diff --git a/.gitea/workflows/build-java.yaml b/.gitea/workflows/build-java.yaml
index dc03a51..810a585 100644
--- a/.gitea/workflows/build-java.yaml
+++ b/.gitea/workflows/build-java.yaml
@@ -15,14 +15,17 @@ jobs:
   build:
     name: Build java distribution
     runs-on: docker-ubuntu-nonroot
-    env:
-      RUNNER_TOOL_CACHE: /tmp/hostedtoolcache
     steps:
       - name: Checkout source code
         uses: actions/checkout@v4
         with:
           token: ${{ secrets.GIT_ACCESS_TOKEN }}
           submodules: 'true'
+          fetch-depth: 0
+      - name: Detect secrets
+        uses: docker://ghcr.io/gitleaks/gitleaks:v8.28.0
+        with:
+          args: git --redact --verbose /github/workspace
       - name: Setup java runtime
         uses: actions/setup-java@v4
         with:
@@ -46,4 +49,4 @@ jobs:
           path: |
             build/test-results
             build/reports
-          retention-days: 10
\ No newline at end of file
+          retention-days: 10
diff --git a/gradle/build-version.gradle b/gradle/build-version.gradle
index 3de4691..892b0de 100644
--- a/gradle/build-version.gradle
+++ b/gradle/build-version.gradle
@@ -24,7 +24,7 @@ buildscript {
 apply plugin: me.qoomon.gradle.gitversioning.GitVersioningPlugin
 
 wrapper {
-    gradleVersion = "8.10.2"
+    gradleVersion = "9.1.0"
 }
 
 // Setup versions handling
@@ -75,4 +75,4 @@ echo "CAPTICA_APPLICATION_JAVA_VERSION=\$CAPTICA_APPLICATION_JAVA_VERSION" >> \$
 // Link up version file task to bootJar
 tasks.named('bootJar').configure {
 	dependsOn writeVersionFile
-}
\ No newline at end of file
+}