build(deps): bump advanced-security/maven-dependency-submission-action from 2.0.0 to 4.1.1

[dependabot]

Bumps advanced-security/maven-dependency-submission-action from 2.0.0 to 4.1.1.

Release notes

Sourced from advanced-security/maven-dependency-submission-action's releases.

v4.1.1

No release notes provided.

v4.1.0

• Adds the ability to change the detector details for the dependency snapshots via the optional input parameters:

  • detector-name
  • detector-url
  • detector-version

  If the detector-name is specified, then all three become mandatory as there are no sensible defaults that can be attributed to the values.

v4.0.3

• Updating the build process and tooling for Node 20 support in the CLI executables which were introduced when the dependency-submission-toolkit transitioned in to an ESM module

• Fixes #69 #61

v4.0.2

No release notes provided.

v4.0.1

• Updating branding for the marketplace
• Utilizing rollup to build cli executables as the ESM module for the dependency-submission-toolkit broke the 4.0.0 pkg based executable builds.

v4.0.0

Version 4.0.0 release:

• Breaking change, the name presented in the submission report now matches the current name of the repository maven-dependency-submission-action (previously it was moved from a repository called maven-dependency-tree-action)
• When running the GitHub Action the ref and sha are injected as inputs (with defaults to the current workflow values)
• Updated dependencies, specifically dependency-submission-toolkit that includes improvements to uploading of the snapshots and error handling around unhappy path scenarios
• CLI application options made compatible with the GitHub Actions inputs
• CLI applications made available as part of the release process and notes
• Project testing and releases - swapped jest out for vitest and added GitHub Actions release workflow

v3.0.3

• Fixes issue with POMs that set a non-default outputDirectory resulting is no dependency data being found and uploaded #48.

v3.0.2

What's Changed

• Make action GHES compatible by @​cnagadya in advanced-security/maven-dependency-submission-action#40

New Contributors

• @​cnagadya made their first contribution in advanced-security/maven-dependency-submission-action#40

Full Changelog: advanced-security/maven-dependency-submission-action@v3...v3.0.2

v3.0.1

• Updated to latest dependency snapshot library 1.2.10
• Fixed error in the cli tools that was incorrectly validating the branch specification #26
• Correctly injecting the additional maven command line options #28

... (truncated)

Commits

• 4f64dda chore: Updating release files
• dba3dac 4.1.1
• 4883574 Merge pull request #89 from david-wiggs/hotfix/fix-test
• 33e1d3d Remove reference to undefined function
• 4b85c77 Merge pull request #88 from david-wiggs/unique-job-matrix
• 73d9d97 Update src/snapshot-generator.test.ts
• 967455e No need to import getMavenSettingsFile when testing
• 7592e88 Use supplied correlator without concatenation
• 2ba839e Add some tests
• 5275a08 Address merge conflicts
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)