fix(deps): update dependency io.coil-kt.coil3:coil-network-okhttp to v3.4.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
io.coil-kt.coil3:coil-network-okhttp	3.3.0 → 3.4.0

---

Release Notes

coil-kt/coil (io.coil-kt.coil3:coil-network-okhttp)

v3.4.0

Compare Source

• New: Add ConcurrentRequestStrategy to support combining in-flight network requests for the same key. (#​2995, #​3326)
  • DeDupeConcurrentRequestStrategy enables this behavior and lets waiters wait for the results of an in-flight network request.
    • This behavior is experimental and is currently disabled by default.
    • Currently, requests are always combined based on their diskCacheKey.
  • OkHttpNetworkFetcherFactory, KtorNetworkFetcherFactory, and NetworkFetcher.Factory now accept concurrentRequestStrategy.
• New: Decode images on JS/WASM using a web worker to avoid blocking the browser main thread. (#​3305)
• New: Add support for Linux native targets (linuxX64 and linuxArm64) for non-Compose multiplatform artifacts. (#​3054)
• New: Add Compose-only APIs to improve transitions between subsequent requests. (#​3141, #​3175)
  • ImageRequest.Builder.useExistingImageAsPlaceholder enables crossfading from the previous image when no placeholder is set.
  • ImageRequest.Builder.preferEndFirstIntrinsicSize lets CrossfadePainter prefer the end painter's intrinsic size.
• New: Add ImageLoader.Builder.repeatCount(Int) in coil-gif to set a global animated image repeat count. (#​3143)
• New: Add support for preferring embedded video thumbnails in coil-video. (#​3107)
• New: Publish coil-lint with coil-core and add a lint check to catch accidental kotlin.error() calls in ImageRequest.Builder blocks. (#​3304)
• Set Kotlin language version to 2.1. (#​3302)
• Make BitmapFetcher available in common code. (#​3286)
• Use applicationContext when creating the singleton ImageLoader on Android. (#​3246)
• Cache eligible non-2xx HTTP responses by default (e.g. 404) and stop caching non-cacheable responses (e.g. 500). (#​3137, #​3139)
• Fix potential race condition when consuming OkHttp response bodies. (#​3186)
• Fix maxBitmapSize edge case to prevent oversized bitmap crashes on Android. (#​3259)
• Update Kotlin to 2.3.10.
• Update Compose to 1.9.3.
• Update Okio to 3.16.4.
• Update Skiko to 0.9.22.2.
• Update kotlinx-io-okio to 0.9.0.
• Update androidx.core to 1.16.0.
• Update androidx.lifecycle to 2.9.4.
• Update androidx.exifinterface to 1.4.2.

---

Configuration

📅 Schedule: Branch creation - "before 9am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

Claude finished @renovate[bot]'s task in 55s —— View job

---

PR Review: coil dependency update to v3.4.0

• Gather context
• Review changed file
• Analyze coil usage in project
• Review changelog for breaking changes
• Post review findings

---

Summary

This is a minimal, low-risk dependency update. The single change is in gradle/libs.versions.toml:47, bumping coil = "3.3.0" → "3.4.0". Coil is used only in the sample app (sample/build.gradle.kts:141), not in any library modules — so this has no impact on published library artifacts.

Changelog Impact Analysis

Bug fixes (beneficial):

• Fixes a potential race condition when consuming OkHttp response bodies — directly relevant since this project uses coil-network-okhttp
• Fixes maxBitmapSize edge case that could cause oversized bitmap crashes on Android

Behavior change (worth noting):

• Non-2xx HTTP responses like 404 will now be cached by default; non-cacheable responses like 500 will no longer be cached. This is a correctness improvement per HTTP spec. In the context of CoilImageGetter.kt, image load failures for 404 URLs will now be cached, which avoids repeated network requests for broken image URLs.

New APIs (not used in this project):

• ConcurrentRequestStrategy / DeDupeConcurrentRequestStrategy — experimental, opt-in, not relevant here
• ImageRequest.Builder.useExistingImageAsPlaceholder — not used in this project
• Kotlin language version set to 2.1 — compatible with the project's Kotlin 2.2.21

Dependency updates bundled in coil 3.4.0:

• androidx.lifecycle to 2.9.4 — project's androidx-lifecycle version catalog entry is at 2.10.0, so the transitive version won't regress
• androidx.core to 1.16.0 — project pins 1.17.0, no regression

Assessment

✅ Safe to merge. The update is a net positive:

• Two bug fixes improve reliability and stability in the sample app
• HTTP caching behavior change is correct per spec and beneficial
• No breaking API changes affecting current usage
• Scoped entirely to the sample app — no library API surface affected

[github-actions]

Qodana for JVM

It seems all right 👌

No new problems were found according to the checks applied

💡 Qodana analysis was run in the pull request mode: only the changed files were checked
☁️ View the detailed Qodana report

Contact Qodana team

Contact us at qodana-support@jetbrains.com

• Or via our issue tracker: https://jb.gg/qodana-issue
• Or share your feedback: https://jb.gg/qodana-discussions