Update CI dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-java	action	minor	v4.5.0 -> v4.6.0
actions/stale	action	minor	v9.0.0 -> v9.1.0
actions/upload-artifact	action	minor	v4.4.3 -> v4.6.0
burnett01/rsync-deployments	action	patch	7.0.1 -> 7.0.2
eps1lon/actions-label-merge-conflict	action	patch	v3.0.2 -> v3.0.3
github/codeql-action	action	minor	v3.27.9 -> v3.28.5
gradle/actions	action	patch	v4.2.1 -> v4.2.2

---

Release Notes

actions/setup-java (actions/setup-java)

v4.6.0

Compare Source

What's Changed

Add-ons:

• Add Support for JetBrains Runtime by @​gmitch215 in https://github.com/actions/setup-java/pull/637

 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: ‘jetbrains’
     java-version: '21'

Bug fixes:

• Fix Ubuntu-latest CI failures by @​mahabaleshwars in https://github.com/actions/setup-java/pull/693

New Contributors

• @​gmitch215 made their first contribution in https://github.com/actions/setup-java/pull/637

Full Changelog: actions/setup-java@v4...v4.6.0

actions/stale (actions/stale)

v9.1.0

Compare Source

What's Changed

• Documentation update by @​Marukome0743 in https://github.com/actions/stale/pull/1116
• Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/stale/pull/1179
• Update undici from 5.28.2 to 5.28.4 by @​dependabot in https://github.com/actions/stale/pull/1150
• Update actions/checkout from 3 to 4 by @​dependabot in https://github.com/actions/stale/pull/1091
• Update actions/publish-action from 0.2.2 to 0.3.0 by @​dependabot in https://github.com/actions/stale/pull/1147
• Update ts-jest from 29.1.1 to 29.2.5 by @​dependabot in https://github.com/actions/stale/pull/1175
• Update @​actions/core from 1.10.1 to 1.11.1 by @​dependabot in https://github.com/actions/stale/pull/1191
• Update @​types/jest from 29.5.11 to 29.5.14 by @​dependabot in https://github.com/actions/stale/pull/1193
• Update @​actions/cache from 3.2.2 to 4.0.0 by @​dependabot in https://github.com/actions/stale/pull/1194

New Contributors

• @​Marukome0743 made their first contribution in https://github.com/actions/stale/pull/1116
• @​Jcambass made their first contribution in https://github.com/actions/stale/pull/1179

Full Changelog: actions/stale@v9...v9.1.0

actions/upload-artifact (actions/upload-artifact)

v4.6.0

Compare Source

What's Changed

• Expose env vars to control concurrency and timeout by @​yacaovsnc in https://github.com/actions/upload-artifact/pull/662

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

Compare Source

burnett01/rsync-deployments (burnett01/rsync-deployments)

v7.0.2

Compare Source

What's Changed

3.4.0-r0

• always force-upgrade rsync to get the latest security upgrades

• new version 7.0.2 (with rsync 3.4.0), deprecate old versions, remove dead links

The latest rsync version 3.4.0 fixes a wide variety of CVE's.
See their press release: https://download.samba.org/pub/rsync/NEWS#3.4.0

The latest action version 7.0.2 is using rsync 3.4.0, so please use that.

Full Changelog: Burnett01/rsync-deployments@7.0.1...7.0.2

eps1lon/actions-label-merge-conflict (eps1lon/actions-label-merge-conflict)

v3.0.3: 3.0.3

Compare Source

What's Changed

• Ensure outputs is populated by @​jrfnl in https://github.com/eps1lon/actions-label-merge-conflict/pull/136
• release: 3.0.3 by @​eps1lon in https://github.com/eps1lon/actions-label-merge-conflict/pull/137

New Contributors

• @​jrfnl made their first contribution in https://github.com/eps1lon/actions-label-merge-conflict/pull/136

Full Changelog: eps1lon/actions-label-merge-conflict@v3.0.2...v3.0.3

github/codeql-action (github/codeql-action)

v3.28.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.5 - 24 Jan 2025

• Update default CodeQL bundle version to 2.20.3. #​2717

See the full CHANGELOG.md for more information.

v3.28.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.4 - 23 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.3 - 22 Jan 2025

• Update default CodeQL bundle version to 2.20.2. #​2707
• Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise Server instance which occurred when the CodeQL Bundle had been synced to the instance using the CodeQL Action sync tool and the Actions runner did not have Zstandard installed. #​2710
• Uploading debug artifacts for CodeQL analysis is temporarily disabled. #​2712

See the full CHANGELOG.md for more information.

v3.28.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.2 - 21 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.1 - 10 Jan 2025

• CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #​2677
• Update default CodeQL bundle version to 2.20.1. #​2678

See the full CHANGELOG.md for more information.

v3.28.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.28.0 - 20 Dec 2024

• Bump the minimum CodeQL bundle version to 2.15.5. #​2655
• Don't fail in the unusual case that a file is on the search path. #​2660.

See the full CHANGELOG.md for more information.

gradle/actions (gradle/actions)

v4.2.2

Compare Source

This patch release updates a bunch of dependency versions and fixes a deprecation warning emitted with Gradle 8.12.

What's Changed

• Bump cross-spawn in /sources by @​dependabot in https://github.com/gradle/actions/pull/455
• Update known wrapper checksums by @​github-actions in https://github.com/gradle/actions/pull/462
• Bump the github-actions group across 1 directory with 2 updates by @​dependabot in https://github.com/gradle/actions/pull/474
• Update @​actions/cache4.0.0 and patch by @​amyu in https://github.com/gradle/actions/pull/479
• Update develocity-injection init script to v1.1 by @​bot-githubaction in https://github.com/gradle/actions/pull/471
• Dependency updates by @​bigdaz in https://github.com/gradle/actions/pull/480
• Bump references to Develocity Gradle plugin from 3.18.2 to 3.19 by @​bot-githubaction in https://github.com/gradle/actions/pull/483
• Update known wrapper checksums by @​github-actions in https://github.com/gradle/actions/pull/484
• Bump the gradle group across 1 directory with 2 updates by @​dependabot in https://github.com/gradle/actions/pull/485
• Attempt to limit failures in wrapper-validation tests by @​bigdaz in https://github.com/gradle/actions/pull/490
• Update known wrapper checksums by @​github-actions in https://github.com/gradle/actions/pull/488
• Remove deprecation warning from init-script by @​bigdaz in https://github.com/gradle/actions/pull/491
• Use latest dependency-graph plugin by @​bigdaz in https://github.com/gradle/actions/pull/489

New Contributors

• @​sebastian-dyroff made their first contribution in https://github.com/gradle/actions/pull/465
• @​amyu made their first contribution in https://github.com/gradle/actions/pull/479

Full Changelog: gradle/actions@v4.2.1...v4.2.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.