Opt-out of proprietary gradle actions caching, make builds more predictable

Author: RealTriassic

.github/workflows/build.yml

@@ -1,20 +1,26 @@
 name: Build
-on: [push, pull_request]
+on: [pull_request, push, workflow_dispatch]
+permissions:
+  contents: read
 
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
+    timeout-minutes: 30
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@v6
+        uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0
+        with:
+          cache-provider: basic # https://github.com/gradle/actions/blob/main/docs/setup-gradle.md#basic-caching
       - name: Set up JDK 25
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
-          java-version: 25
           distribution: 'temurin'
+          java-version: 25
+          check-latest: true
       - name: Build with Gradle
         run: ./gradlew build