Upgrade dependencies

.github/workflows/broken_links_checker.yml

@@ -13,9 +13,9 @@ jobs:
       contents: read
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
-          persist-credentials: true
+          persist-credentials: false
       - name: Configure broken links checker
         run: |
           mkdir -p ./target

.github/workflows/build.yml

@@ -28,7 +28,7 @@ jobs:
       DEFAULT_JAVA: 17
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0
         persist-credentials: false
@@ -43,7 +43,7 @@ jobs:
 
     - name: Cache SonarQube packages
       if: ${{ env.DEFAULT_JAVA == matrix.java }}
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: ~/.sonar/cache
         key: ${{ runner.os }}-java-${{ matrix.java }}-sonar
@@ -72,8 +72,10 @@ jobs:
 
   ossindex:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         persist-credentials: false
     - uses: actions/setup-java@v5
@@ -93,5 +95,7 @@ jobs:
       - matrix-build
       - ossindex
     runs-on: ubuntu-slim
+    permissions:
+      contents: read
     steps:
       - run: echo "Build successful"

.github/workflows/codeql-analysis.yml

@@ -24,7 +24,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
       with:
         persist-credentials: false
 

.github/workflows/release.yml

@@ -22,7 +22,7 @@ jobs:
       contents: write # Required for creating GitHub release
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: true
 

build.gradle

@@ -3,10 +3,10 @@ plugins {
     id 'jacoco'
     id 'signing'
     id 'com.gradle.plugin-publish' version '2.1.1'
-    id 'org.sonarqube' version '7.3.0.8198'
+    id 'org.sonarqube' version '7.3.1.8318'
     id 'pl.droidsonroids.jacoco.testkit' version '1.0.12'
     id 'com.github.ben-manes.versions' version '0.54.0'
-    id 'org.sonatype.gradle.plugins.scan' version '3.1.5'
+    id 'org.sonatype.gradle.plugins.scan' version '3.1.6'
 }
 
 repositories {
@@ -15,13 +15,13 @@ repositories {
 
 apply from: 'gradle/workAroundJacocoGradleTestKitIssueOnWindows.gradle'
 
-version = '3.1.2'
+version = '3.2.0'
 group = 'org.itsallcode'
 
 ext {
     gradlePluginId = 'org.itsallcode.openfasttrace'
-    oftVersion = '4.4.0'
-    junitVersion = '6.0.3'
+    oftVersion = '4.6.0'
+    junitVersion = '6.1.2'
     if (project.hasProperty('oftSourceDir')) {
         oftSourceDir = file(project.oftSourceDir)
         useOftSources = oftSourceDir.exists()

gradle/wrapper/gradle-wrapper.properties

@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-9.5.1-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-9.6.1-bin.zip
 networkTimeout=10000
 retries=0
 retryBackOffMs=500

src/test/java/org/itsallcode/openfasttrace/gradle/GradleTestConfig.java

@@ -7,7 +7,7 @@ public enum GradleTestConfig
      * We support the latest Gradle version and the previous two. Older Gradle
      * versions do not work with Java 21 and above.
      */
-    PREVIOUS_VERSION("8.14.5"), CURRENT_VERSION("9.5.1");
+    PREVIOUS_VERSION("8.14.5"), CURRENT_VERSION("9.6.1");
 
     public final String gradleVersion;