[deps]: Update com.google.devtools.ksp to v2.3.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
com.google.devtools.ksp (source)	2.2.21-2.0.4 -> 2.3.0

---

Release Notes

google/ksp (com.google.devtools.ksp)

v2.3.0

Compare Source

What's Changed

• KSP1 has been deprecated #​2657
• KSP is now independent of Kotlin Versions #​2658

Full Changelog: google/ksp@2.2.20-2.0.4...2.3.0

---

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bitwarden-bot]

Internal tracking:

• ID: PM-27451
• Link: https://bitwarden.atlassian.net/browse/PM-27451

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 84.81%. Comparing base (290f594) to head (e34eca6).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #6080   +/-   ##
=======================================
  Coverage   84.81%   84.81%           
=======================================
  Files         721      721           
  Lines       52812    52811    -1     
  Branches     7669     7668    -1     
=======================================
  Hits        44791    44791           
+ Misses       5329     5328    -1     
  Partials     2692     2692           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[github-actions]

Checkmarx One – Scan Summary & Details – 32734d4e-66f0-441f-8d9e-ae151bdf3087

Great job! No new security vulnerabilities introduced in this pull request

[claude]

Claude finished @renovate[bot]'s task —— View job

---

Reviewing KSP Update

• Read repository guidelines and architecture
• Review gradle dependency changes
• Run comprehensive code review analysis
• Check for compatibility issues
• Provide review findings

---

Summary

This PR updates KSP (Kotlin Symbol Processing) from version 2.2.21-2.0.4 to 2.3.0. The update includes two significant changes:

1. Removes the comment stating Kotlin and KSP versions must be compatible (gradle/libs.versions.toml:46)
2. Updates KSP version reference (gradle/libs.versions.toml:51)

Key KSP 2.3.0 Changes:

• KSP1 has been deprecated
• KSP is now independent of Kotlin versions (no longer requires matching version numbers)

Critical Issues

None found. This is a straightforward dependency update with no breaking changes.

Review Findings

Changes Analysis

File: gradle/libs.versions.toml

The changes are minimal and appropriate:

-# kotlin and ksp **must** use compatible versions, do not update either without the other.
 kotlin = "2.2.21"
 kotlinxCollectionsImmutable = "0.4.0"
 kotlinxCoroutines = "1.10.2"
 kotlinxSerialization = "1.9.0"
 kotlinxKover = "0.9.3"
-ksp = "2.2.21-2.0.4"
+ksp = "2.3.0"

Compatibility Assessment

✅ Version Independence: The removal of the comment about version compatibility is correct. KSP 2.3.0's key feature is independence from Kotlin versions, meaning kotlin = "2.2.21" and ksp = "2.3.0" can coexist safely.

✅ Project Usage: KSP is used throughout the codebase for annotation processing, primarily for:

• Hilt dependency injection (ksp(libs.google.hilt.compiler))
• AndroidX Room database (alias(libs.plugins.androidx.room))

Used in 7 modules:

• app/build.gradle.kts:22
• authenticator/build.gradle.kts
• core/build.gradle.kts
• data/build.gradle.kts:8
• network/build.gradle.kts
• ui/build.gradle.kts
• build.gradle.kts:13

✅ CI Status:

• Lint workflow: ✅ Passed
• Test workflow: 🔄 In progress
• Code coverage: No change (84.81%)
• Security scan: ✅ No new vulnerabilities

Good Practices Observed

• Clean, minimal change following semantic versioning
• Comment removal aligns with new KSP behavior
• Renovate bot maintaining dependencies current

Recommendations

1. Monitor Test Results: The Test workflow is currently in progress. Ensure all tests pass before merging.

2. Build Verification: After tests complete, verify that annotation processing works correctly for:

   • Hilt-generated code (@HiltViewModel, @Module, @Provides)
   • Room database code generation

3. Consider Future Updates: With KSP now version-independent, future Kotlin updates can proceed without waiting for matching KSP versions.

Action Items

• Wait for Test workflow to complete
• Verify no KSP-related build warnings in CI logs
• Merge once all CI checks pass

Conclusion

Recommendation: APPROVE ✅

This is a safe, well-formed dependency update that modernizes the project's use of KSP. The version independence feature simplifies future maintenance by decoupling KSP updates from Kotlin version changes.

---

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.