Pin third party action, update versions and dependabot config

bump mvn version too

Author: mbien

.github/dependabot.yml

@@ -16,10 +16,17 @@
 # under the License.
 
 version: 2
+
 updates:
+
   - package-ecosystem: "maven"
     directory: "/"
     target-branch: "master"
     schedule:
-      interval: "daily"
+      interval: "weekly"
 
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    target-branch: "master"
+    schedule:
+      interval: "weekly"

.github/workflows/ci.yml

@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        java: [ 11, 17, 21, 23 ]
+        java: [ 11, 17, 21, 24 ]
       fail-fast: false
 
     steps:
@@ -55,7 +55,7 @@ jobs:
         run: ./mvnw -B -ntp verify -P run-its
 
       - name: Create Test Summary
-        uses: mikepenz/action-junit-report@v4
+        uses: mikepenz/action-junit-report@a83fd2b5d58d4fc702e690c1ea688d702d28d281 # v5.6.1
         if: always()
         with:
           annotate_only: true

.mvn/wrapper/maven-wrapper.properties

@@ -16,4 +16,4 @@
 # under the License.
 wrapperVersion=3.3.2
 distributionType=only-script
-distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.9/apache-maven-3.9.9-bin.zip
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.10/apache-maven-3.9.10-bin.zip

nbm-maven-plugin/src/it/full/pom.xml

@@ -46,7 +46,7 @@ under the License.
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-compiler-plugin</artifactId>
-                    <version>3.11.0</version>
+                    <version>3.14.0</version>
                     <configuration>
                         <source>8</source>
                         <target>8</target>
@@ -65,17 +65,17 @@ under the License.
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-surefire-plugin</artifactId>
-                    <version>3.5.2</version>
+                    <version>3.5.3</version>
                 </plugin>
             </plugins>
         </pluginManagement>
     </build>
 
     <profiles>
         <profile>
-            <id>jdk17</id>
+            <id>jdk17to23</id>
             <activation>
-                <jdk>[17,)</jdk>
+                <jdk>[17,24)</jdk>
             </activation>
             <build>
                 <pluginManagement>
@@ -91,6 +91,25 @@ under the License.
                 </pluginManagement>
             </build>
         </profile>
+        <profile>
+            <id>jdk24plus</id>
+            <activation>
+                <jdk>[24,)</jdk>
+            </activation>
+            <build>
+                <pluginManagement>
+                    <plugins>
+                        <plugin>
+                            <groupId>org.apache.maven.plugins</groupId>
+                            <artifactId>maven-surefire-plugin</artifactId>
+                            <configuration>
+                                <argLine>--add-opens=java.base/java.net=ALL-UNNAMED</argLine>
+                            </configuration>
+                        </plugin>
+                    </plugins>
+                </pluginManagement>
+            </build>
+        </profile>
     </profiles>
 
     <modules>