Merge branch 'main' into dependabot/gradle/main/net.ltgt.gradle-gradle-nullaway-plugin-3.3.0

Author: abashev

.github/workflows/ci.yml

@@ -157,7 +157,7 @@ jobs:
           problem-matcher: false
 
       - name: Install GraalVM 25 for the image
-        uses: graalvm/setup-graalvm@0426e2e191540e8514dff98dc52a5f5146a2a276 # v1.6.6
+        uses: graalvm/setup-graalvm@27b360dbb857524eaf0b4c4cef364d38e5b4f173 # v1.6.7
         with:
           java-version: '25'
           distribution: 'graalvm-community'

.github/workflows/release.yml

@@ -114,7 +114,7 @@ jobs:
           java-version: '21'
 
       - name: Install GraalVM 25 for the image
-        uses: graalvm/setup-graalvm@0426e2e191540e8514dff98dc52a5f5146a2a276 # v1.6.6
+        uses: graalvm/setup-graalvm@27b360dbb857524eaf0b4c4cef364d38e5b4f173 # v1.6.7
         with:
           java-version: '25'
           distribution: 'graalvm-community'
@@ -157,7 +157,7 @@ jobs:
       # merge-multiple: every platform's binary lands in one directory under the name it was built
       # with, which is where its Maven classifier is read from.
       - name: Collect every platform's binary
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           path: native-images
           pattern: native-image-*
@@ -341,7 +341,7 @@ jobs:
           java-version: '21'
 
       - name: Collect every platform's binary
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           path: native-images
           pattern: native-image-*

.github/workflows/sha-pinning-check.yml

@@ -17,4 +17,4 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: zgosalvez/github-actions-ensure-sha-pinned-actions@62574f011e0d1967d555a862bd28a7abba8684fe # v5.0.9
+      - uses: zgosalvez/github-actions-ensure-sha-pinned-actions@c4e71056006d29f90204b2d063be337109507d62 # v5.0.10