build(deps): update dependency com.gradleup.shadow:shadow-gradle-plugin to v9.6.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
com.gradleup.shadow:shadow-gradle-plugin	9.4.1 → 9.6.0

---

Release Notes

GradleUp/shadow (com.gradleup.shadow:shadow-gradle-plugin)

v9.6.0

Compare Source

Added

• Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#​2089)

Changed

• Rename ShadowDslMarker to ShadowDsl. (#​2091)
• POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#​2090)
  This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.

Fixed

• Validate ZIP entry names to prevent Zip Slip path traversal.
• Avoid resolving unused R8 dependency. (#​2101)

v9.5.1

Compare Source

Fixed

• Fix eager calls for toolchainSpec in Kotlin DSL. (#​2087)

v9.5.0

Compare Source

Added

• Check DuplicatesStrategy for merging transformers. (#​2026)
  This will log warnings when an incompatible DuplicatesStrategy (e.g., EXCLUDE) is applied in Gradle configuration for built-in ResourceTransformers.
• Add KotlinModuleMetadataTransformer. (#​2073)
• Add R8 as an opt-in minimize { r8 { ... } } tool for shrinking the final shadowed JAR. (#​2077)

Changed

• Bump min Gradle requirement to 9.2.0. (#​2057)
• Remove afterEvaluate when adding variants. (#​2056)
• Deprecate enableKotlinModuleRemapping for ShadowJar. (#​2073)
  Apply KotlinModuleMetadataTransformer explicitly to support relocating inside Kotlin module metadata files.
• Deprecate everything under ShadowCopyAction. (#​2083)

Fixed

• Fix the conflicts when using afterEvaluate with other plugins. (#​2055)

v9.4.3

Compare Source

Changed

• Update dependencies for resolving CVEs. (#​2069)

v9.4.2

Compare Source

Changed

• Update jdependency to support Java 27. (#​2033)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

📊 Test Report

View the detailed test results: JUnit Report

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[github-actions]

📊 Test Report

View the detailed test results: JUnit Report

[github-actions]

📊 Test Report

View the detailed test results: JUnit Report

[github-actions]

📊 Test Report

View the detailed test results: JUnit Report