Skip to content

fix(deps): update dependency org.conscrypt:conscrypt-android to v2.9.0 - #2351

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/conscrypt
Open

renovate[bot] wants to merge 1 commit into
masterfrom
renovate/conscrypt

Conversation

@renovate

@renovate renovate Bot commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
org.conscrypt:conscrypt-android (source) 2.7.0 → 2.9.0 age confidence

Release Notes

google/conscrypt (org.conscrypt:conscrypt-android)

v2.9.0

Compare Source

Conscrypt Version 2.9.0.

This is a new release of conscrypt-openjdk, conscrypt-openjdk-uber and conscrypt-android on maven.

It includes the following changes:

  • Update the built-in SPKI certificate blocklist from Chromium and enable it by default on OpenJDK and unbundled Android to block the compromised eMudhra intermediate CA certificates (#​1554).
  • Expose the negotiated TLS group/curve name via Conscrypt.getGroupName(SSLSocket) and Conscrypt.getGroupName(SSLEngine) (#​1552).
  • Return a defensive copy from OpenSSLCipher.engineGetIV() and allow getParameters() in cipher and RSA-PSS implementations to work without installing Conscrypt globally.
  • Bug fixes, error handling improvements, and cleanups.

v2.8.0

Compare Source

Conscrypt Version 2.8.0.

This is a new release of conscrypt-openjdk, conscrypt-openjdk-uber and conscrypt-android on maven.

It includes the following changes:

  • Support for XChaCha20-Poly1305 (XChaCha20/Poly1305/NoPadding cipher, XChaCha20 KeyGenerator, and XChaCha20 AlgorithmParameters).
  • Bug fixes, error handling improvements, and cleanups.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Pull requests that update a dependency file minor labels Oct 21, 2026
@github-actions

Copy link
Copy Markdown
TestsPassed ✅SkippedFailed
JUnit Test Report912 ran912 passed0 skipped0 failed
TestResult
No test annotations available

@codecov

codecov Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 67.85%. Comparing base (589e54d) to head (f95ab5c).

Additional details and impacted files
@@              Coverage Diff              @@
##             master    #2351       +/-   ##
=============================================
+ Coverage     21.85%   67.85%   +46.00%     
- Complexity      580     1527      +947     
=============================================
  Files           199      202        +3     
  Lines          8178     8248       +70     
  Branches       1067     1077       +10     
=============================================
+ Hits           1787     5597     +3810     
+ Misses         6220     2082     -4138     
- Partials        171      569      +398     
Flag Coverage Δ
uitests 64.23% <ø> (?)
unittests 21.85% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate
renovate Bot force-pushed the renovate/conscrypt branch from f95ab5c to 0b17095 Compare October 26, 2026 16:20
@renovate
renovate Bot force-pushed the renovate/conscrypt branch from 0b17095 to 9712f62 Compare November 4, 2026 20:51
@renovate renovate Bot changed the title fix(deps): update dependency org.conscrypt:conscrypt-android to v2.8.0 fix(deps): update dependency org.conscrypt:conscrypt-android to v2.9.0 Nov 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file minor

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant