chore(deps): update dependency org.jetbrains.kotlin:kotlin-gradle-plugin to v2.4.20 [security]

[dd-octo-sts]

This PR contains the following updates:

Package	Type	Update	Change
org.jetbrains.kotlin:kotlin-gradle-plugin (source)	dependencies	minor	2.2.20 → 2.4.20

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

🚨 Security Vulnerability Fix

Severity: MEDIUM

This PR addresses a detected security vulnerability. Please review and merge promptly.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-12T20:12:20.618194Z	2b18624	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 2b18624e40

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Keep the Kotlin 2.2 toolchain on 2.2.x

Changing the shared kotlin22 version to 2.4.20 also upgrades kotlinCompilerEmbeddable22 and kotlinGradlePlugin22, which are the compile and test dependencies of dd-sdk-android-gradle-plugin-kcp-kotlin22. As a result, the test:kotlin22 job duplicates the Kotlin 2.4 configuration instead of validating the artifact selected for Kotlin 2.2 and 2.3 users. Preserve this alias at 2.2.20 and use the existing kotlin24 alias for 2.4.20.

Useful? React with 👍 / 👎.

[datadog-prod-us1-4]

The shared kotlin22 version bump to 2.4.20 also upgrades kotlinCompilerEmbeddable22, which the Kotlin 2.2 compatibility adapter depends on; since ComponentRegistrar was removed in 2.4.20, the adapter cannot compile and its build/publication tasks will fail. The Kotlin 2.2 adapter must be kept on a compatible compiler version.

_{Open Bits AI session}

_{🤖 Bits Code Review · Commit 2b18624}

[datadog-prod-us1-4]

Keep the Kotlin 2.2 module on a compatible compiler

This shared version also upgrades kotlinCompilerEmbeddable22 to 2.4.20. The Kotlin 2.2 compatibility module still imports and registers ComponentRegistrar, which 2.4.20 removed, so the module cannot compile and its build and publication tasks fail. Retain a compatible compiler version; the separate Kotlin 2.4 module already contains the required registrar migration.

Suggested change

	kotlin22 = "2.4.20"
	kotlin22 = "2.2.20"

Was this helpful? React 👍 or 👎
_{🤖 Bits Code Review · Open Bits AI session}