Update workflows

.github/workflows/build.yml

@@ -9,6 +9,8 @@ on:
 jobs:
   matrix-build:
     name: Build and test with Java ${{ matrix.java }}
+    permissions:
+      contents: read
     strategy:
       matrix:
         java: ['17', '21']
@@ -31,7 +33,7 @@ jobs:
         key: ${{ runner.os }}-sonar-${{ hashFiles('**/*.gradle') }}
         restore-keys: ${{ runner.os }}-sonar-
 
-    - uses: gradle/wrapper-validation-action@v2
+    - uses: gradle/actions/wrapper-validation@v3
 
     - name: Set up JDK ${{ matrix.java }}
       uses: actions/setup-java@v4
@@ -50,13 +52,6 @@ jobs:
                   -PjavaVersion=${{matrix.java}} \
                   -Dsonar.gradle.skipCompile=true
 
-    - name: Publish Test Report for Java ${{ matrix.java }}
-      uses: scacap/action-surefire-report@v1
-      if: ${{ always() && github.event.pull_request.head.repo.full_name == github.repository && github.actor != 'dependabot[bot]' }}
-      with:
-        report_paths: '**/build/test-results/*/TEST-*.xml'
-        github_token: ${{ secrets.GITHUB_TOKEN }}
-
     - name: Sonar analysis
       if: ${{ env.DEFAULT_JAVA == matrix.java && env.SONAR_TOKEN != null }}
       run: |

.github/workflows/codeql-analysis.yml

@@ -15,6 +15,9 @@ jobs:
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref }}
       cancel-in-progress: true
+    permissions:
+      contents: read
+      security-events: write
 
     steps:
     - name: Checkout repository
@@ -29,7 +32,7 @@ jobs:
         java-version: 17
         cache: 'gradle'
 
-    - uses: gradle/wrapper-validation-action@v2
+    - uses: gradle/actions/wrapper-validation@v3
 
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v3