Update dependency com.gradleup.shadow:shadow-gradle-plugin to v9.6.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
com.gradleup.shadow:shadow-gradle-plugin	9.5.1 → 9.6.0

---

Release Notes

GradleUp/shadow (com.gradleup.shadow:shadow-gradle-plugin)

v9.6.0

Compare Source

Added

• Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#​2089)

Changed

• Rename ShadowDslMarker to ShadowDsl. (#​2091)
• POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#​2090)
  This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.

Fixed

• Validate ZIP entry names to prevent Zip Slip path traversal.
• Avoid resolving unused R8 dependency. (#​2101)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[square-task-list-completed]

Task List Completed has been disabled for this PR, either by the disabled label or repo topic

Remaining tasks

• If you want to rebase/retry this PR, check this box

Why am I seeing this comment?

This comment is a summary of the pending tasks on this PR. It is intended to make it easier to find pending tasks so you can ship your PR faster.

Got feedback? Let us know in #dx-help!

Want to disable me? Add task-list-completed-disable as a repo topic or PR label to disable on a whole PR, or write task-list-completed-disable in a comment to disable it for that comment.