chore(deps): bump the prod-deps group with 2 updates

[dependabot]

Bumps the prod-deps group with 2 updates: org.jetbrains.kotlin:kotlin-bom and org.kiwiproject:kiwi-bom.

Updates org.jetbrains.kotlin:kotlin-bom from 2.3.0 to 2.3.10

Release notes

Sourced from org.jetbrains.kotlin:kotlin-bom's releases.

Kotlin 2.3.10

Changelog

Compiler

• KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
• KT-83317 ClassCastException: with cast kotlin.UInt to java.lang.Number when defining constant
• KT-83031 K2: unstable resolution of EnhancedNullability from type-use NotNull in presence of unused code
• KT-81700 flaky overload resolution behaviors (false-positive errors, different final candidates, compile-time failures)
• KT-83983 Revert of KT-83081
• KT-83314 JSpecify @NullMarked changes Java equals(Object) to equals(Any?) causing override conflict in Kotlin 2.3
• KT-82863 @NoInfer regression since 2.2.20
• KT-82841 "kotlin.NoWhenBranchMatchedException" in when with !is check & non-sealed class in the middle of hierarchy

JVM. Reflection

• KT-83608 Kotlin-reflect: "Unknown origin of public abstract operator fun invoke(p1: P1, p2: P2): R"
• KT-83361 "KotlinReflectionInternalError: Type parameter not found: 0" on super types with Kotlin 2.3.0
• KT-42199 "KotlinReflectionInternalError: Unknown origin of public abstract operator fun invoke" on function reference to FunctionN.invoke
• KT-81024 Reflection: New KType implementation fails on arguments comparison for a Nothing type parameter

Tools. Compiler Plugins

• KT-83266 "Unsupported class file major version 69" for "produceReleaseComposeMapping" task with Kotlin 2.3
• KT-83099 Compose compiler does not generate stack trace mappings for project files

Tools. Gradle

• KT-83070 The KGP api reference is missing a description
• KT-82459 Improve iOS simulator boot implementation

Tools. Gradle. JS

• KT-82946 Js, Wasm: Upgrade NPM dependencies

Tools. Gradle. Multiplatform

• KT-83687 Revert deprecation of 'androidTarget' for AGP lower than 9

Kotlin 2.3.10-RC2

ChangeLog

Compiler

• KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
• KT-83983 Revert of KT-83081

Kotlin 2.3.10-RC

Changelog

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin:kotlin-bom's changelog.

2.3.10

Compiler

• KT-83984 Data races around kotlinx.serialization plugin protobuf extensions registration
• KT-83317 ClassCastException: with cast kotlin.UInt to java.lang.Number when defining constant
• KT-83031 K2: unstable resolution of EnhancedNullability from type-use NotNull in presence of unused code
• KT-81700 flaky overload resolution behaviors (false-positive errors, different final candidates, compile-time failures)
• KT-83983 Revert of KT-83081
• KT-83314 JSpecify @NullMarked changes Java equals(Object) to equals(Any?) causing override conflict in Kotlin 2.3
• KT-82863 @NoInfer regression since 2.2.20
• KT-82841 "kotlin.NoWhenBranchMatchedException" in when with !is check & non-sealed class in the middle of hierarchy

JVM. Reflection

• KT-83608 Kotlin-reflect: "Unknown origin of public abstract operator fun invoke(p1: P1, p2: P2): R"
• KT-83361 "KotlinReflectionInternalError: Type parameter not found: 0" on super types with Kotlin 2.3.0
• KT-42199 "KotlinReflectionInternalError: Unknown origin of public abstract operator fun invoke" on function reference to FunctionN.invoke
• KT-81024 Reflection: New KType implementation fails on arguments comparison for a Nothing type parameter

Tools. Compiler Plugins

• KT-83266 "Unsupported class file major version 69" for "produceReleaseComposeMapping" task with Kotlin 2.3
• KT-83099 Compose compiler does not generate stack trace mappings for project files

Tools. Gradle

• KT-83070 The KGP api reference is missing a description
• KT-82459 Improve iOS simulator boot implementation

Tools. Gradle. JS

• KT-82946 Js, Wasm: Upgrade NPM dependencies

Tools. Gradle. Multiplatform

• KT-83687 Revert deprecation of 'androidTarget' for AGP lower than 9

Commits

• 679366a Add ChangeLog for 2.3.10-RC2
• 14ba833 Serialization: remove potential data race during extension registration
• fb8d334 Revert "K2: implement equality for ConeAttribute.EnhancedNullability"
• 412afb7 Add ChangeLog for 2.3.10-RC
• edea41e [Gradle] Un-deprecate 'androidTarget()'
• 0946452 Bump version of the ASM dependency
• 655fb78 Reflection: always compute JVM signature of built-in functions manually
• 58d3875 Fix mergeReleaseComposeMapping task failure when build cache is enabled
• 56e0a79 Copy R8 outputs to Compose folder when transforming obfuscation file
• e0eb174 Fix classId for detecting protobuf enums
• Additional commits viewable in compare view

Updates org.kiwiproject:kiwi-bom from 3.0.1 to 3.0.2

Release notes

Sourced from org.kiwiproject:kiwi-bom's releases.

v3.0.2

Summary

• 2026-02-05T00:27:52Z - 9 commit(s) by Scott Leberknight, dependabot[bot]

Bugs 🐛

• Downgrade org.apache.httpcomponents.client5:httpclient5 from 5.6 to 5.5.2 [(#1458)](kiwiproject/kiwi-bom#1458)

Dependency Updates ⬆️

• Add org.apache.httpcomponents.core5:httpcore5-h2 version 5.4 [(#1459)](kiwiproject/kiwi-bom#1459)
• chore(deps): bump the prod-deps group with 7 updates [(#1455)](kiwiproject/kiwi-bom#1455)
• chore(deps): bump the prod-deps group with 4 updates [(#1453)](kiwiproject/kiwi-bom#1453)
• chore(deps): bump the prod-deps group with 4 updates [(#1451)](kiwiproject/kiwi-bom#1451)
• chore(deps): bump actions/setup-java from 5.1.0 to 5.2.0 in the actions-deps group [(#1450)](kiwiproject/kiwi-bom#1450)
• Bump com.fasterxml.jackson:jackson-bom from 2.20.1 to 2.21.0 in the prod-deps group [(#1448)](kiwiproject/kiwi-bom#1448)

Infrastructure 🚧

• Add conventional commits prefix to Dependabot config [(#1449)](kiwiproject/kiwi-bom#1449)

Commits

• 9586f6e [maven-release-plugin] prepare release v3.0.2
• 01986b6 Downgrade httpclient5, add httpcore-h2 (#1460)
• fa88866 chore(deps): bump the prod-deps group with 7 updates (#1455)
• b2155dc chore(deps): bump the prod-deps group with 4 updates (#1453)
• bc20d22 chore(deps): bump actions/setup-java in the actions-deps group (#1450)
• 55a8dcc chore(deps): bump the prod-deps group with 4 updates (#1451)
• db30c05 Add conventional commits prefix to Dependabot config (#1449)
• bf8b2f0 Bump com.fasterxml.jackson:jackson-bom in the prod-deps group (#1448)
• 6f4ba6d [maven-release-plugin] prepare for next development iteration
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Qodana for JVM

It seems all right 👌

No new problems were found according to the checks applied

💡 Qodana analysis was run in the pull request mode: only the changed files were checked

View the detailed Qodana report

To be able to view the detailed Qodana report, you can either:

• Register at Qodana Cloud and configure the action
• Use GitHub Code Scanning with Qodana
• Host Qodana report at GitHub Pages
• Inspect and use qodana.sarif.json (see the Qodana SARIF format for details)

To get *.log files or any other Qodana artifacts, run the action with upload-result option set to true,
so that the action will upload the files as the job artifacts:

      - name: 'Qodana Scan'
        uses: JetBrains/qodana-action@v2025.3.1
        with:
          upload-result: true

Contact Qodana team

Contact us at qodana-support@jetbrains.com

• Or via our issue tracker: https://jb.gg/qodana-issue
• Or share your feedback: https://jb.gg/qodana-discussions