CHK-13451: fix: upgrade tomcat-embed-core to 11.0.22 (GHSA-gx5v-xp9w-j4cg) (#359)

* Initial plan

* chore: initial plan for tomcat-embed-core vulnerability fix

Agent-Logs-Url: https://github.com/getyourguide/openapi-validation-java/sessions/6a03f7d0-70f5-4b9c-b7ef-c3fbfd87d4ce

Co-authored-by: gygrobot <19344429+gygrobot@users.noreply.github.com>

* fix: upgrade tomcat-embed-core to 11.0.22 to fix GHSA-gx5v-xp9w-j4cg

Agent-Logs-Url: https://github.com/getyourguide/openapi-validation-java/sessions/6a03f7d0-70f5-4b9c-b7ef-c3fbfd87d4ce

Co-authored-by: gygrobot <19344429+gygrobot@users.noreply.github.com>

* revert: restore gradlew.bat CRLF line endings from main

The gradlew.bat was inadvertently modified to use LF line endings
during the security fix commit. This restores the original CRLF
line endings to match main and avoid unnecessary diff noise.

* chore: restore gradlew.bat to original state, mark as binary

Agent-Logs-Url: https://github.com/getyourguide/openapi-validation-java/sessions/390be95c-f58e-43ea-857d-9a135ca9df79

Co-authored-by: catarina-correia <93409185+catarina-correia@users.noreply.github.com>

* Revert .gitattributes to match main

Remove the unintentional addition of 'gradlew.bat binary' line,
keeping only the tomcat-embed-core version upgrade in build.gradle.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: gygrobot <19344429+gygrobot@users.noreply.github.com>
Co-authored-by: clue-bot <bot@getyourguide.com>
Co-authored-by: catarina-correia <93409185+catarina-correia@users.noreply.github.com>
Co-authored-by: Midnight Clue Bot <clue@getyourguide.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: 6 people

build.gradle

@@ -31,9 +31,9 @@ subprojects {
                 because('GHSA-2m67-wjpj-xhg9: Jackson Core 3.0.0-3.1.0 maxDocumentLength bypass')
             }
             if (requested.group == 'org.apache.tomcat.embed' && requested.name == 'tomcat-embed-core'
-                    && requested.version != null && requested.version < '11.0.21') {
-                useVersion('11.0.21')
-                because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6: Apache Tomcat < 11.0.21 vulnerabilities')
+                    && requested.version != null && requested.version < '11.0.22') {
+                useVersion('11.0.22')
+                because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6 / GHSA-gx5v-xp9w-j4cg: Apache Tomcat < 11.0.22 vulnerabilities')
             }
         }
     }