fix(deps): Pin dependencies (#428)

This PR contains the following updates:

| Package | Type | Update | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|---|---|
| [mikepenz/action-junit-report](https://redirect.github.com/mikepenz/action-junit-report) | action | pinDigest |  → `bccf2e3` |  |  |
| [org.mockito:mockito-junit-jupiter](https://redirect.github.com/mockito/mockito) | dependencies | minor | `5.21.0` → `5.23.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.mockito:mockito-junit-jupiter/5.23.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.mockito:mockito-junit-jupiter/5.21.0/5.23.0?slim=true) |

---

### Release Notes

<details>
<summary>mockito/mockito (org.mockito:mockito-junit-jupiter)</summary>

### [`v5.23.0`](https://redirect.github.com/mockito/mockito/releases/tag/v5.23.0)

#### NOTE: Breaking change for Android

The `mockito-android` artifact has a breaking change: tests now require a device or emulator based on API 28+ (Android P). This is to enable new support for mocking Kotlin classes. See [#&#8203;3788](https://redirect.github.com/mockito/mockito/issues/3788) for more details.

***

<sup><sup>*Changelog generated by [Shipkit Changelog Gradle Plugin](https://redirect.github.com/shipkit/shipkit-changelog)*</sup></sup>

##### 5.23.0

- 2026-03-11 - [6 commit(s)](https://redirect.github.com/mockito/mockito/compare/v5.22.0...v5.23.0) by Brice Dutheil, Joshua Selbo, Philippe Kernevez
- Replace mockito-android mock maker implementation with dexmaker-mockito-inline [(#&#8203;3792)](https://redirect.github.com/mockito/mockito/pull/3792)
- Fix StackOverflowError with AbstractList after using mockSingleton [(#&#8203;3790)](https://redirect.github.com/mockito/mockito/pull/3790)
- Mark parameters of `Mockito.when` `@Nullable` [(#&#8203;3503)](https://redirect.github.com/mockito/mockito/issues/3503)

### [`v5.22.0`](https://redirect.github.com/mockito/mockito/releases/tag/v5.22.0)

<sup><sup>*Changelog generated by [Shipkit Changelog Gradle Plugin](https://redirect.github.com/shipkit/shipkit-changelog)*</sup></sup>

##### 5.22.0

- 2026-02-27 - [6 commit(s)](https://redirect.github.com/mockito/mockito/compare/v5.21.0...v5.22.0) by Joshua Selbo, NiMv1, Rafael Winterhalter, dependabot\[bot], eunbin son
- Avoid mocking of internal static utilities [(#&#8203;3785)](https://redirect.github.com/mockito/mockito/pull/3785)
- Bump graalvm/setup-graalvm from 1.4.4 to 1.4.5 [(#&#8203;3780)](https://redirect.github.com/mockito/mockito/pull/3780)
- Static mocking of UUID.class corrupted under JDK 25 [(#&#8203;3778)](https://redirect.github.com/mockito/mockito/issues/3778)
- Bump actions/upload-artifact from 5 to 6 [(#&#8203;3774)](https://redirect.github.com/mockito/mockito/pull/3774)
- docs: clarify RETURNS\_MOCKS behavior with sealed abstract enums (Java 15+) [(#&#8203;3773)](https://redirect.github.com/mockito/mockito/pull/3773)
- Add tests for Sets utility class [(#&#8203;3771)](https://redirect.github.com/mockito/mockito/pull/3771)
- Add core API to enable Kotlin singleton mocking [(#&#8203;3762)](https://redirect.github.com/mockito/mockito/pull/3762)
- Stubbing Kotlin `object` singletons [(#&#8203;3652)](https://redirect.github.com/mockito/mockito/issues/3652)
- Incorrect documentation for RETURNS\_MOCKS [(#&#8203;3285)](https://redirect.github.com/mockito/mockito/issues/3285)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42My4wIiwidXBkYXRlZEluVmVyIjoiNDMuNjMuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21lcmdlIl19-->

Author: cloudquery-ci[bot]

.github/workflows/ci.yml

@@ -33,7 +33,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GITHUB_ACTOR: ${{ github.actor }}
       - name: Publish Test Report
-        uses: mikepenz/action-junit-report@v6
+        uses: mikepenz/action-junit-report@bccf2e31636835cf0874589931c4116687171386 # v6
         if: success() || failure() # always run even if the previous step fails
         with:
           report_paths: "**/build/test-results/test/TEST-*.xml"

lib/build.gradle

@@ -50,7 +50,7 @@ dependencies {
     testImplementation 'org.junit.jupiter:junit-jupiter:6.0.3'
     testImplementation 'org.junit.jupiter:junit-jupiter-api:6.0.3'
     testImplementation 'org.mockito:mockito-core:5.21.0'
-    testImplementation 'org.mockito:mockito-junit-jupiter:5.21.0'
+    testImplementation 'org.mockito:mockito-junit-jupiter:5.23.0'
     testImplementation 'nl.jqno.equalsverifier:equalsverifier:4.4'
     testImplementation 'org.assertj:assertj-core:3.27.7'
     testRuntimeOnly 'org.junit.platform:junit-platform-launcher'