Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.sonarqube	7.1.0.6387 → 7.2.2.6593
com.gradleup.shadow:com.gradleup.shadow.gradle.plugin	9.2.2 → 9.3.1
com.fasterxml.jackson:jackson-bom	2.20.1 → 2.21.0

---

Release Notes

GradleUp/shadow (com.gradleup.shadow:com.gradleup.shadow.gradle.plugin)

v9.3.1

Compare Source

Fixed

• Use ASM from jdependency embedded. (#​1898)
  This fixes potential classpath conflicts when using Shadow with other plugins that also use ASM.

v9.3.0

Compare Source

Added

• Add PatternFilterableResourceTransformer to simplify pattern based ResourceTransformers. (#​1849)
• Expose patternSet of ServiceFileTransformer as public. (#​1849)
• Expose patternSet of ApacheLicenseResourceTransformer as public. (#​1850)
• Expose patternSet of ApacheNoticeResourceTransformer as public. (#​1850)
• Expose patternSet of PreserveFirstFoundResourceTransformer as public. (#​1855)
• Support overriding output path of ApacheNoticeResourceTransformer. (#​1851)
• Add new merge strategy Fail to PropertiesFileTransformer. (#​1856)
• Add FindResourceInClasspath task to help with debugging issues with merged duplicate resources. (#​1860)
• Add MergeLicenseResourceTransformer. (#​1858)
• Add DeduplicatingResourceTransformer to deduplicate on path and content. (#​1859)
• Support disabling Kotlin module metadata remapping. (#​1875)

  tasks.shadowJar {
    // Disable remapping of Kotlin module metadata (`.kotlin_module`) files. This is enabled by default.
    enableKotlinModuleRemapping = false
  }

Changed

• Change the group of startShadowScripts from application to other. (#​1797)
• Update ASM and jdependency to support Java 26. (#​1799)
• Bump min Gradle requirement to 9.0.0. (#​1801)
• Deprecate PreserveFirstFoundResourceTransformer.resources. (#​1855)
• Make the output of PropertiesFileTransformer reproducible. (#​1861)
• Deprecate ShadowCopyAction. (#​1876)
  It should not be used as a public API. Will be made internal in a future release.

Fixed

• Fix Develocity integration when Isolated Projects enabled. (#​1836)

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" in timezone CET, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqube-next]

Quality Gate passed for 'cloud-native-gradle-modules'

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

[sonarqube-next]

Quality Gate passed for 'cloud-native-gradle-modules'

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
No data about Duplication

See analysis details on SonarQube

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[sonarqube-next]

Quality Gate passed for 'cloud-native-gradle-modules'

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
No data about Duplication

See analysis details on SonarQube