chore(deps): update weekly update

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/login-action	action	minor	v3.4.0 -> v3.5.0
github/codeql-action	action	patch	v3.29.4 -> v3.29.5
gradle/actions	action	minor	v4.3.1 -> v4.4.1

---

Release Notes

docker/login-action (docker/login-action)

v3.5.0

Compare Source

• Support dual-stack endpoints for AWS ECR by @​Spacefish @​crazy-max in https://github.com/docker/login-action/pull/874 https://github.com/docker/login-action/pull/876
• Bump @​aws-sdk/client-ecr to 3.859.0 in https://github.com/docker/login-action/pull/860 https://github.com/docker/login-action/pull/878
• Bump @​aws-sdk/client-ecr-public to 3.859.0 in https://github.com/docker/login-action/pull/860 https://github.com/docker/login-action/pull/878
• Bump @​docker/actions-toolkit from 0.57.0 to 0.62.1 in https://github.com/docker/login-action/pull/870
• Bump form-data from 2.5.1 to 2.5.5 in https://github.com/docker/login-action/pull/875

Full Changelog: docker/login-action@v3.4.0...v3.5.0

github/codeql-action (github/codeql-action)

v3.29.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.5 - 29 Jul 2025

• Update default CodeQL bundle version to 2.22.2. #​2986

See the full CHANGELOG.md for more information.

gradle/actions (gradle/actions)

v4.4.1

Compare Source

This patch release fixes a bug in Develocity Injection with a custom plugin repository.
The gradle-plugin-repository-* action parameters were not being correctly mapped to environment variables that are read by the Develocity Injection init script.

This issue has been fixed by setting the correct environment variables:

• gradle-plugin-repository-url is mapped to DEVELOCITY_INJECTION_PLUGIN_REPOSITORY_URL
• gradle-plugin-repository-username is mapped to DEVELOCITY_INJECTION_PLUGIN_REPOSITORY_USERNAME
• gradle-plugin-repository-password is mapped to DEVELOCITY_INJECTION_PLUGIN_REPOSITORY_PASSWORD

Additionally, these parameters can now be used to configure a custom plugin repository for the GitHub Dependency Graph Gradle Plugin, required for dependency submission.

What's Changed

• Dependency updates by @​bigdaz in https://github.com/gradle/actions/pull/667
• Fix plugin repository env vars by @​bigdaz in https://github.com/gradle/actions/pull/669

Full Changelog: gradle/actions@v4.4.0...v4.4.1

v4.4.0

Compare Source

This release updates 2 downstream components:

• Develocity injection has been updated to v2.0
  • Some environment variables related to Develocity injection have been renamed. All vars now being with DEVELOCITY_INJECTION_. Check the docs for more details.
• Dependency-graph plugin has been updated to v1.4.0
  • The 'detector' values included in the generated graph can now be configured via environment variables.

What's Changed

• Update develocity-injection init script to v1.3 by @​bot-githubaction in https://github.com/gradle/actions/pull/592
• Update develocity-injection init script to v2.0 by @​bot-githubaction in https://github.com/gradle/actions/pull/593
• [StepSecurity] ci: Harden GitHub Actions by @​step-security-bot in https://github.com/gradle/actions/pull/597
• Use v1.4.0 of dependency graph plugin by @​bigdaz in https://github.com/gradle/actions/pull/638

New Contributors

• @​step-security-bot made their first contribution in https://github.com/gradle/actions/pull/597

Full Changelog: gradle/actions@v4.3.1...v4.4.0

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.