feat: Dependencies update.

.github/actions/setup-java-build-env/action.yml

@@ -0,0 +1,81 @@
+name: Setup Java Build Environment
+description: Setup Java build environment, downloading and intalling JDK and Maven.
+inputs:
+  gh_user:
+    description: GitHub username to download dependencies.
+    required: true
+  gh_token:
+    description: GitHub token to download dependencies.
+    required: true
+runs:
+  using: composite
+  steps:
+    #
+    # Cache JDK.
+    #
+    - name: Cache JDK
+      uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # 4.1.2
+      id: cache-jdk
+      with:
+        key: OpenJDK21U-jdk_x64_linux_hotspot_21.0.5_11.tar.gz
+        path: |
+          ${{ runner.temp }}/jdk_setup.tar.gz
+          ${{ runner.temp }}/jdk_setup.sha256
+
+    #
+    # Download JDK and verify its hash.
+    #
+    - name: Download JDK and verify its hash
+      if: steps.cache-jdk.outputs.cache-hit != 'true'
+      shell: bash
+      run: |
+        echo "3c654d98404c073b8a7e66bffb27f4ae3e7ede47d13284c132d40a83144bfd8c  ${{ runner.temp }}/jdk_setup.tar.gz" >> ${{ runner.temp }}/jdk_setup.sha256
+        curl -L "https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.5%2B11/OpenJDK21U-jdk_x64_linux_hotspot_21.0.5_11.tar.gz" -o "${{ runner.temp }}/jdk_setup.tar.gz"
+        sha256sum --check --status "${{ runner.temp }}/jdk_setup.sha256"
+
+    #
+    # Setup JDK.
+    #
+    - name: Setup JDK
+      uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # 4.4.0
+      with:
+        distribution: "jdkfile"
+        jdkFile: "${{ runner.temp }}/jdk_setup.tar.gz"
+        java-version: "21"
+        cache: maven
+
+    #
+    # Cache Maven.
+    #
+    - name: Cache Maven
+      uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # 4.1.2
+      id: cache-maven
+      with:
+        key: apache-maven-3.9.9-bin.tar.gz
+        path: |
+          ${{ runner.temp }}/maven_setup.tar.gz
+          ${{ runner.temp }}/maven_setup.sha256
+
+    #
+    # Download Maven and verify its hash.
+    #
+    - name: Download Maven and verify its hash
+      if: steps.cache-maven.outputs.cache-hit != 'true'
+      shell: bash
+      run: |
+        echo "7a9cdf674fc1703d6382f5f330b3d110ea1b512b51f1652846d9e4e8a588d766  ${{ runner.temp }}/maven_setup.tar.gz" >> ${{ runner.temp }}/maven_setup.sha256
+        curl -L "https://archive.apache.org/dist/maven/maven-3/3.9.9/binaries/apache-maven-3.9.9-bin.tar.gz" -o "${{ runner.temp }}/maven_setup.tar.gz"
+        sha256sum --check --status "${{ runner.temp }}/maven_setup.sha256"
+
+    #
+    # Setup Maven.
+    #
+    - name: Setup Maven
+      shell: bash
+      env:
+        GH_USER: ${{ inputs.gh_user }}
+        GH_TOKEN: ${{ inputs.gh_token }}
+      run: |
+        mkdir ${{ runner.temp }}/maven
+        tar -xvf ${{ runner.temp }}/maven_setup.tar.gz -C ${{ runner.temp }}/maven --strip-components=1
+        echo "<settings><servers><server><id>github</id><username>$GH_USER</username><password>$GH_TOKEN</password></server></servers></settings>" >> ${{ runner.temp }}/settings.xml

.github/workflows/build_n_deploy.yml

@@ -12,75 +12,19 @@ jobs:
       # Checkout the source code.
       #
       - name: Checkout the source code
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
         with:
           token: ${{ secrets.GIT_PAT }}
           fetch-depth: 0
 
       #
-      # Cache JDK.
+      # Setup Java Build Environment.
       #
-      - name: Cache JDK
-        if: steps.semantic.outputs.new_release_published == 'true'
-        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8
-        id: cache-jdk
+      - name: Setup Java Build Environment
+        uses: ./.github/actions/setup-java-build-env
         with:
-          key: OpenJDK21U-jdk_x64_linux_hotspot_21.0.2_13.tar.gz
-          path: |
-            ${{ runner.temp }}/jdk_setup.tar.gz
-            ${{ runner.temp }}/jdk_setup.sha256
-
-      #
-      # Download JDK and verify its hash.
-      #
-      - name: Download JDK and verify its hash
-        if: steps.cache-jdk.outputs.cache-hit != 'true'
-        run: |
-          echo "454bebb2c9fe48d981341461ffb6bf1017c7b7c6e15c6b0c29b959194ba3aaa5  ${{ runner.temp }}/jdk_setup.tar.gz" >> ${{ runner.temp }}/jdk_setup.sha256
-          curl -L "https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.2%2B13/OpenJDK21U-jdk_x64_linux_hotspot_21.0.2_13.tar.gz" -o "${{ runner.temp }}/jdk_setup.tar.gz"
-          sha256sum --check --status "${{ runner.temp }}/jdk_setup.sha256"
-
-      #
-      # Setup JDK.
-      #
-      - name: Setup JDK
-        uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2
-        with:
-          distribution: "jdkfile"
-          jdkFile: "${{ runner.temp }}/jdk_setup.tar.gz"
-          java-version: "21"
-          cache: maven
-
-      #
-      # Cache Maven.
-      #
-      - name: Cache Maven
-        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8
-        id: cache-maven
-        with:
-          key: apache-maven-3.9.6-bin.tar.gz
-          path: |
-            ${{ runner.temp }}/maven_setup.tar.gz
-            ${{ runner.temp }}/maven_setup.sha256
-
-      #
-      # Download Maven and verify its hash.
-      #
-      - name: Download Maven and verify its hash
-        if: steps.cache-maven.outputs.cache-hit != 'true'
-        run: |
-          echo "6eedd2cae3626d6ad3a5c9ee324bd265853d64297f07f033430755bd0e0c3a4b  ${{ runner.temp }}/maven_setup.tar.gz" >> ${{ runner.temp }}/maven_setup.sha256
-          curl -L "https://archive.apache.org/dist/maven/maven-3/3.9.6/binaries/apache-maven-3.9.6-bin.tar.gz" -o "${{ runner.temp }}/maven_setup.tar.gz"
-          sha256sum --check --status "${{ runner.temp }}/maven_setup.sha256"
-
-      #
-      # Setup Maven.
-      #
-      - name: Setup Maven
-        run: |
-          mkdir ${{ runner.temp }}/maven
-          tar -xvf ${{ runner.temp }}/maven_setup.tar.gz -C ${{ runner.temp }}/maven --strip-components=1
-          echo "<settings><servers><server><id>github</id><username>${{ secrets.GIT_USER }}</username><password>${{ secrets.GIT_PAT }}</password></server></servers></settings>" >> ${{ runner.temp }}/settings.xml
+          gh_user: ${{ secrets.GIT_USER }}
+          gh_token: ${{ secrets.GIT_PAT }}
 
       #
       # Build and deploy.

.github/workflows/pr-validation.yml

@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: PR title validation
-        uses: amannn/action-semantic-pull-request@c3cd5d1ea3580753008872425915e343e351ab54
+        uses: amannn/action-semantic-pull-request@0723387faaf9b38adef4775cd42cfd5155ed6017 # 5.5.3
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
@@ -35,53 +35,16 @@ jobs:
           wip: false
 
       - name: Checkout the source code
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
 
-      - name: Cache JDK
-        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8
-        id: cache-jdk
+      #
+      # Setup Java Build Environment.
+      #
+      - name: Setup Java Build Environment
+        uses: ./.github/actions/setup-java-build-env
         with:
-          key: OpenJDK21U-jdk_x64_linux_hotspot_21.0.2_13.tar.gz
-          path: |
-            ${{ runner.temp }}/jdk_setup.tar.gz
-            ${{ runner.temp }}/jdk_setup.sha256
-
-      - name: Download JDK and verify its hash
-        if: steps.cache-jdk.outputs.cache-hit != 'true'
-        run: |
-          echo "454bebb2c9fe48d981341461ffb6bf1017c7b7c6e15c6b0c29b959194ba3aaa5  ${{ runner.temp }}/jdk_setup.tar.gz" >> ${{ runner.temp }}/jdk_setup.sha256
-          curl -L "https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.2%2B13/OpenJDK21U-jdk_x64_linux_hotspot_21.0.2_13.tar.gz" -o "${{ runner.temp }}/jdk_setup.tar.gz"
-          sha256sum --check --status "${{ runner.temp }}/jdk_setup.sha256"
-
-      - name: Setup JDK 
-        uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2
-        with:
-          distribution: "jdkfile"
-          jdkFile: "${{ runner.temp }}/jdk_setup.tar.gz"
-          java-version: "21"
-          cache: maven
-
-      - name: Cache Maven
-        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8
-        id: cache-maven
-        with:
-          key: apache-maven-3.9.6-bin.tar.gz
-          path: |
-            ${{ runner.temp }}/maven_setup.tar.gz
-            ${{ runner.temp }}/maven_setup.sha256
-
-      - name: Download Maven and verify its hash
-        if: steps.cache-maven.outputs.cache-hit != 'true'
-        run: |
-          echo "6eedd2cae3626d6ad3a5c9ee324bd265853d64297f07f033430755bd0e0c3a4b  ${{ runner.temp }}/maven_setup.tar.gz" >> ${{ runner.temp }}/maven_setup.sha256
-          curl -L "https://archive.apache.org/dist/maven/maven-3/3.9.6/binaries/apache-maven-3.9.6-bin.tar.gz" -o "${{ runner.temp }}/maven_setup.tar.gz"
-          sha256sum --check --status "${{ runner.temp }}/maven_setup.sha256"
-
-      - name: Setup Maven
-        run: |
-          mkdir ${{ runner.temp }}/maven
-          tar -xvf ${{ runner.temp }}/maven_setup.tar.gz -C ${{ runner.temp }}/maven --strip-components=1
-          echo "<settings><servers><server><id>github</id><username>${{ secrets.GIT_USER }}</username><password>${{ secrets.GIT_PAT }}</password></server></servers></settings>" >> ${{ runner.temp }}/settings.xml
+          gh_user: ${{ secrets.GIT_USER }}
+          gh_token: ${{ secrets.GIT_PAT }}
 
       - name: Execute unit-test + Calculate test coverage + SCA with Sonar
         env:

.github/workflows/release.yml

@@ -18,7 +18,7 @@ jobs:
       # Checkout the source code.
       #
       - name: Checkout the source code
-        uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
         with:
           token: ${{ secrets.GIT_PAT }}
           fetch-depth: 0
@@ -27,85 +27,26 @@ jobs:
       # Calculate of the new version (dry-run).
       #
       - name: Calculate of the new version (dry-run)
-        uses: cycjimmy/semantic-release-action@8e58d20d0f6c8773181f43eb74d6a05e3099571d
+        uses: cycjimmy/semantic-release-action@b1b432f13acb7768e0c8efdec416d363a57546f2 # 4.1.1
         id: semantic
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
-          semantic_version: 19
+          semantic_version: 21.1.1
           branch: main
           extra_plugins: |
-            @semantic-release/release-notes-generator@10.0.3
-            @semantic-release/[email protected]
+            @semantic-release/release-notes-generator@44c780c6f9c1bf2643fe48b6718bd9a84b820132 # 14.0.1
+            @semantic-release/git@3e934d45f97fd07a63617c0fc098c9ed3e67d97a # 10.0.1
           dry_run: true
 
       #
-      # Cache JDK.
+      # Setup Java Build Environment.
       #
-      - name: Cache JDK
-        if: steps.semantic.outputs.new_release_published == 'true'
-        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8
-        id: cache-jdk
-        with:
-          key: OpenJDK21U-jdk_x64_linux_hotspot_21.0.2_13.tar.gz
-          path: |
-            ${{ runner.temp }}/jdk_setup.tar.gz
-            ${{ runner.temp }}/jdk_setup.sha256
-
-      #
-      # Download JDK and verify its hash.
-      #
-      - name: Download JDK and verify its hash
-        if: steps.semantic.outputs.new_release_published == 'true' && steps.cache-jdk.outputs.cache-hit != 'true'
-        run: |
-          echo "454bebb2c9fe48d981341461ffb6bf1017c7b7c6e15c6b0c29b959194ba3aaa5  ${{ runner.temp }}/jdk_setup.tar.gz" >> ${{ runner.temp }}/jdk_setup.sha256
-          curl -L "https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.2%2B13/OpenJDK21U-jdk_x64_linux_hotspot_21.0.2_13.tar.gz" -o "${{ runner.temp }}/jdk_setup.tar.gz"
-          sha256sum --check --status "${{ runner.temp }}/jdk_setup.sha256"
-
-      #
-      # Setup JDK.
-      #
-      - name: Setup JDK
-        if: steps.semantic.outputs.new_release_published == 'true'
-        uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2
+      - name: Setup Java Build Environment
+        uses: ./.github/actions/setup-java-build-env
         with:
-          distribution: "jdkfile"
-          jdkFile: "${{ runner.temp }}/jdk_setup.tar.gz"
-          java-version: "21"
-          cache: maven
-
-      #
-      # Cache Maven.
-      #
-      - name: Cache Maven
-        if: steps.semantic.outputs.new_release_published == 'true'
-        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8
-        id: cache-maven
-        with:
-          key: apache-maven-3.9.6-bin.tar.gz
-          path: |
-            ${{ runner.temp }}/maven_setup.tar.gz
-            ${{ runner.temp }}/maven_setup.sha256
-
-      #
-      # Download Maven and verify its hash.
-      #
-      - name: Download Maven and verify its hash
-        if: steps.semantic.outputs.new_release_published == 'true' && steps.cache-maven.outputs.cache-hit != 'true'
-        run: |
-          echo "6eedd2cae3626d6ad3a5c9ee324bd265853d64297f07f033430755bd0e0c3a4b  ${{ runner.temp }}/maven_setup.tar.gz" >> ${{ runner.temp }}/maven_setup.sha256
-          curl -L "https://archive.apache.org/dist/maven/maven-3/3.9.6/binaries/apache-maven-3.9.6-bin.tar.gz" -o "${{ runner.temp }}/maven_setup.tar.gz"
-          sha256sum --check --status "${{ runner.temp }}/maven_setup.sha256"
-
-      #
-      # Setup Maven.
-      #
-      - name: Setup Maven
-        if: steps.semantic.outputs.new_release_published == 'true'
-        run: |
-          mkdir ${{ runner.temp }}/maven
-          tar -xvf ${{ runner.temp }}/maven_setup.tar.gz -C ${{ runner.temp }}/maven --strip-components=1
-          echo "<settings><servers><server><id>github</id><username>${{ secrets.GIT_USER }}</username><password>${{ secrets.GIT_PAT }}</password></server></servers></settings>" >> ${{ runner.temp }}/settings.xml
+          gh_user: ${{ secrets.GIT_USER }}
+          gh_token: ${{ secrets.GIT_PAT }}
 
       #
       # Update of pom.xml with the new version + Git add + commit + push of the updated pom.xml.
@@ -125,15 +66,15 @@ jobs:
       #
       - name: Calculation of the new version (again) with tagging + releasing + etc
         if: steps.semantic.outputs.new_release_published == 'true'
-        uses: cycjimmy/semantic-release-action@8e58d20d0f6c8773181f43eb74d6a05e3099571d
+        uses: cycjimmy/semantic-release-action@b1b432f13acb7768e0c8efdec416d363a57546f2 # 4.1.1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
-          semantic_version: 19
+          semantic_version: 21.1.1
           branch: main
           extra_plugins: |
-            @semantic-release/release-notes-generator@10.0.3
-            @semantic-release/[email protected]
+            @semantic-release/release-notes-generator@44c780c6f9c1bf2643fe48b6718bd9a84b820132 # 14.0.1
+            @semantic-release/git@3e934d45f97fd07a63617c0fc098c9ed3e67d97a # 10.0.1
           dry_run: false
 
       #