[#378] Set up the JDK of the release for the CodeQL Java analysis, so that its results no longer follow the default JDK of the runner image

.github/dependabot.yml

@@ -0,0 +1,29 @@
+# The contents of this file are subject to the terms of the Common Development and
+# Distribution License (the License). You may not use this file except in compliance with the
+# License.
+#
+# You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the
+# specific language governing permission and limitations under the License.
+#
+# When distributing Covered Software, include this CDDL Header Notice in each file and include
+# the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL
+# Header, with the fields enclosed by brackets [] replaced by your own identifying
+# information: "Portions copyright [year] [name of copyright owner]".
+#
+# Copyright 2026 3A Systems, LLC.
+
+version: 2
+updates:
+  # Keeps the actions in .github/workflows up to date: Dependabot moves the version tags
+  # forward, and for a SHA-pinned action the commit hash with its "# vX.Y.Z" comment.
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      # One pull request per week for all action updates instead of one per action.
+      github-actions:
+        patterns: ["*"]
+    labels:
+      - "ci"
+      - "dependencies"

.github/workflows/build.yml

@@ -1,3 +1,17 @@
+# The contents of this file are subject to the terms of the Common Development and
+# Distribution License (the License). You may not use this file except in compliance with the
+# License.
+#
+# You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the
+# specific language governing permission and limitations under the License.
+#
+# When distributing Covered Software, include this CDDL Header Notice in each file and include
+# the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL
+# Header, with the fields enclosed by brackets [] replaced by your own identifying
+# information: "Portions copyright [year] [name of copyright owner]".
+#
+# Copyright 2021-2026 3A Systems, LLC.
+
 name: Build Maven
 
 on:
@@ -25,7 +39,7 @@ jobs:
     steps:
     - uses: actions/checkout@v6
     - name: ${{ matrix.Java }}-${{ matrix.os }}
-      uses: actions/setup-java@v5
+      uses: actions/setup-java@v6
       with:
         java-version: ${{ matrix.java }}
         distribution: 'zulu'

.github/workflows/codeql.yml

@@ -1,3 +1,17 @@
+# The contents of this file are subject to the terms of the Common Development and
+# Distribution License (the License). You may not use this file except in compliance with the
+# License.
+#
+# You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the
+# specific language governing permission and limitations under the License.
+#
+# When distributing Covered Software, include this CDDL Header Notice in each file and include
+# the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL
+# Header, with the fields enclosed by brackets [] replaced by your own identifying
+# information: "Portions copyright [year] [name of copyright owner]".
+#
+# Copyright 2026 3A Systems, LLC.
+
 name: "CodeQL"
 
 on:
@@ -58,6 +72,20 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v7
 
+      # With build-mode 'none' CodeQL infers no JDK from this project and
+      # models the JDK API on the java found on the PATH, so without this step
+      # the results follow the default JDK of the runner image: ubuntu-26.04
+      # brought JDK 25 and with it alerts for APIs deprecated only after
+      # Java 11. Pin the JDK and distribution the release is built with
+      # (release.yml): 8 on sustaining/2.4.x, 11 otherwise. It also serves
+      # the manual build below.
+      - name: Set up JDK
+        if: matrix.language == 'java-kotlin'
+        uses: actions/setup-java@v6
+        with:
+          java-version: ${{ (github.base_ref || github.ref_name) == 'sustaining/2.4.x' && '8' || '11' }}
+          distribution: 'temurin'
+
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
         with:
@@ -79,11 +107,6 @@ jobs:
               - '**/doc-maven-plugin/src/main/resources/js/**'
 
       # --- Manual build (only used when build-mode is 'manual') -------------
-      # - name: Set up JDK 11
-      #   uses: actions/setup-java@v5
-      #   with:
-      #     java-version: '11'
-      #     distribution: 'zulu'
       # - name: Cache Maven packages
       #   uses: actions/cache@v6
       #   with:

.github/workflows/deploy.yml

@@ -1,3 +1,17 @@
+# The contents of this file are subject to the terms of the Common Development and
+# Distribution License (the License). You may not use this file except in compliance with the
+# License.
+#
+# You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the
+# specific language governing permission and limitations under the License.
+#
+# When distributing Covered Software, include this CDDL Header Notice in each file and include
+# the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL
+# Header, with the fields enclosed by brackets [] replaced by your own identifying
+# information: "Portions copyright [year] [name of copyright owner]".
+#
+# Copyright 2021-2026 3A Systems, LLC.
+
 name: Deploy Maven
 
 on:
@@ -33,7 +47,7 @@ jobs:
           submodules: recursive
           ref: ${{ github.event.workflow_run.head_branch }}
       - name: Set up Java for publishing to Maven Central Repository OSS
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v6
         with:
           java-version: ${{ github.event.workflow_run.head_branch == 'sustaining/2.4.x' && '8' || '11'}}
           distribution: 'temurin'

.github/workflows/release.yml

@@ -1,3 +1,17 @@
+# The contents of this file are subject to the terms of the Common Development and
+# Distribution License (the License). You may not use this file except in compliance with the
+# License.
+#
+# You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the
+# specific language governing permission and limitations under the License.
+#
+# When distributing Covered Software, include this CDDL Header Notice in each file and include
+# the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL
+# Header, with the fields enclosed by brackets [] replaced by your own identifying
+# information: "Portions copyright [year] [name of copyright owner]".
+#
+# Copyright 2022-2026 3A Systems, LLC.
+
 name: Release Maven
 
 on:
@@ -30,7 +44,7 @@ jobs:
           fetch-depth: 0
           submodules: recursives
       - name: Set up Java for publishing to Maven Central Repository OSS
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@v6
         with:
           java-version: ${{ github.event.workflow_run.head_branch == 'sustaining/2.4.x' && '8' || '11'}}
           distribution: 'temurin'