build(deps): update java non-major #71
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # SPDX-FileCopyrightText: 2025 Digg - Agency for Digital Government | |
| # | |
| # SPDX-License-Identifier: CC0-1.0 | |
| --- | |
| name: Pull Request Workflow | |
| on: | |
| pull_request: | |
| permissions: | |
| contents: read # Best Security practice. Jobs only get read as base, and then permissions are added as needed | |
| jobs: | |
| pr-checks: | |
| uses: diggsweden/reusable-ci/.github/workflows/pullrequest-orchestrator.yml@e1e1387d5b0399bb5edb00e40485746772344176 # v2.6.0 | |
| secrets: inherit # Pass org-level secrets (for private dependencies if any) | |
| permissions: | |
| contents: read # Clone repository and read source code | |
| packages: read # Access GitHub Packages for Maven dependencies | |
| security-events: write # Upload SpotBugs/dependency check results to Security tab | |
| with: | |
| project-type: maven | |
| linters.megalint: false # Deprecated - replaced by just+mise | |
| linters.devbasecheck: true # Use just+mise for all linting | |
| linters.commitlint: false # Deprecated - handled by just+mise | |
| linters.licenselint: false # Deprecated - handled by just+mise | |
| test: | |
| needs: [pr-checks] | |
| if: always() # Run tests even if linting fails (get complete feedback) | |
| permissions: | |
| contents: read # Access test resources and source code | |
| packages: read # Fetch test dependencies from GitHub Packages | |
| uses: ./.github/workflows/test.yml |