Merge branch 'master' into renovate-autodiscover/pin-dependencies

Author: cristianrcv

.github/actions/deploy/action.yml

@@ -25,7 +25,7 @@ runs:
   using: "composite"
   steps:
     - name: Configure AWS credentials
-      uses: aws-actions/configure-aws-credentials@67fbcbb121271f7775d2e7715933280b06314838 # v1
+      uses: aws-actions/configure-aws-credentials@67fbcbb121271f7775d2e7715933280b06314838 # v1.7.0
       with:
         aws-access-key-id: ${{ inputs.aws-access-key-id }}
         aws-secret-access-key: ${{ inputs.aws-secret-access-key }}

.github/workflows/build-plugin-scanner.yml

@@ -17,14 +17,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
 
       - name: Docker Login
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
         with:
           registry: public.cr.seqera.io
           username: ${{ vars.SEQERA_PUBLIC_CR_USERNAME  }}

.github/workflows/build-singularity.yml

@@ -13,14 +13,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
 
       - name: Docker Login
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
         with:
           registry: public.cr.seqera.io
           username: ${{ vars.SEQERA_PUBLIC_CR_USERNAME  }}

.github/workflows/build.yml

@@ -39,13 +39,13 @@ jobs:
         run: env | sort
 
       - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           fetch-depth: 1
           submodules: true
 
       - name: Setup Java ${{ matrix.java_version }}
-        uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
+        uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4.8.0
         with:
           java-version: ${{matrix.java_version}}
           distribution: 'temurin'
@@ -99,15 +99,15 @@ jobs:
 
       - name: Publish tests report
         if: failure()
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: test-reports-jdk-${{ matrix.java_version }}
           path: |
             **/build/reports/tests/test
 
       - name : Publish code coverage report
         if: success()
-        uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with :
           name : code-coverage-reports-jdk-${{ matrix.java_version }}
           path : |

.github/workflows/claude.yml

@@ -25,7 +25,7 @@ jobs:
       id-token: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           fetch-depth: 1
 

.github/workflows/codespell.yml

@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
       - name: Codespell
         uses: codespell-project/actions-codespell@v2
         with:

.github/workflows/security-submit-dependecy-graph.yml

@@ -10,8 +10,8 @@ jobs:
   dependency-submission:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
-    - uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
+    - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+    - uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4.8.0
       with:
         distribution: temurin
         java-version: 17

.github/workflows/typespec.yml

@@ -24,12 +24,12 @@ jobs:
 
     steps:
       - name : Checkout
-        uses : actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses : actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name : Setup Node.js environment
-        uses : actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        uses : actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with :
-          node-version : '20.9.0'
+          node-version : '20.20.2'
 
       - name : Install tsp
         run : npm install -g @typespec/compiler@0.64.0
@@ -41,15 +41,15 @@ jobs:
           tsp compile .
 
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@67fbcbb121271f7775d2e7715933280b06314838 # v1
+        uses: aws-actions/configure-aws-credentials@67fbcbb121271f7775d2e7715933280b06314838 # v1.7.0
         with:
           aws-access-key-id: ${{secrets.TOWER_CI_AWS_ACCESS}}
           aws-secret-access-key: ${{secrets.TOWER_CI_AWS_SECRET}}
           aws-region: eu-west-1
 
       - name : Login to Amazon ECR
         id : login-ecr
-        uses : aws-actions/amazon-ecr-login@5a88a04c91d5c6f97aae0d9be790e64d9b1d47b7 # v1
+        uses : aws-actions/amazon-ecr-login@5a88a04c91d5c6f97aae0d9be790e64d9b1d47b7 # v1.7.1
 
       - name: Release OpenAPI docs
         if: "contains(github.event.head_commit.message, '[release]')"

gradle/libs.versions.toml

@@ -1,7 +1,7 @@
 [versions]
 # Gradle plugins
 foojay = "1.0.0"
-jib = "3.4.5"
+jib = "3.5.3"
 micronaut-plugin = "4.1.1"
 
 # Seqera internal libraries
@@ -27,29 +27,29 @@ lib-serde = "1.2.0"
 lib-serde-moshi = "1.1.0"
 
 # Third-party libraries
-byte-buddy = "1.14.17"
-caffeine = "3.1.8"
-commons-compress = "1.27.1"
-commons-lang3 = "3.18.0"
+byte-buddy = "1.17.5"
+caffeine = "3.2.0"
+commons-compress = "1.28.0"
+commons-lang3 = "3.20.0"
 failsafe = "3.1.0"
-gson = "2.10.1"
-guava = "33.3.1-jre"
-jakarta-persistence-api = "3.0.0"
+gson = "2.13.1"
+guava = "33.4.8-jre"
+jakarta-persistence-api = "3.1.0"
 jaxb-api = "2.3.1"
 jedis = "5.1.3"
 kubernetes-client = "24.0.0"
-logback = "1.5.20"
+logback = "1.5.32"
 luaj = "3.0.1"
 moshi = "1.15.2"
 netty-bom = "4.2.10.Final"
-netty-tcnative = "2.0.0.Final"
+netty-tcnative = "2.0.71.Final"
 objenesis = "3.4"
 postgresql = "42.7.7"
-resilience4j = "0.17.0"
-slf4j = "2.0.16"
-snakeyaml = "2.2"
+resilience4j = "2.3.0"
+slf4j = "2.0.17"
+snakeyaml = "2.4"
 spillway = "3.0.0"
-spock = "2.3-groovy-4.0"
+spock = "2.4-groovy-4.0"
 
 [libraries]
 # Jakarta