upgrade dependencies and add gradle lockfiles

evervault-cages/build.gradle.kts

@@ -38,8 +38,8 @@ android {
         sourceCompatibility = JavaVersion.VERSION_11
         targetCompatibility = JavaVersion.VERSION_11
     }
-    kotlinOptions {
-        jvmTarget = "11"
+    kotlin {
+        jvmToolchain(JavaVersion.VERSION_11.toString().toInt())
     }
     buildFeatures {
         compose = true
@@ -64,6 +64,11 @@ android {
     }
 }
 
+dependencyLocking {
+    // Enable lock files for dependency versions.
+    lockAllConfigurations()
+}
+
 dependencies {
     implementation(project(":evervault-core"))
     implementation("androidx.core:core-ktx:1.8.0")

evervault-core/build.gradle.kts

@@ -59,8 +59,8 @@ android {
         sourceCompatibility = JavaVersion.VERSION_11
         targetCompatibility = JavaVersion.VERSION_11
     }
-    kotlinOptions {
-        jvmTarget = "11"
+    kotlin {
+        jvmToolchain(JavaVersion.VERSION_11.toString().toInt())
     }
     buildFeatures {
         buildConfig = true
@@ -82,6 +82,11 @@ android {
     }
 }
 
+dependencyLocking {
+    // Enable lock files for dependency versions.
+    lockAllConfigurations()
+}
+
 dependencies {
     testImplementation("junit:junit:4.13.2")
     testImplementation("org.jetbrains.kotlinx:kotlinx-coroutines-test:1.10.2")
@@ -90,7 +95,10 @@ dependencies {
     testImplementation("org.mockito.kotlin:mockito-kotlin:5.0.0")
     testImplementation(kotlin("test"))
 
-    implementation(kotlin("stdlib-common"))
+    // Explicitly specify kotlin-stdlib-common version to ensure all configurations (including Android test)
+    // are properly locked. Version must match the Kotlin plugin version in settings.gradle.kts (2.0.21).
+    // This resolves the issue where debugAndroidTestRuntimeClasspath isn't captured during lockfile generation.
+    implementation("org.jetbrains.kotlin:kotlin-stdlib-common:2.1.21")
 
     // ktor
     implementation("io.ktor:ktor-client-core:2.3.1")

evervault-enclaves/build.gradle.kts

@@ -37,8 +37,8 @@ android {
         sourceCompatibility = JavaVersion.VERSION_11
         targetCompatibility = JavaVersion.VERSION_11
     }
-    kotlinOptions {
-        jvmTarget = "11"
+    kotlin {
+        jvmToolchain(JavaVersion.VERSION_11.toString().toInt())
     }
     buildFeatures {
         compose = true
@@ -63,6 +63,11 @@ android {
     }
 }
 
+dependencyLocking {
+    // Enable lock files for dependency versions.
+    lockAllConfigurations()
+}
+
 val kotlinVersion = "1.8.0"
 val kotlinCoroutineVersion = "1.7.3"
 

evervault-inputs/build.gradle.kts

@@ -40,8 +40,8 @@ android {
         sourceCompatibility = JavaVersion.VERSION_11
         targetCompatibility = JavaVersion.VERSION_11
     }
-    kotlinOptions {
-        jvmTarget = "11"
+    kotlin {
+        jvmToolchain(JavaVersion.VERSION_11.toString().toInt())
     }
     buildFeatures {
         compose = true
@@ -66,6 +66,11 @@ android {
     }
 }
 
+dependencyLocking {
+    // Enable lock files for dependency versions.
+    lockAllConfigurations()
+}
+
 val composeActivityVersion = "1.9.0"
 
 dependencies {

sampleapplication/build.gradle.kts

@@ -61,8 +61,8 @@ android {
         sourceCompatibility = JavaVersion.VERSION_11
         targetCompatibility = JavaVersion.VERSION_11
     }
-    kotlinOptions {
-        jvmTarget = "11"
+    kotlin {
+        jvmToolchain(JavaVersion.VERSION_11.toString().toInt())
     }
     buildFeatures {
         compose = true
@@ -77,6 +77,11 @@ android {
     }
 }
 
+dependencyLocking {
+    // Enable lock files for dependency versions.
+    lockAllConfigurations()
+}
+
 dependencies {
     implementation(project(":evervault-inputs"))
     implementation(project(":evervault-enclaves"))
@@ -95,7 +100,7 @@ dependencies {
     implementation("io.coil-kt:coil-compose:2.4.0")
 
     // GSON converter
-    implementation("com.squareup.retrofit2:converter-gson:2.9.0")
+    implementation("com.squareup.retrofit2:converter-gson:3.0.0")
     implementation("androidx.lifecycle:lifecycle-runtime-compose:2.5.1")
 
     testImplementation("junit:junit:4.13.2")
@@ -104,6 +109,9 @@ dependencies {
     androidTestImplementation(platform("androidx.compose:compose-bom:2022.10.00"))
     androidTestImplementation("androidx.compose.ui:ui-test-junit4")
     androidTestImplementation("androidx.test.uiautomator:uiautomator:2.3.0-alpha03")
+    // Explicitly specify kotlin-stdlib-common version to ensure debugAndroidTestRuntimeClasspath is properly locked.
+    // Version must match the Kotlin plugin version in settings.gradle.kts (2.0.21).
+    androidTestImplementation("org.jetbrains.kotlin:kotlin-stdlib-common:2.1.21")
     debugImplementation("androidx.compose.ui:ui-tooling")
     debugImplementation("androidx.compose.ui:ui-test-manifest")
 }

tools/update-lockfiles.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+set -e
+
+PROJECTS=("evervault-core" "evervault-cages" "evervault-enclaves" "evervault-inputs" "sampleapplication")
+
+# Update lockfiles for all projects
+for PROJECT in "${PROJECTS[@]}"
+do
+  ./gradlew "$PROJECT:dependencies" --write-locks
+done