Skip to content

Update dependency org.conscrypt:conscrypt-android to v2.7.0 - #17558

Merged
tobiasKaminsky merged 4 commits into
masterfrom
renovate/conscryptandroidversion
Sep 17, 2026
Merged

tobiasKaminsky merged 4 commits into
masterfrom
renovate/conscryptandroidversion

Conversation

@renovate

@renovate renovate Bot commented Sep 4, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
org.conscrypt:conscrypt-android (source) 2.6.32.7.0 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

google/conscrypt (org.conscrypt:conscrypt-android)

v2.7.0

Compare Source

Conscrypt Version 2.7.0.

This is a new release of conscrypt-openjdk, conscrypt-openjdk-uber and conscrypt-android on maven.

It includes the following changes:

  • TLS uses X25519MLKEM768 by default.
  • Encrypted Client Hello (ECH).
  • Composite-ML-DSA Signatures (with Ed25519, ECDSA, RSA PKCS1 and RSA PSS).
  • Hash-SLH-DSA Signatures (with SHA384).
  • Some cleanups.

Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added 3. to review dependencies Pull requests that update a dependency file labels Sep 4, 2026
@renovate
renovate Bot enabled auto-merge (squash) September 4, 2026 16:55
@renovate

renovate Bot commented Sep 4, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: gradle/libs.versions.toml
Command failed: ./gradlew -Dorg.gradle.jvmargs=-Xms512m -Xmx512m --console=plain --dependency-verification lenient -q --write-verification-metadata sha256,pgp dependencies

FAILURE: Build completed with 2 failures.

1: Task failed with an exception.
-----------
* What went wrong:
A problem occurred configuring project ':app'.
> com.android.builder.sdk.LicenceNotAcceptedException: Failed to install the following Android SDK packages as some licences have not been accepted.
     ndk;29.0.14206865 NDK (Side by side) 29.0.14206865
  To build this project, accept the SDK license agreements and install the missing components using the Android Studio SDK Manager.
  All licenses can be accepted using the sdkmanager command line tool:
  sdkmanager --licenses
  Or, to transfer the license agreements from one workstation to another, see https://developer.android.com/studio/intro/update.html#download-with-gradle
  
  Using Android SDK: /home/ubuntu/.android-sdk

* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Run with --scan to get full insights from a Build Scan (powered by Develocity).
> Get more help at https://help.gradle.org.
==============================================================================

2: Task failed with an exception.
-----------
* What went wrong:
A problem occurred configuring project ':app'.
> com.android.builder.sdk.LicenceNotAcceptedException: Failed to install the following Android SDK packages as some licences have not been accepted.
     ndk;29.0.14206865 NDK (Side by side) 29.0.14206865
  To build this project, accept the SDK license agreements and install the missing components using the Android Studio SDK Manager.
  All licenses can be accepted using the sdkmanager command line tool:
  sdkmanager --licenses
  Or, to transfer the license agreements from one workstation to another, see https://developer.android.com/studio/intro/update.html#download-with-gradle
  
  Using Android SDK: /home/ubuntu/.android-sdk

* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Run with --scan to get full insights from a Build Scan (powered by Develocity).
> Get more help at https://help.gradle.org.
==============================================================================

BUILD FAILED in 1m 32s

@tobiasKaminsky
tobiasKaminsky force-pushed the renovate/conscryptandroidversion branch from 9a3f5ed to 0a330ec Compare September 7, 2026 12:33
@renovate
renovate Bot force-pushed the renovate/conscryptandroidversion branch from 0a330ec to bec31a1 Compare September 8, 2026 07:08
@github-actions

Copy link
Copy Markdown

blue-Light-Screenshot test failed, but no output was generated. Maybe a preliminary stage failed.

@renovate

renovate Bot commented Sep 10, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@tobiasKaminsky
tobiasKaminsky force-pushed the renovate/conscryptandroidversion branch from c767a4d to 5814cb1 Compare September 15, 2026 08:24
renovate Bot and others added 3 commits September 15, 2026 14:14
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: tobiasKaminsky <tobias@kaminsky.me>
Signed-off-by: tobiasKaminsky <tobias@kaminsky.me>
@tobiasKaminsky
tobiasKaminsky force-pushed the renovate/conscryptandroidversion branch from 5814cb1 to 11360b3 Compare September 15, 2026 12:14
@github-actions

Copy link
Copy Markdown

stable35-IT test failed, but no output was generated. Maybe a preliminary stage failed.

@github-actions

Copy link
Copy Markdown

master-IT test failed, but no output was generated. Maybe a preliminary stage failed.

@github-actions

Copy link
Copy Markdown

stable22-IT test failed, but no output was generated. Maybe a preliminary stage failed.

Removes the stale ignored-key entry for 655CCC51B9BD2C38 (Google's
conscrypt-android release signing key), which caused dependency
verification to fail on PR #17558 with "artifact was signed but all
keys were ignored" for conscrypt-android-2.7.0.module. The key is
already covered by an existing trusted-key entry and is present in
the exported keyring, so the global ignore was just stale.

Assisted-by: ClaudeCode:claude-sonnet-5
Signed-off-by: tobiasKaminsky <tobias@kaminsky.me>
@github-actions

Copy link
Copy Markdown

Codacy

SpotBugs

CategoryBaseNew
Bad practice3232
Correctness5858
Dodgy code186186
Experimental11
Malicious code vulnerability22
Multithreaded correctness2626
Performance3737
Security1819
Total360361

SpotBugs increased!

@github-actions

Copy link
Copy Markdown

📱 QA build

Download app-qa-debug.apk (512)
QR code Open the QR code for this download
Commit 2060bbe
Version 17558
Available until 7 days after this build

The QA build installs alongside a released Nextcloud app, so you can keep
using your existing install while testing.

Downloading the file requires a GitHub account, so open this link on the
device you want to test on, or transfer the APK to it.

@codecov

codecov Bot commented Sep 17, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@tobiasKaminsky
tobiasKaminsky merged commit ce10a3a into master Sep 17, 2026
23 of 25 checks passed
@tobiasKaminsky
tobiasKaminsky deleted the renovate/conscryptandroidversion branch September 17, 2026 07:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review AI assisted dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant