chore(deps): bump com.gradleup.shadow from 9.5.0 to 9.6.1

[dependabot]

Bumps com.gradleup.shadow from 9.5.0 to 9.6.1.

Release notes

Sourced from com.gradleup.shadow's releases.

9.6.1

Changed

• Use GradleException for expected build failures. (#2113)

Fixed

• Preserve repeated lines in R8 rule files when using minimize { r8 { ... } }. (#2115)

9.6.0

Added

• Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#2089)

Changed

• Rename ShadowDslMarker to ShadowDsl. (#2091)
• POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#2090)
  This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.

Fixed

• Validate ZIP entry names to prevent Zip Slip path traversal.
• Avoid resolving unused R8 dependency. (#2101)

9.5.1

Fixed

• Fix eager calls for toolchainSpec in Kotlin DSL. (#2087)

Commits

• 185da5d Prepare version 9.6.1
• b309bc5 Extract addIncludedDependencies (#2116)
• 46b3544 Preserve repeated lines in R8 rule files (#2115)
• c0d4f0d Revert "Reland Tapmoc (#2111)"
• ff1809f Use GradleException for expected build failures (#2113)
• dc0ee64 Update plugin tapmoc to v0.4.2 (#2112)
• 398afcd Reland Tapmoc (#2111)
• 3ca69d5 Gradle 9.7.0-rc-1 (#2110)
• aaaacd2 Prepare next development version
• fb36668 Prepare version 9.6.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

📦 Artifacts

Name	Size	Updated	Expiration
	4.91 MB	Jul 27, 26, 8:08:50 AM UTC	Aug 3, 26, 8:08:49 AM UTC

🛡 Trivy

Vulnerability in: Java

Vulnerability	Severity	Package	Installed Version	Fixed Version
CVE-2026-10532	LOW	ch.qos.logback:logback-core	1.5.32	1.5.34
CVE-2026-9828	LOW	ch.qos.logback:logback-core	1.5.32	1.5.33
GHSA-r7wm-3cxj-wff9	HIGH	com.fasterxml.jackson.core:jackson-core	2.21.1	2.18.8, 2.21.4, 2.22.1
CVE-2026-54512	HIGH	com.fasterxml.jackson.core:jackson-databind	2.21.1	2.18.8, 3.1.4, 2.21.4
CVE-2026-54513	HIGH	com.fasterxml.jackson.core:jackson-databind	2.21.1	2.18.8, 2.21.4, 3.1.4
CVE-2026-54514	MEDIUM	com.fasterxml.jackson.core:jackson-databind	2.21.1	2.18.8, 2.21.4, 3.1.4
CVE-2026-54515	MEDIUM	com.fasterxml.jackson.core:jackson-databind	2.21.1	3.1.4, 2.18.9, 2.21.5, 2.22.1
CVE-2026-54516	MEDIUM	com.fasterxml.jackson.core:jackson-databind	2.21.1	2.21.4, 3.1.4
CVE-2026-54517	MEDIUM	com.fasterxml.jackson.core:jackson-databind	2.21.1	2.21.4, 3.1.4
CVE-2026-54518	MEDIUM	com.fasterxml.jackson.core:jackson-databind	2.21.1	2.21.4
CVE-2026-59888	MEDIUM	com.fasterxml.jackson.core:jackson-databind	2.21.1	2.18.8, 2.21.4
CVE-2026-59889	MEDIUM	com.fasterxml.jackson.core:jackson-databind	2.21.1	2.21.5, 2.18.9, 2.22.1
GHSA-mhm7-754m-9p8w	MEDIUM	com.fasterxml.jackson.core:jackson-databind	2.21.1	2.18.9, 2.21.5

🧪 Java Unit Tests

	Tests	Passed ✅	Skipped	Failed	Time ⏱
Java Tests Report	14 ran	14 ✅	0 ⚠️	0 ❌	13s 488ms

🔁 Unreleased Commits

1 commits since v1.4.6

SHA	Title	Author	Date
a927a7d	fix: renormalize gradlew.bat line endings	François Delbrayelle	Jul 23, 26, 1:45:23 PM UTC

[github-actions]

Tests report quick summary:

success ✅ > tests: 14, success: 14, skipped: 0, failed: 0

unfold for details

Project	Status	Success	Skipped	Failed
plugin-jms	success ✅	14	0	0