From 977f537d5d97a02cadb2b987f884bfab3198b4fe Mon Sep 17 00:00:00 2001
From: Holly Cummins <holly.k.cummins@googlemail.com>
Date: Tue, 28 Oct 2025 17:23:40 +0000
Subject: [PATCH] Use official java action, allow dependabot to suggest actions
 updates

---
 .github/dependabot.yml              | 10 ++++++++++
 .github/workflows/build.actions.yml |  7 +++----
 2 files changed, 13 insertions(+), 4 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 24af41deb..53eb31ecb 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -25,3 +25,13 @@ updates:
         - "quarkus*"
         - "org.mvnpm*"
         - "io.quarkiverse*"
+- package-ecosystem: "github-actions"
+  directory: "/"
+  schedule:
+    interval: daily
+    time: "06:30"
+    timezone: Europe/Paris
+  open-pull-requests-limit: 2
+  labels:
+    - infra
+  rebase-strategy: disabled
\ No newline at end of file
diff --git a/.github/workflows/build.actions.yml b/.github/workflows/build.actions.yml
index 659ba23b6..8f2b4397b 100644
--- a/.github/workflows/build.actions.yml
+++ b/.github/workflows/build.actions.yml
@@ -18,11 +18,10 @@ jobs:
       - uses: n1hility/cancel-previous-runs@v2
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
-      - name: Set up JDK 21
-        # Uses sha for added security since tags can be updated
-        uses: joschi/setup-jdk@e87a7cec853d2dd7066adf837fe12bf0f3d45e52
+      - uses: actions/setup-java@v5
         with:
-          java-version: openjdk21
+          distribution: temurin
+          java-version: 21
       - name: Cache Maven Repository
         id: cache-maven
         uses: actions/cache@v4