FINERACT-2421: Update all non-major dependencies

Author: renovate-bot

.github/workflows/build-cucumber.yml

@@ -39,7 +39,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Cache Gradle dependencies
-        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: |
             ~/.gradle/caches
@@ -87,7 +87,7 @@ jobs:
 
       - name: Archive test results
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: test-results-${{ matrix.task }}
           path: |
@@ -98,7 +98,7 @@ jobs:
 
       - name: Archive Progressive Loan JAR
         if: matrix.job_type == 'progressive-loan' && always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: progressive-loan-jar
           path: ${{ env.EMBEDDABLE_JAR_FILE }}
@@ -107,7 +107,7 @@ jobs:
 
       - name: Archive server logs
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: server-logs-${{ matrix.task }}
           path: '**/build/cargo/'

.github/workflows/build-e2e-tests.yml

@@ -146,7 +146,7 @@ jobs:
 
       - name: Upload test results
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: allure-results-shard-${{ matrix.shard_index }}
           path: |
@@ -159,15 +159,15 @@ jobs:
 
       - name: Upload Allure Report
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: allure-report-shard-${{ matrix.shard_index }}
           path: allure-report-shard-${{ matrix.shard_index }}
           retention-days: 5
 
       - name: Upload logs
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: logs-shard-${{ matrix.shard_index }}
           path: |

.github/workflows/build-mariadb.yml

@@ -56,7 +56,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Cache Gradle dependencies
-        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: |
             ~/.gradle/caches
@@ -140,15 +140,15 @@ jobs:
 
       - name: Archive test results
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: test-results-${{ matrix.task }}
           path: '**/build/reports/'
           retention-days: 5
 
       - name: Archive server logs
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: server-logs-${{ matrix.task }}
           path: '**/build/cargo/'

.github/workflows/build-mysql.yml

@@ -17,7 +17,7 @@ jobs:
 
     services:
       mysql:
-        image: mysql:9.1
+        image: mysql:9.7
         ports:
           - 3306:3306
         env:
@@ -56,7 +56,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Cache Gradle dependencies
-        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: |
             ~/.gradle/caches
@@ -135,15 +135,15 @@ jobs:
 
       - name: Archive test results
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: test-results-${{ matrix.task }}
           path: '**/build/reports/'
           retention-days: 5
 
       - name: Archive server logs
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: server-logs-${{ matrix.task }}
           path: '**/build/cargo/'

.github/workflows/build-postgresql.yml

@@ -57,7 +57,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Cache Gradle dependencies
-        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: |
             ~/.gradle/caches
@@ -136,15 +136,15 @@ jobs:
 
       - name: Archive test results
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: test-results-${{ matrix.task }}
           path: '**/build/reports/'
           retention-days: 5
 
       - name: Archive server logs
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: server-logs-${{ matrix.task }}
           path: '**/build/cargo/'

.github/workflows/liquibase-only-postgresql.yml

@@ -38,7 +38,7 @@ jobs:
           distribution: 'zulu'
 
       - name: Cache Gradle dependencies
-        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: |
             ~/.gradle/caches

.github/workflows/run-integration-test-sequentially-postgresql.yml

@@ -84,7 +84,7 @@ jobs:
           ./gradlew --no-daemon --console=plain :oauth2-tests:test -PdbType=postgresql
       - name: Archive test results
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: test-results
           retention-days: 5
@@ -95,7 +95,7 @@ jobs:
             oauth2-tests/build/reports/
       - name: Archive server logs
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: server-logs
           retention-days: 5

.github/workflows/verify-api-backward-compatibility.yml

@@ -231,7 +231,7 @@ jobs:
 
       - name: Archive breaking change report
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: api-compatibility-report
           path: current/fineract-provider/build/swagger-brake/

build.gradle

@@ -110,29 +110,29 @@ buildscript {
 
 plugins {
     id 'me.qoomon.git-versioning' version '6.4.4'
-    id "org.barfuin.gradle.taskinfo" version "2.2.0"
+    id "org.barfuin.gradle.taskinfo" version "2.2.1"
     id 'com.adarshr.test-logger' version '4.0.0'
     id 'com.diffplug.spotless' version '6.25.0' apply false
     id 'org.nosphere.apache.rat' version '0.8.1' apply false
     id 'com.github.hierynomus.license' version '0.16.1' apply false
     id 'com.github.jk1.dependency-license-report' version '2.9' apply false
-    id 'org.zeroturnaround.gradle.jrebel' version '1.2.0' apply false
-    id 'org.springframework.boot' version '3.5.13' apply false
-    id 'net.ltgt.errorprone' version '4.1.0' apply false
-    id 'io.swagger.core.v3.swagger-gradle-plugin' version '2.2.23' apply false
-    id 'com.gorylenko.gradle-git-properties' version '2.4.2' apply false
+    id 'org.zeroturnaround.gradle.jrebel' version '1.2.2' apply false
+    id 'org.springframework.boot' version '3.5.14' apply false
+    id 'net.ltgt.errorprone' version '4.4.0' apply false
+    id 'io.swagger.core.v3.swagger-gradle-plugin' version '2.2.48' apply false
+    id 'com.gorylenko.gradle-git-properties' version '2.5.7' apply false
     id 'org.asciidoctor.jvm.convert' version '4.0.5' apply false
     id 'org.asciidoctor.jvm.pdf' version '4.0.5' apply false
-    id 'com.google.cloud.tools.jib' version '3.4.5' apply false
-    id 'org.sonarqube' version '6.0.1.5171'
-    id 'com.github.andygoossens.modernizer' version '1.10.0' apply false
-    id 'com.github.spotbugs' version '6.0.26' apply false
-    id 'se.thinkcode.cucumber-runner' version '0.0.11' apply false
+    id 'com.google.cloud.tools.jib' version '3.5.3' apply false
+    id 'org.sonarqube' version '6.3.1.5724'
+    id 'com.github.andygoossens.modernizer' version '1.13.0' apply false
+    id 'com.github.spotbugs' version '6.5.1' apply false
+    id 'se.thinkcode.cucumber-runner' version '0.0.14' apply false
     id "com.github.davidmc24.gradle.plugin.avro-base" version "1.9.1" apply false
-    id 'org.openapi.generator' version '7.8.0' apply false
-    id 'com.gradleup.shadow' version '9.3.2' apply false
-    id 'me.champeau.jmh' version '0.7.1' apply false
-    id 'org.cyclonedx.bom' version '3.1.0' apply false
+    id 'org.openapi.generator' version '7.21.0' apply false
+    id 'com.gradleup.shadow' version '9.4.1' apply false
+    id 'me.champeau.jmh' version '0.7.3' apply false
+    id 'org.cyclonedx.bom' version '3.2.4' apply false
     id 'com.docktape.swagger-brake' version '2.7.0' apply false
 }
 

buildSrc/build.gradle

@@ -45,7 +45,7 @@ configurations.all {
     resolutionStrategy {
         dependencySubstitution {
             // Substitution is to resolve CVE-2025-12183
-            substitute module('org.lz4:lz4-java') using module('at.yawk.lz4:lz4-java:1.10.1')
+            substitute module('org.lz4:lz4-java') using module('at.yawk.lz4:lz4-java:1.11.0')
         }
     }
 }