chore(deps): update all non-major dependencies

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/setup-java	action	minor	v3.12.0 -> v3.13.0
github/codeql-action	action	minor	v2.21.5 -> v2.22.3
ossf/scorecard-action	action	minor	v2.2.0 -> v2.3.0
step-security/harden-runner	action	minor	v2.5.1 -> v2.6.0
org.apache.maven.plugins:maven-shade-plugin	build	patch	3.5.0 -> 3.5.1
org.eclipse.jetty:jetty-client (source)	test	patch	9.4.52.v20230823 -> 9.4.53.v20231009
org.apache.maven.plugins:maven-javadoc-plugin	build	minor	3.5.0 -> 3.6.0
org.eclipse.jetty:jetty-server (source)	compile	patch	9.4.52.v20230823 -> 9.4.53.v20231009
org.eclipse.jetty:jetty-servlet (source)	compile	patch	9.4.52.v20230823 -> 9.4.53.v20231009
com.google.cloud.tools:appengine-maven-plugin	compile	minor	2.4.4 -> 2.5.0
org.apache.maven:maven-core	compile	patch	3.9.4 -> 3.9.5
org.apache.maven:maven-plugin-api	compile	patch	3.9.4 -> 3.9.5

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the logs for more information.

---

Release Notes

actions/setup-java (actions/setup-java)

v3.13.0

Compare Source

What's changed

In the scope of this release, support for Dragonwell JDK was added by @​Accelerator1996 in https://github.com/actions/setup-java/pull/532

steps:
 - name: Checkout
   uses: actions/checkout@v3
 - name: Setup-java
   uses: actions/setup-java@v3
   with:
     distribution: 'dragonwell'
     java-version: '17'

Several inaccuracies were also fixed:

• Fix XML namespaces wrongly using https by @​gnodet in https://github.com/actions/setup-java/pull/503
• Fix typo and remove unintentional(?) word by @​CyberFlameGO in https://github.com/actions/setup-java/pull/518
• Fix usage link within the README.md file by @​dassiorleando in https://github.com/actions/setup-java/pull/525

New Contributors

• @​CyberFlameGO made their first contribution in https://github.com/actions/setup-java/pull/518
• @​dassiorleando made their first contribution in https://github.com/actions/setup-java/pull/525
• @​gnodet made their first contribution in https://github.com/actions/setup-java/pull/503
• @​Accelerator1996 made their first contribution in https://github.com/actions/setup-java/pull/532

Full Changelog: actions/setup-java@v3...v3.13.0

github/codeql-action (github/codeql-action)

v2.22.3

Compare Source

v2.22.2

Compare Source

v2.22.1

Compare Source

v2.22.0

Compare Source

v2.21.9

Compare Source

v2.21.8

Compare Source

v2.21.7

Compare Source

v2.21.6

Compare Source

ossf/scorecard-action (ossf/scorecard-action)

v2.3.0

Compare Source

What's Changed

• 🌱 Bump github.com/ossf/scorecard/v4 from v4.11.0 to v4.13.0 by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1270
  • For a full changelist of what this includes, see the v4.12.0 and v4.13.0 release notes
• ✨ Send rekor tlog index to webapp when publishing results by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1169
• 🐛 Prevent url clipping for GHES instances by @​rajbos in https://github.com/ossf/scorecard-action/pull/1225

Documentation

• 📖 Update access rights needed to see the results in code scanning by @​rajbos in https://github.com/ossf/scorecard-action/pull/1229
• 📖 Add package comments. by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1221
• 📖 Add SECURITY.md file by @​david-a-wheeler in https://github.com/ossf/scorecard-action/pull/1250
• 📖 Fix typo in token input docs by @​aabouzaid in https://github.com/ossf/scorecard-action/pull/1258

New Contributors

• @​david-a-wheeler made their first contribution in https://github.com/ossf/scorecard-action/pull/1250
• @​aabouzaid made their first contribution in https://github.com/ossf/scorecard-action/pull/1258

Full Changelog: ossf/scorecard-action@v2.2.0...v2.3.0

step-security/harden-runner (step-security/harden-runner)

v2.6.0

Compare Source

What's Changed

Release v2.6.0 by @​varunsh-coder in https://github.com/step-security/harden-runner/pull/346

This release adds support for self-hosted Virtual Machine runners (e.g. on EC2).

• Both ephemeral and persistent self-hosted VM runners are supported
• Documentation: https://docs.stepsecurity.io/harden-runner/how-tos/enable-runtime-security-vm

Full Changelog: step-security/harden-runner@v2...v2.6.0

GoogleCloudPlatform/app-maven-plugin (com.google.cloud.tools:appengine-maven-plugin)

v2.5.0

Compare Source

• Update to appengine-plugins-core 0.10.0 that supports GAE java17 and java21 runtimes.

---

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.