chore(deps): Update gradle and github actions (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/cache	action	major	v2 -> v4
actions/checkout	action	major	v2 -> v4
actions/setup-java	action	major	v3 -> v4
gradle (source)		major	7.4.1 -> 8.9
gradle/gradle-build-action	action	major	v2 -> v3
gradle/wrapper-validation-action	action	major	v1 -> v3
xyz.jpenilla.run-paper	plugin	major	1.0.6 -> 2.3.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/cache (actions/cache)

v4

Compare Source

v3

Compare Source

actions/checkout (actions/checkout)

v4

Compare Source

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in https://github.com/actions/checkout/pull/1739
• Bump actions/checkout from 3 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1697
• Check out other refs/* by commit by @​orhantoy in https://github.com/actions/checkout/pull/1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in https://github.com/actions/checkout/pull/1776

v3

Compare Source

• Fix: Mark test scripts with Bash'isms to be run via Bash
• Add option to fetch tags even if fetch-depth > 0

actions/setup-java (actions/setup-java)

v4

Compare Source

gradle/gradle (gradle)

v8.9

Compare Source

v8.8: 8.8

Compare Source

The Gradle team is excited to announce Gradle 8.8.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Björn Kautler,
Denes Daniel,
Fabian Windheuser,
Hélio Fernandes Sebastião,
Jay Wei,
jhrom,
jwp345,
Jörgen Andersson,
Kirill Gavrilov,
MajesticMagikarpKing,
Maksim Lazeba,
Philip Wedemann,
Robert Elliot,
Róbert Papp,
Stefan M.,
Tibor Vyletel,
Tony Robalik,
Valentin Kulesh,
Yanming Zhou,
김용후

Upgrade instructions

Switch your build to use Gradle 8.8 by updating your wrapper:

./gradlew wrapper --gradle-version=8.8

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.7

Compare Source

v8.6

Compare Source

v8.5: 8.5

Compare Source

The Gradle team is excited to announce Gradle 8.5.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Ahmed Ehab,
Alex Landau,
Aurimas,
Björn Kautler,
bodhili,
Daniel Le Berre,
davidburstrom,
Franz Wimmer,
Jongwoo Han,
Ken,
Leonardo Silveira,
Martin Bonnin,
Matthew Von-Maszewski,
Nik Clayton,
noeppi_noeppi,
Philip Wedemann,
Philipp Schneider,
Tomas Bjerre

Upgrade instructions

Switch your build to use Gradle 8.5 by updating your wrapper:

./gradlew wrapper --gradle-version=8.5

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.4: 8.4

Compare Source

The Gradle team is excited to announce Gradle 8.4.

Amongst other improvements, this release addresses two security vulnerabilities:

• Incorrect permission assignment for symlinked files used in copy or archiving operations
• Possible local text file exfiltration by XML External entity injection

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Ahmed Ehab,
Andrei Rybak,
Baptiste Decroix,
Björn Kautler,
Cesar de la Vega,
Ganavi Jayaram,
Gaurav Padam,
hwanseok,
J.T. McQuigg,
Jakub Chrzanowski,
Jendrik Johannes,
kackey0-1,
Konstantin Gribov,
Pratik Haldankar,
Qinglin,
Sebastian Schuberth,
Thad House,
valery1707,
Vladimir Sitnikov,
wuyangnju,
Yanming Zhou,
Yanshun Li,
Yusuke Uehara,
zeners

Upgrade instructions

Switch your build to use Gradle 8.4 by updating your wrapper:

./gradlew wrapper --gradle-version=8.4

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.3: 8.3

Compare Source

The Gradle team is excited to announce Gradle 8.3.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
Ahmed Ehab,
Aurimas,
Baptiste Decroix,
Björn Kautler,
Borewit,
Korov,
Mohammed Thavaf,
Patrick Brückner,
Philip Wedemann,
Róbert Papp,
Shi Chen,
Tony Robalik

Upgrade instructions

Switch your build to use Gradle 8.3 by updating your wrapper:

./gradlew wrapper --gradle-version=8.3

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.2.1

Compare Source

v8.2: 8.2

Compare Source

The Gradle team is excited to announce Gradle 8.2.

Amongst other improvements, this release addresses two security vulnerabilities:

• Dependency cache path traversal
• Path traversal vulnerabilities in handling of Tar archives

Read the Release Notes

We would like to thank the following community contributors for their contributions to this release of Gradle:

Bruno Didot,
Eric Vantillard,
esfomeado,
Jendrik Johannes,
Jonathan Leitschuh,
Lee Euije,
Stefan Oehme,
Todor Dinev,
Yanshun Li

Upgrade instructions

Switch your build to use Gradle 8.2 by updating your wrapper:

./gradlew wrapper --gradle-version=8.2

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.1.1: 8.1.1

Compare Source

This is a patch release for Gradle 8.1. We recommend using 8.1.1 instead of 8.1.

It fixes the following issues:

• #​24748 MethodTooLargeException when instrumenting a class with thousand of lambdas for configuration cache
• #​24754 Kotlin DSL precompiled script plugins built with Gradle 8.1 cannot be used with other versions of Gradle
• #​24788 Gradle 8.1 configure freeCompilerArgs for Kotlin in buildSrc breaks build with unhelpful errors

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 8.1.1 by updating your wrapper:

./gradlew wrapper --gradle-version=8.1.1

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 8.1.1.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v8.1: 8.1

Compare Source

The Gradle team is excited to announce Gradle 8.1.

Read the Release Notes

We would like to thank the following community contributors for their contributions to this release of Gradle:

André Sousa,
Attila Király,
Aurimas,
Björn Kautler,
Christoph Dreis,
David Morris,
DJtheRedstoner,
Gabriel Feo,
J.T. McQuigg,
JavierSegoviaCordoba,
JayaKrishnan Nair K,
Jeff Widman,
kackey0-1,
Martin Bonnin,
Martin Kealey,
modmuss50,
pan93412,
Sebastian Schuberth,
Simon Marquis,
TheDadda,
Thrillpool,
valery1707,
Xin Wang,
Yanshun Li

Upgrade instructions

Switch your build to use Gradle 8.1 by updating your wrapper:

./gradlew wrapper --gradle-version=8.1

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.0.2: 8.0.2

Compare Source

The Gradle team is excited to announce Gradle 8.0.2.

This is the second patch release for Gradle 8.0. We recommend using 8.0.2 instead of 8.0.

It fixes the following issues:

• #​23698 Gradle 8 RC2 runs out of metaspace
• #​23962 Java/Scala build with no explicit toolchain: build fails with Gradle 8.0.1 / Scala 2.13
• #​23990 Gradle 8.0.+ silently dropped support for custom compilers in JavaCompile
• #​24031 InstrumentingTransformer generates different class files in Gradle 8 and 7.6 which leads to Remote Build-Cache misses
• #​24109 Extending an already resolved configuration no longer works correctly
• #​24122 Update configuration cache state for some plugins
• #​24129 includeBuild in PluginManagementSpec deincubated in Gradle 8, docs still say it's incubating

Issues fixed in the first patch release:

• #​21551 Document integration of Scala plugin with toolchains and problems with target flag
• #​23888 --no-rebuild suddenly gone without new deprecation cycle and without the reason for its undeprecation being void
• #​23905 Gradle 8.0 fails Scala build with isBlank not found in String class error

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 8.0.2 by updating your wrapper:

./gradlew wrapper --gradle-version=8.0.2

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 8.0.2.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v8.0.1: 8.0.1

Compare Source

This is a patch release for 8.0. We recommend using 8.0.1 instead of 8.0.

It fixes the following issues:

• #​21551 - Document integration of Scala plugin with toolchains and problems with target flag
• #​23888 - --no-rebuild suddenly gone without new deprecation cycle and without the reason for its undeprecation being void
• #​23905 - Gradle 8.0 fails Scala build with isBlank not found in String class error

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 8.0.1 by updating your wrapper:

./gradlew wrapper --gradle-version=8.0.1

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 8.0.1.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v8.0: 8.0

Compare Source

The Gradle team is excited to announce Gradle 8.0

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Abdul Rauf,
Andrei Nevedomskii,
aSemy,
Ben Cox,
Björn Kautler,
bodhili,
Cédric Champeau,
Christoph Dreis,
Clara Guerrero Sánchez,
David Marin Vaquero,
David Morris,
Denis Buzmakov,
Dmitry Pogrebnoy,
Dzmitry Neviadomski,
Eliezer Graber,
Eric Pederson,
Fedor Ihnatkevich,
Gabriel Rodriguez,
Herbert von Broeuschmeul,
Hyeonmin Park,
Jeff,
Jendrik Johannes,
Korov,
Marcono1234,
Madhead,
Mariell Hoversholm,
Matthew Haughton,
Matthias Ernst,
Michael Bailey,
Michael Ernst,
Michael Torres,
Pankaj,
prasad-333,
RicardoJiang,
Siddardha Bezawada,
Stephen Topley,
Victor Maldonado,
Vinay Potluri,
Xin Wang.

Upgrade instructions

Switch your build to use Gradle 8.0 by updating your wrapper:

./gradlew wrapper --gradle-version=8.0

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 8.0.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v7.6.4: 7.6.4

Compare Source

This is a patch release for 7.6. We recommend using 7.6.4 instead of 7.6.

Read the Release Notes

Upgrade instructions

Switch your build to use Gradle 7.6.4 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.4

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v7.6.3: 7.6.3

Compare Source

This is a patch release for 7.6. We recommend using 7.6.3 instead of 7.6.

This release addresses two security vulnerabilities:

• Incorrect permission assignment for symlinked files used in copy or archiving operations
• Possible local text file exfiltration by XML External entity injection

It also fixes the following issues:

• #​25781 Backport finalized task performance fix to 7.6.x
• #​25802 Backport cgroups fix to 7.6.x

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 7.6.3 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.3

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.3.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v7.6.2: 7.6.2

Compare Source

This is a patch release for 7.6. We recommend using 7.6.2 instead of 7.6.

This release addresses two security vulnerabilities:

• Dependency cache path traversal
• Path traversal vulnerabilities in handling of Tar archives

It also fixes the following issues:

• #​23201 Backport dependency upgrades to 7.x
• #​23202 Backport Scala incremental compilation fixes
• #​23325 Backport JSoup update to resolve CVE-2022-36033
• #​23458 Backport JUnit5 dynamic test logging bug fix
• #​23681 Dependency graph resolution: Equivalent excludes can cause un-necessary graph mutations [backport 7.x]
• #​23922 Backport "Use Compiler API data for incremental compilation after a failure" to 7.x
• #​23951 Exclude rule merging: missing optimization [Backport 7.x]
• #​24132 Extending an already resolved configuration no longer works correctly [backport 7.x]
• #​24234 7.6.1 breaks gradle-consistent-versions
• #​24390 Gradle 7.4 fails on multi release jar's with JDK 19 code
• #​24439 Gradle complains about invalid tool chain - picking up the source package location - it should just ignore them [Backport]
• #​24443 Maven artifact referenced only in dependency constraints raises IllegalStateException: Corrupt serialized resolution result [backport]
• #​24901 Backport fix for test exception that cannot be deserialized to 7.x

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 7.6.2 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.2

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.2.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v7.6.1: 7.6.1

Compare Source

This is a patch release for 7.6. We recommend using 7.6.1 instead of 7.6.

It fixes the following issues:

• #​19065 Platform dependencies not possible in dependency block of test suite plugin
• #​22688 Increased memory usage (with -p option)
• #​22796 Building gradle itself fails during toolchain download: permission denied copying a file within .gradle/jdks
• #​22875 Regression with 7.6: @​​pom artifact in JVM library project is no longer found
• #​22937 Remove safe credentials reference
• #​22973 Kotlin MPP plugin broken with Gradle 7.6 due to signature change in TestResultProcessor
• #​23016 toolchainManagement.jvm.javaRepositories should not expose the full surface of NamedDomainObjectList
• #​23025 Back-port toolchain related fixes to 7.6.1
• #​23053 Auto-provisioning/auto-detection of IBM Semeru toolchains is broken with Gradle 7.6
• #​23074 Docs: Build Lifecycle starts halfway through a point
• #​23096 Classifiers of version catalog are discarded while copied to anothor dependency
• #​23111 Ant closures are broken with Gradle 7.6
• #​23178 Mention the Foojay Toolchain Resolver plugin in the Gradle manual
• #​23215 Gradle 7.6: high memory usage (android project)
• #​23224 Backport to 7.6.1 "Fix for Incremental compilation with modules"
• #​23294 "Unable to make progress running work" together with --continue and failing tasks (Backport to 7.6.1)
• #​23555 Improve Toolchain related deprecation nagging in 7.6
• #​23894 Update EOL policy
• #​23910 Backport trusting only full GPG keys in dependency verification [Backport 7.6.1]
• #​23941 Typo in v7.6 docs about disabling_the_daemon
• #​23985 Resolving of manually created configuration creates a ResolveException

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 7.6.1 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.1

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.1.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v7.6

Compare Source

v7.5.1: 7.5.1

Compare Source

This is a patch release for 7.5. We recommend using 7.5.1 instead of 7.5

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Michael Bailey,
Josh Kasten,
Marcono1234,
mataha,
Lieven Vaneeckhaute,
kiwi-oss,
Stefan Neuhaus,
George Thomas,
Anja Papatola,
Björn Kautler,
David Burström,
Vladimir Sitnikov,
Roland Weisleder,
Konstantin Gribov,
David Op de Beeck,
aSemy,
Rene Groeschke,
Jonathan Leitschuh,
Aurimas Liutikas,
Jamie Tanna,
Xin Wang,
Atsuto Yamashita,
Taeik Lim,
Peter Gafert,
Alex Landau,
Jerry Wiltse,
Tyler Burke,
Matthew Haughton,
Filip Daca,
Simão Gomes Viana,
Vaidotas Valuckas,
Edgars Jasmans,
Tomasz Godzik,
Jeff,
Lajos Veres

Upgrade instructions

Switch your build to use Gradle 7.5.1 by updating your wrapper:

./gradlew wrapper --gradle-version=7.5.1

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v7.5: 7.5

Compare Source

The Gradle team is excited to announce Gradle 7.5.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Michael Bailey,
Josh Kasten,
Marcono1234,
mataha,
Lieven Vaneeckhaute,
kiwi-oss,
Stefan Neuhaus,
George Thomas,
Anja Papatola,
Björn Kautler,
David Burström,
Vladimir Sitnikov,
Roland Weisleder,
Konstantin Gribov,
David Op de Beeck,
aSemy,
Rene Groeschke,
Jonathan Leitschuh,
Aurimas Liutikas,
Jamie Tanna,
Xin Wang,
Atsuto Yamashita,
Taeik Lim,
Peter Gafert,
Alex Landau,
Jerry Wiltse,
Tyler Burke,
Matthew Haughton,
Filip Daca,
Simão Gomes Viana,
Vaidotas Valuckas,
Edgars Jasmans,
Tomasz Godzik,
Jeff,
Lajos Veres

Upgrade instructions

Switch your build to use Gradle 7.5 by updating your wrapper:

./gradlew wrapper --gradle-version=7.5

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v7.4.2: 7.4.2

Compare Source

This is a patch release for Gradle 7.4.

See the list of fixed issues: https://docs.gradle.org/7.4.2/release-notes.html

We recommend users upgrade to 7.4.2 instead of 7.4 or another patch release.

Upgrade Instructions

Switch your build to use Gradle 7.4.2 by updating your wrapper:

./gradlew wrapper --gradle-version=7.4.2

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.4.2.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

gradle/gradle-build-action (gradle/gradle-build-action)

v3

Compare Source

gradle/wrapper-validation-action (gradle/wrapper-validation-action)

v3

Compare Source

v2

Compare Source

---

Configuration

📅 Schedule: Branch creation - "after 2am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.