build(deps): bump gradle/actions from 3.3.0 to 3.4.2

[dependabot]

Bumps gradle/actions from 3.3.0 to 3.4.2.

Release notes

Sourced from gradle/actions's releases.

v3.4.2

This patch release fixes a race condition that resulted in the DEVELOCITY_ACCESS_KEY variable not being set in the environment.

What's Changed

• Fix race condition with fetching short lived token by @​alextu in gradle/actions#260

Full Changelog: gradle/actions@v3.4.1...v3.4.2

v3.4.1

This patch release fixes a bug introduced in v3.4.0, that prevents build scan publication to Develocity. The bug results in the removal of the DEVELOCITY_ACCESS_KEY variable being removed, so that Gradle cannot authenticate with the Develocity server.

What's Changed

• Don't clear access key when access token cannot be obtained by @​cdsap in gradle/actions#258
• Simplify requesting short-lived Develocity access tokens by @​bigdaz in gradle/actions#259

Full Changelog: gradle/actions@v3.4.0...v3.4.1

v3.4.0

This release improves the integration with Gradle Develocity®, as well as updating a number of key dependencies.

• The new develocity-access-key input parameter allows the action to generate a short-lived access token for subsequent communication with Develocity. This reduces the risk of the full (long-lived) access key being compromised, either accidentally or by a malicious action.
• New input parameters are available to configure Develocity injection. Previously Develocity injection could only be enabled by setting environment variables.
• Checksums for Gradle 8.8 are now included, so that no network request is required for wrapper-validation with Gradle 8.8 wrappers.

What's Changed

• Add support for short-lived tokens by @​alextu in gradle/actions#224
• Update known wrapper checksums by @​github-actions in gradle/actions#240
• Update to Gradle 8.8 by @​bigdaz in gradle/actions#251
• Adding Develocity input actions by @​cdsap in gradle/actions#244
• Fail on invalid boolean for Develocity inputs by @​bigdaz in gradle/actions#252

New Contributors

• @​serieznyi made their first contribution in gradle/actions#216
• @​lokalpage-safe made their first contribution in gradle/actions#205
• @​alextu made their first contribution in gradle/actions#224
• @​bot-githubaction made their first contribution in gradle/actions#227
• @​antonmos made their first contribution in gradle/actions#234
• @​cdsap made their first contribution in gradle/actions#244

Full Changelog: gradle/actions@v3.3.2...v3.4.0

v3.3.2

This patch release fixes a bug in both dependency-submission and setup-gradle (#196 introduced in v3.3.1), which resulted in "No dependency-graph files found to submit" when using the download-and-submit function.

... (truncated)

Commits

• dbbdc27 [bot] Update dist directory
• ae74429 Fix race condition with fetching short lived token (#260)
• bdc7162 Forward the setup short-lived token Promise
• 31ae356 [bot] Update dist directory
• 719985d Simplify requesting short-lived Develocity access tokens (#259)
• b532389 [bot] Update dist directory
• 5f1c582 handle missing access token
• d9336da [bot] Update dist directory
• 8dbe9a3 Update DV access key regex to be more selective
• 9c34307 [bot] Update dist directory
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Qodana Community for JVM

7 new problems were found

Inspection name	Severity	Problems
Nullability and data flow problems	🔶 Warning	4
Class is exposed outside of its visibility scope	🔶 Warning	3

💡 Qodana analysis was run in the pull request mode: only the changed files were checked

View the detailed Qodana report

To be able to view the detailed Qodana report, you can either:

1. Register at Qodana Cloud and configure the action
2. Use GitHub Code Scanning with Qodana
3. Host Qodana report at GitHub Pages
4. Inspect and use qodana.sarif.json (see the Qodana SARIF format for details)

To get *.log files or any other Qodana artifacts, run the action with upload-result option set to true,
so that the action will upload the files as the job artifacts:

      - name: 'Qodana Scan'
        uses: JetBrains/[email protected]
        with:
          upload-result: true

Contact Qodana team

Contact us at [email protected]

• Or via our issue tracker: https://jb.gg/qodana-issue
• Or share your feedback: https://jb.gg/qodana-discussions

[dependabot]

Superseded by #106.