Bump the spotless group with 2 updates

[dependabot]

Bumps the spotless group with 2 updates: com.diffplug.spotless:spotless-plugin-gradle and com.diffplug.spotless.

Updates com.diffplug.spotless:spotless-plugin-gradle from 8.4.0 to 8.5.1

Release notes

Sourced from com.diffplug.spotless:spotless-plugin-gradle's releases.

Gradle Plugin v8.5.1

Fixed

• licenseHeader with setLicenseHeaderYearsFromGitHistory() no longer runs git log through a shell, eliminating a shell-injection vector when formatting files whose names contain shell metacharacters.

Gradle Plugin v8.5.0

Added

• scalafmt() now reads the version from the version field in the scalafmt config file when no version is explicitly set in the plugin config, falling back to the built-in default only if neither is available. (#2922)
• Add toml format type with versionCatalog() step for formatting and sorting Gradle version catalog files. (#2916)
• Add withIndentStyle and withIndentSize configuration to tableTestFormatter for setting the fallback indent when no .editorconfig is found. (#2893)
• Add javaparserVersion(...) to cleanthat, allowing users to override the JavaParser version pulled in transitively by Cleanthat. (#2903)

Fixed

• Fix tableTestFormatter editorconfig cache not honoring .editorconfig changes across Gradle daemon runs due to a shared static EditorConfigProvider. (#2893)
• Preserve case of JDBI named bind params that collide with SQL keywords (e.g. :limit, :offset) in the DBeaver SQL formatter. (#2899)
• Fix non-idempotent formatting when importOrder() is combined with greclipse(): a single catch-all group no longer strips blank lines that greclipse() independently inserted between import groups. (#2914)
• Fix predeclareDepsFromBuildscript() on Gradle 9 by avoiding mutation of the root buildscript configuration container. (#2929, fixes #2599)

Changes

• Fix expandWildcardImports failing on JDK XML types such as org.xml.sax.InputSource. (#2921)
• Use Eclipse JDT's collator-based comparison when sorting Java members to better match Eclipse save actions. (#2920)
• Bump default cleanthat version 2.24 -> 2.25. (#2903)
• Bump default eclipse-jdt version from 4.35 to 4.39. (#2912)
• Make spotlessPredeclare visible to Gradle Kotlin DSL type-safe accessors. (#2925)
• Allow spotlessPredeclare to be used directly without enabling it first in spotless extension. (#2925)

Commits

• c1595c8 Published gradle/8.5.1
• b26b570 Published lib/4.6.1
• ac3f6f1 Bump plexus-utils to 4.0.3 to address CVE-2025-67030 (#2932)
• f5039f6 Bump plexus-utils to 4.0.3 to address CVE-2025-67030
• 0e77837 Fix shell-injection in LicenseHeaderStep SET_FROM_GIT mode (#2931)
• 84f6423 Fix shell-injection in LicenseHeaderStep SET_FROM_GIT mode
• b87eb75 Published maven/3.5.0
• 97c3baf Published gradle/8.5.0
• 3dd1a96 Published lib/4.6.0
• 05d8954 Feature maven expand wildcard import (#2930 fixes #2829)
• Additional commits viewable in compare view

Updates com.diffplug.spotless from 8.4.0 to 8.5.1

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions