chore: update shadow to v9.6.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
com.gradleup.shadow:shadow-gradle-plugin	9.3.1 → 9.6.1
com.gradleup.shadow	9.3.1 → 9.6.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

GradleUp/shadow (com.gradleup.shadow:shadow-gradle-plugin)

v9.6.1

Compare Source

Changed

• Use GradleException for expected build failures. (#​2113)

Fixed

• Preserve repeated lines in R8 rule files when using minimize { r8 { ... } }. (#​2115)

v9.6.0

Compare Source

Added

• Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#​2089)

Changed

• Rename ShadowDslMarker to ShadowDsl. (#​2091)
• POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#​2090)
  This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.

Fixed

• Validate ZIP entry names to prevent Zip Slip path traversal.
• Avoid resolving unused R8 dependency. (#​2101)

v9.5.1

Compare Source

Fixed

• Fix eager calls for toolchainSpec in Kotlin DSL. (#​2087)

v9.5.0

Compare Source

Added

• Check DuplicatesStrategy for merging transformers. (#​2026)
  This will log warnings when an incompatible DuplicatesStrategy (e.g., EXCLUDE) is applied in Gradle configuration for built-in ResourceTransformers.
• Add KotlinModuleMetadataTransformer. (#​2073)
• Add R8 as an opt-in minimize { r8 { ... } } tool for shrinking the final shadowed JAR. (#​2077)

Changed

• Bump min Gradle requirement to 9.2.0. (#​2057)
• Remove afterEvaluate when adding variants. (#​2056)

Deprecated

• Deprecate enableKotlinModuleRemapping for ShadowJar. (#​2073)
  Apply KotlinModuleMetadataTransformer explicitly to support relocating inside Kotlin module metadata files.
  This flag will be disabled and removed in the next major release.
• Deprecate everything under ShadowCopyAction. (#​2083)

Fixed

• Fix the conflicts when using afterEvaluate with other plugins. (#​2055)

v9.4.3

Compare Source

Changed

• Update dependencies for resolving CVEs. (#​2069)

v9.4.2

Compare Source

Changed

• Update jdependency to support Java 27. (#​2033)

v9.4.1

Compare Source

Changed

• Update Kotlin to 2.3.20. (#​1978)

v9.4.0

Compare Source

Added

• Support Isolated Projects. (#​1139)

Changed

• Allow opting out of adding shadowJar into assemble lifecycle. (#​1939)

  shadow {
    // Disable making `assemble` task depend on `shadowJar`. This is enabled by default.
    addShadowJarToAssembleLifecycle = false
  }

• Stop catching ZipException when writing entries. (#​1970)

Fixed

• Fix interaction with Gradle artifact transforms. (#​1345)
• Fix skipStringConstants per-relocator behavior in mapName. (#​1968)
• Fix failing for non-existent class directories. (#​1976)

v9.3.2

Compare Source

Changed

• Stop moving gradleApi dependency from api to compileOnly for Gradle 9.4+. (#​1919)
• Log warnings for duplicates in the final JAR. (#​1931)

Fixed

• Fix relocation patterns not included in task fingerprint. (#​1933)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Test Results

0 files   -  56  0 suites   - 56   0s ⏱️ - 3m 38s
0 tests  - 572  0 ✅  - 572  0 💤 ±0  0 ❌ ±0 
0 runs   - 939  0 ✅  - 939  0 💤 ±0  0 ❌ ±0 

Results for commit ff72f2d. ± Comparison against base commit ebfea44.