Update dependencyAnalysis to v3 (major)

[renovate]

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Change	Age	Confidence
com.autonomousapps.dependency-analysis	2.19.0 -> 3.0.4
com.autonomousapps:dependency-analysis-gradle-plugin	2.19.0 -> 3.0.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

autonomousapps/dependency-analysis-android-gradle-plugin (com.autonomousapps.dependency-analysis)

v3.0.4

• [Fix] Remove auto-applied kotlin-stdlib for Gradle 8.11 support.

v3.0.3

• [Fix]: compare versions via VersionNumber, not raw strings.
• [Fix] Forcibly downgrade kotlin-stdlib to 2.0.21 for Gradle 8.11 support.

v3.0.2

• [Fix] Downgrade Kotlin to 2.0.21 for Gradle 8.11 support.
• [Fix]: min AGP version is 8.4.2.
• [Fix]: Remove kotlin-dsl plugin usage.
• [Fix]: correctly react to new/deleted/renamed files in Android projects.
• [Fix]: resource ref problem (#​1525).
• [Chore]: update to AGP 8.13 stable.
• [Chore]: use gradle plugin publishing plugin 2.0.0.

v3.0.1

• [Fix] set apiVersion and languageVersion to 2.0 for Gradle 8.11 support.

v3.0.0

• [Build] now building with Gradle 9.0.0.

• [Breaking] minimum supported version of Gradle is now 8.11.

• [Breaking]: annotations and their parameter classes are always considered compileOnly.

  Annotations for which the class file is not present are treated like being non-existent by the JVM.
  If someone wants to consume an annotation via reflection, they are responsible for providing the class file
  at runtime, so from the annotating project's view, annotations are always compileOnly.
  The same is true for classes and enums used as annotation arguments.
  The only exception is a class literal as argument that is coming from a different artifact than the
  annotation, such as a JUnit 4 runner implementation; those are considered implementation.

• [Feat]: Add type-safe accessor support for fixDependencies task.

• [Feat]: report excluded dependencies as unused.

• [Feat]: add coordinates identifier in the error message for invalid change.

• [Feat]: moving internal.artifacts package to new module, com.autonomousapps:variant-artifacts.

• [Feat]: detect and report all Android resource references in Manifest files.

• [Fix]: detect constants more consistently including from e.g. inner classes.

• [Fix]: Move useTypesafeProjectAccessors to global dsl service.

• [Fix]: reason works on included builds.

• [Fix]: recognize test fixtures not only in Android libraries, but in Android app modules, too.

• [Fix]: use Android flavors more consistently in advice.

• [Chore]: update guava to 33.4.8-jre.

• [Chore]: update AGP to the latest stable version, 8.12.0, and test against 8.13.0-alpha03.

• [Chore]: add API-tracking tasks using metalava. Adopt semantic versioning.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

📱 Scan the QR code below to install the build (arm64 only) for this PR.

If you can't scan the QR code you can install the build via this link: https://i.diawi.com/gMN9Fh

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 79.73%. Comparing base (0d7d33c) to head (1ffdf74).

Additional details and impacted files

@@           Coverage Diff            @@
##           develop    #5194   +/-   ##
========================================
  Coverage    79.73%   79.73%           
========================================
  Files         2274     2274           
  Lines        62867    62867           
  Branches      7874     7874           
========================================
  Hits         50130    50130           
  Misses        9840     9840           
  Partials      2897     2897           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[ElementBot]

	Warnings
⚠️	gradle/libs.versions.toml#L7 - A newer version of com.android.tools.build:gradle than 8.11.1 is available: 8.13.0. (There is also a newer version of 8.11.𝑥 available, if upgrading to 8.13.0 is difficult: 8.11.2)
⚠️	gradle/libs.versions.toml#L9 - A newer version of org.jetbrains.kotlin.plugin.serialization than 2.2.10 is available: 2.2.20
⚠️	gradle/libs.versions.toml#L19 - A newer version of androidx.lifecycle:lifecycle-runtime-ktx than 2.9.2 is available: 2.9.4
⚠️	gradle/libs.versions.toml#L25 - A newer version of androidx.compose:compose-bom than 2025.07.00 is available: 2025.09.00
⚠️	gradle/libs.versions.toml#L47 - A newer version of me.saket.telephoto:zoomable-image-coil than 0.16.0 is available: 0.17.0
⚠️	gradle/libs.versions.toml#L54 - A newer version of dev.zacsweers.metro:runtime than 0.6.4 is available: 0.6.6
⚠️	gradle/libs.versions.toml#L61 - A newer version of org.jetbrains.kotlinx:kover-gradle-plugin than 0.9.1 is available: 0.9.2
⚠️	gradle/libs.versions.toml#L157 - A newer version of org.robolectric:robolectric than 4.15.1 is available: 4.16
⚠️	gradle/libs.versions.toml#L179 - A newer version of org.matrix.rustcomponents:sdk-android than 25.9.16 is available: 25.9.17
⚠️	gradle/libs.versions.toml#L201 - A newer version of com.posthog:posthog-android than 3.21.2 is available: 3.21.3

Generated by 🚫 dangerJS against 1ffdf74