Bump Gson from 2.8.6 to 2.9.0

[knutwannheden]

Upgrade due to CVE WS-2021-0419 (see also protocolbuffers/protobuf#9457 and google/gson#1991).

[famod]

@loicmathieu WDYT about adding gson to dependabot?

[loicmathieu]

@famod this should be safe to upgrade it as soon as new releases occurs except for major releases as it needs to be compatible with the version used in the Google Cloud Function framework.
I'm OK to add it to dependabot.

[quarkus-bot]

This workflow status is outdated as a new workflow run has been triggered.

Failing Jobs - Building 109b92e

Status	Name	Step	Failures	Logs	Raw logs
✖	Gradle Tests - JDK 11 Windows	Build	Failures	Logs	Raw logs

Full information is available in the Build summary check run.

Failures

⚙️ Gradle Tests - JDK 11 Windows #

- Failing: integration-tests/gradle 

📦 integration-tests/gradle

✖ io.quarkus.gradle.devmode.MultiSourceProjectDevModeTest.main line 22 - More details - Source on GitHub

org.awaitility.core.ConditionTimeoutException: Condition with lambda expression in io.quarkus.test.devmode.util.DevModeTestUtils that uses java.util.function.Supplier, java.util.function.Supplierjava.util.concurrent.atomic.AtomicReference, java.util.concurrent.atomic.AtomicReferencejava.lang.String, java.lang.Stringboolean was not fulfilled within 1 minutes.
	at org.awaitility.core.ConditionAwaiter.await(ConditionAwaiter.java:164)
	at org.awaitility.core.CallableCondition.await(CallableCondition.java:78)

[famod]

I added gson to dependabot.

[famod]

No need to wait for CI, that one previous test failure is a known flake.

[famod]

Thanks @knutwannheden!