chore(deps): bump advanced-security/maven-dependency-submission-action from 2.0.1 to 4.1.2

[dependabot]

Bumps advanced-security/maven-dependency-submission-action from 2.0.1 to 4.1.2.

Release notes

Sourced from advanced-security/maven-dependency-submission-action's releases.

v4.1.2

What's Changed

• Add cycle safety for transitive dependencies by @​juxtin in advanced-security/maven-dependency-submission-action#103

New Contributors

• @​juxtin made their first contribution in advanced-security/maven-dependency-submission-action#103

Full Changelog: advanced-security/maven-dependency-submission-action@v4...v4.1.2

v4.1.1

No release notes provided.

v4.1.0

• Adds the ability to change the detector details for the dependency snapshots via the optional input parameters:

  • detector-name
  • detector-url
  • detector-version

  If the detector-name is specified, then all three become mandatory as there are no sensible defaults that can be attributed to the values.

v4.0.3

• Updating the build process and tooling for Node 20 support in the CLI executables which were introduced when the dependency-submission-toolkit transitioned in to an ESM module

• Fixes #69 #61

v4.0.2

No release notes provided.

v4.0.1

• Updating branding for the marketplace
• Utilizing rollup to build cli executables as the ESM module for the dependency-submission-toolkit broke the 4.0.0 pkg based executable builds.

v4.0.0

Version 4.0.0 release:

• Breaking change, the name presented in the submission report now matches the current name of the repository maven-dependency-submission-action (previously it was moved from a repository called maven-dependency-tree-action)
• When running the GitHub Action the ref and sha are injected as inputs (with defaults to the current workflow values)
• Updated dependencies, specifically dependency-submission-toolkit that includes improvements to uploading of the snapshots and error handling around unhappy path scenarios
• CLI application options made compatible with the GitHub Actions inputs
• CLI applications made available as part of the release process and notes
• Project testing and releases - swapped jest out for vitest and added GitHub Actions release workflow

v3.0.3

• Fixes issue with POMs that set a non-default outputDirectory resulting is no dependency data being found and uploaded #48.

v3.0.2

What's Changed

• Make action GHES compatible by @​cnagadya in advanced-security/maven-dependency-submission-action#40

New Contributors

... (truncated)

Commits

• aeab9f8 Merge pull request #106 from advanced-security/juxtin/prep-412
• bc43a53 Update step numbers
• 8ec6a0b Add note about running npm build
• 8c8c37c Merge branch 'main' into juxtin/prep-412
• 4ccf7bf Update version to 4.1.2 and update release instructions
• 973a8cf Merge pull request #104 from advanced-security/juxtin/prep-412
• 48f232b Update dist files
• 769e1e8 Prepare for 4.1.2 release
• 298a804 Upgrade version of Maven plugin
• 29fd398 Merge pull request #103 from advanced-security/juxtin/handle-cycles
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #50.