build(deps): bump the prod-github-actions group across 1 directory with 2 updates

[dependabot]

Bumps the prod-github-actions group with 2 updates in the / directory: github/codeql-action and gradle/actions.

Updates github/codeql-action from 4.36.0 to 4.36.2

Release notes

Sourced from github/codeql-action's releases.

v4.36.2

• Cache CodeQL CLI version information across Actions steps. #3943
• Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #3937
• Update default CodeQL bundle version to 2.25.6. #3948

v4.36.1

No user facing changes.

Changelog

Sourced from github/codeql-action's changelog.

4.36.2 - 04 Jun 2026

• Cache CodeQL CLI version information across Actions steps. #3943
• Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #3937
• Update default CodeQL bundle version to 2.25.6. #3948

4.36.1 - 02 Jun 2026

No user facing changes.

Commits

• 8aad20d Merge pull request #3949 from github/update-v4.36.2-dcb947ce1
• f521b08 Add additional changelog notes
• 8aeff0f Update changelog for v4.36.2
• dcb947c Merge pull request #3948 from github/update-bundle/codeql-bundle-v2.25.6
• c251bce Add changelog note
• 62953c1 Update default bundle to codeql-bundle-v2.25.6
• 423b570 Merge pull request #3946 from github/dependabot/npm_and_yarn/npm-minor-5d507a...
• c35d1b1 Merge pull request #3947 from github/dependabot/github_actions/dot-github/wor...
• cb1a588 Merge pull request #3937 from github/robertbrignull/waitForProcessing_backoff
• ba47406 Merge pull request #3943 from github/henrymercer/cache-cli-version-info
• Additional commits viewable in compare view

Updates gradle/actions from 6.1.0 to 6.2.0

Release notes

Sourced from gradle/actions's releases.

v6.2.0

Highlights

This release brings significant behaviour improvements to Enhanced caching, improvements to the generated Job Summary, and a number of correctness and security fixes.

1. Improved cache-cleanup mechanism. Cleanup of stale files from the Gradle User Home is now faster, and no longer depends on Gradle or a JVM. It works by inspecting the local file state directly, removing the Gradle invocation from the post-build step.
2. More granular, more stable caching. The local build cache is stored as a separate cache entry, so it can be restored and invalidated independently of the main Gradle User Home entry. Transient Gradle housekeeping files are excluded from the cache, reducing its size and improving stability.
3. Hide obsolete Job summaries in PR commments: When a new Job summary comment is added to a PR, previous outdated Job summaries are now hidden.
4. Improved caching report in the job summary. The cache report now uses a single, consistent layout across all cache states and providers. Provider information is integrated directly into the report, and per-entry details are available in an expandable section. (#985)
5. Correctness and security fixes. A unique cache key is now used per run attempt, so re-runs no longer collide; the job summary shows the cache key string rather than an internal id; and bundled dependencies have been updated, including a ReDoS fix and a fast-xml CVE fix.

What's Changed

• Remove unnecessary dependency overrides by @​bigdaz in gradle/actions#981
• Scope CI-integ-test concurrency groups per-branch by @​bigdaz in gradle/actions#983
• Improve typings by @​Vampire in gradle/actions#938
• Hide obsolete Job summaries by @​SimonMarquis in gradle/actions#902
• CI: add requireable aggregate/no-op checks for branch protection by @​bigdaz in gradle/actions#984
• Redesign the caching Job Summary by @​bigdaz in gradle/actions#985

New Contributors

• @​Vampire made their first contribution in gradle/actions#938

Full Changelog: gradle/actions@v6.1.1...v6.2.0

v6.1.1

This release updates various dependency versions, resolving several reported security vulnerabilities. No functional changes are included

What's Changed

• Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /sources/test/init-scripts by @​bot-githubaction in gradle/actions#961
• Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /.github/workflow-samples/gradle-plugin by @​bot-githubaction in gradle/actions#962
• Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /.github/workflow-samples/groovy-dsl by @​bot-githubaction in gradle/actions#963
• Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /.github/workflow-samples/java-toolchain by @​bot-githubaction in gradle/actions#964
• Bump Gradle Wrapper from 9.4.1 to 9.5.1 in /.github/workflow-samples/kotlin-dsl by @​bot-githubaction in gradle/actions#965
• Update known wrapper checksums by @​github-actions[bot] in gradle/actions#937
• Bump the github-actions group across 2 directories with 8 updates by @​dependabot[bot] in gradle/actions#976
• Bump the npm-dependencies group across 1 directory with 14 updates by @​dependabot[bot] in gradle/actions#970
• Bump references to Develocity Gradle plugin from 4.4.0 to 4.4.2 by @​bot-githubaction in gradle/actions#973
• Bump the npm-dependencies group in /sources with 5 updates by @​dependabot[bot] in gradle/actions#977
• Update @​actions/cache and @​actions/artifact, stop ignoring them in Dependabot by @​bigdaz in gradle/actions#978
• Resolve npm security vulnerabilities via dependency overrides by @​bigdaz in gradle/actions#980

Full Changelog: gradle/actions@v6.1.0...v6.1.1

Commits

• 3f131e8 [bot] Update dist directory
• 97715a2 Redesign the caching Job Summary (#985)
• 8b6cdb5 CI: add requireable aggregate/no-op checks for branch protection (#984)
• 5852e0e [bot] Update dist directory
• 318eed7 Hide obsolete Job summaries (#902)
• a740661 Improve typings (#938)
• 7ae0d02 Update gradle-actions-caching library to v0.6.0 (#982)
• e473973 Scope CI-integ-test concurrency groups per-branch
• 35a4a3f Queue up integ-test runs
• b6eebf3 [bot] Update dist directory
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions