Bump github/codeql-action from 3.30.4 to 3.30.5 in /github/workflows (ChrisCarini/github-repo-files-sync/pull/296); Bump actions/dependency-review-action in /github/workflows (ChrisCarini/github-repo-files-sync/pull/297); Bump gradle/actions from 4.4.3 to 4.4.4 in /github/workflows (ChrisCarini/github-repo-files-sync/pull/298); Bump ossf/scorecard-action from 2.4.2 to 2.4.3 in /github/workflows (ChrisCarini/github-repo-files-sync/pull/299); Bump gradle/actions from 4.4.4 to 5.0.0 in /github/workflows (ChrisCarini/github-repo-files-sync/pull/300) (#519)

* Bump github/codeql-action from 3.30.4 to 3.30.5 in /github/workflows (ChrisCarini/github-repo-files-sync#296)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.4 to 3.30.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@303c0ae...3599b3b)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.30.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump actions/dependency-review-action in /github/workflows (ChrisCarini/github-repo-files-sync#297)

Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.7.3 to 4.8.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@595b5ae...56339e5)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: 4.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump gradle/actions from 4.4.3 to 4.4.4 in /github/workflows (ChrisCarini/github-repo-files-sync#298)

Bumps [gradle/actions](https://github.com/gradle/actions) from 4.4.3 to 4.4.4.
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](gradle/actions@ed40850...748248d)

---
updated-dependencies:
- dependency-name: gradle/actions
  dependency-version: 4.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump ossf/scorecard-action from 2.4.2 to 2.4.3 in /github/workflows (ChrisCarini/github-repo-files-sync#299)

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.2 to 2.4.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@05b42c6...4eaacf0)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump gradle/actions from 4.4.4 to 5.0.0 in /github/workflows (ChrisCarini/github-repo-files-sync#300)

Bumps [gradle/actions](https://github.com/gradle/actions) from 4.4.4 to 5.0.0.
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](gradle/actions@748248d...4d9f0ba)

---
updated-dependencies:
- dependency-name: gradle/actions
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: ChrisCarini

.github/workflows/build.yml

@@ -49,7 +49,7 @@ jobs:
 
       # Setup Gradle
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.4.3
+        uses: gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v5.0.0
         with:
           validate-wrappers: true  # default value, defining for explicitness - a whole separate job used to exist for wrapper validation in this workflow file. Nice!
 
@@ -91,7 +91,7 @@ jobs:
 
       # Setup Gradle
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.4.3
+        uses: gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v5.0.0
         with:
           validate-wrappers: false  # turn validation off; we validated as part of the `test` job.
           cache-read-only: true     # use the cache written from the `test` job, but do not write back after 'this' job.

.github/workflows/compatibility.yml

@@ -36,7 +36,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.4.3
+        uses: gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v5.0.0
         with:
           validate-wrappers: true  # default value, defining for explicitness.
 

.github/workflows/dependency-submission-and-review.yml

@@ -28,7 +28,7 @@ jobs:
 
       # Generate and submit dependency graph
       - name: Generate and submit dependency graph
-        uses: gradle/actions/dependency-submission@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.4.3
+        uses: gradle/actions/dependency-submission@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v5.0.0
         with:
           # Reducing storage costs for saved dependency graph artifacts (store for 1 day instead of 30 days)
           # See: https://github.com/gradle/actions/blob/main/docs/dependency-submission.md#reducing-storage-costs-for-saved-dependency-graph-artifacts
@@ -44,4 +44,4 @@ jobs:
       # Dependency Review (on PR only)
       - name: Dependency Review
         if: github.event_name == 'pull_request'
-        uses: actions/dependency-review-action@595b5aeba73380359d98a5e087f648dbb0edce1b # v4.7.3
+        uses: actions/dependency-review-action@56339e523c0409420f6c2c9a2f4292bbb3c07dd3 # v4.8.0

.github/workflows/release.yml

@@ -32,7 +32,7 @@ jobs:
 
       # Setup Gradle
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4.4.3
+        uses: gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v5.0.0
         with:
           validate-wrappers: true  # default value, defining for explicitness.
 

.github/workflows/scorecards-analysis.yml

@@ -68,6 +68,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@303c0aef88fc2fe5ff6d63d3b1596bfd83dfa1f9 # v3.30.4
+        uses: github/codeql-action/upload-sarif@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
         with:
           sarif_file: results.sarif