build(deps): bump coil from 3.4.0 to 3.6.3

[dependabot]

Bumps coil from 3.4.0 to 3.6.3.
Updates io.coil-kt.coil3:coil-compose from 3.4.0 to 3.6.3

Release notes

Sourced from io.coil-kt.coil3:coil-compose's releases.

3.6.3

See CHANGELOG.md.

3.6.2

See CHANGELOG.md.

3.6.1

See CHANGELOG.md.

3.6.0

See CHANGELOG.md.

3.5.0

See CHANGELOG.md.

3.5.0-beta01

See CHANGELOG.md.

Changelog

Sourced from io.coil-kt.coil3:coil-compose's changelog.

[3.6.3] - September 18, 2026

• Fix builds using Android Gradle Plugin 9.4.0 and R8 failing due to invalid characters in Kotlin module name metadata.

[3.6.2] - September 4, 2026

• Fix DeDupeConcurrentRequestStrategy hanging requests for a key if a waiting request is cancelled. (#3566)
• Fix a JS/WASM linkage error when using Compose Multiplatform 1.13. (#3568)

[3.6.1] - September 1, 2026

• Fix JS builds failing when ES modules are enabled. (#3558)

[3.6.0] - August 26, 2026

• New: Add support for loading blob: URLs (object URLs) on JS/WASM. (#3504)
• New: Add ImageRequest.Builder.allowPartialImage and ImageLoader.Builder.allowPartialImage to configure whether StaticImageDecoder on Android accepts partial images. This is enabled by default, which is the same behavior in previous Coil releases. (#3494)
• Fix AsyncImage crashing when measured with inverted constraints. (#3470)
• Fix Compose filterQuality not being applied to drawable-backed images, including GIFs. (#3469)
• Fix a JS/WASM image decoder memory leak. (#3503)
• Fix images failing to render with GenericViewTarget in R8 9.0+ optimized builds. (#3518)
• Use Runtime.maxMemory() to determine the maximum memory cache size on JVM instead of assuming 512 MB of available memory. (#3458)
• Bundle ProGuard rules with the non-Android JVM artifact. (#3476)
• Update the Android compile SDK to 37.
• Update Kotlin to 2.4.10.
• Update Compose to 1.12.0.
• Update Okio to 3.18.1.
• Update Skiko to 0.150.1.
• Update kotlinx-io-okio to 0.9.1.

[3.5.0] - June 10, 2026

Changes since 3.4.0:

• Important: Remove iosX64 and macosX64 targets. (#3386)
• Important: Increase Android's minimum SDK version to 23. (#3283)
• New: Add fast WebP size extraction on JS/WASM to avoid falling back to a full Skia decode. (#3341)
• Remove experimental annotation from ImageLoader.Builder.memoryCacheMaxSizePercentWhileInBackground. (#3439)
• Fix CacheStrategy implementations being unable to refresh cached failure responses (e.g. expired cached 404 responses). (#3401)
• Look up ContinuationInterceptor instead of CoroutineDispatcher in coroutine contexts. (#3415)
• Update the Android compile SDK to 36.
• Update the Kotlin language version to 2.2.
• Update Kotlin to 2.4.0.
• Update Compose to 1.11.1.
• Update Okio to 3.17.0.
• Update Skiko to 0.144.6.
• Update androidx.annotation to 1.10.0.

Changes since 3.5.0-beta01:

... (truncated)

Commits

• 29cae3b Prepare version 3.6.3.
• 0f371ca Remove invalid characters from Kotlin module name metadata. (#3587)
• 779ff1b Prepare version 3.6.2.
• b6818d3 Fix deduplicated request cancellation handling (#3566)
• 79ad576 Fix formatting.
• 4b14a54 Use InternalSkikoApi awaitSkiko directly in web worker decoding (#3568)
• 37e267b Migrate to AGP's new DSL. (#3567)
• 4f56bce Replace use of deprecated Gradle API. (#3565)
• 64f486b Update lint to v32.4.0 (#3564)
• 827faea Update dependency com.android.tools.build:gradle to v9.4.0 (#3563)
• Additional commits viewable in compare view

Updates io.coil-kt.coil3:coil-network-okhttp from 3.4.0 to 3.6.3

Release notes

Sourced from io.coil-kt.coil3:coil-network-okhttp's releases.

3.6.3

See CHANGELOG.md.

3.6.2

See CHANGELOG.md.

3.6.1

See CHANGELOG.md.

3.6.0

See CHANGELOG.md.

3.5.0

See CHANGELOG.md.

3.5.0-beta01

See CHANGELOG.md.

Changelog

Sourced from io.coil-kt.coil3:coil-network-okhttp's changelog.

[3.6.3] - September 18, 2026

• Fix builds using Android Gradle Plugin 9.4.0 and R8 failing due to invalid characters in Kotlin module name metadata.

[3.6.2] - September 4, 2026

• Fix DeDupeConcurrentRequestStrategy hanging requests for a key if a waiting request is cancelled. (#3566)
• Fix a JS/WASM linkage error when using Compose Multiplatform 1.13. (#3568)

[3.6.1] - September 1, 2026

• Fix JS builds failing when ES modules are enabled. (#3558)

[3.6.0] - August 26, 2026

• New: Add support for loading blob: URLs (object URLs) on JS/WASM. (#3504)
• New: Add ImageRequest.Builder.allowPartialImage and ImageLoader.Builder.allowPartialImage to configure whether StaticImageDecoder on Android accepts partial images. This is enabled by default, which is the same behavior in previous Coil releases. (#3494)
• Fix AsyncImage crashing when measured with inverted constraints. (#3470)
• Fix Compose filterQuality not being applied to drawable-backed images, including GIFs. (#3469)
• Fix a JS/WASM image decoder memory leak. (#3503)
• Fix images failing to render with GenericViewTarget in R8 9.0+ optimized builds. (#3518)
• Use Runtime.maxMemory() to determine the maximum memory cache size on JVM instead of assuming 512 MB of available memory. (#3458)
• Bundle ProGuard rules with the non-Android JVM artifact. (#3476)
• Update the Android compile SDK to 37.
• Update Kotlin to 2.4.10.
• Update Compose to 1.12.0.
• Update Okio to 3.18.1.
• Update Skiko to 0.150.1.
• Update kotlinx-io-okio to 0.9.1.

[3.5.0] - June 10, 2026

Changes since 3.4.0:

• Important: Remove iosX64 and macosX64 targets. (#3386)
• Important: Increase Android's minimum SDK version to 23. (#3283)
• New: Add fast WebP size extraction on JS/WASM to avoid falling back to a full Skia decode. (#3341)
• Remove experimental annotation from ImageLoader.Builder.memoryCacheMaxSizePercentWhileInBackground. (#3439)
• Fix CacheStrategy implementations being unable to refresh cached failure responses (e.g. expired cached 404 responses). (#3401)
• Look up ContinuationInterceptor instead of CoroutineDispatcher in coroutine contexts. (#3415)
• Update the Android compile SDK to 36.
• Update the Kotlin language version to 2.2.
• Update Kotlin to 2.4.0.
• Update Compose to 1.11.1.
• Update Okio to 3.17.0.
• Update Skiko to 0.144.6.
• Update androidx.annotation to 1.10.0.

Changes since 3.5.0-beta01:

... (truncated)

Commits

• 29cae3b Prepare version 3.6.3.
• 0f371ca Remove invalid characters from Kotlin module name metadata. (#3587)
• 779ff1b Prepare version 3.6.2.
• b6818d3 Fix deduplicated request cancellation handling (#3566)
• 79ad576 Fix formatting.
• 4b14a54 Use InternalSkikoApi awaitSkiko directly in web worker decoding (#3568)
• 37e267b Migrate to AGP's new DSL. (#3567)
• 4f56bce Replace use of deprecated Gradle API. (#3565)
• 64f486b Update lint to v32.4.0 (#3564)
• 827faea Update dependency com.android.tools.build:gradle to v9.4.0 (#3563)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)