**This is an automatic release.**

## RevenueCat SDK
### 📦 Dependency Updates
* [RENOVATE] Update dependency gradle to v8.14.5 (#3459) via RevenueCat
Git Bot (@RCGitBot)

## RevenueCatUI SDK
### ✨ New Features
* Pre-warm image cache for workflow step states (#3447) via Cesar de la
Vega (@vegaro)
### Paywallv2
#### ✨ New Features
* Add `close_workflow` button action (#3453) via Cesar de la Vega
(@vegaro)
#### 🐞 Bugfixes
* Fix preload VideoComponent fallback override images (#3449) via Cesar
de la Vega (@vegaro)

### 🔄 Other Changes
* Select blob source by priority and weighted random (#3458) via Toni
Rico (@tonidero)
* [AUTOMATIC] Update golden test files for backend integration tests
(#3473) via RevenueCat Git Bot (@RCGitBot)
* Clean up unreferenced topic files after successful remote-config
refresh (#3439) via Toni Rico (@tonidero)
* Cache remote config response in memory with TTL and persist to disk
(#3457) via Toni Rico (@tonidero)
* build(deps): bump fastlane from 2.233.1 to 2.234.0 (#3463) via
dependabot[bot] (@dependabot[bot])
* Update codelabs links (#3460) via Jaewoong Eum (@skydoves)
* Add RemoteConfigManager and TopicFetcher (#3437) via Toni Rico
(@tonidero)
* Add exit offers support to workflows (#3452) via Cesar de la Vega
(@vegaro)
* Update baseline profiles (#3461) via RevenueCat Git Bot (@RCGitBot)
* Add network scaffolding for remote config endpoint (#3435) via Toni
Rico (@tonidero)
* test: cover singleStepFallbackId == initialStepId edge case (#3445)
via Facundo Menzella (@facumenzella)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Low risk: this is a release/versioning update (SNAPSHOT -> final) plus
docs deployment path changes, with no functional code changes beyond
version constants.
> 
> **Overview**
> Finalizes the `10.6.0` release by switching all version references
from `10.6.0-SNAPSHOT` to `10.6.0` (root `.version`,
`gradle.properties`, `Config.frameworkVersion`, and sample/test app
`libs.versions.toml` files).
> 
> Updates documentation publishing to point at the `10.6.0` docs path
(CircleCI S3 sync target and `docs/index.html` redirect), and prepends
the `10.6.0` section to `CHANGELOG.md`/`CHANGELOG.latest.md`.
> 
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
4da1697. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

### Motivation

Builds on RevenueCat#3435 by adding the orchestration layer that turns a
remote-config response into a populated on-disk cache of topic blobs.
With this PR, calling `RemoteConfigManager.updateRemoteConfigIfNeeded`
will (a) hit the backend for the latest manifest and (b) download every
referenced topic blob, verify its SHA-256, and persist it under
`noBackupFilesDir`. Subsequent stack PRs build on this orchestration.

### Description

Adds two classes in the `remoteconfig` package:

- **`TopicFetcher`** — exposes `suspend fun fetchTopicIfNeeded(topic,
variant, topicEntry, source): PurchasesError?`. Given the inputs,
downloads the blob from `source.urlFormat` (with `{blob_ref}`
substituted), writes to a temp file, verifies SHA-256 against
`topicEntry.blobRef`, and atomically renames into
`noBackupFilesDir/RevenueCat/topics/<topic.key>/<blobRef>`. The blocking
I/O is wrapped in `withContext(Dispatchers.IO)`. Skips the download
entirely when the target file already exists. Errors surface as
`PurchasesError(NetworkError, ...)` for checksum mismatch or
`IOException → toPurchasesError()` for transport failures.
- **`RemoteConfigManager`** — keeps a callback boundary externally (`fun
updateRemoteConfigIfNeeded(appInBackground, completion)`) since its
caller (`PurchasesOrchestrator`) is callback-shaped. Internally launches
a `private suspend fun refresh(...)` on a private
`CoroutineScope(SupervisorJob() + dispatcher)` (`dispatcher:
CoroutineDispatcher = Dispatchers.IO`, overridable for tests). The
refresh:
- Bridges the legacy callback-based `Backend.getRemoteConfig` via
`suspendCancellableCoroutine` +
`safeResume`/`safeResumeWithException(PurchasesException(error))`. The
backend network call stays callback-based intentionally.
- Fans the topic downloads out with `coroutineScope { tasks.map { async
{ topicFetcher.fetchTopicIfNeeded(...) }
}.awaitAll().firstNotNullOfOrNull { it } }`. The first error wins;
structured concurrency makes this much smaller than a hand-rolled
`CompletionTracker`.

Currently only the `DEFAULT` variant of each known topic is downloaded.

### Tests

`runTest` + `UnconfinedTestDispatcher(testScheduler)` for both.
`coEvery` / `coVerify` for the suspend `TopicFetcher`. Coverage:

- **`TopicFetcherTest`** — cache hit, successful download + verify +
persist, URL-format substitution, HTTP failure, IO failure, SHA
mismatch, multi-variant filename isolation.
- **`RemoteConfigManagerTest`** — empty-source / empty-topics /
no-DEFAULT skip paths, first-error-wins fan-out, backend-error
short-circuit, background flag forwarded, null completion.

All new types are `internal`. No public API surface change.

### Stack

- ⬇ `Add network scaffolding for remote config endpoint`: RevenueCat#3435
- This PR: RevenueCat#3437
- ⬆ `Clean up unreferenced topic files after successful remote-config
refresh`: RevenueCat#3439

### Checklist

- [x] Unit tests
- [ ] Follow-up issues for `purchases-ios` / hybrids (deferred)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Adds new remote-config orchestration that performs concurrent network
downloads and filesystem writes under `noBackupFilesDir`, including
checksum verification and new error-handling paths. While internal-only,
bugs here could impact startup/network behavior and caching correctness.
> 
> **Overview**
> Adds a new remote-config orchestration layer:
`RemoteConfigManager.updateRemoteConfigIfNeeded` fetches the
remote-config manifest from `Backend.getRemoteConfig` (bridged into
coroutines) and concurrently downloads each topic’s `default` entry via
a new `TopicFetcher`, returning the first download error (if any).
> 
> Introduces `TopicFetcher` to cache topic blobs on disk under
`noBackupFilesDir/RevenueCat/topics/<topic>/<blob_ref>`, with blob-ref
input validation, limited parallel downloads, temp-file writes, and
SHA-256 verification.
> 
> Refactors `FontLoader` to reuse new
`UrlConnectionFactory.downloadToFile` helpers, and extends
`UrlConnectionFactory` with shared download + checksum-verification
utilities. Updates/expands tests to cover the new manager/fetcher
behavior and changes the manifest entry key from `DEFAULT` to `default`
in `RemoteConfigResponseTest`.
> 
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
8cdae44. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

…esh (RevenueCat#3439)

### Motivation

`TopicFetcher` writes a new file every time the manifest's `blob_ref`
rotates, but never deletes the previous one. Without cleanup, the
on-disk cache at `noBackupFilesDir/RevenueCat/topics/...` grows
unboundedly across backend rotations. This PR adds a one-shot
disk-hygiene pass that runs at the end of each fully successful
remote-config refresh.

### Description

- **`suspend fun TopicFetcher.cleanupUnreferencedTopics(referenced:
Map<Topic, Set<String>>)`** — wraps the disk walk in
`withContext(Dispatchers.IO)`, iterates `Topic.values()`, lists each
topic's directory, and deletes files whose name isn't in the keep-set
for that topic. Skips files prefixed with `rc_topic_` (the
`createTempFile` prefix, now extracted as a `TEMP_PREFIX` constant) so a
concurrent in-flight download isn't clobbered.
- **`RemoteConfigManager.refresh`** — builds the reference set as the
union of every blob ref in the new manifest (across all variants, not
just `DEFAULT`) and triggers cleanup at the right moment, all within the
existing suspend coroutine flow:
- When `sources` is empty or no DEFAULT-variant tasks remain → cleanup
runs immediately (`fetchError = null` short-circuit).
- When downloads dispatch → after the `async`/`awaitAll` fan-out,
cleanup is awaited only if every fetch returned `null` (no error).
Partial-failure refreshes leave the cache untouched.

Confirmed semantics:
- Reference set spans **all** variants in the new manifest
(forward-compatible if non-DEFAULT variants ever start being cached).
- Topics in the SDK's `Topic` enum but absent from the new manifest get
**all** their cached files wiped (reference-set = ∅).
- Cleanup runs **only** when every download in the refresh succeeded.

### Tests

`runTest` for both:

- 5 new `TopicFetcherTest` cases: delete unreferenced / wipe topic
absent from set / no-op when root missing / preserve `rc_topic_*.tmp` /
mixed keep+delete.
- 5 new `RemoteConfigManagerTest` cases (with `coEvery {
topicFetcher.cleanupUnreferencedTopics(any()) } returns Unit` +
`coVerify`): cleanup with all-variant refs / cleanup on empty sources &
empty topics / no cleanup on fetcher error / no cleanup on backend
error.

All changes are `internal`; no public API surface change.

### Stack

- ⬇ `Add network scaffolding for remote config endpoint`: RevenueCat#3435
- ⬇ `Add RemoteConfigManager and TopicFetcher`: RevenueCat#3437
- This PR: RevenueCat#3439

### Checklist

- [x] Unit tests
- [ ] Follow-up issues for `purchases-ios` / hybrids (deferred)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Adds automatic deletion of on-disk topic files after successful
remote-config refresh; mistakes in reference calculation or deletion
logic could remove still-needed cached data, though it is guarded to run
only on fully successful refreshes and has test coverage.
> 
> **Overview**
> After a fully successful remote-config refresh, the SDK now performs a
one-shot cleanup pass to delete **unreferenced cached topic blob files**
under `noBackupFilesDir/RevenueCat/topics`, preventing unbounded growth
when `blob_ref`s rotate.
> 
> `RemoteConfigManager` builds a per-topic keep-set from *all* manifest
entryIds’ `blob_ref`s and calls
`TopicFetcher.cleanupUnreferencedTopics()` only when refresh completes
with no errors (and caching conditions are met). `TopicFetcher`
implements the disk walk/deletion, skips in-flight temp files via a
shared `rc_topic_` prefix constant, and adds unit tests covering the new
cleanup behavior and its failure/no-op cases.
> 
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
9503c36. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>