chore(deps): update dependency org.jetbrains.kotlin:kotlin-gradle-plugin to v2.4.20 [security]

[dd-octo-sts]

This PR contains the following updates:

Package	Type	Update	Change
org.jetbrains.kotlin:kotlin-gradle-plugin (source)	dependencies	minor	2.0.21 → 2.4.20

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

🚨 Security Vulnerability Fix

Severity: CRITICAL

This PR addresses a security vulnerability detected by GitHub Dependabot. Please review and merge promptly.

[dd-prapprover-prod-77c48c]

PRApprover will approve and merge this PR, FAQ, #dx-source-code-management

🛠️ PRApproval Status

• ✅ PR is eligible for auto-approval by rule dependency-management-renovate-updater - 2026-10-05T20:29:06Z
• ⬜ CI tests passed
• ⬜ Approved
• ⬜ Merge Started
• ⬜ Merged

➡️ Current phase: CI tests failed. Please fix the failing tests and rerun the workflow, click Workflow Link -> Workflow Starter Link -> Start Workflow

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 3e1b514c71

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Keep the kotlin20 compiler dependencies on 2.0.x

This version alias also supplies kotlinCompilerEmbeddable20 and kotlinGradlePlugin20, the compile classpaths for both the shared module and the kcp-kotlin20 artifact. Those sources still import and extend ComponentRegistrar (for example, dd-sdk-android-gradle-plugin-kcp-kotlin20/.../DatadogPluginRegistrarImpl.kt), but Kotlin 2.4.20 removes that API—the dedicated kcp-kotlin24 registrar was added specifically to avoid it. Consequently, a clean build of the common/kotlin20 modules cannot compile, preventing publication of the compiler plugin for Kotlin 1.9/2.0 consumers. Keep this alias at 2.0.21 (or introduce a separate dependency version for the intended security update).

Useful? React with 👍 / 👎.