Skip to content

chore(deps): update dependency org.jetbrains.kotlin:kotlin-gradle-plugin to v2.4.20 [security] #644

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dd-octo-sts wants to merge 1 commit into from
Closed

chore(deps): update dependency org.jetbrains.kotlin:kotlin-gradle-plugin to v2.4.20 [security] #644

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion gradle/libs.versions.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

# Commons
kotlin20 = "2.0.21"
kotlin21 = "2.1.21"
kotlin21 = "2.4.20"

@chatgpt-codex-connector chatgpt-codex-connector Bot Oct 12, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep the Kotlin 2.1 compatibility slot on 2.1

This version key also supplies kotlinCompilerEmbeddable21 and kotlinGradlePlugin21, so the dd-sdk-android-gradle-plugin-kcp-kotlin21 module is now compiled against Kotlin 2.4.20 rather than 2.1.x. That module still imports and registers ComponentRegistrar, while the Kotlin 2.4 implementation explicitly documents that this API was removed in 2.4.20 and uses CompilerPluginRegistrar instead; consequently the test:kotlin21 CI job cannot compile the dedicated 2.1 module. Leave this compatibility slot on a 2.1 release; kotlin24 already provides the 2.4.20 dependency.

Useful? React with 👍 / 👎.

@datadog-datadog-prod-us1-2 datadog-datadog-prod-us1-2 Bot Oct 12, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Preserve the Kotlin 2.1 compiler dependency

Building dd-sdk-android-gradle-plugin-kcp-kotlin21 now resolves kotlin-compiler-embeddable 2.4.20 because it shares this version entry. That compiler removed ComponentRegistrar, which the module still imports, registers with AutoService, and inherits through DatadogPluginRegistrar, so compilation fails and blocks building the plugin. Keep this artifact’s compiler dependency on a compatible 2.1 version and separate it from the Gradle-plugin security upgrade; that requires changing dependency references beyond this diff line.

Was this helpful? React 👍 or 👎
🤖 Bits Code Review · Open Bits AI session

kotlin22 = "2.2.20"
kotlin23 = "2.3.20"
kotlin24 = "2.4.20"
Expand Down
Loading