Skip to content

chore: bump reactivecircus/android-emulator-runner from 2.35.0 to 2.37.0#678

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/reactivecircus/android-emulator-runner-2.37.0
Open

chore: bump reactivecircus/android-emulator-runner from 2.35.0 to 2.37.0#678
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/reactivecircus/android-emulator-runner-2.37.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 16, 2026

Bumps reactivecircus/android-emulator-runner from 2.35.0 to 2.37.0.

Release notes

Sourced from reactivecircus/android-emulator-runner's releases.

v2.37.0

What's Changed

Full Changelog: ReactiveCircus/android-emulator-runner@v2.36.0...v2.37.0

v2.36.0

What's Changed

New Contributors

Full Changelog: ReactiveCircus/android-emulator-runner@v2.35.0...v2.36.0

Changelog

Sourced from reactivecircus/android-emulator-runner's changelog.

Change Log

Unreleased

v2.37.0

  • Update SDK build tools to 36.0.0, update SDK command-line tools to 20.0. - #467
  • Run action on Node 24. - #466
  • Update Node and npm packages. - #466

v2.36.0

  • Remove --abi option to better support 16-KB-based system images (#456).

v2.35.0

  • Optimize config.ini updates and efficiency improvements report (#436).
  • Fix pre-emulator-launch-script (#439).
  • Allow google_apis_ps16k as a valid target (#440).

v2.34.0

  • Allow arbitrary value for api-level such as Baklava and 35-ext15. - 428
  • Add option to specify system-image-api-level to use a system image with a different API level than the platform. - 428
  • Support automotive and desktop targets: android-automotive, android-automotive-playstore, android-desktop. - 428

v2.33.0

  • Fix missing AVD directory in ubuntu-24.04 runner. - 415
  • Update SDK build tools to 35.0.0, update SDK command-line tools to 16.0. - #356
  • Stop changing owner of the SDK directory. - 406 #409
  • Upgrade to latest npm dependencies. - #401

v2.32.0

  • Add port parameter for customizing the emulator port to use. - #383

v2.31.0

  • Support setting VanillaIceCream as api-level. - #378
  • Install platforms for the specified api-level. - #384

v2.30.1

  • Run action on Node 20. - #371

v2.30.0

... (truncated)

Commits
  • e89f39f Merge branch 'main' into release/v2
  • 9644b1a Prepare for release 2.37.0.
  • 4fe4b1a Build build tools 36.0.0, SDK command-line tools 12.0. (#467)
  • 6fe36e1 Update to Node 24. (#466)
  • 597aa7c Modernize test-fixture project. (#465)
  • 5d6e86d Merge branch 'main' into release/v2
  • 38164a2 Prepare for release 2.36.0.
  • 969c989 Add F3D in the list of projects (#462)
  • 29b35ed fix: remove problematic / unneeded --abi option in avd creation (#456)
  • 001613e Replace deprecated macos-13 runner with macos-15-intel. (#460)
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot requested a review from a team as a code owner March 16, 2026 22:36
@sonarqubecloud
Copy link
Copy Markdown

@dependabot dependabot Bot changed the base branch from main to workstation/6.0-Release May 22, 2026 14:14
@dependabot dependabot Bot force-pushed the dependabot/github_actions/reactivecircus/android-emulator-runner-2.37.0 branch from eb87e03 to fe32ea5 Compare May 22, 2026 14:14
@cursor
Copy link
Copy Markdown

cursor Bot commented May 22, 2026

PR Summary

Low Risk
Dependency-only CI workflow pin with no application or runtime code changes; main risk is emulator/test flakiness from upstream action/SDK updates.

Overview
Bumps reactivecircus/android-emulator-runner from v2.35.0 to v2.37.0 (pinned commit e89f39f…) in CI workflows that run Android emulators.

All six usages are updated: two in cross-platform-tests.yml (AVD cache snapshot + cross-platform test run) and four in pull-request.yml (AVD cache + instrumented tests, repeated for the orchestrator job). Emulator settings (api-level, scripts, options) are unchanged—only the action version pin.

Reviewed by Cursor Bugbot for commit e9cc6c0. Bugbot is set up for automated code reviews on this repo. Configure here.

Copy link
Copy Markdown

@cursor cursor Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 2 potential issues.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit fe32ea5. Configure here.

Comment thread .mobsf Outdated
- android_ssl_pinning
- accept_self_signed_certificate
- android_manifest_well_known_assetlinks # Sample apps use third-party domains (e.g. Branch mp-fortune.app.link)
- android_task_hijacking1 # Sample apps; targetSdk in build.gradle
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Duplicate android_task_hijacking1 rule in .mobsf

Low Severity

The android_task_hijacking1 ignore rule is listed twice — once at line 18 and again at line 34 — with different comments. The duplicate entry is redundant and should be consolidated.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit fe32ea5. Configure here.

Comment thread .github/workflows/release-publish.yml Outdated
run: ./gradlew publishMavenPublicationToMavenCentralRepository -PVERSION=${{ needs.setup-and-version.outputs.final_version }}

- name: Publish kits to Maven Central
run: ./gradlew publishMavenPublicationToMavenCentralRepository -PVERSION=${{ needs.setup-and-version.outputs.final_version }} -c settings-kits.gradle
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Release publish missing mparticleFromMavenLocalOnly flag for kits

High Severity

The kits publish step uses -c settings-kits.gradle without -Pmparticle.kit.mparticleFromMavenLocalOnly=true. Every other workflow that builds kits with settings-kits.gradle includes this flag. Without it, the kits may attempt to resolve core SDK dependencies from Maven Central instead of Maven local, which can fail due to propagation delays after the core was just published moments earlier.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit fe32ea5. Configure here.

@dependabot dependabot Bot changed the base branch from workstation/6.0-Release to main May 22, 2026 14:19
@dependabot dependabot Bot force-pushed the dependabot/github_actions/reactivecircus/android-emulator-runner-2.37.0 branch from fe32ea5 to 0f19d0b Compare May 22, 2026 14:19
@jamesnrokt
Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 26, 2026

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@jamesnrokt
Copy link
Copy Markdown
Collaborator

@dependabot recreate

Bumps [reactivecircus/android-emulator-runner](https://github.com/reactivecircus/android-emulator-runner) from 2.35.0 to 2.37.0.
- [Release notes](https://github.com/reactivecircus/android-emulator-runner/releases)
- [Changelog](https://github.com/ReactiveCircus/android-emulator-runner/blob/main/CHANGELOG.md)
- [Commits](ReactiveCircus/android-emulator-runner@b530d96...e89f39f)

---
updated-dependencies:
- dependency-name: reactivecircus/android-emulator-runner
  dependency-version: 2.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/reactivecircus/android-emulator-runner-2.37.0 branch from 0f19d0b to e9cc6c0 Compare May 27, 2026 17:57
@sonarqubecloud
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant