Combined automated updates: wrapper checksums, npm dependencies, setup-java (#1070)

Combines three pending automated update PRs into a single pull request
so they can be reviewed and merged together.

Supersedes:

- #1045 — Update known wrapper checksums
- #1066 — Bump the npm-dependencies group in /sources (eslint 10.9.1 →
10.10.0, globals 17.11.0 → 17.12.0)
- #1067 — Bump actions/setup-java from 5.7.0 to 6.0.0 in the
github-actions group

Each original commit is cherry-picked unchanged; there were no
overlapping files or conflicts.

## Verification

- `./build install` (clean install + format + lint + compile) passes.
- `./build test`: 490/491 pass. The single failure is
`wrapper-validation/checksums.test.ts › fetches wrapper jar checksums
for snapshots`, a pre-existing network-dependent failure on this machine
— it fails identically with `main`'s checksums file, so it is unrelated
to these changes.
- `dist/` is intentionally untouched; CI regenerates it.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: bot-githubaction <bot-githubaction@gradle.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

sources/package.json

@@ -58,8 +58,8 @@
     "@typescript-eslint/eslint-plugin": "8.69.0",
     "dedent": "1.7.2",
     "esbuild": "0.28.2",
-    "eslint": "10.9.1",
-    "globals": "17.11.0",
+    "eslint": "10.10.0",
+    "globals": "17.12.0",
     "jest": "30.4.2",
     "nock": "14.0.17",
     "npm-run-all": "4.1.5",