Improve CI based on jackson-core settings

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+ - package-ecosystem: "github-actions"
+ directory: "/"
+ schedule:
+ interval: "weekly"
+ groups:
+ github-actions:
+ patterns:
+ - "*"

.github/workflows/main.yml

@@ -10,6 +10,9 @@ on:
  pull_request:
  branches:
  - master
+permissions:
+ contents: read
+
 jobs:
  build:
  runs-on: ${{ matrix.os }}
@@ -22,26 +25,24 @@ jobs:
  env:
  JAVA_OPTS: "-XX:+TieredCompilation -XX:TieredStopAtLevel=1"
  steps:
- - uses: actions/checkout@v2
+ - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
  - name: Set up JDK
- uses: actions/setup-java@v2
+ uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0
  with:
- distribution: "adopt"
+ distribution: 'temurin'
  java-version: ${{ matrix.java_version }}
- - uses: actions/cache@v2.1.6
- with:
- path: ~/.m2/repository
- key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
- restore-keys: |
- ${{ runner.os }}-maven-
+ cache: 'maven'
+ server-id: sonatype-nexus-snapshots
+ server-username: CI_DEPLOY_USERNAME
+ server-password: CI_DEPLOY_PASSWORD
  - name: Build
- run: ./mvnw -V -B -ff -ntp verify
+ run: ./mvnw -B -q -ff -ntp verify
  - name: Generate code coverage
  if: github.event_name != 'pull_request' && matrix.java_version == '8'
  run: ./mvnw -B -ff -ntp test
  - name: Publish code coverage
  if: github.event_name != 'pull_request' && matrix.java_version == '8'
- uses: codecov/codecov-action@v1
+ uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3.1.4
  with:
  token: ${{ secrets.CODECOV_TOKEN }}
  file: ./target/site/jacoco/jacoco.xml