[dependabot]

Bumps org.jetbrains.dokka:dokka-gradle-plugin from 2.2.0 to 2.3.0.

Release notes

Sourced from org.jetbrains.dokka:dokka-gradle-plugin's releases.

2.3.0

New Features

• Add support for KEEP-0449: companion block and companion modifier on extensions (#4514, #4529)
• Add new suppressAnnotatedWith option to suppress annotated declarations (#4464) Thanks to @​rnett!
• Add WasmWasi and WasmJs platforms (#4496)
• Add clean up extension point which runs in finally block (#4545) Thanks to @​juliamcclellan!

Javadoc & KDoc Improvements

• JEP 413: Add support for @snippet tag in Javadoc (#4392) Thanks to @​yuriioliinyk4!
• JEP 467: Add support for Javadoc Markdown Doc Comments (#4414) Thanks to @​yuriioliinyk4!
• Fix inconsistent flow for B, Strong, Em, I tags and add support for <h4-6> Javadoc HTML tags (#4375) Thanks to @​yuriioliinyk4!
• Fix unresolved Javadoc @link to an override of a classpath method (#4547)
• Update Enum.values template (#4450), Enum.entries KDoc (#4475)
• Enhance logging about unresolved symbol/links (#4430, #4455, #4477, #4542)
• Enable the new KDoc resolution according to KEEP#389 by default. Drop flag and separate test task for the new KDoc resolution (#4481, #4454, #4471)

Bug Fixes

• Preserve and render reified on Kotlin function type parameters (#4549)
• Handle KaIntersectionType in TypeTranslator (#4520)
• Fix enum class rendering to show enum class instead of enum (#4510)
• Fix: use Kotlin Playground sample resources only on pages with @sample (#4428)
• Fix autoscrolling in the table of contents when opening a new page (#4548)
• Fix resolving fully-qualified KDoc links from unpacked klib (KT-85112) (#4483)
• Fix missing accessor docs of overridden properties (#4544)
• Fix Symbol not found for a typealias to a nested typealias (#4447)
• Fix vararg missing from annotation class constructor signatures (#4557)

Dokka Gradle Plugin

• Support Project Isolation in DGPv2 (#4497)
• Remove unnecessary input-files sorting from devMavenRepositoriesInputFiles (#4432)
• Update com.gradle.publish:plugin-publish-plugin and declare Gradle Configuration Cache compatibility (#4484)
• Fix DGP reading all Gradle properties (#4468)
• Detect and handle intersected source roots in Android multi-variant projects (#4473)
• Set finalizeCoroutines back to true and add a test for metaspace leaks with DGPv2 (#4512)
• Move ProcessIsolation convention values to ProcessIsolation factory function (#4534)

Security updates

Updated dependencies that ship with Dokka's published artifacts, resolving vulnerabilities:

• FreeMarker 2.3.32 → 2.3.35 — fixes CVE-2026-84939, a critical path traversal in template loading (#4613)
• jsoup 1.16.1 → 1.23.2— fixes CVE-2026-75140 (High: memory-exhaustion DoS) and CVE-2026-71497 (#4579)
• Jackson 2.15.3 → 2.22.2 — resolves high-severity CVE-2026-68497, CVE-2026-54512 and CVE-2026-54513 (#4581)

... (truncated)

Commits

• c6cd48a Update Dokka version references to 2.3.0 and Gradle to 9.8.2 in examples (#4617)
• 320ee9c Remove 'api reference' from Gradle Plugin publishing (#4616)
• 332b06a Update the version for the 2.3.0 release
• 797e56f Bump FreeMarker to 2.3.35 (#4613)
• fe916ab Update the version for the 2.3.0-Beta release
• 7fe7cab Update Jsoup version to 1.23.2 (#4579)
• 4a31ebf Better fix for markdown blockqoutes handling (#4595)
• f1762cd Restore DRI to Java method with mapped types (#4594)
• b86fe03 Update Jackson version to 2.22.2 (#4581)
• f802954 Update markdown library version to 0.7.10 (#4596)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Qodana for JVM

2 new problems were found

Inspection name	Severity	Problems
Unstable API Usage	🔶 Warning	2

View the detailed Qodana report

To be able to view the detailed Qodana report, you can either:

• Register at Qodana Cloud and configure the action
• Use GitHub Code Scanning with Qodana
• Host Qodana report at GitHub Pages
• Inspect and use qodana.sarif.json (see the Qodana SARIF format for details)

To get *.log files or any other Qodana artifacts, run the action with upload-result option set to true,
so that the action will upload the files as the job artifacts:

      - name: 'Qodana Scan'
        uses: JetBrains/qodana-action@v2026.2.2
        with:
          upload-result: true

Contact Qodana team

Contact us at qodana-support@jetbrains.com

• Or via our issue tracker: https://jb.gg/qodana-issue
• Or share your feedback: https://jb.gg/qodana-discussions