Bump com.gradleup.shadow from 9.4.2 to 9.6.0

[dependabot]

Bumps com.gradleup.shadow from 9.4.2 to 9.6.0.

Release notes

Sourced from com.gradleup.shadow's releases.

9.6.0

Added

• Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#2089)

Changed

• Rename ShadowDslMarker to ShadowDsl. (#2091)
• POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#2090)
  This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.

Fixed

• Validate ZIP entry names to prevent Zip Slip path traversal.
• Avoid resolving unused R8 dependency. (#2101)

9.5.1

Fixed

• Fix eager calls for toolchainSpec in Kotlin DSL. (#2087)

9.5.0

Added

• Check DuplicatesStrategy for merging transformers. (#2026)
  This will log warnings when an incompatible DuplicatesStrategy (e.g., EXCLUDE) is applied in Gradle configuration for built-in ResourceTransformers.
• Add KotlinModuleMetadataTransformer. (#2073)
• Add R8 as an opt-in minimize { r8 { ... } } tool for shrinking the final shadowed JAR. (#2077)

Changed

• Bump min Gradle requirement to 9.2.0. (#2057)
• Remove afterEvaluate when adding variants. (#2056)
• Deprecate enableKotlinModuleRemapping for ShadowJar. (#2073)
  Apply KotlinModuleMetadataTransformer explicitly to support relocating inside Kotlin module metadata files.
• Deprecate everything under ShadowCopyAction. (#2083)

Fixed

• Fix the conflicts when using afterEvaluate with other plugins. (#2055)

9.4.3

Changed

• Update dependencies for resolving CVEs. (#2069)

Commits

• fb36668 Prepare version 9.6.0
• 9e5c06d Test relocation of ModuleMainClass in module-info (#2109)
• e37770c Test relocation of nested class signatures (#2108)
• 74792f7 Add unit tests for internal components (#2107)
• b590819 Avoid resolving unused R8 dependency (#2101)
• 1dd8db4 Update plugin android-lint to v9.3.0 (#2104)
• 083a01a Defer shadowR8 configuration (#2100)
• 1ce486d Update kotlin monorepo to v2.4.10 (#2103)
• c89473e Test allowing custom ShadowJar without shadowR8 registered (#2102)
• f23f5c9 Update dependency org.junit:junit-bom to v6.1.2 (#2098)
• Additional commits viewable in compare view

[spartacus04]

@dependabot rebase