discarded log in batch processor as log_byte (#4971)

Improvements

• Expose MAX_EVENT_SIZE_BYTES constant in SentryOptions (#4962)
• Discard envelopes on 4xx and 5xx response (#4950)
  • This aims to not overwhelm Sentry after an outage or load shedding (including HTTP 429) where too many events are sent at once

Feature

• Add a Tombstone integration that detects native crashes without relying on the NDK integration, but instead using ApplicationExitInfo.REASON_CRASH_NATIVE on Android 12+. (#4933)
  • Currently exposed via options as an internal API only.
  • If enabled alongside the NDK integration, crashes will be reported as two separate events. Users should enable only one; deduplication between both integrations will be added in a future release.
• Add Sentry Metrics to Java SDK (#5026)
  • Metrics are enabled by default
  • APIs are namespaced under Sentry.metrics()
  • We offer the following APIs:
    • count: A metric that increments counts
    • gauge: A metric that tracks a value that can go up or down
    • distribution: A metric that tracks the statistical distribution of values
  • For more details, see the Metrics documentation: https://docs.sentry.io/product/explore/metrics/getting-started/

8.29.0

... (truncated)

Commits

• 96c10a1 release: 8.31.0
• 57b852f chore(changelog): Merge changelog sections (#5048)
• feb0da6 fix(dependencies): Downgrade protobuf-javalite from 4.33.1 to 3.25.8 (#5044)
• 1564554 fix(logs): Reject new logs if LoggerBatchProcessor is shutting down (#5041)
• 8df0d02 feat(logs): Replace sentry.trace.parent_span_id attribute with spanId pro...
• 8107c75 fix(logs): Check sendDefaultPii before attaching user attributes (#5036)
• 804bd88 chore(repo): Add Claude Code settings with basic permissions (#5038)
• 94bff8d ci(release): Switch from action-prepare-release to Craft (#5014)
• fb05841 build(deps): bump JamesIves/github-pages-deploy-action (#5015)
• 847c2d4 chore: update scripts/update-sentry-native-ndk.sh to 0.12.3 (#5012)
• Additional commits viewable in compare view

Updates org.assertj:assertj-core from 3.27.0 to 3.27.7

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.7

🔒 Security

Core

• Fix XXE vulnerability in isXmlEqualTo assertion (CVE-2026-24400)
  • See GHSA-rqfh-9r24-8c9r for details; many thanks to @​wxt201 and @​Song-Li for responsibly reporting it!

🚫 Deprecated

Core

• Deprecate XmlStringPrettyFormatter with no replacement

🐛 Bug Fixes

Guava

• Navigation to assertj-core or guava types from assertj-guava Javadoc site has unnecessary header #3478

🔨 Dependency Upgrades

Core

• Upgrade to Byte Buddy 1.18.3
• Upgrade to JUnit BOM 5.14.1

Guava

• Upgrade to Guava 33.5.0-jre

v3.27.6

🐛 Bug Fixes

Core

• Add missing export for org.assertj.core.annotation #3951

❤️ Contributors

Thanks to all the contributors who worked on this release:

@​duponter

v3.27.5

⚡ Improvements

Core

• ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 #3946

... (truncated)

Commits

• e840716 [maven-release-plugin] prepare release assertj-build-3.27.7
• 85ca7eb Deprecate XmlStringPrettyFormatter
• 77081dc Merge commit from fork
• b68fc24 Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...
• 0cf5bb6 Bump kotlin.version from 2.1.0 to 2.2.21
• d393ef1 Abort tests when symbolic links cannot be created (#3788)
• 2212433 Add IntelliJ custom inspection for test class names
• 5717d02 Update JetBrains icon
• a8ec20b Add icon for JetBrains products
• c05fb3d Bump Maven to 3.9.12 and Wrapper to 3.3.4
• Additional commits viewable in compare view

Updates org.jetbrains.kotlin.jvm from 2.1.0 to 2.3.0

Release notes

Sourced from org.jetbrains.kotlin.jvm's releases.

Kotlin 2.3.0

Changelog

Analysis API

• KT-80082 K2. False positive "Cannot resolve method" for self-bounded generic with wildcard return type in Java interop
• KT-80303 Move :native:analysis-api-klib-reader to :libraries:tools

Analysis API. Code Compilation

• KT-70860 K2 IDE / Kotlin Debugger: CCE “java.lang.String cannot be cast to java.lang.Void” on evaluating not-null variable on the line with assigning null to that var
• KT-78554 K2 IDE / Kotlin Debugger: ISE “No override for FUN IR_EXTERNAL_DECLARATION_STUB” on calling toString() for local class instance during evaluation
• KT-73201 K2 IDE: Error while evaluating expressions with local classes

Analysis API. FIR

• KT-81378 Expected expression 'FirFunctionCallImpl' to be resolved caused by suspend {}
• KT-80473 Add events for tracking LL activities
• KT-46375 Analysis API: Support cross-file class redeclaration checks using indices
• KT-80471 Analysis API: Deduplicate equivalent call candidates in resolveToCallCandidates
• KT-79653 [Analysis API] ContextCollector: BODY context of enum classes doesn't contain enum entries
• KT-75858 K2 AA: False positive 'property must be initialized' on incremental analysis with 'field' usage and semicolon in setter
• KT-80231 AnnotationArgumentsStateKeepers doesn't restore the initial annotation in some cases
• KT-80233 Pull mutation out of AnnotationArgumentsStateKeepers
• KT-71466 LLFirBuiltinsSessionFactory uses createCompositeSymbolProvider
• KT-76432 JavaClassUseSiteMemberScope: Expected FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl

Analysis API. Infrastructure

• KT-80717 Support IntelliJ Bazel build in the Kotlin Coop development mode

Analysis API. Light Classes

• KT-80656 Duplicate no-args constructor in PSI
• KT-60490 Symbol Light Classes: Property accessors from a delegated interface don't present in the delegating class
• KT-79689 SymbolLightClassForClassLike.toString() causes PSI tree loading
• KT-80690 Private interface functions are not present in light classes
• KT-80256 K2: Certain actions in JPA code causes infinite PIEAE: "Element class CompositeElement of type REFERENCE_EXPRESSION (class KtNameReferenceExpressionElementType)"
• KT-79012 Add a high-level overview of light classes

Analysis API. Providers and Caches

Fixes

• KT-81476 Analysis API: AlreadyDisposedException from low-memory cache cleanup
• KT-80911 Analysis API: Execute session invalidation in a non-cancelable section
• KT-81242 Analysis API: Add UUID/lifetime properties to LL FIR session structure logging
• KT-80622 Analysis API: Visualise LL FIR session structure & weight
• KT-80904 Analysis API: "Invalid dangling file module" exception during session invalidation
• KT-78882 K2 AA: Calling containingSymbol on getProgressionLastElement causes exception

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin.jvm's changelog.

2.3.0

Analysis API

• KT-80082 K2. False positive "Cannot resolve method" for self-bounded generic with wildcard return type in Java interop
• KT-80303 Move :native:analysis-api-klib-reader to :libraries:tools

Analysis API. Code Compilation

• KT-70860 K2 IDE / Kotlin Debugger: CCE “java.lang.String cannot be cast to java.lang.Void” on evaluating not-null variable on the line with assigning null to that var
• KT-78554 K2 IDE / Kotlin Debugger: ISE “No override for FUN IR_EXTERNAL_DECLARATION_STUB” on calling toString() for local class instance during evaluation
• KT-73201 K2 IDE: Error while evaluating expressions with local classes

Analysis API. FIR

• KT-81378 Expected expression 'FirFunctionCallImpl' to be resolved caused by suspend {}
• KT-80473 Add events for tracking LL activities
• KT-46375 Analysis API: Support cross-file class redeclaration checks using indices
• KT-80471 Analysis API: Deduplicate equivalent call candidates in resolveToCallCandidates
• KT-79653 [Analysis API] ContextCollector: BODY context of enum classes doesn't contain enum entries
• KT-75858 K2 AA: False positive 'property must be initialized' on incremental analysis with 'field' usage and semicolon in setter
• KT-80231 AnnotationArgumentsStateKeepers doesn't restore the initial annotation in some cases
• KT-80233 Pull mutation out of AnnotationArgumentsStateKeepers
• KT-71466 LLFirBuiltinsSessionFactory uses createCompositeSymbolProvider
• KT-76432 JavaClassUseSiteMemberScope: Expected FirResolvedTypeRef with ConeKotlinType but was FirUserTypeRefImpl

Analysis API. Infrastructure

• KT-80717 Support IntelliJ Bazel build in the Kotlin Coop development mode

Analysis API. Light Classes

• KT-80656 Duplicate no-args constructor in PSI
• KT-60490 Symbol Light Classes: Property accessors from a delegated interface don't present in the delegating class
• KT-79689 SymbolLightClassForClassLike.toString() causes PSI tree loading
• KT-80690 Private interface functions are not present in light classes
• KT-80256 K2: Certain actions in JPA code causes infinite PIEAE: "Element class CompositeElement of type REFERENCE_EXPRESSION (class KtNameReferenceExpressionElementType)"
• KT-79012 Add a high-level overview of light classes

Analysis API. Providers and Caches

Fixes

• KT-81476 Analysis API: AlreadyDisposedException from low-memory cache cleanup
• KT-80911 Analysis API: Execute session invalidation in a non-cancelable section
• KT-81242 Analysis API: Add UUID/lifetime properties to LL FIR session structure logging
• KT-80622 Analysis API: Visualise LL FIR session structure & weight
• KT-80904 Analysis API: "Invalid dangling file module" exception during session invalidation
• KT-78882 K2 AA: Calling containingSymbol on getProgressionLastElement causes exception
• KT-58325 Analysis API: Combine LLKotlinStubBasedLibrarySymbolProviders in session dependencies (optimization)

... (truncated)

Commits

• f95cb2f Add ChangeLog for 2.3.0-RC3
• 9d65a2e KT-82901: Fix issue with converting Long.MIN_VALUE to Duration
• 35a9a82 FE: Postpone DiscriminateSuspendInOverloadResolution
• e0b7eea FE: Add tests for KT-82869
• e66298c Add ChangeLog for 2.3.0-RC2
• e490802 [K/JS] Introduce a compiler argument to enable export of suspend functions
• 585094b FIR2IR: Avoid generation of incorrect suspend adapter for custom implementation
• c69adc7 FIR2IR: Rename and clarify contracts for suspicious utility function
• b4bb8bf FIR2IR: Pass original expected type to applySuspendConversionIfNeeded
• 4718830 FIR2IR: Add tests for KT-82590
• Additional commits viewable in compare view

Updates org.jetbrains.intellij.platform from 2.6.0 to 2.11.0

Updates org.jetbrains.changelog from 2.2.1 to 2.5.0

Updates gradle-wrapper from 8.5 to 9.3.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[smcvb]

@dependabot rebase

[CodeDrivenMitch]

@dependabot rebase

[CodeDrivenMitch]

@dependabot rebase