Bump the java-production-dependencies group with 2 updates #250

	name: Build
	on:
	[push]
	jobs:
	build:
	name: Build and Test
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- uses: actions/setup-java@v4
	with:
	java-version: 22
	distribution: 'temurin'
	cache: 'maven'
	- name: Cache SonarCloud packages
	uses: actions/cache@v4
	with:
	path: ~/.sonar/cache
	key: ${{ runner.os }}-sonar
	restore-keys: ${{ runner.os }}-sonar
	- name: Ensure to use tagged version
	if: startsWith(github.ref, 'refs/tags/')
	run: mvn versions:set --file ./pom.xml -DnewVersion=${GITHUB_REF##*/}
	- name: Build and Test
	id: buildAndTest
	run: >
	mvn -B verify
	jacoco:report
	org.sonarsource.scanner.maven:sonar-maven-plugin:sonar
	-Pcoverage
	-Dsonar.projectKey=cryptomator_cryptolib
	-Dsonar.organization=cryptomator
	-Dsonar.host.url=https://sonarcloud.io
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
	- uses: actions/upload-artifact@v4
	with:
	name: artifacts
	path: target/*.jar
	- name: Create Release
	uses: softprops/action-gh-release@v2
	if: startsWith(github.ref, 'refs/tags/')
	with:
	prerelease: true
	token: ${{ secrets.CRYPTOBOT_RELEASE_TOKEN }}
	generate_release_notes: true

Provide feedback