Merge branch 'main' into make-hooks-thread-safer

# Conflicts:
#	.github/workflows/pullrequest.yml

Author: chrfwow

.github/workflows/merge.yml

@@ -23,7 +23,7 @@ jobs:
     steps:
     - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
     - name: Set up JDK 17
-      uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165
+      uses: actions/setup-java@a7ab372554b6eb1a8eb25e7d9aec1cc9f3ea1a76
       with:
         java-version: '17'
         distribution: 'temurin'
@@ -50,7 +50,7 @@ jobs:
       run: mvn --batch-mode --update-snapshots verify
 
     - name: Upload coverage to Codecov
-      uses: codecov/[email protected].0
+      uses: codecov/[email protected].1
       with:
         token: ${{ secrets.CODECOV_TOKEN }} # not required for public repos
         flags: unittests # optional

.github/workflows/pullrequest.yml

@@ -22,14 +22,14 @@ jobs:
         uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
 
       - name: Set up JDK ${{ matrix.build.java }}
-        uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165
+        uses: actions/setup-java@a7ab372554b6eb1a8eb25e7d9aec1cc9f3ea1a76
         with:
             java-version: ${{ matrix.build.java }}
             distribution: 'temurin'
             cache: maven
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@02ab253bd299d261d00cdf8a9bca38fea2697d50
+        uses: github/codeql-action/init@aa90e97ad2ed17cde6a43e89f70138299e64f837
         with:
           languages: java
 
@@ -46,7 +46,7 @@ jobs:
 
       - if: matrix.build.java == '17'
         name: Upload coverage to Codecov
-        uses: codecov/[email protected].0
+        uses: codecov/[email protected].1
         with:
           token: ${{ secrets.CODECOV_TOKEN }} # not required for public repos
           flags: unittests # optional
@@ -55,4 +55,4 @@ jobs:
           verbose: true # optional (default = false)
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@02ab253bd299d261d00cdf8a9bca38fea2697d50
+        uses: github/codeql-action/analyze@aa90e97ad2ed17cde6a43e89f70138299e64f837

.github/workflows/release.yml

@@ -40,7 +40,7 @@ jobs:
         uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
 
       - name: Set up JDK 17
-        uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165
+        uses: actions/setup-java@a7ab372554b6eb1a8eb25e7d9aec1cc9f3ea1a76
         with:
           java-version: '17'
           distribution: 'temurin'

.github/workflows/static-code-scanning.yaml

@@ -33,12 +33,12 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@02ab253bd299d261d00cdf8a9bca38fea2697d50
+        uses: github/codeql-action/init@aa90e97ad2ed17cde6a43e89f70138299e64f837
         with:
           languages: java
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@02ab253bd299d261d00cdf8a9bca38fea2697d50
+        uses: github/codeql-action/autobuild@aa90e97ad2ed17cde6a43e89f70138299e64f837
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@02ab253bd299d261d00cdf8a9bca38fea2697d50
+        uses: github/codeql-action/analyze@aa90e97ad2ed17cde6a43e89f70138299e64f837

pom.xml

@@ -52,15 +52,15 @@
         <dependency>
             <groupId>org.projectlombok</groupId>
             <artifactId>lombok</artifactId>
-            <version>1.18.38</version>
+            <version>1.18.40</version>
             <scope>provided</scope>
         </dependency>
 
         <dependency>
             <!-- used so that lombok can generate suppressions for spotbugs. It needs to find it on the relevant classpath -->
             <groupId>com.github.spotbugs</groupId>
             <artifactId>spotbugs</artifactId>
-            <version>4.9.4</version>
+            <version>4.9.5</version>
             <scope>provided</scope>
         </dependency>
 
@@ -201,7 +201,7 @@
             <dependency>
                 <groupId>io.cucumber</groupId>
                 <artifactId>cucumber-bom</artifactId>
-                <version>7.27.2</version>
+                <version>7.28.2</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
@@ -264,7 +264,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-surefire-plugin</artifactId>
-                <version>3.5.3</version>
+                <version>3.5.4</version>
                 <configuration>
                     <forkCount>1</forkCount>
                     <reuseForks>false</reuseForks>
@@ -283,7 +283,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-failsafe-plugin</artifactId>
-                <version>3.5.3</version>
+                <version>3.5.4</version>
                 <configuration>
                     <argLine>
                         ${surefireArgLine}
@@ -424,7 +424,7 @@
                     <plugin>
                         <groupId>com.github.spotbugs</groupId>
                         <artifactId>spotbugs-maven-plugin</artifactId>
-                        <version>4.9.4.0</version>
+                        <version>4.9.4.2</version>
                         <configuration>
                             <excludeFilterFile>spotbugs-exclusions.xml</excludeFilterFile>
                             <plugins>
@@ -440,7 +440,7 @@
                             <dependency>
                                 <groupId>com.github.spotbugs</groupId>
                                 <artifactId>spotbugs</artifactId>
-                                <version>4.9.4</version>
+                                <version>4.9.5</version>
                             </dependency>
                         </dependencies>
                         <executions>
@@ -684,7 +684,7 @@
                     <plugin>
                         <groupId>org.apache.maven.plugins</groupId>
                         <artifactId>maven-surefire-plugin</artifactId>
-                        <version>3.5.3</version>
+                        <version>3.5.4</version>
                         <configuration>
                             <argLine>
                                 ${surefireArgLine}
@@ -700,7 +700,7 @@
                     <plugin>
                         <groupId>org.apache.maven.plugins</groupId>
                         <artifactId>maven-failsafe-plugin</artifactId>
-                        <version>3.5.3</version>
+                        <version>3.5.4</version>
                         <configuration>
                             <argLine>
                                 ${surefireArgLine}