Refresh GitHub Actions configuration

Author: snicoll

.github/actions/prepare-gradle-build/action.yml

@@ -42,7 +42,6 @@ runs:
         echo 'systemProp.user.name=spring-builds+github' >> $HOME/.gradle/gradle.properties
         echo 'systemProp.org.gradle.internal.launcher.welcomeMessageEnabled=false' >> $HOME/.gradle/gradle.properties
         echo 'org.gradle.daemon=false' >> $HOME/.gradle/gradle.properties
-        echo 'org.gradle.daemon=4' >> $HOME/.gradle/gradle.properties
     - name: Configure Toolchain Properties
       if: ${{ inputs.java-toolchain == 'true' }}
       shell: bash

.github/workflows/build-and-deploy-snapshot.yml

@@ -2,7 +2,9 @@ name: Build and Deploy Snapshot
 on:
   push:
     branches:
-      - main
+      - 'main'
+permissions:
+  contents: read
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
 jobs:

.github/workflows/ci.yml

@@ -2,7 +2,9 @@ name: CI
 on:
   push:
     branches:
-      - main
+      - 'main'
+permissions:
+  contents: read
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
 jobs:

.github/workflows/release-milestone.yml

@@ -19,8 +19,6 @@ jobs:
         uses: ./.github/actions/build
         with:
           develocity-access-key: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
-          opensource-repository-password: ${{ secrets.ARTIFACTORY_PASSWORD }}
-          opensource-repository-username: ${{ secrets.ARTIFACTORY_USERNAME }}
           publish: true
       - name: Stage Release
         uses: spring-io/artifactory-deploy-action@926d7f7cc810569395346bf3a4d91b380b3e355b # v0.0.4

.github/workflows/release.yml

@@ -18,8 +18,6 @@ jobs:
         uses: ./.github/actions/build
         with:
           develocity-access-key: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
-          opensource-repository-password: ${{ secrets.ARTIFACTORY_PASSWORD }}
-          opensource-repository-username: ${{ secrets.ARTIFACTORY_USERNAME }}
           publish: true
       - name: Stage Release
         uses: spring-io/artifactory-deploy-action@926d7f7cc810569395346bf3a4d91b380b3e355b # v0.0.4

.github/workflows/run-codeql-analysis.yml

@@ -0,0 +1,15 @@
+name: "Run CodeQL Analysis"
+on:
+  push:
+  pull_request:
+  workflow_dispatch:
+  schedule:
+    - cron: '45 2 * * 1'
+permissions: read-all
+jobs:
+  run-analysis:
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+    uses: spring-io/github-actions/.github/workflows/codeql-analysis.yml@6e66995f7d29de1e4ff76e4f0def7a10163fe910