chore(deps): update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
fossas/fossa-action	action	minor	v1.8.0 → v1.9.0
gradle/actions	action	minor	v6.0.1 → v6.1.0

---

Release Notes

fossas/fossa-action (fossas/fossa-action)

v1.9.0

Compare Source

What's Changed

• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​245
• Bump @​actions/tool-cache from 3.0.1 to 4.0.0 by @​dependabot[bot] in #​267
• Bump undici from 6.23.0 to 6.24.1 by @​spatten in #​275
• Add CI workflow to auto-rebuild dist by @​spatten in #​276
• Bump actions/upload-artifact from 4 to 7 by @​dependabot[bot] in #​272
• Add CodeRabbit configuration by @​chad-fossa in #​271
• Bump @​types/node from 25.2.0 to 25.2.1 by @​dependabot[bot] in #​269

New Contributors

• @​chad-fossa made their first contribution in #​271

Full Changelog: fossas/fossa-action@v1.8.0...v1.9.0

gradle/actions (gradle/actions)

v6.1.0

Compare Source

New: Basic Cache Provider

A new MIT-licensed Basic Caching provider is now available as an alternative to the proprietary Enhanced Caching provided by gradle-actions-caching. Choose Basic Caching by setting cache-provider: basic on setup-gradle or dependency-submission actions.

• Built on @actions/cache -- fully open source
• Caches ~/.gradle/caches and ~/.gradle/wrapper directories
• Cache key derived from build files (*.gradle*, gradle-wrapper.properties, etc.)
• Clean cache on build file changes (no restore keys, preventing stale entry accumulation)

Limitations vs Enhanced Caching: No cache cleanup, no deduplication of cached content, cached content is fixed unless build files change.

Revamped Licensing & Distribution Documentation

• New DISTRIBUTION.md documents the licensing of each component (particularly Basic Caching vs Enhanced Caching)
• Simplified licensing notices in README, docs, and runtime log output
• Clear usage tiers: Enhanced Caching is free for public repos and in Free Preview for private repos

What's Changed

• Use a unique cache entry for wrapper-validation test by @​bigdaz in #​921
• Update Dependencies by @​bigdaz in #​922
• Update dependencies and resolve npm vulnerabilities by @​bigdaz in #​933
• Add open-source 'basic' cache provider and revamp licensing documentation by @​bigdaz in #​930
• Restructure caching documentation for basic and enhanced providers by @​bigdaz in #​934

Full Changelog: gradle/actions@v6.0.1...v6.1.0

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 07:59 AM, only on Tuesday ( * 0-7 * * 2 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.