Bump com.gradleup.shadow from 8.3.11 to 9.6.1

[dependabot]

Bumps com.gradleup.shadow from 8.3.11 to 9.6.1.

Release notes

Sourced from com.gradleup.shadow's releases.

9.6.1

Changed

• Use GradleException for expected build failures. (#2113)

Fixed

• Preserve repeated lines in R8 rule files when using minimize { r8 { ... } }. (#2115)

9.6.0

Added

• Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#2089)

Changed

• Rename ShadowDslMarker to ShadowDsl. (#2091)
• POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#2090)
  This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.

Fixed

• Validate ZIP entry names to prevent Zip Slip path traversal.
• Avoid resolving unused R8 dependency. (#2101)

9.5.1

Fixed

• Fix eager calls for toolchainSpec in Kotlin DSL. (#2087)

9.5.0

[!NOTE] With the introduction of DuplicatesStrategy checking for transformers, you may see warnings like:

'META-INF/...kotlin_module' is matched by com.github.jengelman.gradle.plugins.shadow.transformers.KotlinModuleMetadataTransformer but its DuplicatesStrategy is EXCLUDE — duplicates may be silently dropped before the transformer processes them.

If you do not need Kotlin module metadata remapping, you can disable it:

tasks.shadowJar {
  @Suppress("DEPRECATION") // This flag will be disabled and removed in the next major version of Shadow.
  enableKotlinModuleRemapping = false
}

Added

... (truncated)

Changelog

Sourced from com.gradleup.shadow's changelog.

9.6.1 - 2026-07-22

Changed

• Use GradleException for expected build failures. (#2113)

Fixed

• Preserve repeated lines in R8 rule files when using minimize { r8 { ... } }. (#2115)

9.6.0 - 2026-07-16

Added

• Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#2089)

Changed

• Rename ShadowDslMarker to ShadowDsl. (#2091)
• POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#2090)
  This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.

Fixed

• Validate ZIP entry names to prevent Zip Slip path traversal.
• Avoid resolving unused R8 dependency. (#2101)

9.5.1 - 2026-07-06

Fixed

• Fix eager calls for toolchainSpec in Kotlin DSL. (#2087)

9.5.0 - 2026-07-06

!!! note

With the introduction of `DuplicatesStrategy` checking for transformers, you may see warnings like:
'META-INF/...kotlin_module' is matched by com.github.jengelman.gradle.plugins.shadow.transformers.KotlinModuleMetadataTransformer but its DuplicatesStrategy is EXCLUDE — duplicates may be silently dropped before the transformer processes them.

If you do not need Kotlin module metadata remapping, you can disable it:
tasks.shadowJar {
  @Suppress("DEPRECATION") // This flag will be disabled and removed in the next major version of Shadow.
  enableKotlinModuleRemapping = false
}
</code></pre>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>

<li><a href="https://github.com/GradleUp/shadow/commit/185da5db091a35bc593d3ea101f6a2f6ddbb7aa8&quot;&gt;&lt;code&gt;185da5d&lt;/code&gt;&lt;/a> Prepare version 9.6.1</li>

<li><a href="https://github.com/GradleUp/shadow/commit/b309bc549f1e0020771c03c6d5c3a600bd68cb89&quot;&gt;&lt;code&gt;b309bc5&lt;/code&gt;&lt;/a> Extract addIncludedDependencies (<a href="https://redirect.github.com/GradleUp/shadow/issues/2116&quot;&gt;#2116&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/GradleUp/shadow/commit/46b35448b867f3d4cff97df11be7ea9b53a7d90f&quot;&gt;&lt;code&gt;46b3544&lt;/code&gt;&lt;/a> Preserve repeated lines in R8 rule files (<a href="https://redirect.github.com/GradleUp/shadow/issues/2115&quot;&gt;#2115&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/GradleUp/shadow/commit/c0d4f0d6745891ffdd5ceec1f1424450e3bbb2c3&quot;&gt;&lt;code&gt;c0d4f0d&lt;/code&gt;&lt;/a> Revert &quot;Reland Tapmoc (<a href="https://redirect.github.com/GradleUp/shadow/issues/2111&quot;&gt;#2111&lt;/a&gt;)&amp;quot;&lt;/li>

<li><a href="https://github.com/GradleUp/shadow/commit/ff1809f351e567133f2a17b655127f484893c009&quot;&gt;&lt;code&gt;ff1809f&lt;/code&gt;&lt;/a> Use GradleException for expected build failures (<a href="https://redirect.github.com/GradleUp/shadow/issues/2113&quot;&gt;#2113&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/GradleUp/shadow/commit/dc0ee64128cae4f287f0aa2c79e2b11e8d8017a6&quot;&gt;&lt;code&gt;dc0ee64&lt;/code&gt;&lt;/a> Update plugin tapmoc to v0.4.2 (<a href="https://redirect.github.com/GradleUp/shadow/issues/2112&quot;&gt;#2112&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/GradleUp/shadow/commit/398afcde1cbe50b86fa71b678f09f79d8ca133ab&quot;&gt;&lt;code&gt;398afcd&lt;/code&gt;&lt;/a> Reland Tapmoc (<a href="https://redirect.github.com/GradleUp/shadow/issues/2111&quot;&gt;#2111&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/GradleUp/shadow/commit/3ca69d5a403d5a761e6b03f1a3d60ad11ecf463a&quot;&gt;&lt;code&gt;3ca69d5&lt;/code&gt;&lt;/a> Gradle 9.7.0-rc-1 (<a href="https://redirect.github.com/GradleUp/shadow/issues/2110&quot;&gt;#2110&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/GradleUp/shadow/commit/aaaacd230d76790a49443430863878c133feeab0&quot;&gt;&lt;code&gt;aaaacd2&lt;/code&gt;&lt;/a> Prepare next development version</li>

<li><a href="https://github.com/GradleUp/shadow/commit/fb3666804bd6ca643dd4a2df0d607fcfaf5b1e66&quot;&gt;&lt;code&gt;fb36668&lt;/code&gt;&lt;/a> Prepare version 9.6.0</li>

<li>Additional commits viewable in <a href="https://github.com/GradleUp/shadow/compare/8.3.11...9.6.1&quot;&gt;compare view</a></li>

</ul>

</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options


You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.