build(deps): update all non-major dependencies

.github/workflows/ci.yml

@@ -25,7 +25,7 @@ jobs:
       - name: Validate Gradle wrapper
         uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6  # v6.4.0
       - name: Set up Java 21 from mise
-        uses: jdx/mise-action@fc42bcc7ddbf51124c30f95a877a0c5168a3bfde  # v5.2.1
+        uses: jdx/mise-action@8418fedb1110381a0d3ba51a7a415d7c1b884550  # v5.2.2
         with:
           install_args: java
       - name: Set up Gradle
@@ -53,7 +53,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Java 21 from mise
-        uses: jdx/mise-action@fc42bcc7ddbf51124c30f95a877a0c5168a3bfde  # v5.2.1
+        uses: jdx/mise-action@8418fedb1110381a0d3ba51a7a415d7c1b884550  # v5.2.2
         with:
           install_args: java
       - name: Set up Gradle
@@ -70,7 +70,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up mise tools
-        uses: jdx/mise-action@fc42bcc7ddbf51124c30f95a877a0c5168a3bfde  # v5.2.1
+        uses: jdx/mise-action@8418fedb1110381a0d3ba51a7a415d7c1b884550  # v5.2.2
         with:
           experimental: true
       - name: typos (spell check)
@@ -103,7 +103,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Java 21 from mise
-        uses: jdx/mise-action@fc42bcc7ddbf51124c30f95a877a0c5168a3bfde  # v5.2.1
+        uses: jdx/mise-action@8418fedb1110381a0d3ba51a7a415d7c1b884550  # v5.2.2
         with:
           install_args: java
       - name: Set up Gradle

.github/workflows/codeql.yml

@@ -30,18 +30,18 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up Java 21 from mise
-        uses: jdx/mise-action@fc42bcc7ddbf51124c30f95a877a0c5168a3bfde  # v5.2.1
+        uses: jdx/mise-action@8418fedb1110381a0d3ba51a7a415d7c1b884550  # v5.2.2
         with:
           install_args: java
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee  # v4.39.0
+        uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370  # v4.39.1
         with:
           languages: java-kotlin
           build-mode: manual
           queries: security-extended
       - name: Build for analysis
         run: ./gradlew clean compileJava compileTestJava --console=plain
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee  # v4.39.0
+        uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370  # v4.39.1
         with:
           category: "/language:java-kotlin"

Dockerfile

@@ -2,7 +2,7 @@
 # Minimal runtime image for the App: build the jar, then run it on a distroless JRE.
 
 # ---- build: produce the runnable jar ----
-FROM gradle:9.8.1-jdk21@sha256:5ec5f726f14851a11a1bac6e6a5720e41062c33357053e7717eb0d189a6f1db9 AS build
+FROM gradle:9.8.2-jdk21@sha256:37110d25b7a0f866d07f7e61968347b83d2e0fd01bd6ddf74c9ae2ff04000691 AS build
 WORKDIR /app
 COPY . .
 RUN gradle --no-daemon --console=plain clean jar

gradle/libs.versions.toml

@@ -2,7 +2,7 @@
 # Renovate updates these each week.
 
 [versions]
-errorprone = "2.50.0"
+errorprone = "2.51.0"
 nullaway = "0.14.2"
 junit = "6.1.3"
 archunit = "1.5.1"

gradle/wrapper/gradle-wrapper.properties

@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-9.8.1-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-9.8.2-bin.zip
 networkTimeout=10000
 retries=0
 retryBackOffMs=500

mise.toml

@@ -18,7 +18,7 @@ gitleaks = "8.30.1"
 actionlint = "1.7.12"
 hadolint = "2.15.1"
 
-uv = "0.13.1"
+uv = "0.13.5"
 yamllint = "1.38.0"
 zizmor = "1.31.1"