chore(deps): update weekly update

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-java	action	patch	v4.7.0 -> v4.7.1
actions/upload-artifact	action	patch	v4.6.1 -> v4.6.2
docker/login-action	action	minor	v3.3.0 -> v3.4.0
fossas/fossa-action	action	minor	v1.5.0 -> v1.6.0
github/codeql-action	action	patch	v3.28.11 -> v3.28.15
gradle/actions	action	patch	v4.3.0 -> v4.3.1
lycheeverse/lychee-action	action	minor	v2.3.0 -> v2.4.0
python	final	patch	3.13.2-slim -> 3.13.3-slim
python	stage	patch	3.13.2 -> 3.13.3

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/setup-java (actions/setup-java)

v4.7.1

Compare Source

actions/upload-artifact (actions/upload-artifact)

v4.6.2

Compare Source

What's Changed

• Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @​salmanmkc in https://github.com/actions/upload-artifact/pull/685

New Contributors

• @​salmanmkc made their first contribution in https://github.com/actions/upload-artifact/pull/685

Full Changelog: actions/upload-artifact@v4...v4.6.2

docker/login-action (docker/login-action)

v3.4.0

Compare Source

• Bump @​actions/core from 1.10.1 to 1.11.1 in https://github.com/docker/login-action/pull/791
• Bump @​aws-sdk/client-ecr to 3.766.0 in https://github.com/docker/login-action/pull/789 https://github.com/docker/login-action/pull/856
• Bump @​aws-sdk/client-ecr-public to 3.758.0 in https://github.com/docker/login-action/pull/789 https://github.com/docker/login-action/pull/856
• Bump @​docker/actions-toolkit from 0.35.0 to 0.57.0 in https://github.com/docker/login-action/pull/801 https://github.com/docker/login-action/pull/806 https://github.com/docker/login-action/pull/858
• Bump cross-spawn from 7.0.3 to 7.0.6 in https://github.com/docker/login-action/pull/814
• Bump https-proxy-agent from 7.0.5 to 7.0.6 in https://github.com/docker/login-action/pull/823
• Bump path-to-regexp from 6.2.2 to 6.3.0 in https://github.com/docker/login-action/pull/777

Full Changelog: docker/login-action@v3.3.0...v3.4.0

fossas/fossa-action (fossas/fossa-action)

v1.6.0

Compare Source

What's Changed

• Upgrade node to v20 by @​jssblck in https://github.com/fossas/fossa-action/pull/60
• Update dependencies, enable auto dependabot by @​jssblck in https://github.com/fossas/fossa-action/pull/61

Full Changelog: fossas/fossa-action@v1.5.0...v1.6.0

github/codeql-action (github/codeql-action)

v3.28.15

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.15 - 07 Apr 2025

• Fix bug where the action would fail if it tried to produce a debug artifact with more than 65535 files. #​2842

See the full CHANGELOG.md for more information.

v3.28.14

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.14 - 07 Apr 2025

• Update default CodeQL bundle version to 2.21.0. #​2838

See the full CHANGELOG.md for more information.

v3.28.13

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.13 - 24 Mar 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.12

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.12 - 19 Mar 2025

• Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
• Update default CodeQL bundle version to 2.20.7. #​2810

See the full CHANGELOG.md for more information.

gradle/actions (gradle/actions)

v4.3.1

Compare Source

This release fixes a couple of minor issues, as well as keeping dependencies up to date.

Fixed issues

• The develocity-allow-untrusted-server parameter should be honoured when fetching short-lived access tokens #​583
• Build summary may incorrectly report build success #​415

What's Changed

• Update develocity-injection init script to v1.1.1 by @​bot-githubaction in https://github.com/gradle/actions/pull/545
• Bump the github-actions group across 2 directories with 3 updates by @​dependabot in https://github.com/gradle/actions/pull/547
• Bump the npm-dependencies group in /sources with 2 updates by @​dependabot in https://github.com/gradle/actions/pull/548
• Update develocity-injection init script to v1.2 by @​bot-githubaction in https://github.com/gradle/actions/pull/550
• Bump the github-actions group across 1 directory with 2 updates by @​dependabot in https://github.com/gradle/actions/pull/552
• Bump the npm-dependencies group across 1 directory with 5 updates by @​dependabot in https://github.com/gradle/actions/pull/558
• Update known wrapper checksums by @​github-actions in https://github.com/gradle/actions/pull/560
• Bump references to Develocity Gradle plugin from 3.19.1 to 3.19.2 by @​bot-githubaction in https://github.com/gradle/actions/pull/561
• Catch more build failures in job summary by @​bigdaz in https://github.com/gradle/actions/pull/571
• Scope captured build failures by @​erichaagdev in https://github.com/gradle/actions/pull/574
• Ignore SSL certificate validation when fetching Develocity short-lived access token if develocity-allow-untrusted-server is enabled by @​remcomokveld in https://github.com/gradle/actions/pull/575
• Dependency updates by @​bigdaz in https://github.com/gradle/actions/pull/579
• Bump com.google.guava:guava from 33.4.5-jre to 33.4.6-jre in /.github/workflow-samples/kotlin-dsl in the gradle group across 1 directory by @​dependabot in https://github.com/gradle/actions/pull/580
• Bump the github-actions group across 2 directories with 2 updates by @​dependabot in https://github.com/gradle/actions/pull/582

New Contributors

• @​erichaagdev made their first contribution in https://github.com/gradle/actions/pull/574
• @​remcomokveld made their first contribution in https://github.com/gradle/actions/pull/575

Full Changelog: gradle/actions@v4.3.0...v4.3.1

lycheeverse/lychee-action (lycheeverse/lychee-action)

v2.4.0: Version 2.4.0

Compare Source

What's Changed

• lychee now has a new task output, which allows to track which links got fixed more easily.
  It looks like this:

  [test.html]:

  • [404] https://en.wikipedia.org/wiki/foo | Network error: Not Found
  • [404] https://en.wikipedia.org/wiki/bar | Network error: Not Found
  • [ERROR] https://example.com/baz | Network error: error sending request for url (https://example.com/baz) Maybe a certificate error?

  Each broken link has a checkbox that can be ticked off once fixed. Credit goes to @​Arteiii for the idea and the implementation.
  See #​274 for more information.

• Update To latest lychee Release by @​Arteiii in https://github.com/lycheeverse/lychee-action/pull/279

• Add workingDirectory argument by @​mre in https://github.com/lycheeverse/lychee-action/pull/283

New Contributors

• @​Arteiii made their first contribution in https://github.com/lycheeverse/lychee-action/pull/279

Full Changelog: lycheeverse/lychee-action@v2...v2.4.0

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 89.98%. Comparing base (d7fb208) to head (ec0d43d).
Report is 8 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##               main    #7218   +/-   ##
=========================================
  Coverage     89.98%   89.98%           
  Complexity     6685     6685           
=========================================
  Files           749      749           
  Lines         20191    20191           
  Branches       1977     1977           
=========================================
  Hits          18168    18168           
  Misses         1431     1431           
  Partials        592      592           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.