Bump com.autonomousapps.dependency-analysis from 1.32.0 to 3.5.1

[dependabot]

Bumps com.autonomousapps.dependency-analysis from 1.32.0 to 3.5.1.

Changelog

Sourced from com.autonomousapps.dependency-analysis's changelog.

Version 3.5.1

• [Fix]: don't try to process a non-match as a binary incompatibility.
• [Fix]: use version catalog when applying the build-health plugin.
• [Fix]: bundleTraces is a sortedSet and BundleTrace is Comparable.

Version 3.5.0

• [Feat]: check binary compatibility between consumer and producer code.
• [Feat]: support the com.google.cloud.tools.jib plugin as an application-type plugin.
• [Fix]: 'reason' works for project dependencies.
• [Fix]: strip empty lines from service loaders.
• [Docs]: clarify compatibilities with other plugins.
• [Docs]: document the existence of dependencyAnalysis.app().

Version 3.4.1

• [Fix]: find runtime graph for debugAndroidTest sources.

Version 3.4.0

• [Fix]: InferredCapability merging logic should use 'or', not 'and'.
• [Fix]: Improve IP safety of GlobalDslService.
• [Fix]: for builds with Gradle 9.1.0+, get the buildPath from the Gradle instance.
• [Chore]: update to Gradle 9.1.0 (from 9.0.0).

Version 3.3.0

• [Feat]: detect reflective access using Class.forName().

Version 3.2.0

• [Feat]: don't drop transitive runtime dependencies when removing 'unused' dependencies. See the PR description for more information.
• [Fix]: consider suspend function return types with type parameters.
• [Fix]: consider imports when computing usage of typealiases.
• [Fix]: annotation processors are not blank strings.
• [Fix]: update Kotlin metadata to 2.2.20 for Kotlin 2.3 support.
• [Chore]: always publish build scans on CI. Optionally publish them locally.

To publish build scans, add the following, as indicated:

# ~/.gradle/gradle.properties
dependency.analysis.scans.publish=true

Version 3.1.0

• [Fix] Updated asm to 9.9 (and use latest asm-relocated) for Java 25 support.
• [Fix]: Test fixtures in a Spring Boot project are allowed to have testFixturesApi dependencies.
• [Test]: run tests against Gradle 9.1.0.

Version 3.0.4

• [Fix] Remove auto-applied kotlin-stdlib for Gradle 8.11 support.

Version 3.0.3

... (truncated)

Commits

• 0946146 chore: prepare for release 3.5.1.
• 5a6ed95 fix: bundleTraces is a sortedSet and BundleTrace is Comparable.
• 6c1f78a fix: don't try to process a non-match as a binary incompatibility.
• c0da958 refactor: move code from BinaryClassCapability to the checker.
• 89df171 refactor: destructure access to PartitionResult.
• 20647a3 fix: use version catalog when applying the build-health plugin.
• d158129 chore: disable deployment validation.
• 5fe42a1 chore: prepare next development version.
• 9608b0b chore: prepare for release 3.5.0.
• 5735340 feat: add opt-out for binary-compatibility checking.
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.