Merge branch 'main' into make-hooks-thread-safer

# Conflicts:
#	.github/workflows/pullrequest.yml

Author: chrfwow

.github/workflows/lint-pr.yml

@@ -18,6 +18,6 @@ jobs:
     name: Validate PR title
     runs-on: ubuntu-latest
     steps:
-      - uses: amannn/action-semantic-pull-request@a46a7c8dc4bb34503174eba2f2f7ef80dffc8ed7
+      - uses: amannn/action-semantic-pull-request@e7d011b07ef37e089bea6539210f6a0d360d8af9
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/merge.yml

@@ -23,7 +23,7 @@ jobs:
     steps:
     - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
     - name: Set up JDK 17
-      uses: actions/setup-java@e9343db97e09d87a3c50e544105d99fe912c204b
+      uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165
       with:
         java-version: '17'
         distribution: 'temurin'
@@ -50,7 +50,7 @@ jobs:
       run: mvn --batch-mode --update-snapshots verify
 
     - name: Upload coverage to Codecov
-      uses: codecov/codecov-action@v5.4.3
+      uses: codecov/codecov-action@v5.5.0
       with:
         token: ${{ secrets.CODECOV_TOKEN }} # not required for public repos
         flags: unittests # optional

.github/workflows/pullrequest.yml

@@ -22,14 +22,14 @@ jobs:
         uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
 
       - name: Set up JDK ${{ matrix.build.java }}
-        uses: actions/setup-java@e9343db97e09d87a3c50e544105d99fe912c204b
+        uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165
         with:
             java-version: ${{ matrix.build.java }}
             distribution: 'temurin'
             cache: maven
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@e96e340c1e95e91449de06aabfa9525b7b98113f
+        uses: github/codeql-action/init@5b49155c7f37b5ec074ffd26b428e6b64b1bf412
         with:
           languages: java
 
@@ -55,7 +55,7 @@ jobs:
 
       - if: matrix.build.java == '17'
         name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v5.4.3
+        uses: codecov/codecov-action@v5.5.0
         with:
           token: ${{ secrets.CODECOV_TOKEN }} # not required for public repos
           flags: unittests # optional
@@ -64,4 +64,4 @@ jobs:
           verbose: true # optional (default = false)
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@e96e340c1e95e91449de06aabfa9525b7b98113f
+        uses: github/codeql-action/analyze@5b49155c7f37b5ec074ffd26b428e6b64b1bf412

.github/workflows/release.yml

@@ -40,7 +40,7 @@ jobs:
         uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
 
       - name: Set up JDK 17
-        uses: actions/setup-java@e9343db97e09d87a3c50e544105d99fe912c204b
+        uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165
         with:
           java-version: '17'
           distribution: 'temurin'

.github/workflows/static-code-scanning.yaml

@@ -33,12 +33,12 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@e96e340c1e95e91449de06aabfa9525b7b98113f
+        uses: github/codeql-action/init@5b49155c7f37b5ec074ffd26b428e6b64b1bf412
         with:
           languages: java
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@e96e340c1e95e91449de06aabfa9525b7b98113f
+        uses: github/codeql-action/autobuild@5b49155c7f37b5ec074ffd26b428e6b64b1bf412
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@e96e340c1e95e91449de06aabfa9525b7b98113f
+        uses: github/codeql-action/analyze@5b49155c7f37b5ec074ffd26b428e6b64b1bf412

pom.xml

@@ -426,7 +426,7 @@
                     <plugin>
                         <groupId>com.github.spotbugs</groupId>
                         <artifactId>spotbugs-maven-plugin</artifactId>
-                        <version>4.9.3.2</version>
+                        <version>4.9.4.0</version>
                         <configuration>
                             <excludeFilterFile>spotbugs-exclusions.xml</excludeFilterFile>
                             <plugins>