Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/cache	action	minor	v3.0.5 -> v3.3.3
actions/checkout	action	minor	v4.1.7 -> v4.2.0
actions/setup-java	action	minor	v4.2.1 -> v4.4.0
github/codeql-action	action	minor	v3.25.13 -> v3.26.11
gradle (source)		minor	8.0.2 -> 8.10.2
gradle/wrapper-validation-action	action	patch	v2.1.1 -> v2.1.3
org.projectlombok:lombok (source)	dependencies	patch	1.18.24 -> 1.18.34
dev.minco:java-transformer	dependencies	patch	1.10.49 -> 1.10.59
org.ow2.asm:asm (source)	dependencies	minor	9.3 -> 9.7
org.jetbrains:annotations	dependencies	minor	23.0.0 -> 23.1.0
io.github.classgraph:classgraph	dependencies	patch	4.8.149 -> 4.8.177
dev.minco.gradle.defaults-plugin	plugin	patch	0.2.61 -> 0.2.80
org.shipkit.shipkit-github-release	plugin	patch	1.2.0 -> 1.2.3
org.shipkit.shipkit-changelog	plugin	patch	1.2.0 -> 1.2.3
org.shipkit.shipkit-auto-version	plugin	patch	1.2.1 -> 1.2.2
org.spockframework:spock-bom (source)	dependencies	minor	2.1-groovy-3.0 -> 2.3-groovy-4.0

---

Release Notes

actions/cache (actions/cache)

v3.3.3

Compare Source

What's Changed

• Cache v3.3.3 by @​robherley in https://github.com/actions/cache/pull/1302

New Contributors

• @​robherley made their first contribution in https://github.com/actions/cache/pull/1302

Full Changelog: actions/cache@v3...v3.3.3

v3.3.2

Compare Source

What's Changed

• Fixed readme with new segment timeout values by @​kotewar in https://github.com/actions/cache/pull/1133
• Readme fixes by @​kotewar in https://github.com/actions/cache/pull/1134
• Updated description of the lookup-only input for main action by @​kotewar in https://github.com/actions/cache/pull/1130
• Change two new actions mention as quoted text by @​bishal-pdMSFT in https://github.com/actions/cache/pull/1131
• Update Cross-OS Caching tips by @​pdotl in https://github.com/actions/cache/pull/1122
• Bazel example (Take #​2️⃣) by @​vorburger in https://github.com/actions/cache/pull/1132
• Remove actions to add new PRs and issues to a project board by @​jorendorff in https://github.com/actions/cache/pull/1187
• Consume latest toolkit and fix dangling promise bug by @​chkimes in https://github.com/actions/cache/pull/1217
• Bump action version to 3.3.2 by @​bethanyj28 in https://github.com/actions/cache/pull/1236

New Contributors

• @​vorburger made their first contribution in https://github.com/actions/cache/pull/1132
• @​jorendorff made their first contribution in https://github.com/actions/cache/pull/1187
• @​chkimes made their first contribution in https://github.com/actions/cache/pull/1217
• @​bethanyj28 made their first contribution in https://github.com/actions/cache/pull/1236

Full Changelog: actions/cache@v3...v3.3.2

v3.3.1

Compare Source

What's Changed

• Reduced download segment size to 128 MB and timeout to 10 minutes by @​kotewar in https://github.com/actions/cache/pull/1129

Full Changelog: actions/cache@v3...v3.3.1

v3.3.0

Compare Source

What's Changed

• Bug: Permission is missing in cache delete example by @​kotokaze in https://github.com/actions/cache/pull/1123
• Add lookup-only option by @​cdce8p in https://github.com/actions/cache/pull/1041

New Contributors

• @​kotokaze made their first contribution in https://github.com/actions/cache/pull/1123

Full Changelog: actions/cache@v3...v3.3.0

v3.2.6

Compare Source

What's Changed

• Updated branch in Force deletion of caches by @​t-dedah in https://github.com/actions/cache/pull/1108
• Fix zstd not being used after zstd version upgrade to 1.5.4 on hosted runners by @​pdotl in https://github.com/actions/cache/pull/1118

Full Changelog: actions/cache@v3...v3.2.6

v3.2.5

Compare Source

What's Changed

• Rewrite readmes by @​jsoref in https://github.com/actions/cache/pull/1085
• Fixed typos and formatting in docs by @​kotewar in https://github.com/actions/cache/pull/1076
• Fixing paths for OSes by @​kotewar in https://github.com/actions/cache/pull/1101
• Release patch version update by @​Phantsure in https://github.com/actions/cache/pull/1105

New Contributors

• @​jsoref made their first contribution in https://github.com/actions/cache/pull/1085

Full Changelog: actions/cache@v3...v3.2.5

v3.2.4

Compare Source

What's Changed

• Update json5 package version by @​vsvipul in https://github.com/actions/cache/pull/1065
• Cache recipes for cache, restore and save actions by @​kotewar in https://github.com/actions/cache/pull/1055
• Add gnu tar and zstd as pre-requisites for windows self-hosted runners by @​pdotl in https://github.com/actions/cache/pull/1068
• Fix a whitespace typo by @​kurtmckee in https://github.com/actions/cache/pull/1074
• 📝 #​1045 update using the set-output command is deprecated by @​siguikesse in https://github.com/actions/cache/pull/1046
• Fix referenced output key in save action readme by @​ruudk in https://github.com/actions/cache/pull/1061
• Update workflows to use reusable-workflows by @​jongwooo in https://github.com/actions/cache/pull/1066
• Introduce add-to-project step & rename workflow files by @​pallavx in https://github.com/actions/cache/pull/1077
• chore: Fix syntax error typo by @​vHeemstra in https://github.com/actions/cache/pull/1081
• Update caching-strategies.md by @​kpfleming in https://github.com/actions/cache/pull/1084
• Added another usage hint to foresee #​1072 by @​maybeec in https://github.com/actions/cache/pull/1089
• Add fail-on-cache-miss option by @​cdce8p in https://github.com/actions/cache/pull/1036

New Contributors

• @​kurtmckee made their first contribution in https://github.com/actions/cache/pull/1074
• @​siguikesse made their first contribution in https://github.com/actions/cache/pull/1046
• @​ruudk made their first contribution in https://github.com/actions/cache/pull/1061
• @​pallavx made their first contribution in https://github.com/actions/cache/pull/1077
• @​vHeemstra made their first contribution in https://github.com/actions/cache/pull/1081
• @​kpfleming made their first contribution in https://github.com/actions/cache/pull/1084
• @​maybeec made their first contribution in https://github.com/actions/cache/pull/1089
• @​cdce8p made their first contribution in https://github.com/actions/cache/pull/1036

Full Changelog: actions/cache@v3...v3.2.4

v3.2.3

Compare Source

What's Changed

• Add Mint example by @​uhooi in https://github.com/actions/cache/pull/1051
• Fixed broken link by @​kotewar in https://github.com/actions/cache/pull/1057
• Add support to opt-in enable cross-os caching on windows by @​Phantsure in https://github.com/actions/cache/pull/1056
• Release support for cross-os caching as opt-in feature by @​Phantsure in https://github.com/actions/cache/pull/1060

New Contributors

• @​uhooi made their first contribution in https://github.com/actions/cache/pull/1051

Full Changelog: actions/cache@v3...v3.2.3

v3.2.2

Compare Source

What's Changed

• Fix formatting error in restore/README.md by @​me-and in https://github.com/actions/cache/pull/1044
• save/README.md: Fix typo in example by @​mmuetzel in https://github.com/actions/cache/pull/1040
• README.md: remove outdated Windows cache tip link by @​me-and in https://github.com/actions/cache/pull/1042
• Revert compression changes related to windows but keep version logging by @​Phantsure in https://github.com/actions/cache/pull/1049

New Contributors

• @​me-and made their first contribution in https://github.com/actions/cache/pull/1044
• @​mmuetzel made their first contribution in https://github.com/actions/cache/pull/1040

Full Changelog: actions/cache@v3.2.1...v3.2.2

v3.2.1

Compare Source

What's Changed

• Release compression related changes for windows by @​Phantsure in https://github.com/actions/cache/pull/1039
• Upgrade codeql to v2 by @​Phantsure in https://github.com/actions/cache/pull/1023

Full Changelog: actions/cache@v3.2.0...v3.2.1

v3.2.0

Compare Source

What's Changed

• fix wrong timeout env var key in README.md by @​walterddr in https://github.com/actions/cache/pull/959
• Updated release doc with correct env variable by @​kotewar in https://github.com/actions/cache/pull/960
• Create pull_request_template.md by @​pdotl in https://github.com/actions/cache/pull/963
• Update README with clearer info about cache-hit and its value by @​kotewar in https://github.com/actions/cache/pull/961
• Change datadog/squid to Ubuntu/squid in CI check by @​bishal-pdMSFT in https://github.com/actions/cache/pull/976
• Add more details to version section in readme by @​bishal-pdMSFT in https://github.com/actions/cache/pull/971
• Update hashFiles documentation reference by @​asaf400 in https://github.com/actions/cache/pull/979
• Updated link for cache segment download info by @​kotewar in https://github.com/actions/cache/pull/986
• Readme update for deleting caches by @​t-dedah in https://github.com/actions/cache/pull/981
• Add oncall logic to assign issues and PRs by @​vsvipul in https://github.com/actions/cache/pull/997
• Bump minimatch from 3.0.4 to 3.1.2 by @​dependabot in https://github.com/actions/cache/pull/998
• Revert "Bump minimatch from 3.0.4 to 3.1.2" by @​vsvipul in https://github.com/actions/cache/pull/1005
• Fix npm vulnerability by @​Phantsure in https://github.com/actions/cache/pull/1007
• refactor: Use early return pattern to avoid nested conditions by @​jongwooo in https://github.com/actions/cache/pull/1013
• Use cache in check-dist.yml by @​jongwooo in https://github.com/actions/cache/pull/1004
• chore: Use built-in cache action to cache dependencies by @​jongwooo in https://github.com/actions/cache/pull/1014
• Updated node example by @​t-dedah in https://github.com/actions/cache/pull/1008
• Fix: Node npm doc example by @​apascualm in https://github.com/actions/cache/pull/1026
• docs: fix an invalid link in workarounds.md by @​teatimeguest in https://github.com/actions/cache/pull/929
• General Availability release for granular cache by @​kotewar in https://github.com/actions/cache/pull/1035 More details here on beta release.

New Contributors

• @​walterddr made their first contribution in https://github.com/actions/cache/pull/959
• @​asaf400 made their first contribution in https://github.com/actions/cache/pull/979
• @​jongwooo made their first contribution in https://github.com/actions/cache/pull/1013
• @​apascualm made their first contribution in https://github.com/actions/cache/pull/1026
• @​teatimeguest made their first contribution in https://github.com/actions/cache/pull/929

Full Changelog: actions/cache@v3...v3.2.0

v3.0.11

Compare Source

What's Changed

• Call out cache not saved on hit by @​Phantsure in https://github.com/actions/cache/pull/946
• Update @​actions/core to 1.10.0 by @​rentziass in https://github.com/actions/cache/pull/950
• Update cache to use @​actions/core@​^1.10.0 by @​pdotl in https://github.com/actions/cache/pull/956

New Contributors

• @​rentziass made their first contribution in https://github.com/actions/cache/pull/950

Full Changelog: actions/cache@v3...v3.0.11

v3.0.10

Compare Source

• Fix a bug with sorting inputs.
• Update definition for restore-keys in README.md

v3.0.9

Compare Source

• Enhanced the warning message for cache unavailability in case of GHES.

v3.0.8

Compare Source

What's Changed

• Fix zstd not working for windows on gnu tar in issues.
• Allow users to provide a custom timeout as input for aborting cache segment download using the environment variable SEGMENT_DOWNLOAD_TIMEOUT_MIN. Default is 60 minutes.

v3.0.7

Compare Source

What's Changed

• Fix for the download stuck problem has been added in actions/cache for users who were intermittently facing the issue. As part of this fix, new timeout has been introduced in the download step to stop the download if it doesn't complete within an hour and run the rest of the workflow without erroring out.

v3.0.6

Compare Source

What's Changed

• Add example for clojure lein project dependencies by @​shivamarora1 in PR https://github.com/actions/cache/pull/835
• Update toolkit's cache npm module to latest. Bump cache version to v3.0.6 by @​pdotl in PR https://github.com/actions/cache/pull/887
• Fix issue #​809 where cache save/restore was failing for Amazon Linux 2 runners due to older tar version
• Fix issue #​833 where cache save was not working for caching github workspace directory

New Contributors

• @​shivamarora1 made their first contribution in https://github.com/actions/cache/pull/835
• @​pdotl made their first contribution in https://github.com/actions/cache/pull/887

Full Changelog: actions/cache@v3...v3.0.6

actions/checkout (actions/checkout)

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in https://github.com/actions/checkout/pull/1180
• Dependency updates by @​dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

actions/setup-java (actions/setup-java)

v4.4.0

Compare Source

What's Changed

Add-ons :

• Add support for Oracle GraalVM by @​fniephaus in https://github.com/actions/setup-java/pull/501

steps:
 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: 'graalvm'
     java-version: '21'

• Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/setup-java/pull/684

Bug fixes :

• Add architecture to cache key by @​Zxilly in https://github.com/actions/setup-java/pull/664
  This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
  Note: This change may break previous cache keys as they will no longer be compatible with the new format.
• Resolve check failures by @​aparnajyothi-y in https://github.com/actions/setup-java/pull/687

New Contributors

• @​Jcambass made their first contribution in https://github.com/actions/setup-java/pull/684
• @​Zxilly made their first contribution in https://github.com/actions/setup-java/pull/664

Full Changelog: actions/setup-java@v4...v4.4.0

v4.3.0

Compare Source

v4.2.2

Compare Source

What's Changed



Bug fixes:

• Fix macos latest check failures by @​HarithaVattikuti in https://github.com/actions/setup-java/pull/634
• Fix dragonwell distribution parsing issues by @​Accelerator1996 in https://github.com/actions/setup-java/pull/643

Documentation changes

• Update advanced documentation for java-version-file by @​mahabaleshwars in https://github.com/actions/setup-java/pull/622

Dependency updates:

• Bump undici from 5.28.3 to 5.28.4 and other dependency updates by @​dependabot in https://github.com/actions/setup-java/pull/616

Full Changelog: actions/setup-java@v4...v4.2.2

github/codeql-action (github/codeql-action)

v3.26.11

Compare Source

v3.26.10

Compare Source

v3.26.9

Compare Source

v3.26.8

Compare Source

v3.26.7

Compare Source

v3.26.6

Compare Source

v3.26.5

Compare Source

v3.26.4

Compare Source

v3.26.3

Compare Source

v3.26.2

Compare Source

v3.26.1

Compare Source

v3.26.0

Compare Source

v3.25.15

Compare Source

v3.25.14

Compare Source

gradle/gradle (gradle)

v8.10.2

Compare Source

v8.10.1

Compare Source

v8.10

Compare Source

v8.9

Compare Source

v8.8: 8.8

Compare Source

The Gradle team is excited to announce Gradle 8.8.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Björn Kautler,
Denes Daniel,
Fabian Windheuser,
Hélio Fernandes Sebastião,
Jay Wei,
jhrom,
jwp345,
Jörgen Andersson,
Kirill Gavrilov,
MajesticMagikarpKing,
Maksim Lazeba,
Philip Wedemann,
Robert Elliot,
Róbert Papp,
Stefan M.,
Tibor Vyletel,
Tony Robalik,
Valentin Kulesh,
Yanming Zhou,
김용후

Upgrade instructions

Switch your build to use Gradle 8.8 by updating your wrapper:

./gradlew wrapper --gradle-version=8.8

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.7

Compare Source

v8.6

Compare Source

v8.5: 8.5

Compare Source

The Gradle team is excited to announce Gradle 8.5.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Ahmed Ehab,
Alex Landau,
Aurimas,
Björn Kautler,
bodhili,
Daniel Le Berre,
davidburstrom,
Franz Wimmer,
Jongwoo Han,
Ken,
Leonardo Silveira,
Martin Bonnin,
Matthew Von-Maszewski,
Nik Clayton,
noeppi_noeppi,
Philip Wedemann,
Philipp Schneider,
Tomas Bjerre

Upgrade instructions

Switch your build to use Gradle 8.5 by updating your wrapper:

./gradlew wrapper --gradle-version=8.5

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.4: 8.4

Compare Source

The Gradle team is excited to announce Gradle 8.4.

Amongst other improvements, this release addresses two security vulnerabilities:

• Incorrect permission assignment for symlinked files used in copy or archiving operations
• Possible local text file exfiltration by XML External entity injection

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Ahmed Ehab,
Andrei Rybak,
Baptiste Decroix,
Björn Kautler,
Cesar de la Vega,
Ganavi Jayaram,
Gaurav Padam,
hwanseok,
J.T. McQuigg,
Jakub Chrzanowski,
Jendrik Johannes,
kackey0-1,
Konstantin Gribov,
Pratik Haldankar,
Qinglin,
Sebastian Schuberth,
Thad House,
valery1707,
Vladimir Sitnikov,
wuyangnju,
Yanming Zhou,
Yanshun Li,
Yusuke Uehara,
zeners

Upgrade instructions

Switch your build to use Gradle 8.4 by updating your wrapper:

./gradlew wrapper --gradle-version=8.4

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.3: 8.3

Compare Source

The Gradle team is excited to announce Gradle 8.3.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
Ahmed Ehab,
Aurimas,
Baptiste Decroix,
Björn Kautler,
Borewit,
Korov,
Mohammed Thavaf,
Patrick Brückner,
Philip Wedemann,
Róbert Papp,
Shi Chen,
Tony Robalik

Upgrade instructions

Switch your build to use Gradle 8.3 by updating your wrapper:

./gradlew wrapper --gradle-version=8.3

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.2.1

Compare Source

v8.2: 8.2

Compare Source

The Gradle team is excited to announce Gradle 8.2.

Amongst other improvements, this release addresses two security vulnerabilities:

• Dependency cache path traversal
• Path traversal vulnerabilities in handling of Tar archives

Read the Release Notes

We would like to thank the following community contributors for their contributions to this release of Gradle:

Bruno Didot,
Eric Vantillard,
esfomeado,
Jendrik Johannes,
Jonathan Leitschuh,
Lee Euije,
Stefan Oehme,
Todor Dinev,
Yanshun Li

Upgrade instructions

Switch your build to use Gradle 8.2 by updating your wrapper:

./gradlew wrapper --gradle-version=8.2

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.1.1: 8.1.1

Compare Source

This is a patch release for Gradle 8.1. We recommend using 8.1.1 instead of 8.1.

It fixes the following issues:

• #​24748 MethodTooLargeException when instrumenting a class with thousand of lambdas for configuration cache
• #​24754 Kotlin DSL precompiled script plugins built with Gradle 8.1 cannot be used with other versions of Gradle
• #​24788 Gradle 8.1 configure freeCompilerArgs for Kotlin in buildSrc breaks build with unhelpful errors

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 8.1.1 by updating your wrapper:

./gradlew wrapper --gradle-version=8.1.1

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 8.1.1.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v8.1: 8.1

Compare Source

The Gradle team is excited to announce Gradle 8.1.

Read the Release Notes

We would like to thank the following community contributors for their contributions to this release of Gradle:

André Sousa,
Attila Király,
Aurimas,
Björn Kautler,
Christoph Dreis,
David Morris,
DJtheRedstoner,
Gabriel Feo,
J.T. McQuigg,
JavierSegoviaCordoba,
[J

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.