build(deps): Bump the dev-dependencies group with 3 updates

[dependabot]

Bumps the dev-dependencies group with 3 updates: com.google.dagger:dagger, com.google.dagger:dagger-compiler and ch.qos.logback:logback-classic.

Updates com.google.dagger:dagger from 2.59.2 to 2.60

Release notes

Sourced from com.google.dagger:dagger's releases.

Dagger 2.60

New features:

• Fixes #5165: Support nullable type annotations when using the flag -Adagger.nullableTypeAnnotations=enabled. For more details see https://dagger.dev/dev-guide/compiler-options#nullable-type-annotations. (4bedb4b64)
• Fixes #5087: When using the Hilt Gradle plugin, you can now disable fastInit mode from the command line, e.g. -Pdagger.hilt.fastInit=false. For more details see https://dagger.dev/hilt/flags#fast-init. (0f7642ba1)
• Introduced parameterless @Binds methods to explicitly bind @Inject constructors. For more details see https://dagger.dev/dev-guide/#parameterless-binds. (4c81e9416)

Potential breaking changes:

• When using the Hilt Gradle plugin, an error is now reported if a user sets a plugin-controlled flag (previously the plugin just ignored the user’s input). (a119ba68c)
• Multidex support is removed. minSDK for Hilt is now 23, matching AndroidX (https://issuetracker.google.com/380448311) (1990bd1c4)

Bug fixes:

• Fixes #1290: Enabled Guava BetaApi checks (5b8b2bdbe)
• Fixes #5190, #5180, #5177: Updated Kotlin version ton 2.3.21 (7daaec5a9)
• Fixes #5160: Deferred ViewModelMetadata processing on error types or missing @​AssistedFactory (59827c699)
• Fixes missing originating element attachments in a few Hilt processors to ensure correct incremental compilation tracking. (2930ca837)
• Fixes Dagger multibinding duplicate masking across Map components (compile-time validation) Adds strict compile-time detection for duplicate map multibinding keys across component boundaries. This is enabled via the -Adagger.mapMultibindingDuplicateDetectionFix=ENABLED. This option is DISABLED by default to maintain backward compatibility. See Compiler Options for more details. (504397ebe)

Commits

• d9ccdc7 2.60 release
• 7451e37 Add dependenciesRequested to ProducerMonitor
• e820a70 Refactor: Inline library sources directly within MembersInjectionValidationTest
• 4bedb4b Support nullable type annotations with a flag.
• 445e6f0 Fix wording on ProducerMonitor methodStarting and ready javadocs
• 5b8b2bd Enable Guava BetaApi checks in Dagger's Bazel build.
• 639cd2b Temporarily disable a few KSP tests before updating XProcessing artifacts.
• 5988296 Handle RuntimeExceptions in DaggerSuperficialValidation getMessage / trac...
• 2227e70 Remove unused ProcessorErrors methods.
• 7daaec5 Update Kotlin and KSP versions to 2.3.
• Additional commits viewable in compare view

Updates com.google.dagger:dagger-compiler from 2.59.2 to 2.60

Release notes

Sourced from com.google.dagger:dagger-compiler's releases.

Dagger 2.60

New features:

• Fixes #5165: Support nullable type annotations when using the flag -Adagger.nullableTypeAnnotations=enabled. For more details see https://dagger.dev/dev-guide/compiler-options#nullable-type-annotations. (4bedb4b64)
• Fixes #5087: When using the Hilt Gradle plugin, you can now disable fastInit mode from the command line, e.g. -Pdagger.hilt.fastInit=false. For more details see https://dagger.dev/hilt/flags#fast-init. (0f7642ba1)
• Introduced parameterless @Binds methods to explicitly bind @Inject constructors. For more details see https://dagger.dev/dev-guide/#parameterless-binds. (4c81e9416)

Potential breaking changes:

• When using the Hilt Gradle plugin, an error is now reported if a user sets a plugin-controlled flag (previously the plugin just ignored the user’s input). (a119ba68c)
• Multidex support is removed. minSDK for Hilt is now 23, matching AndroidX (https://issuetracker.google.com/380448311) (1990bd1c4)

Bug fixes:

• Fixes #1290: Enabled Guava BetaApi checks (5b8b2bdbe)
• Fixes #5190, #5180, #5177: Updated Kotlin version ton 2.3.21 (7daaec5a9)
• Fixes #5160: Deferred ViewModelMetadata processing on error types or missing @​AssistedFactory (59827c699)
• Fixes missing originating element attachments in a few Hilt processors to ensure correct incremental compilation tracking. (2930ca837)
• Fixes Dagger multibinding duplicate masking across Map components (compile-time validation) Adds strict compile-time detection for duplicate map multibinding keys across component boundaries. This is enabled via the -Adagger.mapMultibindingDuplicateDetectionFix=ENABLED. This option is DISABLED by default to maintain backward compatibility. See Compiler Options for more details. (504397ebe)

Commits

• d9ccdc7 2.60 release
• 7451e37 Add dependenciesRequested to ProducerMonitor
• e820a70 Refactor: Inline library sources directly within MembersInjectionValidationTest
• 4bedb4b Support nullable type annotations with a flag.
• 445e6f0 Fix wording on ProducerMonitor methodStarting and ready javadocs
• 5b8b2bd Enable Guava BetaApi checks in Dagger's Bazel build.
• 639cd2b Temporarily disable a few KSP tests before updating XProcessing artifacts.
• 5988296 Handle RuntimeExceptions in DaggerSuperficialValidation getMessage / trac...
• 2227e70 Remove unused ProcessorErrors methods.
• 7daaec5 Update Kotlin and KSP versions to 2.3.
• Additional commits viewable in compare view

Updates com.google.dagger:dagger-compiler from 2.59.2 to 2.60

Release notes

Sourced from com.google.dagger:dagger-compiler's releases.

Dagger 2.60

New features:

• Fixes #5165: Support nullable type annotations when using the flag -Adagger.nullableTypeAnnotations=enabled. For more details see https://dagger.dev/dev-guide/compiler-options#nullable-type-annotations. (4bedb4b64)
• Fixes #5087: When using the Hilt Gradle plugin, you can now disable fastInit mode from the command line, e.g. -Pdagger.hilt.fastInit=false. For more details see https://dagger.dev/hilt/flags#fast-init. (0f7642ba1)
• Introduced parameterless @Binds methods to explicitly bind @Inject constructors. For more details see https://dagger.dev/dev-guide/#parameterless-binds. (4c81e9416)

Potential breaking changes:

• When using the Hilt Gradle plugin, an error is now reported if a user sets a plugin-controlled flag (previously the plugin just ignored the user’s input). (a119ba68c)
• Multidex support is removed. minSDK for Hilt is now 23, matching AndroidX (https://issuetracker.google.com/380448311) (1990bd1c4)

Bug fixes:

• Fixes #1290: Enabled Guava BetaApi checks (5b8b2bdbe)
• Fixes #5190, #5180, #5177: Updated Kotlin version ton 2.3.21 (7daaec5a9)
• Fixes #5160: Deferred ViewModelMetadata processing on error types or missing @​AssistedFactory (59827c699)
• Fixes missing originating element attachments in a few Hilt processors to ensure correct incremental compilation tracking. (2930ca837)
• Fixes Dagger multibinding duplicate masking across Map components (compile-time validation) Adds strict compile-time detection for duplicate map multibinding keys across component boundaries. This is enabled via the -Adagger.mapMultibindingDuplicateDetectionFix=ENABLED. This option is DISABLED by default to maintain backward compatibility. See Compiler Options for more details. (504397ebe)

Commits

• d9ccdc7 2.60 release
• 7451e37 Add dependenciesRequested to ProducerMonitor
• e820a70 Refactor: Inline library sources directly within MembersInjectionValidationTest
• 4bedb4b Support nullable type annotations with a flag.
• 445e6f0 Fix wording on ProducerMonitor methodStarting and ready javadocs
• 5b8b2bd Enable Guava BetaApi checks in Dagger's Bazel build.
• 639cd2b Temporarily disable a few KSP tests before updating XProcessing artifacts.
• 5988296 Handle RuntimeExceptions in DaggerSuperficialValidation getMessage / trac...
• 2227e70 Remove unused ProcessorErrors methods.
• 7daaec5 Update Kotlin and KSP versions to 2.3.
• Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.5.35 to 1.5.36

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.36

2026-06-25 Release of logback version 1.5.36

• The 'condition' attribute in <if> elements now reject certain references that are associated with ACE attacks. This issue was reported by "yulate" (yulate531@gmail.com.com) and registered as CVE-2026-13006.

• A bitwise identical binary of this version can be reproduced by building from source code at commit 9b94c37562bf25a6a944146701d42ee6c4eee888 associated with the tag v_1.5.36. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

• 9b94c37 prepare release 1.5.36
• e6a8280 prevent attacks using disallowed references
• 24c4b63 start work on 1.5.36-SNAPSHOT
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions