Update dependency gradle to v7.6.3

[renovate]

This PR contains the following updates:

Package	Update	Change
gradle (source)	patch	7.6.1 -> 7.6.3

---

Release Notes

gradle/gradle (gradle)

v7.6.3: 7.6.3

Compare Source

This is a patch release for 7.6. We recommend using 7.6.3 instead of 7.6.

This release addresses two security vulnerabilities:

• Incorrect permission assignment for symlinked files used in copy or archiving operations
• Possible local text file exfiltration by XML External entity injection

It also fixes the following issues:

• #​25781 Backport finalized task performance fix to 7.6.x
• #​25802 Backport cgroups fix to 7.6.x

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 7.6.3 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.3

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.3.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v7.6.2: 7.6.2

Compare Source

This is a patch release for 7.6. We recommend using 7.6.2 instead of 7.6.

This release addresses two security vulnerabilities:

• Dependency cache path traversal
• Path traversal vulnerabilities in handling of Tar archives

It also fixes the following issues:

• #​23201 Backport dependency upgrades to 7.x
• #​23202 Backport Scala incremental compilation fixes
• #​23325 Backport JSoup update to resolve CVE-2022-36033
• #​23458 Backport JUnit5 dynamic test logging bug fix
• #​23681 Dependency graph resolution: Equivalent excludes can cause un-necessary graph mutations [backport 7.x]
• #​23922 Backport "Use Compiler API data for incremental compilation after a failure" to 7.x
• #​23951 Exclude rule merging: missing optimization [Backport 7.x]
• #​24132 Extending an already resolved configuration no longer works correctly [backport 7.x]
• #​24234 7.6.1 breaks gradle-consistent-versions
• #​24390 Gradle 7.4 fails on multi release jar's with JDK 19 code
• #​24439 Gradle complains about invalid tool chain - picking up the source package location - it should just ignore them [Backport]
• #​24443 Maven artifact referenced only in dependency constraints raises IllegalStateException: Corrupt serialized resolution result [backport]
• #​24901 Backport fix for test exception that cannot be deserialized to 7.x

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 7.6.2 by updating your wrapper:

./gradlew wrapper --gradle-version=7.6.2

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.6.2.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[tobiasschaefer]

This dependency update will be taken care of in #488

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (7.6.3). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.