[dependabot]

Bumps com.facebook.fresco:fresco from 3.6.0 to 3.7.0.

Release notes

Sourced from com.facebook.fresco:fresco's releases.

v3.7.0

Highlights

• Adds client-side AVIF transcoding (a19f4cd5a745fa06ebbefc4ef12751a4fadf3ef5)
• Adds intermediateImageBitmapTransformation API to Fresco (ad877d58d6bb52cb4ef689fa027a3bd7ebcc2626)
• Adds a quality-aware BitmapTransformation API and default transformation for intermediate images (de4f23c336b58748551b6f30ea58ea151952f4ad)
• Adds SimilarImageLookup interface and wires it into ImagePipelineConfig (d04a77de3391c72c0ff6180a9dfb4a104da860b8)
• Adds UnifiedCacheKeyFactory with a pluggable UriNormalizer (55ad40a9a2767923b9dd5b2e94383855617d7f0b)
• Adds EfficientPlatformDecoder and a RawBitmapDecoder interface for unified byte-array-to-Bitmap decoding (cd773ee521f5db8a843411e2dddbc709e88cecc8)
• Adds ZoomableVitoView to the zoomable library (e6ce122ac04565f98d3dadeb2a510d985b4b033d)
• Adds DrawableResImageSource, RetainingImageSource, and ColorImageSource image sources (0b41741251705a3b7faedba9fe735e1b7cc1c2fe)
• Adds ScaleType.DISABLED and a new MatrixScaleType (8cf25386a360a202a12cc5c67f1dd121ad68368d)
• Adds loop-count control and static-thumbnail fallback for animated images (8cbe47096cf9a32a0d55d586bde5786901d7a2bc)
• Adds an API to delete all files from a disk cache (209d705677edb3b5bab0abebd259c10815f63939)
• Adds the ability to specify a custom cache key on ImageRequest/ImageRequestBuilder (2da616f686ed2ebb2ca98897b949aa6bf519d825)
• Adds a circuit breaker for consecutive frame-drop failures in animations (1d3adb69512d01032b42e682309add584b1fda75)
• (Breaking) Removes the unused MultiUri class (0eb4503febf0a3dde92f20ca9f619a8a977f4c63)
• (Breaking) Removes the legacy GingerbreadPurgeableDecoder and HoneycombBitmapFactory (1d801a7217a43ad382914c344455934975d3091f)
• (Breaking) Removes PoolSizeViolationException and ignoreHardCap (537cd77fe80783b83a07ed1fd2a6683926e49075)
• Replaces deprecated setDownsampleEnabled() with setDownsampleMode() (fd2b68410754bd15c270270a42847477a9b87b67)
• Bumps Kotlin to 2.2.0 (6a14e114e5854f5a7dfb3e71e78ec8beb3311396)
• Hardens native decoding against OOB reads, use-after-free, integer overflow, and a GIF-parsing memory leak in webp_bitmapfactory (63287810684f32d237b9f7b1ad6f2c10d22fee5f)
• Removes CallerContext from cache keys to prevent caller-context leaks (d14c122db80250e4a4be81737035e593f99a5009)
• Fixes an ANR by preventing synchronous network fetches on Litho layout threads (45a60ceeb94b9b20223a56d653b4792d45ee38f1)
• Fixes recycled-bitmap crashes via an isRecycled() check in DefaultDrawableFactory (a122b06169f269f95e16ee716ddb0dfe16569113)
• Fixes a postprocessor not being applied during decoded-image prefetch (6544cc65710c5ccf1f0b73713e62b3a6245a4f13)
• Fixes image info being fetched after drawable creation to avoid IllegalStateException (#2839) (64f3ca9bebdb76838e569daaf47a120ea1eb1f36)
• Fixes the loop variable in DropFramesFrameScheduler (#2850) (4ed6d91aa0ae49535af2a6ae73dd4a61b3073cd6)

Full Changelog: meta/fresco@v3.6.0...v3.7.0

Commits

• e49df66 Migrate Fresco OSS publishing from legacy OSSRH to Sonatype Central Portal
• 7237b78 Raise AnimatedDrawable2 dropped-frame circuit breaker to fix blank animated i...
• 8cf93e5 Enable for targets in fbandroid/libraries/fresco/urimod
• 279a155 Suppress k22 unchecked warnings via codemod [8/15]
• 58fc6bc Align equals overrides to the supertype other parameter name (6/6)
• c54fc84 Bump to 3.7.0
• ddf03d4 Suppress PARAMETER_NAME_CHANGED_ON_OVERRIDE for terse 1-3 char supertype para...
• 89283eb Suppress k22 this-escape warnings via codemod [10/10]
• 494c610 Suppress k22 this-escape warnings via codemod [6/10]
• b5e926e Tunable dither / colorspace / byte-array decode in DefaultRawBitmapDecoder
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[mergify]

Queued — the merge queue status continues in this comment ↓.

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-07-01 16:35 UTC · Rule: default · triggered by @berviantoleo with the merge queue checkbox
• ✅ Checks passed · on draft merge queue: checking main (15900f1), #350, #347, #348 and #346 together #356
• ✅ Merged — 2026-07-01 16:37 UTC · at 96e25624487221317ef4686578f9e9dd7b24829c

This pull request spent 1 minute 44 seconds in the queue, including 15 seconds running CI.

Required conditions to merge