Update dependencies

[fabian-barney]

Summary

• Updates crap-java plugin usage to 0.6.1.
• Updates JUnit to 6.1.0, Surefire to 3.5.6, and Gradle plugin JaCoCo to 0.8.14.
• Makes Surefire 3.5.6 offline-safe by declaring the JUnit Platform provider and platform artifacts as plugin dependencies.
• Fixes Gradle plugin test SpotBugs findings and updates the Gradle wrapper to 9.5.1.
• Keeps the release workflow checkout pin refresh from this PR.

Version decisions

• Preserves Java 17 compatibility.
• Keeps Jackson at 2.21.3 because the 2.22.0 BOM is published but jackson-core:2.22.0 is not resolvable from Maven Central.
• Leaves Maven integration-test fixture POMs unchanged as compatibility fixtures.

Review focus

• Surefire plugin dependency wiring in the root POM.
• Test-only nullability helpers around Path#getParent(), Path#getFileName(), and Path#getRoot().
• Gradle 9.5.1 task cacheability annotation for the custom Gradle task.

Validation

• mvn -B -ntp -P!quality-gates-all -DskipTests install
• mvn -B -ntp -P!quality-gates-all,quality-gate-spotbugs -DskipTests org.apache.maven.plugins:maven-dependency-plugin:3.7.0:go-offline
• mvn -B -ntp -P!quality-gates-all -o verify
• mvn -B verify
• mvn -B -Pquality-gate-spotbugs verify
• mvn -B -Pnullaway verify
• cd gradle-plugin; .\gradlew.bat check validatePlugins
• cd gradle-plugin; .\gradlew.bat test validatePlugins publishToMavenLocal
• GitHub CI is green on the latest push.

Closes #83

[Copilot]

Pull request overview

This PR updates the repository’s dependency/tooling versions (Maven + Gradle plugin build) while keeping the Java 17 baseline, and refreshes the pinned checkout revision used by the release workflow.

Changes:

• Bumped media.barney:crap-java-maven-plugin to 0.6.1 and JUnit BOM to 6.1.0 in the parent Maven POM.
• Updated Maven Surefire to 3.5.6 and aligned JaCoCo tooling to 0.8.14 across Maven and the Gradle plugin build.
• Refreshed the actions/checkout pin used in .github/workflows/release.yml.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
pom.xml	Updates Maven-managed dependency/tooling versions (crap-java, JUnit BOM, Surefire, JaCoCo).
gradle-plugin/build.gradle.kts	Aligns Gradle plugin JaCoCo tool version to 0.8.14.
.github/workflows/release.yml	Updates the pinned actions/checkout revision used for release publishing.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 7 out of 7 changed files in this pull request and generated 1 comment.