Update CI to work again

.github/workflows/ci.yml

@@ -8,29 +8,36 @@ on:
   push:
     branches: [ master, release/* ]
 
+permissions:
+  contents: read
+
 jobs:
   linux:
     name: Linux
     runs-on: ubuntu-latest
     timeout-minutes: 30
 
     steps:
-      - uses: actions/checkout@v2
+      - name: Checkout code
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
 
       - name: Set up JDK
-        uses: actions/setup-java@v2
+        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
         with:
-          java-version: 16
+          java-version: 25
           distribution: 'temurin'
 
-      - uses: burrunan/gradle-cache-action@a54b6ce2cbbba932e5d142129dddef103e6ad143 #v1.19
-        name: Build with Gradle
-        with:
-          arguments: build
+      - name: Setup Gradle
+        uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 # zizmor: ignore[cache-poisoning]
+
+      - name: Build with Gradle
+        run: ./gradlew build
 
       - name: Upload Test Results
         if: always()
-        uses: actions/upload-artifact@v2
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: Test Results Linux
           path: '**/test-results/**/*.xml'

.github/workflows/zizmor.yml

@@ -0,0 +1,25 @@
+name: Security Audit
+
+on:
+  push:
+    branches: [ master, release/* ]
+  pull_request:
+
+permissions: {}
+
+jobs:
+  zizmor:
+    name: zizmor
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      security-events: write
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+
+      - uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}

gradle/wrapper/gradle-wrapper.properties

@@ -1,5 +1,5 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-7.5-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-9.6.0-bin.zip
 zipStoreBase=GRADLE_USER_HOME
 zipStorePath=wrapper/dists

jabel-javac-plugin/build.gradle.kts

@@ -8,7 +8,7 @@ val jabelVersion: String by project
 version = jabelVersion
 
 dependencies {
-    implementation(platform("net.bytebuddy:byte-buddy-parent:1.14.9"))
+    implementation(platform("net.bytebuddy:byte-buddy-parent:1.18.10"))
     implementation("net.bytebuddy:byte-buddy")
     implementation("net.bytebuddy:byte-buddy-agent")
     implementation("net.java.dev.jna:jna:5.13.0")

settings.gradle.kts

@@ -19,15 +19,16 @@ pluginManagement {
 }
 
 plugins {
-    `gradle-enterprise`
+    id("com.gradle.develocity") version "4.4.3"
 }
 
 val isCiServer = System.getenv().containsKey("CI")
 
-gradleEnterprise {
+develocity {
     buildScan {
-        termsOfServiceUrl = "https://gradle.com/terms-of-service"
-        termsOfServiceAgree = "yes"
+        termsOfUseUrl = "https://gradle.com/terms-of-service"
+        termsOfUseAgree.set("yes")
+        publishing.onlyIf { _ -> false }
         if (isCiServer) {
             tag("CI")
         }