chore(deps): update wetransform/gha-workflows action to v3

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
wetransform/gha-workflows	action	major	v2.1.0 -> v3.4.0

---

Release Notes

wetransform/gha-workflows (wetransform/gha-workflows)

v3.4.0

Compare Source

Features

• support using custom runner based on variable (2597a86)

Bug Fixes

• deps: update all non-major dependencies (602e4a0)

v3.3.2

Compare Source

Bug Fixes

• gradle-service: add missing secret declaration (64f333a)

v3.3.1

Compare Source

Bug Fixes

• deps: update all non-major dependencies (e5bf273)

v3.3.0

Compare Source

Features

• dockerfile: support passing in custom checkout ref (6971128)

v3.2.1

Compare Source

Bug Fixes

• deps: update all non-major dependencies (85c4f89)
• deps: update mikepenz/action-junit-report action to v5 (18440a9)

v3.2.0

Compare Source

Features

• gradle: support private submodules (b25037a)

Bug Fixes

• deps: update actions/setup-java action to v4.5.0 (7d4f56b)
• deps: update all non-major dependencies (4b90a85)

v3.1.1

Compare Source

Bug Fixes

• deps: update all non-major dependencies (56654b2)
• deps: update all non-major dependencies (84f4033)

v3.1.0

Compare Source

Features

• gradle: login to Docker Hub if credentials are provided (646fe8e)

v3.0.0

Compare Source

⚠ BREAKING CHANGES

• gradle-service: Gradle task configuration for Gradle services now split
  across two input variables to separate checks from publishing.

Features

• gradle-service: support semantic release (721629b)

Bug Fixes

• deps: update docker/build-push-action action to v6.8.0 (d69c9d7)
• deps: update docker/build-push-action action to v6.9.0 (ac3db1a)

v2.5.1

Compare Source

Bug Fixes

• deps: update actions/create-github-app-token action to v1.10.4 (73e877b)
• deps: update all non-major dependencies (07bbc00)
• deps: update all non-major dependencies (2ef3de6)
• deps: update all non-major dependencies (9894f6b)
• deps: update all non-major dependencies (9106618)

v2.5.0

Compare Source

Features

• gradle-library: attempt artifact upload also on failure (52e8930)
• gradle-library: pass on artifact input parameters (7256ee1)

Bug Fixes

• gradle-library: fix artifact upload condition (82bde79)

v2.4.0

Compare Source

Features

• gradle-library: add outputs related to release (1c0252b)
• gradle-library: support skipping security scan (4586a5d)
• gradle-library: supported nested subprojects (be1659a)
• gradle: support specifying custom Git ref to check out (4243206)

Bug Fixes

• deps: update all non-major dependencies (6342262)
• deps: update all non-major dependencies (03162c8)
• deps: update all non-major dependencies (75cadd9)
• deps: update all non-major dependencies (9ca5947)
• deps: update gradle/actions action to v4 (714271b)

v2.3.0

Compare Source

Features

• scan-images: create combined vulnerability report (7bb6d66)
• scan-images: support logging in to secondary registry (5c14dfc), closes ING-4250
• scan-images: support passing in environment to use (5de883d)
• scan-images: support secondary registry from variable (e2ca84d), closes ING-4250

Bug Fixes

• deps: update all non-major dependencies (8db3e0b)
• scan-images: disable scanning merged SBOM by default (378360e)

v2.2.1

Compare Source

Bug Fixes

• deps: update all non-major dependencies (5bf2a0f)
• gradle-service: check out all tags (8b5c150)

v2.2.0

Compare Source

Features

• deps: update wetransform/gha-trivy action to v2 (fffeaac)
• scan-images: include SBOM of scanned images and merge them (e001ea3)
• scan-images: remove individual SBOM and HTML report artifacts (f804d9f)

Bug Fixes

• deps: pin jaxxstorm/action-install-gh-release action to 25d5e2d (7de1fbc)
• deps: update actions/checkout action to v4.1.6 (2e2eaa7)
• deps: update all non-major dependencies (7b16a5f)
• deps: update all non-major dependencies (4345049)
• deps: update all non-major dependencies (7af9039)
• deps: update docker/build-push-action action to v5.4.0 (15e42be)
• deps: update docker/build-push-action action to v6 (2622b71)
• deps: update wetransform/gha-gradle-semantic-release action to v2.1.0 (8caa0d2)
• scan-images: fix typo (a9c893a)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.