Signed-off-by: Mark S. Lewis <[email protected]>

Previously the scan ran on the current state of the codebase. This fails
to identify vulnerabilities in dependencies for the latest release
version if those dependencies have already been updated in the
development codebase. The gating factor for whether a new release is
required should be whether the previous release contains
vulnerabilities.

This change runs the scheduled vulnerability scan on the latest release
tag. It also adds vulnerability scanning to pull request builds. This is
purely informational. A scan failure does not fail the pull request
build.

Signed-off-by: Mark S. Lewis <[email protected]>

Spotless is widely used opinionated Java code formatter. It will also
fix incorrect formatting using `./gradlew spotlessApply`, avoiding the
need for contributors to manually correct any formatting violations
flagged by Checkstyle. Formatting rules defined by Checkstyle that would
otherwise cause conflicts with the formatting applied by Spotless are
removed.

This change also updates the Gradle version to 8.10.2.

Signed-off-by: Mark S. Lewis <[email protected]>

Update microfab used for integration tests from ibmcom/ibp-microfab to
use ghcr.io/hyperledger-labs/microfab. This updates the Fabric runtime
for v2.4 to v2.5.

Signed-off-by: Mark S. Lewis <[email protected]>

- Retire inactive maintainers: Artem Barger, Matthew B White
- Add active maintainer: Dave Enyeart

Signed-off-by: Mark S. Lewis <[email protected]>

Also update Java language version to 11, which has been the target
runtime and documented as the required version since v2.1.

Signed-off-by: Mark S. Lewis <[email protected]>

New microfab version provides an up-to-date Gradle version, which the
test chaincode can be updated to exploit.

This change also updates several dependencies to current versions.

Signed-off-by: Mark S. Lewis <[email protected]>

Using Java 21 as the runtime allows chaincode developers to exploit
newer Java features, and provides JVM performance improvements. Java 11
is no longer supported by RedHat and public support from other vendors
ends in 2027.

This change removes a test for a security manager failure since the
security manager is deprecated and its use is disallowed by Java 21.

Chaincode must now use Gradle wrappers at version 8.5 or later, since
that version of Gradle added support for execution using Java 21.

Signed-off-by: Mark S. Lewis <[email protected]>

Rather than fixed sleep after lauching microfab, watch the container
logs until the "Microfab started" message appears.

Signed-off-by: Mark S. Lewis <[email protected]>