chore(deps): update weekly update

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/dependency-review-action	action	patch	v4.7.0 -> v4.7.1
docker/build-push-action	action	minor	v6.16.0 -> v6.17.0
eclipse-temurin	final	digest	dce5dfb -> 48e3b80
eclipse-temurin	stage	digest	fc7bb82 -> 2efe33b
fossas/fossa-action	action	minor	v1.6.0 -> v1.7.0
github/codeql-action	action	patch	v3.28.17 -> v3.28.18
gradle/actions	action	minor	v4.3.1 -> v4.4.0
mcr.microsoft.com/windows/servercore	stage	digest	478a07c -> a9e475f

---

Release Notes

actions/dependency-review-action (actions/dependency-review-action)

v4.7.1

Compare Source

• Packages added to allow-dependencies-licenses will be allowed even if the package in question has no license information #​889
• License expressions (e.g. Ruby OR GPL-2.0) in the allow list are automatically discarded so that they don't invalidate the whole allow list, which should just be license identifier (e.g. Ruby)

docker/build-push-action (docker/build-push-action)

v6.17.0

Compare Source

fossas/fossa-action (fossas/fossa-action)

v1.7.0

Compare Source

What's Changed

• Adds an optional working directory option to change where FOSSA analyzes.

github/codeql-action (github/codeql-action)

v3.28.18

Compare Source

gradle/actions (gradle/actions)

v4.4.0

Compare Source

This release updates 2 downstream components:

• Develocity injection has been updated to v2.0
  • Some environment variables related to Develocity injection have been renamed. All vars now being with DEVELOCITY_INJECTION_. Check the docs for more details.
• Dependency-graph plugin has been updated to v1.4.0
  • The 'detector' values included in the generated graph can now be configured via environment variables.

What's Changed

• Update develocity-injection init script to v1.3 by @​bot-githubaction in https://github.com/gradle/actions/pull/592
• Update develocity-injection init script to v2.0 by @​bot-githubaction in https://github.com/gradle/actions/pull/593
• [StepSecurity] ci: Harden GitHub Actions by @​step-security-bot in https://github.com/gradle/actions/pull/597
• Use v1.4.0 of dependency graph plugin by @​bigdaz in https://github.com/gradle/actions/pull/638

New Contributors

• @​step-security-bot made their first contribution in https://github.com/gradle/actions/pull/597

Full Changelog: gradle/actions@v4.3.1...v4.4.0

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.