chore(deps): update non-major github actions

[renovate-coveooss]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/setup-java	action	minor	v5.4.0 → v5.5.0	v5.6.0
step-security/harden-runner	action	minor	v2.19.4 → v2.20.0

[skip release]

---

Release Notes

actions/setup-java (actions/setup-java)

v5.5.0

Compare Source

What's Changed

• chore: enforce pre-PR validation (aggregate scripts, git hooks, PR checklist) by @​brunoborges in #​1061
• Bump github/codeql-action from 3 to 4 by @​dependabot[bot] in #​1069
• Bump actions/checkout from 6 to 7 by @​dependabot[bot] in #​1068
• Bump actions/setup-python from 5 to 6 by @​dependabot[bot] in #​1067
• Bump @​typescript-eslint/parser from 8.61.1 to 8.62.0 by @​dependabot[bot] in #​1062
• feat: Add verify-signature plumbing and Temurin+Microsoft verification support by @​johnoliver in #​1060
• Updated jetbrains test: https.request() now catches errors. This fixes leaking tests as well by @​jmjaffe37 in #​1070
• Fix arm64 e2e workflow tests mislabeled as x64 by @​brunoborges with @​Copilot in #​1073
• feat: suppress Maven transfer progress via MAVEN_ARGS by default (add show-download-progress input) by @​brunoborges in #​1053
• feat: Disable interactiveMode in generated Maven settings.xml by @​brunoborges with @​Copilot in #​1052
• Bump prettier from 3.6.2 to 3.9.1 by @​dependabot[bot] in #​1066
• chore(deps-dev): bump eslint-plugin-jest from 29.0.1 to 29.15.4 by @​dependabot[bot] in #​1074
• fix: Maven Toolchains grows unexpectedly by @​Okeanos in #​534
• dist: Support Tencent Kona JDK by @​johnshajiang in #​672
• feat: Add set-default option by @​gsmet in #​1017
• docs: document problem matcher (and how to disable it), Maven Wrapper caching, and generated interactiveMode by @​brunoborges in #​1075
• feat: Add distribution detection support to .sdkmanrc file by @​lukaszgyg in #​975

New Contributors

• @​jmjaffe37 made their first contribution in #​1070
• @​gsmet made their first contribution in #​1017
• @​lukaszgyg made their first contribution in #​975

Full Changelog: actions/setup-java@v5...v5.5.0

step-security/harden-runner (step-security/harden-runner)

v2.20.0

Compare Source

What's Changed

• Support for block policy for MacOS and Windows GitHub-hosted runners
• Support for Bitrise MacOS GitHub Actions runners
• HTTPS monitoring support for Bun for Linux runners (enterprise tier)

Full Changelog: step-security/harden-runner@v2.19.4...v2.20.0

---

Configuration

📅 Schedule: (in timezone America/Toronto)

• Branch creation
  • "before 6:00am on Tuesday"
• Automerge
  • "after 9:00am and before 12:00pm on tuesday, wednesday, thursday"

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.