Improved CI security and cleaned up github yml files

Author: RaphiMC

.github/FUNDING.yml

@@ -1 +1 @@
-ko_fi: rk_01
+ko_fi: "rk_01"

.github/dependabot.yml

@@ -1,20 +1,20 @@
 version: 2
 registries:
   maven-central:
-    type: maven-repository
+    type: "maven-repository"
     url: "https://repo.maven.apache.org/maven2/"
   viaversion-maven:
-    type: maven-repository
+    type: "maven-repository"
     url: "https://repo.viaversion.com/"
 updates:
   - package-ecosystem: "gradle"
     directory: "/"
     schedule:
       interval: "daily"
     registries:
-      - maven-central
-      - viaversion-maven
+      - "maven-central"
+      - "viaversion-maven"
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
-      interval: "weekly"
+      interval: "daily"

.github/workflows/build.yml

@@ -1,27 +1,30 @@
-name: build
-on: [push, pull_request, workflow_dispatch]
+name: "Build"
+on: ["push", "pull_request", "workflow_dispatch"]
+
+permissions:
+  contents: "read"
 
 jobs:
   build:
-    runs-on: ubuntu-24.04
-    if: ${{ github.event_name != 'pull_request' || github.repository != github.event.pull_request.head.repo.full_name }}
+    runs-on: "ubuntu-24.04"
+    if: "${{ github.event_name != 'pull_request' || github.repository != github.event.pull_request.head.repo.full_name }}"
     steps:
-      - name: Checkout Repository
-        uses: actions/checkout@v6
+      - name: "Checkout repository"
+        uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3" # v6.0.0
         with:
           persist-credentials: false
-      - name: Validate Gradle Wrapper
-        uses: gradle/actions/wrapper-validation@v5
-      - name: Set up JDK 21
-        uses: actions/setup-java@v5
+      - name: "Set up Gradle"
+        uses: "gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2" # v5.0.0
+      - name: "Set up Java 25"
+        uses: "actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165" # v5.0.0
         with:
-          distribution: temurin
-          java-version: 21
+          distribution: "temurin"
+          java-version: 25
           check-latest: true
-      - name: Build with Gradle
-        run: ./gradlew build
-      - name: Upload Artifacts to GitHub
-        uses: actions/upload-artifact@v5
+      - name: "Build with Gradle"
+        run: "./gradlew build"
+      - name: "Upload artifacts to GitHub"
+        uses: "actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4" # v5.0.0
         with:
-          name: Artifacts
-          path: build/libs/
+          name: "Artifacts"
+          path: "build/libs/"