chore(ci): pin GitHub Actions to specific versions #406

	# Building and testing Java with Maven
	# https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-java-with-maven

	name: Java CI

	permissions:
	contents: read

	on:
	push:
	branches: [master]
	pull_request:
	branches: [master]

	env:
	JAVA_VERSION: 21

	jobs:
	verify:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout repository
	uses: actions/checkout@v4.2.2

	- name: Set up OpenJDK ${{ env.JAVA_VERSION }}
	uses: actions/setup-java@v4.7.1
	with:
	java-version: ${{ env.JAVA_VERSION }}
	distribution: "temurin"
	cache: "maven"

	- name: Compile and verify with Maven
	run: mvn verify --file pom.xml

	- name: Upload JaCoCo coverage report artifact
	uses: actions/upload-artifact@v4.6.2
	with:
	name: jacoco.xml
	path: ./target/site/jacoco/jacoco.xml

	coverage:
	needs: verify
	runs-on: ubuntu-latest
	strategy:
	matrix:
	service: [codecov, codacy]
	steps:
	- name: Checkout repository
	uses: actions/checkout@v4.2.2

	- name: Download JaCoCo coverage report artifact
	uses: actions/download-artifact@v4.3.0
	with:
	name: jacoco.xml

	- name: Upload JaCoCo coverage report to Codecov
	if: matrix.service == 'codecov'
	uses: codecov/codecov-action@v5.4.3
	with:
	token: ${{ secrets.CODECOV_TOKEN }}
	files: jacoco.xml

	- name: Upload JaCoCo coverage report to Codacy
	if: matrix.service == 'codacy'
	uses: codacy/codacy-coverage-reporter-action@v1.3.0
	with:
	project-token: ${{ secrets.CODACY_PROJECT_TOKEN }}
	force-coverage-parser: jacoco -r jacoco.xml

Provide feedback