fix(deps): update all non-major dependencies

[we-renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
actions/checkout	action	minor	v4.1.7 -> v4.2.2
actions/create-github-app-token	action	minor	v1.10.3 -> v1.11.1
actions/setup-java	action	minor	v4.2.2 -> v4.6.0
actions/setup-node	action	minor	v4.0.3 -> v4.1.0
cycjimmy/semantic-release-action	action	patch	v4.1.0 -> v4.1.1
gradle (source)		minor	8.10 -> 8.12
commons-io:commons-io (source)	dependencies	minor	2.16.1 -> 2.18.0

---

Release Notes

actions/checkout (actions/checkout)

v4.2.2

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in https://github.com/actions/checkout/pull/1941
• Expand unit test coverage for isGhes by @​jww3 in https://github.com/actions/checkout/pull/1946

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in https://github.com/actions/checkout/pull/1924

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in https://github.com/actions/checkout/pull/1180
• Dependency updates by @​dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

actions/create-github-app-token (actions/create-github-app-token)

v1.11.1

Compare Source

What's Changed

Bug Fixes

• deps: bump the production-dependencies group across 1 directory with 3 updates by @​dependabot in https://github.com/actions/create-github-app-token/pull/193

Full Changelog: actions/create-github-app-token@v1.11.0...v1.11.1

v1.11.0

Compare Source

What's Changed

Features

• Allow repositories input to be comma or newline-separated by @​peter-evans in https://github.com/actions/create-github-app-token/pull/169

New Contributors

• @​peter-evans made their first contribution in https://github.com/actions/create-github-app-token/pull/169

Full Changelog: actions/create-github-app-token@v1.10.4...v1.11.0

v1.10.4

Compare Source

What's Changed

• build(deps-dev): bump the development-dependencies group with 4 updates by @​dependabot in https://github.com/actions/create-github-app-token/pull/150
• docs(README): fix the git committer string and Configure git CLI examples by @​maboloshi in https://github.com/actions/create-github-app-token/pull/151
• docs(readme): document how a Base64 private key could be decoded by @​vleon1a in https://github.com/actions/create-github-app-token/pull/155
• test: fix test file extensions and inputs for repositories by @​parkerbxyz in https://github.com/actions/create-github-app-token/pull/161
• build(deps-dev): bump the development-dependencies group across 1 directory with 4 updates by @​dependabot in https://github.com/actions/create-github-app-token/pull/167

Bug Fixes

• bump the production-dependencies group across 1 directory with 3 updates by @​dependabot in https://github.com/actions/create-github-app-token/pull/166

New Contributors

• @​vleon1a made their first contribution in https://github.com/actions/create-github-app-token/pull/155

Full Changelog: actions/create-github-app-token@v1.10.3...v1.10.4

actions/setup-java (actions/setup-java)

v4.6.0

Compare Source

What's Changed

Add-ons:

• Add Support for JetBrains Runtime by @​gmitch215 in https://github.com/actions/setup-java/pull/637

 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: ‘jetbrains’
     java-version: '21'

Bug fixes:

• Fix Ubuntu-latest CI failures by @​mahabaleshwars in https://github.com/actions/setup-java/pull/693

New Contributors

• @​gmitch215 made their first contribution in https://github.com/actions/setup-java/pull/637

Full Changelog: actions/setup-java@v4...v4.6.0

v4.5.0

Compare Source

What's Changed

• Upgrade IA Publish by @​Jcambass in #​686

Bug fixes:

• Improve archive extraction on windows runners without powershell core and Update micromatch dependency by @​priyagupta108 in #​689
• Update workflows for GraalVM and Version Enhancements by @​mahabaleshwars in #​699
• Refine isGhes logic by @​jww3 in #​697

New Contributors:

• @​priyagupta108 made their first contribution in https://github.com/actions/setup-java/pull/689
• @​jww3 made their first contribution in https://github.com/actions/setup-java/pull/697

Full Changelog: actions/setup-java@v4...v4.5.0

v4.4.0

Compare Source

What's Changed

Add-ons :

• Add support for Oracle GraalVM by @​fniephaus in https://github.com/actions/setup-java/pull/501

steps:
 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: 'graalvm'
     java-version: '21'

• Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/setup-java/pull/684

Bug fixes :

• Add architecture to cache key by @​Zxilly in https://github.com/actions/setup-java/pull/664
  This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
  Note: This change may break previous cache keys as they will no longer be compatible with the new format.
• Resolve check failures by @​aparnajyothi-y in https://github.com/actions/setup-java/pull/687

New Contributors

• @​Jcambass made their first contribution in https://github.com/actions/setup-java/pull/684
• @​Zxilly made their first contribution in https://github.com/actions/setup-java/pull/664

Full Changelog: actions/setup-java@v4...v4.4.0

v4.3.0

Compare Source

What's Changed

• Add support for SapMachine JDK/JRE by @​Shegox in #​614

steps:
 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: 'sapmachine'
     java-version: '21'

Bug fixes :

• Fix typos on Corretto by @​johnshajiang in #​666
• IBM Semeru Enhancement on arm64 by @​mahabaleshwars in #​677
• Resolve Basic Validation Check Failures by @​aparnajyothi-y
 in #​682

New Contributors :

• @​johnshajiang made their first contribution in #​666
• @​Shegox made their first contribution in #​614

Full Changelog: actions/setup-java@v4...v4.3.0

actions/setup-node (actions/setup-node)

v4.1.0

Compare Source

What's Changed

• Resolve High Security Alerts by upgrading Dependencies by @​aparnajyothi-y in https://github.com/actions/setup-node/pull/1132
• Upgrade IA Publish by @​Jcambass in https://github.com/actions/setup-node/pull/1134
• Revise isGhes logic by @​jww3 in https://github.com/actions/setup-node/pull/1148
• Add architecture to cache key by @​pengx17 in https://github.com/actions/setup-node/pull/843
  This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
  Note: This change may break previous cache keys as they will no longer be compatible with the new format.

New Contributors

• @​jww3 made their first contribution in https://github.com/actions/setup-node/pull/1148
• @​pengx17 made their first contribution in https://github.com/actions/setup-node/pull/843

Full Changelog: actions/setup-node@v4...v4.1.0

v4.0.4

Compare Source

What's Changed

• Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/setup-node/pull/1125
• Enhance Windows ARM64 Setup and Update micromatch Dependency by @​priyagupta108 in https://github.com/actions/setup-node/pull/1126

Documentation changes:

• Documentation update in the README file by @​suyashgaonkar in https://github.com/actions/setup-node/pull/1106
• Correct invalid 'lts' version string reference by @​fulldecent in https://github.com/actions/setup-node/pull/1124

New Contributors

• @​suyashgaonkar made their first contribution in https://github.com/actions/setup-node/pull/1106
• @​priyagupta108 made their first contribution in https://github.com/actions/setup-node/pull/1126
• @​Jcambass made their first contribution in https://github.com/actions/setup-node/pull/1125
• @​fulldecent made their first contribution in https://github.com/actions/setup-node/pull/1124

Full Changelog: actions/setup-node@v4...v4.0.4

cycjimmy/semantic-release-action (cycjimmy/semantic-release-action)

v4.1.1

Compare Source

Bug Fixes

• default use semantic-release@24 (c22487b)

gradle/gradle (gradle)

v8.12: 8.12

Compare Source

The Gradle team is excited to announce Gradle 8.12.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Abhiraj Adhikary,
Ayush Saxena,
Björn Kautler,
davidburstrom,
Dominic Fellbaum,
Emmanuel Ferdman,
Finn Petersen,
Johnny Lim,
Mahdi Hosseinzadeh,
Martin Bonnin,
Paint_Ninja,
Petter Måhlén,
Philip Wedemann,
stegeto22,
Tanish,
TheGoesen,
Tim Nielens,
Trout Zhang,
Victor Merkulov

Upgrade instructions

Switch your build to use Gradle 8.12 by updating your wrapper:

./gradlew wrapper --gradle-version=8.12

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.11.1: 8.11.1

Compare Source

This is a patch release for Gradle 8.11. We recommend users upgrade to 8.11.1 instead of 8.11.

It fixes the following issues:

• #​31268 BuildEventsListenerRegistry corrupted with Isolated Projects and parallel configuration
• #​31282 Running executables sporadically fails with ETXTBSY (Text file busy)
• #​31284 ArrayIndexOutOfBoundsException after upgrading to gradle 8.11 when generating problems report
• #​31310 Unable to run Gradle task in 8.10 due to bytecode interception

Read the Release Notes

Upgrade instructions

Switch your build to use Gradle 8.11.1 by updating your wrapper:

./gradlew wrapper --gradle-version=8.11.1

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.11: 8.11

Compare Source

The Gradle team is excited to announce Gradle 8.11.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
alyssoncs,
Bilel MEDIMEGH,
Björn Kautler,
Chuck Thomas,
Daniel Lacasse,
Finn Petersen,
JK,
Jérémie Bresson,
luozexuan,
Mahdi Hosseinzadeh,
Markus Gaisbauer,
Matthew Haughton,
Matthew Von-Maszewski,
ploober,
Siarhei,
Titus James,
vrp0211

Upgrade instructions

Switch your build to use Gradle 8.11 by updating your wrapper:

./gradlew wrapper --gradle-version=8.11

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.10.2: 8.10.2

Compare Source

This is a patch release for 8.10. We recommend using 8.10.2 instead of 8.10

It fixes the following issues:

• #​30472 Investigate possibly broken 8.10.1
• #​30477 Kotlin Mutliplatform build with reused daemon fails with "Cannot query the value of task ':compileKotlinWindows' property 'kotlinNativeBundleBuildService' because it has no value available."
• #​30497 DefaultTaskCollection#configureEach(Action) on task set cannot be executed in the current context

Issues fixed in the first patch release:

• #​30239 Gradle 8.10 Significantly Slower Due to Dependency Resolution
• #​30272 Broken equals() contract for LifecycleAwareProject
• #​30385 Gradle should not validate isolated projects when isolated projects is disabled

Read the Release Notes

Upgrade instructions

Switch your build to use Gradle 8.10.2 by updating your wrapper:

./gradlew wrapper --gradle-version=8.10.2

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.10.1: 8.10.1

Compare Source

This is a patch release for 8.10. We recommend using 8.10.1 instead of 8.10

It fixes the following issues:

• #​30239 Gradle 8.10 Significantly Slower Due to Dependency Resolution
• #​30272 Broken equals() contract for LifecycleAwareProject
• #​30385 Gradle should not validate isolated projects when isolated projects is disabled

Read the Release Notes

Upgrade instructions

Switch your build to use Gradle 8.10.1 by updating your wrapper:

./gradlew wrapper --gradle-version=8.10.1

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.