Dependabot updates

.github/actions/build/action.yml

@@ -14,14 +14,14 @@ runs:
   using: 'composite'
   steps:
     - name: Set up Java
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6
       with:
         distribution: 'temurin'
         java-version: ${{ inputs.java-version }}
         cache: maven
 
     - name: Set up Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
       with:
         node-version: ${{ inputs.node-version }}
         cache: 'npm'
@@ -41,4 +41,4 @@ runs:
       shell: bash
       working-directory: tests/integration-tests
       run: |
-        mvn compile test-compile -DskipTests=true -B -V
+        mvn compile test-compile -DskipTests=true -B -V

.github/actions/test/action.yml

@@ -14,14 +14,14 @@ runs:
   using: 'composite'
   steps:
     - name: Set up Java
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6
       with:
         distribution: 'temurin'
         java-version: ${{ inputs.java-version }}
         cache: maven
 
     - name: Set up Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
       with:
         node-version: ${{ inputs.node-version }}
         cache: 'npm'
@@ -35,4 +35,4 @@ runs:
       shell: bash
       working-directory: samples/bookshop
       run: |
-        mvn test -B -V
+        mvn test -B -V

.github/workflows/check-changelog.yml

@@ -9,6 +9,6 @@ jobs:
     name: Check Changelog Action
     runs-on: ubuntu-latest
     steps:
-      - uses: tarides/changelog-check-action@v3
+      - uses: tarides/changelog-check-action@8f47e0becbfa549e4c82a3f562aa6f90d2c2ee8c # v4
         with:
-          changelog: CHANGELOG.md
+          changelog: CHANGELOG.md

.github/workflows/linter.yml

@@ -6,9 +6,9 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Set up JDK 21
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6
         with:
           java-version: '21'
           distribution: 'temurin'

.github/workflows/main.yml

@@ -17,7 +17,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Scan With Black Duck
         uses: cap-java/.github/actions/scan-with-blackduck@9fc20a42d6556aa4cab5fcfe0f58002aa4851103 # main
@@ -44,7 +44,7 @@ jobs:
       packages: read
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Scan With CodeQL
         uses: cap-java/.github/actions/scan-with-codeql@296573b55e906f5c77a1855bcfe4285cbbc5cac4 # main

.github/workflows/pr.yml

@@ -24,7 +24,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Scan With Black Duck
         uses: cap-java/.github/actions/scan-with-blackduck@9fc20a42d6556aa4cab5fcfe0f58002aa4851103 # main
@@ -52,7 +52,7 @@ jobs:
       packages: read
     steps:
       - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Scan With CodeQL
         uses: cap-java/.github/actions/scan-with-codeql@9fc20a42d6556aa4cab5fcfe0f58002aa4851103 # main

.github/workflows/test.yml

@@ -17,7 +17,7 @@ jobs:
 
     steps:
     - name: Checkout code
-      uses: actions/checkout@v6
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
     - name: Test CAP Projects
       uses: ./.github/actions/test

pom.xml

@@ -18,7 +18,7 @@
 		<!-- DEPENDENCIES VERSION -->
 		<jdk.version>21</jdk.version>
 		<cds.services.version>5.0.0</cds.services.version>
-    	<spring.boot.version>4.1.0</spring.boot.version>
+    	<spring.boot.version>4.1.1</spring.boot.version>
 
 		<cds.install-node.downloadUrl>https://nodejs.org/dist/</cds.install-node.downloadUrl>
 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
@@ -93,7 +93,7 @@
 			<plugin>
 				<groupId>org.codehaus.mojo</groupId>
 				<artifactId>flatten-maven-plugin</artifactId>
-				<version>1.7.3</version>
+				<version>1.8.0</version>
 				<configuration>
 					<updatePomFile>true</updatePomFile>
 					<flattenMode>resolveCiFriendliesOnly</flattenMode>
@@ -119,7 +119,7 @@
 			<!-- PROJECT STRUCTURE CHECKS -->
 			<plugin>
 				<artifactId>maven-enforcer-plugin</artifactId>
-				<version>3.6.2</version>
+				<version>3.6.3</version>
 				<executions>
 					<execution>
 						<id>Project Structure Checks</id>