chore(deps): update java

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
eclipse-temurin (source)		patch	17.0.19_10-jre-jammy → 17.0.20_8-jre-jammy
java	tools	patch	17.0.19+10 → 17.0.20+101

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Vulnerability summary (fs) — latest: run #634

Critical	High	Medium	Low	Unknown
0	1	4	1	0

Change since last run: no change
Risk≥40: 1 (=)

Grype (risk-based)

⚠️ 1 at/above risk threshold 40

Critical	High	Medium	Low	Negligible	Unknown
1	1	4	1	0	0

Top by risk

Vulnerability	Package	Sev	Risk	EPSS	KEV
GHSA-xm6r-4466-mr74	orientdb-core 1.5.1	Critical	63.0	0.67
GHSA-j288-q9x7-2f5v	commons-lang 2.6	Medium	1.3	0.02
GHSA-w33c-445m-f8w7	okio 1.6.0	Medium	0.7	0.01
GHSA-pvp8-3xj6-8c6x	commons-configuration 1.6	Low	0.5	0.02
GHSA-xx22-p4ch-683r	lz4-java 1.10.2	Medium	0.3	0.00
GHSA-8wh2-6qhj-h7j9	snappy 0.3	Medium	0.3	0.00
GHSA-r7wm-3cxj-wff9	jackson-core 3.1.2	High	0.0	-

Links: workflow run · HTML report · SBOM · Grype report

[github-actions]

Vulnerability summary (docker.io/wetransform/hale-cli:latest) — latest: run #634

Critical	High	Medium	Low	Unknown
0	2	22	19	0

Change since last run: no change
Risk≥40: 2 (=)

Grype (risk-based)

⚠️ 2 at/above risk threshold 40

Critical	High	Medium	Low	Negligible	Unknown
2	2	113	54	9	0

Top by risk

Vulnerability	Package	Sev	Risk	EPSS	KEV
GHSA-xm6r-4466-mr74	orientdb-core 1.5.1	Critical	63.0	0.67
GHSA-xm6r-4466-mr74	orientdb-core 1.5.1	Critical	63.0	0.67
GHSA-j288-q9x7-2f5v	commons-lang 2.6	Medium	1.3	0.02
GHSA-j288-q9x7-2f5v	commons-lang 2.6	Medium	1.3	0.02
CVE-2023-31486	perl-base 5.34.0-3ubuntu1.7	Medium	0.9	0.02
GHSA-w33c-445m-f8w7	okio 1.6.0	Medium	0.7	0.01
GHSA-w33c-445m-f8w7	okio 1.6.0	Medium	0.7	0.01
CVE-2025-59375	libexpat1 2.4.7-1ubuntu0.7	Medium	0.7	0.01
CVE-2021-31879	wget 1.21.2-2ubuntu1.5	Medium	0.6	0.01
GHSA-pvp8-3xj6-8c6x	commons-configuration 1.6	Low	0.5	0.02

Links: workflow run · HTML report · SBOM · Grype report