fix: attempts to fix reproducible builds

Author: rvullriede

.github/workflows/build-on-push.yml

@@ -9,6 +9,9 @@ jobs:
   build-on-push:
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: read
+
     steps:
       - name: checkout
         uses: actions/checkout@v5
@@ -21,4 +24,4 @@ jobs:
           cache: maven
 
       - name: maven-build-verify
-        run: mvn --batch-mode --update-snapshots verify
+        run: mvn --batch-mode --update-snapshots clean verify

.github/workflows/dependabot-pr-auto-merge.yml

@@ -1,8 +1,9 @@
 name: dependabot-pr-auto-merge
 
-on: pull_request
-
-
+on:
+  pull_request:
+    branches:
+      - dev
 jobs:
   dependabot-pr-auto-merge:
     runs-on: ubuntu-latest

pom.xml

@@ -241,6 +241,7 @@
                     <generateGitPropertiesFile>true</generateGitPropertiesFile>
                     <includeOnlyProperties>
                         <includeOnlyProperty>git.branch</includeOnlyProperty>
+                        <includeOnlyProperty>git.tag</includeOnlyProperty>
                         <includeOnlyProperty>^git.build.(time|version)$</includeOnlyProperty>
                         <includeOnlyProperty>^git.commit.id.(abbrev|full)$</includeOnlyProperty>
                     </includeOnlyProperties>