**This is an automatic release.**

## RevenueCat SDK
### 📦 Dependency Updates
* [RENOVATE] Update dependency gradle to v8.14.5 (#3459) via RevenueCat
Git Bot (@RCGitBot)

## RevenueCatUI SDK
### ✨ New Features
* Pre-warm image cache for workflow step states (#3447) via Cesar de la
Vega (@vegaro)
### Paywallv2
#### ✨ New Features
* Add `close_workflow` button action (#3453) via Cesar de la Vega
(@vegaro)
#### 🐞 Bugfixes
* Fix preload VideoComponent fallback override images (#3449) via Cesar
de la Vega (@vegaro)

### 🔄 Other Changes
* Select blob source by priority and weighted random (#3458) via Toni
Rico (@tonidero)
* [AUTOMATIC] Update golden test files for backend integration tests
(#3473) via RevenueCat Git Bot (@RCGitBot)
* Clean up unreferenced topic files after successful remote-config
refresh (#3439) via Toni Rico (@tonidero)
* Cache remote config response in memory with TTL and persist to disk
(#3457) via Toni Rico (@tonidero)
* build(deps): bump fastlane from 2.233.1 to 2.234.0 (#3463) via
dependabot[bot] (@dependabot[bot])
* Update codelabs links (#3460) via Jaewoong Eum (@skydoves)
* Add RemoteConfigManager and TopicFetcher (#3437) via Toni Rico
(@tonidero)
* Add exit offers support to workflows (#3452) via Cesar de la Vega
(@vegaro)
* Update baseline profiles (#3461) via RevenueCat Git Bot (@RCGitBot)
* Add network scaffolding for remote config endpoint (#3435) via Toni
Rico (@tonidero)
* test: cover singleStepFallbackId == initialStepId edge case (#3445)
via Facundo Menzella (@facumenzella)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Low risk: this is a release/versioning update (SNAPSHOT -> final) plus
docs deployment path changes, with no functional code changes beyond
version constants.
> 
> **Overview**
> Finalizes the `10.6.0` release by switching all version references
from `10.6.0-SNAPSHOT` to `10.6.0` (root `.version`,
`gradle.properties`, `Config.frameworkVersion`, and sample/test app
`libs.versions.toml` files).
> 
> Updates documentation publishing to point at the `10.6.0` docs path
(CircleCI S3 sync target and `docs/index.html` redirect), and prepends
the `10.6.0` section to `CHANGELOG.md`/`CHANGELOG.latest.md`.
> 
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
4da1697. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

### Motivation

First step in landing remote-config support. The backend exposes `GET
/v2/config`, which returns a manifest describing remote-controlled
topics (e.g. product-entitlement mapping) plus the asset sources for
downloading them. Wiring up the endpoint and its response models is a
prerequisite for the orchestration and on-disk cache work in the rest of
the stack.

### Description

- Adds `Endpoint.GetRemoteConfig` to the sealed endpoint hierarchy and
`Backend.getRemoteConfig(appUserID, appInBackground, onSuccess,
onError)` to dispatch the call. Reuses the existing
`BackgroundAwareCallbackCacheKey` / `RemoteConfigCallback`
callback-coalescing pattern.
- Adds the response models in a new feature package
`com.revenuecat.purchases.common.remoteconfig`:
  - `RemoteConfigResponse(apiSources, blobSources, manifest)`
  - `ApiSource(id, url, priority, weight)`
  - `BlobSource(id, urlFormat, priority, weight)`
  - `Manifest(topics)`
- `Topic` enum (`PRODUCT_ENTITLEMENT_MAPPING`) with `fromKey(key)` for
wire-key lookups
  - `TopicEntry(blobRef)`
- `TopicsMapSerializer` — custom kotlinx-serialization `KSerializer`
that drops unknown topic wire keys at decode time and re-emits the
enum's wire key on encode.
- Test coverage for the serializer (unknown-key filtering, default
decoding, round-trip), plus `BackendGetRemoteConfigTest` for the
endpoint plumbing and error paths.
- Adds a developer-only build-time override: setting
`REMOTE_CONFIG_BASE_URL` in `local.properties` (e.g.
`http://localhost:8080/`) redirects only `getRemoteConfig` to that host.
Empty by default and gated to debug builds, so CI / release traffic is
unaffected. Plumbed via a new `BuildConfig.REMOTE_CONFIG_BASE_URL`
field, mirroring the existing `ENABLE_EXTRA_REQUEST_LOGGING` pattern.

All new types are `internal`; no public API surface change.

### Stack

- This PR (base): RevenueCat#3435
- ⬆ `Add RemoteConfigManager and TopicFetcher`: RevenueCat#3437
- ⬆ `Clean up unreferenced topic files after successful remote-config
refresh`: RevenueCat#3439

### Checklist

- [x] Unit tests
- [ ] Follow-up issues for `purchases-ios` / hybrids (deferred — feature
is not yet wired to any consumer)


<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Adds new backend networking path (`GET /v2/config`) and callback
coalescing logic in `Backend`, plus a debug-only base URL override;
issues here could affect request routing or parsing for this new call.
> 
> **Overview**
> Adds initial remote-config networking support by introducing
`Endpoint.GetRemoteConfig` (`/v2/config`) and a new
`Backend.getRemoteConfig` call that coalesces concurrent requests and
parses a typed `RemoteConfigResponse`.
> 
> Introduces internal remote-config response models (including a custom
serializer that drops unknown topic keys) and adds unit tests covering
endpoint properties, parsing/unknown-field behavior, error propagation,
and request de-duping.
> 
> Adds a debug-only `REMOTE_CONFIG_BASE_URL` `BuildConfig` field
(documented in `local.properties.example`) to optionally route only the
remote-config GET request to a local host.
> 
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
a7f33ec. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

### Motivation

Builds on RevenueCat#3435 by adding the orchestration layer that turns a
remote-config response into a populated on-disk cache of topic blobs.
With this PR, calling `RemoteConfigManager.updateRemoteConfigIfNeeded`
will (a) hit the backend for the latest manifest and (b) download every
referenced topic blob, verify its SHA-256, and persist it under
`noBackupFilesDir`. Subsequent stack PRs build on this orchestration.

### Description

Adds two classes in the `remoteconfig` package:

- **`TopicFetcher`** — exposes `suspend fun fetchTopicIfNeeded(topic,
variant, topicEntry, source): PurchasesError?`. Given the inputs,
downloads the blob from `source.urlFormat` (with `{blob_ref}`
substituted), writes to a temp file, verifies SHA-256 against
`topicEntry.blobRef`, and atomically renames into
`noBackupFilesDir/RevenueCat/topics/<topic.key>/<blobRef>`. The blocking
I/O is wrapped in `withContext(Dispatchers.IO)`. Skips the download
entirely when the target file already exists. Errors surface as
`PurchasesError(NetworkError, ...)` for checksum mismatch or
`IOException → toPurchasesError()` for transport failures.
- **`RemoteConfigManager`** — keeps a callback boundary externally (`fun
updateRemoteConfigIfNeeded(appInBackground, completion)`) since its
caller (`PurchasesOrchestrator`) is callback-shaped. Internally launches
a `private suspend fun refresh(...)` on a private
`CoroutineScope(SupervisorJob() + dispatcher)` (`dispatcher:
CoroutineDispatcher = Dispatchers.IO`, overridable for tests). The
refresh:
- Bridges the legacy callback-based `Backend.getRemoteConfig` via
`suspendCancellableCoroutine` +
`safeResume`/`safeResumeWithException(PurchasesException(error))`. The
backend network call stays callback-based intentionally.
- Fans the topic downloads out with `coroutineScope { tasks.map { async
{ topicFetcher.fetchTopicIfNeeded(...) }
}.awaitAll().firstNotNullOfOrNull { it } }`. The first error wins;
structured concurrency makes this much smaller than a hand-rolled
`CompletionTracker`.

Currently only the `DEFAULT` variant of each known topic is downloaded.

### Tests

`runTest` + `UnconfinedTestDispatcher(testScheduler)` for both.
`coEvery` / `coVerify` for the suspend `TopicFetcher`. Coverage:

- **`TopicFetcherTest`** — cache hit, successful download + verify +
persist, URL-format substitution, HTTP failure, IO failure, SHA
mismatch, multi-variant filename isolation.
- **`RemoteConfigManagerTest`** — empty-source / empty-topics /
no-DEFAULT skip paths, first-error-wins fan-out, backend-error
short-circuit, background flag forwarded, null completion.

All new types are `internal`. No public API surface change.

### Stack

- ⬇ `Add network scaffolding for remote config endpoint`: RevenueCat#3435
- This PR: RevenueCat#3437
- ⬆ `Clean up unreferenced topic files after successful remote-config
refresh`: RevenueCat#3439

### Checklist

- [x] Unit tests
- [ ] Follow-up issues for `purchases-ios` / hybrids (deferred)

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Adds new remote-config orchestration that performs concurrent network
downloads and filesystem writes under `noBackupFilesDir`, including
checksum verification and new error-handling paths. While internal-only,
bugs here could impact startup/network behavior and caching correctness.
> 
> **Overview**
> Adds a new remote-config orchestration layer:
`RemoteConfigManager.updateRemoteConfigIfNeeded` fetches the
remote-config manifest from `Backend.getRemoteConfig` (bridged into
coroutines) and concurrently downloads each topic’s `default` entry via
a new `TopicFetcher`, returning the first download error (if any).
> 
> Introduces `TopicFetcher` to cache topic blobs on disk under
`noBackupFilesDir/RevenueCat/topics/<topic>/<blob_ref>`, with blob-ref
input validation, limited parallel downloads, temp-file writes, and
SHA-256 verification.
> 
> Refactors `FontLoader` to reuse new
`UrlConnectionFactory.downloadToFile` helpers, and extends
`UrlConnectionFactory` with shared download + checksum-verification
utilities. Updates/expands tests to cover the new manager/fetcher
behavior and changes the manifest entry key from `DEFAULT` to `default`
in `RemoteConfigResponseTest`.
> 
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
8cdae44. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>