ci(deps): bump the github-actions group with 3 updates

[dependabot]

Bumps the github-actions group with 3 updates: dataaxiom/ghcr-cleanup-action, gradle/actions and epam/ai-dial-ci.

Updates dataaxiom/ghcr-cleanup-action from 1.2.1 to 1.2.2

Release notes

Sourced from dataaxiom/ghcr-cleanup-action's releases.

v1.2.2

• feature: skip-regex-checks input bypasses regex length/ReDoS guards for intentionally large patterns (fix #128)

Commits

• d52806a Merge pull request #129 from rohanmars/main
• 7f28f9d feat: add skip-regex-checks input to opt out of regex safety guards
• See full diff in compare view

Updates gradle/actions from 6.1.0 to 6.1.1

Release notes

Sourced from gradle/actions's releases.

v6.1.1

This release updates various dependency versions, resolving several reported security vulnerabilities. No functional changes are included

What's Changed

• Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /sources/test/init-scripts by @​bot-githubaction in gradle/actions#961
• Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /.github/workflow-samples/gradle-plugin by @​bot-githubaction in gradle/actions#962
• Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /.github/workflow-samples/groovy-dsl by @​bot-githubaction in gradle/actions#963
• Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /.github/workflow-samples/java-toolchain by @​bot-githubaction in gradle/actions#964
• Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /.github/workflow-samples/kotlin-dsl by @​bot-githubaction in gradle/actions#965
• Update known wrapper checksums by @​github-actions[bot] in gradle/actions#937
• Bump the github-actions group across 2 directories with 8 updates by @​dependabot[bot] in gradle/actions#976
• Bump the npm-dependencies group across 1 directory with 14 updates by @​dependabot[bot] in gradle/actions#970
• Bump references to Develocity Gradle plugin from 4.4.0 to 4.4.2 by @​bot-githubaction in gradle/actions#973
• Bump the npm-dependencies group in /sources with 5 updates by @​dependabot[bot] in gradle/actions#977
• Update @​actions/cache and @​actions/artifact, stop ignoring them in Dependabot by @​bigdaz in gradle/actions#978
• Resolve npm security vulnerabilities via dependency overrides by @​bigdaz in gradle/actions#980

Full Changelog: gradle/actions@v6.1.0...v6.1.1

Commits

• 5e2ebd0 [bot] Update dist directory
• 9e2c1cc Resolve npm security vulnerabilities via dependency overrides (#980)
• 657f690 [bot] Update dist directory
• 9d6bacd Update @​actions/cache and @​actions/artifact, stop ignoring them in Dependabot...
• 79f6b19 [bot] Update dist directory
• 6781648 Bump the npm-dependencies group in /sources with 5 updates (#977)
• a3b40d2 [bot] Update dist directory
• f37016f Bump references to Develocity Gradle plugin from 4.4.0 to 4.4.2 (#973)
• 2afdab2 [bot] Update dist directory
• 1046ffa Bump the npm-dependencies group across 1 directory with 14 updates (#970)
• Additional commits viewable in compare view

Updates epam/ai-dial-ci from 4.4.0 to 4.4.1

Release notes

Sourced from epam/ai-dial-ci's releases.

4.4.1

What's Changed

• fix: bump minor for dev version after release candidate found by @​nepalevov in epam/ai-dial-ci#507

Full Changelog: epam/ai-dial-ci@4.4.0...4.4.1

Commits

• c61a1a9 fix: bump minor for dev version after release candidate found (#507)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[statgpt-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

License Issues

.github/workflows/test.yml

Package	Version	License	Issue Type
epam/ai-dial-ci/actions/java_prepare	4.4.1	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
actions/epam/ai-dial-ci/actions/java_prepare	4.4.1	Unknown	Unknown

Scanned Files

• .github/workflows/test.yml

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.