chore(deps): bump gradle-wrapper from 9.8.0 to 9.8.1 in /android

[dependabot]

Bumps gradle-wrapper from 9.8.0 to 9.8.1.

Release notes

Sourced from gradle-wrapper's releases.

9.8.1

This is a patch release for Gradle 9.8.0. We recommend using 9.8.1 instead of 9.8.0.

This release addresses three high rated vulnerabilities:

• Unauthenticated worker-to-daemon channel deserializes untrusted Java objects
• Deserialization of untrusted Java objects before authentication in the client - daemon communication
• Failure to disable repositories failing to establish an SSL connection can expose builds to malicious artifacts

The following issues were resolved:

• [Gradle 9.8.0 complains again about invalid Toolchains on Debian / Ubuntu packaged systems]- (gradle/gradle#39358)
• Gradle 9.8.0 removes root java.util.logging handlers installed by a custom LogManager (breaks Quarkus test log capture)
• Dependency resolution regression

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aman Gautam, Björn Kautler, Eng Zer Jun, Hashim Khan, Julian Krannich, KBS, Labh R Jethe, Mark Dodgson, Maxim, monkey, nataphon-ktsystems, Paul King, Qiu Tian, rg_sandesh, Roberto Perez Alcolea, Sean, Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

... (truncated)

Commits

• 39daf39 Release notes for Gradle 9.8.1 (#39409)
• 4fc92e5 Release notes for Gradle 9.8.1
• bfbd14a Make repository disabling stricter (#39403)
• 95e0bf9 Check daemon & worker preamble earlier (#39402)
• 7aa9a5b Improve display for distribution url in wrapper (#39401)
• 74a7720 Wrap GCP & S3 resolution errors into HTTP to reuse repository disabling mecha...
• 651110a Check worker token before any serialization similarly to daemon
• 8a6b9d9 Harden repository disabling: disable them by default on failure unless there'...
• f28e514 Check the daemon token before any serialization
• 86ab273 Replace credentials for distribution url with *** and avoid showing the plain...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

• Chores
  • Updated the Android build tools to Gradle 9.8.1.

[dependabot]

Labels

The following labels could not be found: android. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Repository: doublegate/RustyNES/.coderabbit.yaml
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 0a6d2b60-aa7c-4f32-9469-663ba0cd0517

📥 Commits

Reviewing files that changed from the base of the PR and between 67b2a6b and 236bdda.

⛔ Files ignored due to path filters (1)

• android/gradle/wrapper/gradle-wrapper.jar is excluded by !**/*.jar

📒 Files selected for processing (2)

• android/gradle/wrapper/gradle-wrapper.properties
• android/gradlew.bat

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 1 remain after this review.

📝 Walkthrough

The Android Gradle wrapper now uses Gradle 9.8.1 with an updated distribution checksum. The Windows startup script has a blank-line-only edit; its commands and control flow are unchanged.

Changes: Android Gradle wrapper

Layer / File(s)	Summary
Update wrapper distribution android/gradle/wrapper/gradle-wrapper.properties, android/gradlew.bat	The wrapper distribution URL and checksum now specify Gradle 9.8.1. The Windows startup script has an added blank line, with no command or control-flow changes.

Priority: ⬆️ High

Estimated code review effort: 1 (Trivial) | ~4 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 236bd

The wrapper is pinned to the verified Gradle 9.8.1 distribution, and the Windows launcher commands are unchanged. No actionable merge risk is identified; the full Android build remains unverified.

Security architecture risk: 🔵 Low · up to 236bd

The update retains the existing HTTPS distribution host and an explicit checksum pin. No concrete security regression was established, but the replaced wrapper executable’s verification and recovery behavior could not be fully confirmed.

Retained concerns
No architecture-level concerns identified.

Security review details

Security Blast Radius

• inferred — The directly evidenced exposure is the Android build bootstrap: the replacement wrapper runs within the invoking Java process and governs distribution installation. Downstream deployment privileges, credentials, and tenant exposure were not established by the inspected scope.

Trust Boundaries and Controls

• observed — Static inspection found checksum-verification markers in both wrapper versions and a new URL-display helper with credential-masking markers in the head. These observations support continuity of intended controls but do not prove executable control flow or publisher provenance.

Pre-merge checks · 9

Passed checks (9 passed)

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly and concisely identifies the main change: updating the Android Gradle wrapper from 9.8.0 to 9.8.1.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.
Docs-As-Spec Sync		The PR changes only Android Gradle wrapper files: the wrapper JAR, Gradle properties, and Windows launcher script. It does not change crates/rustynes-cpu, crates/rustynes-ppu, crates/rustynes-apu, or …
Changelog Entry For User-Visible Changes		PASS: The PR changes only Gradle wrapper artifacts: the wrapper JAR, the Gradle distribution URL/checksum, and line endings in android/gradlew.bat. It does not change application code or runtime beh…
No Unwrap/Expect/Panic On Untrusted Input		PASS. The pull request changes only the Gradle wrapper archive, its distribution URL/checksum, and a batch file. No added .unwrap(), .expect(), or panic!() expressions exist. The wrapper archive…
Safety Comment On New Unsafe Blocks		PASS. The pull request changes only the Gradle wrapper JAR, wrapper properties, and a batch script. No Rust files changed, and no added textual lines contain unsafe. Therefore, it introduces no new …

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Antigravity review (Gemini via Ultra)

This PR is a trivial dependency bump that updates the Gradle wrapper in /android from 9.8.0 to 9.8.1, updating gradle-wrapper.properties, the binary gradle-wrapper.jar, and re-saving gradlew.bat.

Blocking issues

None found.

Suggestions

• android/gradlew.bat#L1-L112: Every line in this file was replaced with identical text, indicating line-ending churn (CRLF to LF or vice versa). Revert this file to maintain the original line endings, or add an entry in .gitattributes for *.bat text eol=crlf so git stops thrashing the whole file on wrapper upgrades.
• android/gradlew: gradle-wrapper.jar and gradlew.bat were modified, but the POSIX wrapper script gradlew is absent from the diff. Verify whether gradlew was unintentionally omitted when regenerating the wrapper (e.g., via ./gradlew wrapper --gradle-version 9.8.1).
• android/gradle/wrapper/gradle-wrapper.jar: The PR introduces an opaque binary blob. Verify that the JAR checksum matches the official Gradle 9.8.1 wrapper binary (or run a wrapper validation action) to ensure supply-chain integrity before execution.

Nitpicks

• android/gradle/wrapper/gradle-wrapper.properties#L4: The comment # Fetched from services.gradle.org/distributions/gradle-9.8.0-bin.zip.sha256. is stale; update 9.8.0 to 9.8.1.

_{Automated first-pass review by agy on a self-hosted runner -- not a human review.}