Update Compose BOM to 2026.09.00

build-logic/plugins/src/main/java/UpdateVerificationMetadataTask.kt

@@ -55,10 +55,12 @@ constructor(
         StandardCharsets.UTF_8
       )
 
-      // The qa build resolves everything a clean qa run needs, including tooling that is only pulled while a
+      // The qaRemote build resolves everything a clean CI run needs, including tooling that is only pulled while a
       // task executes -- the KSP compiler, the aapt2 executable, and the layoutlib screenshot renderer all come
-      // in through detached configurations. Finally the cross-platform sync fills in aapt2's other OS variants.
-      runGradle("--write-verification-metadata", "sha256", "qa")
+      // in through detached configurations. It has to be qaRemote rather than qa, because screenshot validation
+      // is wired into the remote tasks only and plain qa never resolves layoutlib-runtime. Finally the
+      // cross-platform sync fills in aapt2's other OS variants.
+      runGradle("--write-verification-metadata", "sha256", "qaRemote")
       // The build-logic precompiled-script-plugin accessors are generated by applying each plugin in throwaway
       // nested builds, which resolve plugin dependencies (e.g. junit BOMs) that no configuration walk or qa build
       // ever sees. Forcing a refresh re-downloads them through the verifier so their checksums get written.

gradle/libs.versions.toml

@@ -53,7 +53,7 @@ android-application = { module = "com.android.application:com.android.applicatio
 androidx-benchmark-gradle-plugin = "androidx.benchmark:benchmark-gradle-plugin:1.4.1"
 
 # Compose
-androidx-compose-bom = "androidx.compose:compose-bom:2026.06.01"
+androidx-compose-bom = "androidx.compose:compose-bom:2026.09.00"
 androidx-compose-material3 = { module = "androidx.compose.material3:material3" }
 androidx-compose-material3-adaptive = { module = "androidx.compose.material3.adaptive:adaptive"}
 androidx-compose-material-icons-extended = "androidx.compose.material:material-icons-extended:1.7.8"