feat: upgrade to latest common version

.github/workflows/build.yml

@@ -109,19 +109,21 @@ jobs:
       - name: Docker Build
         run: ./gradlew bootBuildImage --imageName build:latest
 
-      - name: Docker Scan
-        uses: anchore/scan-action@v2
-        id: scan
+      - name: Run Trivy vulnerability scanner
+        uses: aquasecurity/trivy-action@master
         with:
-          image: "build:latest"
-          fail-build: true
-          severity-cutoff: critical
-          acs-report-enable: true
-
-      - uses: github/codeql-action/upload-sarif@v1
+          image-ref: 'build:latest'
+          severity: 'HIGH'
+          exit-code: '1'
+          format: 'template'
+          template: '@/contrib/sarif.tpl'
+          output: 'trivy-results.sarif'
+
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v1
         if: always()
         with:
-          sarif_file: ${{ steps.scan.outputs.sarif }}
+          sarif_file: 'trivy-results.sarif'
 
       - name: Semantic Release
         uses: cycjimmy/semantic-release-action@v2

.gitignore

@@ -1,5 +1,6 @@
 .idea/
 .gradle/
+**/build/
 *.jar
 *.zip
 **/build

build.gradle

@@ -31,10 +31,10 @@ dependencies {
 
     implementation group: 'com.github.spotbugs', name: 'spotbugs-annotations'
     implementation group: 'net.logstash.logback', name: 'logstash-logback-encoder'
-    implementation group: 'net.sf.biweekly', name: 'biweekly', version: "${biweeklyVersion}"
+    implementation group: 'net.sf.biweekly', name: 'biweekly'
     implementation group: 'org.springframework.boot', name: 'spring-boot-starter-actuator'
     implementation group: 'org.springframework.boot', name: 'spring-boot-starter-webflux'
-    implementation group: 'org.springframework.cloud', name: 'spring-cloud-starter-kubernetes-all'
+    implementation group: 'org.springframework.cloud', name: 'spring-cloud-starter-kubernetes-client-config'
 
     testCompileOnly group: 'org.projectlombok', name: 'lombok'
     testAnnotationProcessor group: 'org.projectlombok', name: 'lombok'

gradle.properties

@@ -3,4 +3,3 @@ org.gradle.caching = true
 version = 1.1.0
 gradleBaselinePluginVerson = 1.4.0
 commonPlatformVersion = latest.release
-biweeklyVersion = 0.6.6

src/main/resources/bootstrap-local.yml

@@ -1,4 +1,5 @@
 spring:
   cloud:
     kubernetes:
-      enabled: false
+      config:
+        enabled: false

src/test/resources/bootstrap-test.yml

@@ -1,4 +1,5 @@
 spring:
   cloud:
     kubernetes:
-      enabled: false
+      config:
+        enabled: false