Update dependencies

[fabian-barney]

Summary

• Updates cognitive-java plugin usage to 0.6.0.
• Updates JUnit to 6.1.0, Surefire to 3.5.6, and Gradle plugin JaCoCo to 0.8.14.
• Makes Surefire 3.5.6 offline-safe by declaring the JUnit Platform provider and platform artifacts as plugin dependencies.
• Fixes Gradle plugin test SpotBugs findings and updates the Gradle wrapper to 9.5.1.

Version decisions

• Preserves Java 17 compatibility.
• Keeps Jackson at 2.21.3 because the 2.22.0 BOM is published but jackson-core:2.22.0 is not resolvable from Maven Central.
• Leaves Maven integration-test fixture POMs unchanged as compatibility fixtures.

Review focus

• Surefire plugin dependency wiring in the root POM.
• Test-only nullability helpers around Path#getParent(), Path#getFileName(), and Path#getRoot().
• Gradle 9.5.1 task cacheability annotation for the custom Gradle task.

Validation

• mvn -B -ntp -P!quality-gates-all -DskipTests install
• mvn -B -ntp -P!quality-gates-all,quality-gate-spotbugs -DskipTests org.apache.maven.plugins:maven-dependency-plugin:3.7.0:go-offline
• mvn -B -ntp -P!quality-gates-all -o verify
• mvn -B verify
• mvn -B -Pquality-gate-spotbugs verify
• mvn -B -Pnullaway verify
• cd gradle-plugin; .\gradlew.bat check validatePlugins
• GitHub CI is green on the latest push.

Closes #195

[Copilot]

Pull request overview

This PR updates the project’s dependency/tooling versions across the Maven parent build and the Gradle plugin module to keep the build/test toolchain current while preserving Java 17 compatibility.

Changes:

• Bump media.barney:cognitive-java-maven-plugin version property to 0.6.0.
• Update Maven build tooling: JUnit BOM to 6.1.0 and Maven Surefire to 3.5.6.
• Align Gradle plugin JaCoCo tool version to 0.8.14 (matching the Maven-side JaCoCo version property).

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
pom.xml	Updates shared Maven properties for cognitive-java, JUnit BOM, and Surefire; keeps JaCoCo at 0.8.14.
gradle-plugin/build.gradle.kts	Updates the Gradle plugin’s JaCoCo toolVersion to 0.8.14 for version alignment.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 6 out of 6 changed files in this pull request and generated 1 comment.