Merge branch 'main' into dependabot/maven/com.fasterxml.jackson-jackson-bom-2.21.1

Author: phipag

.github/workflows/release-drafter.yml

@@ -23,6 +23,6 @@ jobs:
       contents: write  # required for creating draft releases
     steps:
       - name: Relase Drafter
-        uses: release-drafter/release-drafter@6db134d15f3909ccc9eefd369f02bd1e9cffdf97
+        uses: release-drafter/release-drafter@3a7fb5c85b80b1dda66e1ccb94009adbbd32fce3
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release.yml

@@ -133,7 +133,7 @@ jobs:
     steps:
       - id: download_source
         name: Download artifacts
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4.6.1
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v4.6.1
         with:
           name: source
       - name: Setup Java
@@ -170,7 +170,7 @@ jobs:
     steps:
       - id: download_source
         name: Download artifacts
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4.6.1
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v4.6.1
         with:
           name: source
       - name: Setup Java
@@ -195,7 +195,7 @@ jobs:
     steps:
       - id: download_source
         name: Download artifacts
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4.6.1
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v4.6.1
         with:
           name: source
       - name: Setup Java
@@ -233,7 +233,7 @@ jobs:
           ref: ${{ env.RELEASE_COMMIT }}
       - id: download_source
         name: Download artifacts
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v4.6.1
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v4.6.1
         with:
           name: source
       - id: setup-git

.github/workflows/security-scorecard.yml

@@ -53,6 +53,6 @@ jobs:
           path: results.sarif
           retention-days: 5
       - name: Upload to Code-Scanning
-        uses: github/codeql-action/upload-sarif@c793b717bc78562f491db7b0e93a3a178b099162 # v3.29.5
+        uses: github/codeql-action/upload-sarif@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v3.29.5
         with:
           sarif_file: results.sarif

docs/Dockerfile

@@ -1,4 +1,4 @@
-FROM squidfunk/mkdocs-material@sha256:f4332a8e8895aa303bf7f3ceede749980a98cf79f5d87ad567b4d41f037b0101
+FROM squidfunk/mkdocs-material@sha256:c3739993c3e7c92cfe649ba03cbc04f4fa9b1497886abd16267eb413cda8aecf
 
 COPY requirements.txt /tmp/
 RUN pip install --require-hashes -r /tmp/requirements.txt

powertools-e2e-tests/src/test/resources/docker/Dockerfile

@@ -1,5 +1,5 @@
 # Use the official AWS SAM base image for Java 25
-FROM public.ecr.aws/sam/build-java25@sha256:15e69d9776709e299d2913e546d8d7fb30b9ca0b66e4fce6f3beb41604242bd8
+FROM public.ecr.aws/sam/build-java25@sha256:32b91ab2cbab1eb7b165546f1788e1b113ea1c913aa68c16501458934692fcd2
 
 # Install GraalVM dependencies
 RUN curl -4 -L https://download.oracle.com/graalvm/25/latest/graalvm-jdk-25_linux-x64_bin.tar.gz | tar -xvz