Bump the github-actions group with 6 updates

dependabot[bot]

7 hours ago 6631d43d51bceed13b29dfe3e73f1e3b02001773

 .github/workflows/build.yml

@@ -71,7 +71,7 @@
      shell: bash
      run: dash .github/scripts/test-script-util.sh
    - name: Java ${{ matrix.Java }} (${{ matrix.os }})
      uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
      uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 # v6.2.0
      with:
        java-version: ${{ matrix.java }}
        distribution: 'zulu'
@@ -1077,7 +1077,7 @@
          scanners: vuln
          cache: false
      - name: Upload Trivy report to GitHub Security
        uses: github/codeql-action/upload-sarif@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.39.2
        uses: github/codeql-action/upload-sarif@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3
        # upload even if a preceding step failed, but not without a report to upload
        if: ${{ always() && hashFiles('trivy-results.sarif') != '' }}
        with:
@@ -1533,7 +1533,7 @@
        with:
          name: windows-latest-11
      - name: Set up Java
        uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
        uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 # v6.2.0
        with:
          java-version: '25'
          distribution: 'zulu'
@@ -1721,7 +1721,7 @@
        with:
          name: windows-latest-11
      - name: Set up Java
        uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
        uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 # v6.2.0
        with:
          java-version: '25'
          distribution: 'zulu'