Merge pull request #63 from spdx/updateactionver

Update action versions in CI

Author: goneall

.github/workflows/build.yml

@@ -15,22 +15,22 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
       with:
         fetch-depth: 0
     - name: Set up JDK 17
-      uses: actions/setup-java@v3
+      uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b #v4.5.0
       with:
         distribution: 'temurin'
         java-version: 17
     - name: Cache SonarCloud packages
-      uses: actions/cache@v1
+      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 #v4.2.0
       with:
         path: ~/.sonar/cache
         key: ${{ runner.os }}-sonar
         restore-keys: ${{ runner.os }}-sonar
     - name: Cache Maven packages
-      uses: actions/cache@v1
+      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 #v4.2.0
       with:
         path: ~/.m2
         key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -42,4 +42,6 @@ jobs:
       run: |
         if [[ $SONAR_TOKEN != "" ]]; then
            mvn clean org.jacoco:jacoco-maven-plugin:prepare-agent install sonar:sonar
+        else
+           mvn --batch-mode --update-snapshots verify
         fi