chore(deps): bump advanced-security/maven-dependency-submission-action from 2.0.1 to 4.0.1

[dependabot]

Bumps advanced-security/maven-dependency-submission-action from 2.0.1 to 4.0.1.

Release notes

Sourced from advanced-security/maven-dependency-submission-action's releases.

v4.0.1

• Updating branding for the marketplace
• Utilizing rollup to build cli executables as the ESM module for the dependency-submission-toolkit broke the 4.0.0 pkg based executable builds.

v4.0.0

Version 4.0.0 release:

• Breaking change, the name presented in the submission report now matches the current name of the repository maven-dependency-submission-action (previously it was moved from a repository called maven-dependency-tree-action)
• When running the GitHub Action the ref and sha are injected as inputs (with defaults to the current workflow values)
• Updated dependencies, specifically dependency-submission-toolkit that includes improvements to uploading of the snapshots and error handling around unhappy path scenarios
• CLI application options made compatible with the GitHub Actions inputs
• CLI applications made available as part of the release process and notes
• Project testing and releases - swapped jest out for vitest and added GitHub Actions release workflow

v3.0.3

• Fixes issue with POMs that set a non-default outputDirectory resulting is no dependency data being found and uploaded #48.

v3.0.2

What's Changed

• Make action GHES compatible by @​cnagadya in advanced-security/maven-dependency-submission-action#40

New Contributors

• @​cnagadya made their first contribution in advanced-security/maven-dependency-submission-action#40

Full Changelog: advanced-security/maven-dependency-submission-action@v3...v3.0.2

v3.0.1

• Updated to latest dependency snapshot library 1.2.10
• Fixed error in the cli tools that was incorrectly validating the branch specification #26
• Correctly injecting the additional maven command line options #28

v3.0.0

• Introduced support for maven multi module project, reporting as an aggregation on the top level POM
• Added support for maven wrapper if provided in the project
• Improved reporting and modification of the path to the POM file so as to be a correct link in dependency graph
• Fixed the bug reported in #19 by using more parts of the Maven coordinate system to guarantee uniqueness on the PackageURLs for the dependencies, i.e. the type and classifier are now supported if specified.

Commits

• 73da251 4.0.1
• b53c0d6 Merge pull request #63 from advanced-security/jonjanego-patch-1
• f3cbce2 Merge pull request #62 from advanced-security/esm-cli-work
• e2bc3f6 Change the branding
• 052c08f Modifications to support conversion from ESM in to CJS for the executables
• ed72a32 chore: Updating release files
• 33937f9 4.0.0
• 9300a13 Updating test time out so it can complete on a GitHub Actions runner
• bc9f3a7 Loosening test around lgged lines that change in versions of maven
• e5df479 Updating compiled dist files
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #32.