Guard eclipse() to spotless tasks and keep P2 mirror on pinned version (security-analytics)

[peterzhuamazon]

Description

Guard eclipse() to spotless tasks and keep P2 mirror on pinned version.

Issues Resolved

opensearch-project/opensearch-build#6421

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[peterzhuamazon]

expected version pin

[github-actions]

PR Code Analyzer ❗

AI-powered 'Code-Diff-Analyzer' found issues on commit 4220006.

⛔ Hard block: Issues at High severity or above will block this PR from merging.

Path	Line	Severity	Description
build.gradle	65	high	Build plugin 'com.diffplug.spotless' version bumped from 6.22.0 to 8.10.1 — a major-version jump across two major versions. Per mandatory policy, all dependency/build-plugin changes must be flagged for maintainer verification regardless of apparent legitimacy. Verify the published artifact at the Gradle Plugin Portal matches the expected checksum and that this version has not been tampered with.

The table above displays the top 10 most important findings.

Total: 1 | Critical: 0 | High: 1 | Medium: 0 | Low: 0

---

Pull Requests Author(s): Please update your Pull Request according to the report above.

Repository Maintainer(s): You can bypass diff analyzer by adding label skip-diff-analyzer after reviewing the changes carefully, then re-run failed actions. To re-enable the analyzer, remove the label, then re-run all actions.

---

⚠️ Note: The Code-Diff-Analyzer helps protect against potentially harmful code patterns. Please ensure you have thoroughly reviewed the changes beforehand.

Thanks.