[RUN-0000] Update gradle minor/patch dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
pl.allegro.tech.build.axion-release	1.21.2 → 1.21.3
org.objenesis:objenesis (source)	3.5 → 3.6
org.apache.groovy:groovy-all (source)	4.0.32 → 4.0.33
org.rundeck:rundeck-core (source)	6.1.0-SNAPSHOT → 6.1.0-20260803
org.bouncycastle:bcprov-jdk18on (source)	1.85 → 1.85.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates pinned dependency versions in the Gradle version catalog to move off a snapshot Rundeck core and refresh Groovy/Objenesis.

Changes:

• Pin rundeckCore from 6.1.0-SNAPSHOT to a date-stamped build 6.1.0-20260803
• Bump groovy from 4.0.32 to 4.0.33
• Bump objenesis from 3.5 to 3.6

[fdevans]

This PR as opened broke the build: it bumped a shared bouncycastle version variable to 1.85.2 based on bcprov-jdk18on having that release, but bcpkix-jdk18on's latest is still 1.85 — there is no bcpkix-jdk18on:1.85.2 (confirmed against Maven Central's own metadata). Since both artifacts shared one version reference, the bump broke dependency resolution for bcpkix entirely.

Pushed a fix: split them into independent version variables (bcprovVersion / bcpkixVersion) so bcprov can take its patch release without waiting on a bcpkix release that may not be coming. Verified the resolved dependency graph: bcprov-jdk18on → 1.85.2, bcpkix-jdk18on → 1.85, and Gradle correctly unifies the transitive bcprov dependency pulled in via bcpkix → bcutil to the same 1.85.2 — so there's no split version actually on the runtime classpath, just independently-tracked declarations. Build and full test suite (37 tests) pass.