npm run build

.eslintignore

@@ -0,0 +1,6 @@
+# Ignore list
+/*
+
+# Do not ignore these folders:
+!__tests__/
+!src/

.eslintrc.js

@@ -0,0 +1,51 @@
+// This is a reusable configuration file copied from https://github.com/actions/reusable-workflows/tree/main/reusable-configurations. Please don't make changes to this file as it's the subject of an automatic update.
+module.exports = {
+  extends: [
+    'eslint:recommended',
+    'plugin:@typescript-eslint/recommended',
+    'plugin:eslint-plugin-jest/recommended',
+    'eslint-config-prettier'
+  ],
+  parser: '@typescript-eslint/parser',
+  plugins: ['@typescript-eslint', 'eslint-plugin-node', 'eslint-plugin-jest'],
+  rules: {
+    '@typescript-eslint/no-require-imports': 'error',
+    '@typescript-eslint/no-non-null-assertion': 'off',
+    '@typescript-eslint/no-explicit-any': 'off',
+    '@typescript-eslint/no-empty-function': 'off',
+    '@typescript-eslint/ban-ts-comment': [
+      'error',
+      {
+        'ts-ignore': 'allow-with-description'
+      }
+    ],
+    'no-console': 'error',
+    'yoda': 'error',
+    'prefer-const': [
+      'error',
+      {
+        destructuring: 'all'
+      }
+    ],
+    'no-control-regex': 'off',
+    'no-constant-condition': ['error', {checkLoops: false}],
+    'node/no-extraneous-import': 'error'
+  },
+  overrides: [
+    {
+      files: ['**/*{test,spec}.ts'],
+      rules: {
+        '@typescript-eslint/no-unused-vars': 'off',
+        'jest/no-standalone-expect': 'off',
+        'jest/no-conditional-expect': 'off',
+        'no-console': 'off',
+
+      }
+    }
+  ],
+  env: {
+    node: true,
+    es6: true,
+    'jest/globals': true
+  }
+};

.github/ISSUE_TEMPLATE/new_distribution_request.md

@@ -1,22 +0,0 @@
----
-name: New Java distribution template
-about: Suggest a new Java distribution
-title: ''
-labels: feature request, needs triage
-assignees: ''
----
-
-**Description:**
-Describe your proposal.
-
-**Justification:**
-Justification or a use case for your proposal.
-
-**Download URL:**
-Download URL for the new distribution.
-
-**License:**
-Link to the license for the new distribution.
-
-**Are you willing to submit a PR?**
-<!--- We accept contributions! -->

.github/PULL_REQUEST_TEMPLATE/new_distribution_pull_request_template.md

@@ -1,16 +0,0 @@
-**Description:**
-Describe your changes.
-
-**Related issue:**
-Add link to the related issue.
-
-**Download URL:**
-Download URL for the new distribution.
-
-**License:**
-Link to the license for the new distribution.
-
-**Check list:**
-- [ ] Mark if documentation changes are required.
-- [ ] Mark if tests were added or updated to cover the changes.
-- [ ] Mark if new distribution is being added.

.github/dependabot.yml

@@ -1,25 +0,0 @@
-version: 2
-updates:
-  - package-ecosystem: 'npm'
-    directory: '/'
-    schedule:
-      interval: 'monthly'
-    cooldown:
-      default-days: 7
-    groups:
-      monthly-npm-updates:
-        applies-to: 'version-updates'
-        patterns:
-          - '*'
-
-  - package-ecosystem: 'github-actions'
-    directory: '/'
-    schedule:
-      interval: 'monthly'
-    cooldown:
-      default-days: 7
-    groups:
-      monthly-actions-updates:
-        applies-to: 'version-updates'
-        patterns:
-          - '*'

.github/java.json

@@ -9,31 +9,6 @@
                     "message": 3
                 }
             ]
-        },
-        {
-            "owner": "javac",
-            "pattern": [
-                {
-                    "regexp": "^([^:]+):(\\d+): (warning|error): (.+?)$",
-                    "file": 1,
-                    "line": 2,
-                    "severity": 3,
-                    "message": 4
-                }
-            ]
-        },
-        {
-            "owner": "maven-javac",
-            "pattern": [
-                {
-                    "regexp": "^\\[(WARNING|ERROR)\\]\\s+(.+?\\.java):\\[(\\d+),(\\d+)\\]\\s+(.+)$",
-                    "severity": 1,
-                    "file": 2,
-                    "line": 3,
-                    "column": 4,
-                    "message": 5
-                }
-            ]
         }
     ]
 }

.github/pull_request_template.md

@@ -5,6 +5,5 @@ Describe your changes.
 Add link to the related issue.
 
 **Check list:**
-- [ ] Ran `npm run check` locally (format, lint, build, test) and all checks pass.
 - [ ] Mark if documentation changes are required.
 - [ ] Mark if tests were added or updated to cover the changes.

.github/workflows/basic-validation.yml

@@ -11,12 +11,9 @@ on:
     paths-ignore:
       - '**.md'
 
-permissions:
-  contents: read
-
 jobs:
   call-basic-validation:
     name: Basic validation
     uses: actions/reusable-workflows/.github/workflows/basic-validation.yml@main
     with:
-      node-version: '24.x'
+      node-version: '20.x'

.github/workflows/benchmark-cache-restore.yml

@@ -1,211 +0,0 @@
-name: Benchmark cache restore
-
-on:
-  workflow_dispatch:
-    inputs:
-      baseline-ref:
-        description: Git ref containing the sequential restore implementation
-        required: true
-        default: main
-        type: string
-      candidate-ref:
-        description: Git ref containing the concurrent restore implementation (defaults to the dispatched ref)
-        required: false
-        type: string
-
-permissions:
-  contents: read
-
-defaults:
-  run:
-    shell: bash
-
-jobs:
-  warm-caches:
-    name: Warm ${{ matrix.tool }} ${{ matrix.profile }} caches (${{ matrix.os }})
-    runs-on: ${{ matrix.os }}
-    cache-mode: write-only
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [macos-15-intel, windows-latest, ubuntu-latest]
-        tool: [maven, gradle]
-        profile: [small, large]
-    steps:
-      - name: Checkout benchmark workflow
-        uses: actions/checkout@v7
-        with:
-          persist-credentials: false
-      - name: Checkout baseline
-        uses: actions/checkout@v7
-        with:
-          path: baseline
-          persist-credentials: false
-          ref: ${{ inputs.baseline-ref }}
-      - name: Checkout candidate
-        uses: actions/checkout@v7
-        with:
-          path: candidate
-          persist-credentials: false
-          ref: ${{ inputs.candidate-ref || github.ref }}
-      - name: Prepare benchmark inputs
-        run: bash __tests__/benchmark-cache-restore.sh prepare "${{ matrix.tool }}" "${{ matrix.profile }}"
-      - name: Prepare cache save
-        uses: ./candidate
-        with:
-          distribution: temurin
-          java-version: '17'
-          cache: ${{ matrix.tool }}
-          cache-dependency-path: benchmark/${{ matrix.tool == 'maven' && 'pom.xml' || 'build.gradle' }}
-      - name: Populate benchmark caches
-        run: |
-          bash __tests__/benchmark-cache-restore.sh reset "${{ matrix.tool }}"
-          bash __tests__/benchmark-cache-restore.sh populate "${{ matrix.tool }}" "${{ matrix.profile }}"
-
-  benchmark:
-    name: Benchmark ${{ matrix.tool }} ${{ matrix.profile }} (${{ matrix.os }})
-    needs: warm-caches
-    runs-on: ${{ matrix.os }}
-    cache-mode: read
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [macos-15-intel, windows-latest, ubuntu-latest]
-        tool: [maven, gradle]
-        profile: [small, large]
-    steps:
-      - name: Checkout benchmark workflow
-        uses: actions/checkout@v7
-        with:
-          persist-credentials: false
-      - name: Checkout baseline
-        uses: actions/checkout@v7
-        with:
-          path: baseline
-          persist-credentials: false
-          ref: ${{ inputs.baseline-ref }}
-      - name: Checkout candidate
-        uses: actions/checkout@v7
-        with:
-          path: candidate
-          persist-credentials: false
-          ref: ${{ inputs.candidate-ref || github.ref }}
-      - name: Prepare benchmark inputs
-        run: bash __tests__/benchmark-cache-restore.sh prepare "${{ matrix.tool }}" "${{ matrix.profile }}"
-
-      - name: Reset caches for baseline iteration 1
-        run: bash __tests__/benchmark-cache-restore.sh reset "${{ matrix.tool }}"
-      - name: Start baseline iteration 1 timer
-        run: bash __tests__/benchmark-cache-restore.sh start "${{ matrix.tool }}"
-      - name: Restore with baseline iteration 1
-        id: baseline-1
-        uses: ./baseline
-        with:
-          distribution: temurin
-          java-version: '17'
-          cache: ${{ matrix.tool }}
-          cache-dependency-path: benchmark/${{ matrix.tool == 'maven' && 'pom.xml' || 'build.gradle' }}
-          cache-read-only: true
-      - name: Record baseline iteration 1
-        env:
-          CACHE_HIT: ${{ steps.baseline-1.outputs.cache-hit }}
-        run: bash __tests__/benchmark-cache-restore.sh record "${{ matrix.tool }}" "${{ matrix.os }}" "${{ matrix.profile }}" baseline 1 "$CACHE_HIT"
-
-      - name: Reset caches for candidate iteration 1
-        run: bash __tests__/benchmark-cache-restore.sh reset "${{ matrix.tool }}"
-      - name: Start candidate iteration 1 timer
-        run: bash __tests__/benchmark-cache-restore.sh start "${{ matrix.tool }}"
-      - name: Restore with candidate iteration 1
-        id: candidate-1
-        uses: ./candidate
-        with:
-          distribution: temurin
-          java-version: '17'
-          cache: ${{ matrix.tool }}
-          cache-dependency-path: benchmark/${{ matrix.tool == 'maven' && 'pom.xml' || 'build.gradle' }}
-          cache-read-only: true
-      - name: Record candidate iteration 1
-        env:
-          CACHE_HIT: ${{ steps.candidate-1.outputs.cache-hit }}
-        run: bash __tests__/benchmark-cache-restore.sh record "${{ matrix.tool }}" "${{ matrix.os }}" "${{ matrix.profile }}" candidate 1 "$CACHE_HIT"
-
-      - name: Reset caches for candidate iteration 2
-        run: bash __tests__/benchmark-cache-restore.sh reset "${{ matrix.tool }}"
-      - name: Start candidate iteration 2 timer
-        run: bash __tests__/benchmark-cache-restore.sh start "${{ matrix.tool }}"
-      - name: Restore with candidate iteration 2
-        id: candidate-2
-        uses: ./candidate
-        with:
-          distribution: temurin
-          java-version: '17'
-          cache: ${{ matrix.tool }}
-          cache-dependency-path: benchmark/${{ matrix.tool == 'maven' && 'pom.xml' || 'build.gradle' }}
-          cache-read-only: true
-      - name: Record candidate iteration 2
-        env:
-          CACHE_HIT: ${{ steps.candidate-2.outputs.cache-hit }}
-        run: bash __tests__/benchmark-cache-restore.sh record "${{ matrix.tool }}" "${{ matrix.os }}" "${{ matrix.profile }}" candidate 2 "$CACHE_HIT"
-
-      - name: Reset caches for baseline iteration 2
-        run: bash __tests__/benchmark-cache-restore.sh reset "${{ matrix.tool }}"
-      - name: Start baseline iteration 2 timer
-        run: bash __tests__/benchmark-cache-restore.sh start "${{ matrix.tool }}"
-      - name: Restore with baseline iteration 2
-        id: baseline-2
-        uses: ./baseline
-        with:
-          distribution: temurin
-          java-version: '17'
-          cache: ${{ matrix.tool }}
-          cache-dependency-path: benchmark/${{ matrix.tool == 'maven' && 'pom.xml' || 'build.gradle' }}
-          cache-read-only: true
-      - name: Record baseline iteration 2
-        env:
-          CACHE_HIT: ${{ steps.baseline-2.outputs.cache-hit }}
-        run: bash __tests__/benchmark-cache-restore.sh record "${{ matrix.tool }}" "${{ matrix.os }}" "${{ matrix.profile }}" baseline 2 "$CACHE_HIT"
-
-      - name: Reset caches for baseline iteration 3
-        run: bash __tests__/benchmark-cache-restore.sh reset "${{ matrix.tool }}"
-      - name: Start baseline iteration 3 timer
-        run: bash __tests__/benchmark-cache-restore.sh start "${{ matrix.tool }}"
-      - name: Restore with baseline iteration 3
-        id: baseline-3
-        uses: ./baseline
-        with:
-          distribution: temurin
-          java-version: '17'
-          cache: ${{ matrix.tool }}
-          cache-dependency-path: benchmark/${{ matrix.tool == 'maven' && 'pom.xml' || 'build.gradle' }}
-          cache-read-only: true
-      - name: Record baseline iteration 3
-        env:
-          CACHE_HIT: ${{ steps.baseline-3.outputs.cache-hit }}
-        run: bash __tests__/benchmark-cache-restore.sh record "${{ matrix.tool }}" "${{ matrix.os }}" "${{ matrix.profile }}" baseline 3 "$CACHE_HIT"
-
-      - name: Reset caches for candidate iteration 3
-        run: bash __tests__/benchmark-cache-restore.sh reset "${{ matrix.tool }}"
-      - name: Start candidate iteration 3 timer
-        run: bash __tests__/benchmark-cache-restore.sh start "${{ matrix.tool }}"
-      - name: Restore with candidate iteration 3
-        id: candidate-3
-        uses: ./candidate
-        with:
-          distribution: temurin
-          java-version: '17'
-          cache: ${{ matrix.tool }}
-          cache-dependency-path: benchmark/${{ matrix.tool == 'maven' && 'pom.xml' || 'build.gradle' }}
-          cache-read-only: true
-      - name: Record candidate iteration 3
-        env:
-          CACHE_HIT: ${{ steps.candidate-3.outputs.cache-hit }}
-        run: bash __tests__/benchmark-cache-restore.sh record "${{ matrix.tool }}" "${{ matrix.os }}" "${{ matrix.profile }}" candidate 3 "$CACHE_HIT"
-
-      - name: Summarize benchmark
-        run: bash __tests__/benchmark-cache-restore.sh summarize "${{ matrix.tool }}" "$GITHUB_STEP_SUMMARY"
-      - name: Upload raw timings
-        uses: actions/upload-artifact@v7
-        with:
-          name: cache-restore-${{ matrix.os }}-${{ matrix.tool }}-${{ matrix.profile }}
-          path: .benchmark-results/timings.csv
-          if-no-files-found: error

.github/workflows/check-dist.yml

@@ -11,12 +11,9 @@ on:
       - '**.md'
   workflow_dispatch:
 
-permissions:
-  contents: read
-
 jobs:
   call-check-dist:
     name: Check dist/
     uses: actions/reusable-workflows/.github/workflows/check-dist.yml@main
     with:
-      node-version: '24.x'
+      node-version: '20.x'

.github/workflows/codeql-analysis.yml

@@ -8,13 +8,7 @@ on:
   schedule:
     - cron: '0 3 * * 0'
 
-permissions: {}
-
 jobs:
   call-codeQL-analysis:
-    permissions:
-      actions: read
-      contents: read
-      security-events: write
     name: CodeQL analysis
     uses: actions/reusable-workflows/.github/workflows/codeql-analysis.yml@main

.github/workflows/e2e-cache-dependency-path.yml

@@ -0,0 +1,93 @@
+name: Validate cache with cache-dependency-path option
+
+on:
+  push:
+    branches:
+      - main
+      - releases/*
+    paths-ignore:
+      - '**.md'
+  pull_request:
+    paths-ignore:
+      - '**.md'
+
+defaults:
+  run:
+    shell: bash
+
+jobs:
+  gradle1-save:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [macos-latest, windows-latest, ubuntu-latest]
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Run setup-java with the cache for gradle
+        uses: ./
+        id: setup-java
+        with:
+          distribution: 'adopt'
+          java-version: '11'
+          cache: gradle
+          cache-dependency-path: __tests__/cache/gradle1/*.gradle*
+      - name: Create files to cache
+        # Need to avoid using Gradle daemon to stabilize the save process on Windows
+        # https://github.com/actions/cache/issues/454#issuecomment-840493935
+        run: |
+          gradle downloadDependencies --no-daemon -p __tests__/cache/gradle1
+          if [ ! -d ~/.gradle/caches ]; then
+            echo "::error::The ~/.gradle/caches directory does not exist unexpectedly"
+            exit 1
+          fi
+  gradle1-restore:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [macos-latest, windows-latest, ubuntu-latest]
+    needs: gradle1-save
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Run setup-java with the cache for gradle
+        uses: ./
+        id: setup-java
+        with:
+          distribution: 'adopt'
+          java-version: '11'
+          cache: gradle
+          cache-dependency-path: __tests__/cache/gradle1/*.gradle*
+      - name: Confirm that ~/.gradle/caches directory has been made
+        run: |
+          if [ ! -d ~/.gradle/caches ]; then
+            echo "::error::The ~/.gradle/caches directory does not exist unexpectedly"
+            exit 1
+          fi
+          ls ~/.gradle/caches/
+  gradle2-restore:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [macos-latest, windows-latest, ubuntu-latest]
+    needs: gradle1-save
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Run setup-java with the cache for gradle
+        uses: ./
+        id: setup-java
+        with:
+          distribution: 'adopt'
+          java-version: '11'
+          cache: gradle
+          cache-dependency-path: __tests__/cache/gradle2/*.gradle*
+      - name: Confirm that ~/.gradle/caches directory has not been made
+        run: |
+          if [ -d ~/.gradle/caches ]; then
+            echo "::error::The ~/.gradle/caches directory exists unexpectedly"
+            exit 1
+          fi

.github/workflows/e2e-cache.yml

@@ -11,9 +11,6 @@ on:
     paths-ignore:
       - '**.md'
 
-permissions:
-  contents: read
-
 defaults:
   run:
     shell: bash
@@ -21,111 +18,102 @@ defaults:
 jobs:
   gradle-save:
     runs-on: ${{ matrix.os }}
-    cache-mode: write-only
     strategy:
       fail-fast: false
       matrix:
-        os: [macos-15-intel, windows-latest, ubuntu-latest]
+        os: [macos-13, windows-latest, ubuntu-latest]
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
       - name: Run setup-java with the cache for gradle
         uses: ./
         id: setup-java
         with:
-          distribution: 'temurin'
+          distribution: 'adopt'
-          java-version: '17'
+          java-version: '11'
           cache: gradle
       - name: Create files to cache
         # Need to avoid using Gradle daemon to stabilize the save process on Windows
         # https://github.com/actions/cache/issues/454#issuecomment-840493935
         run: |
           gradle downloadDependencies --no-daemon -p __tests__/cache/gradle1
-          mkdir -p "$HOME/.gradle/wrapper/dists/setup-java-e2e"
+          if [ ! -d ~/.gradle/caches ]; then
-          echo "gradle wrapper cache" > "$HOME/.gradle/wrapper/dists/setup-java-e2e/payload"
+            echo "::error::The ~/.gradle/caches directory does not exist unexpectedly"
-          bash __tests__/check-dir.sh "$HOME/.gradle/caches"
+            exit 1
-          bash __tests__/check-dir.sh "$HOME/.gradle/wrapper/dists"
+          fi
   gradle-restore:
     runs-on: ${{ matrix.os }}
-    cache-mode: read
     strategy:
       fail-fast: false
       matrix:
-        os: [macos-15-intel, windows-latest, ubuntu-latest]
+        os: [macos-13, windows-latest, ubuntu-latest]
     needs: gradle-save
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
       - name: Run setup-java with the cache for gradle
         uses: ./
         id: setup-java
         with:
-          distribution: 'temurin'
+          distribution: 'adopt'
           java-version: '11'
           cache: gradle
-          cache-read-only: true
       - name: Confirm that ~/.gradle/caches directory has been made
-        run: bash __tests__/check-dir.sh "$HOME/.gradle/caches"
+        run: |
-      - name: Confirm that the Gradle Wrapper cache has been restored
+          if [ ! -d ~/.gradle/caches ]; then
-        run: bash __tests__/check-dir.sh "$HOME/.gradle/wrapper/dists"
+            echo "::error::The ~/.gradle/caches directory does not exist unexpectedly"
+            exit 1
+          fi
+          ls ~/.gradle/caches/
   maven-save:
     runs-on: ${{ matrix.os }}
-    cache-mode: write-only
     strategy:
       fail-fast: false
       matrix:
-        os: [macos-15-intel, windows-latest, ubuntu-latest]
+        os: [macos-13, windows-latest, ubuntu-latest]
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
       - name: Run setup-java with the cache for maven
         uses: ./
         id: setup-java
         with:
-          distribution: 'temurin'
+          distribution: 'adopt'
           java-version: '11'
           cache: maven
       - name: Create files to cache
         run: |
           mvn verify -f __tests__/cache/maven/pom.xml
-          mkdir -p "$HOME/.m2/wrapper/dists/setup-java-e2e"
+          if [ ! -d ~/.m2/repository ]; then
-          echo "maven wrapper cache" > "$HOME/.m2/wrapper/dists/setup-java-e2e/payload"
+            echo "::error::The ~/.m2/repository directory does not exist unexpectedly"
-          bash __tests__/check-dir.sh "$HOME/.m2/repository"
+            exit 1
-          bash __tests__/check-dir.sh "$HOME/.m2/wrapper/dists"
+          fi
   maven-restore:
     runs-on: ${{ matrix.os }}
-    cache-mode: read
     strategy:
       fail-fast: false
       matrix:
-        os: [macos-15-intel, windows-latest, ubuntu-latest]
+        os: [macos-13, windows-latest, ubuntu-latest]
     needs: maven-save
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
       - name: Run setup-java with the cache for maven
         uses: ./
         id: setup-java
         with:
-          distribution: 'temurin'
+          distribution: 'adopt'
           java-version: '11'
           cache: maven
-          cache-read-only: true
       - name: Confirm that ~/.m2/repository directory has been made
-        run: bash __tests__/check-dir.sh "$HOME/.m2/repository"
+        run: |
-      - name: Confirm that the Maven Wrapper cache has been restored
+          if [ ! -d ~/.m2/repository ]; then
-        run: bash __tests__/check-dir.sh "$HOME/.m2/wrapper/dists"
+            echo "::error::The ~/.m2/repository directory does not exist unexpectedly"
+            exit 1
+          fi
+          ls ~/.m2/repository
   sbt-save:
     runs-on: ${{ matrix.os }}
-    cache-mode: write-only
     defaults:
       run:
         shell: bash
@@ -133,21 +121,19 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [macos-15-intel, windows-latest, ubuntu-22.04]
+        os: [macos-13, windows-latest, ubuntu-latest]
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
       - name: Run setup-java with the cache for sbt
         uses: ./
         id: setup-java
         with:
-          distribution: 'temurin'
+          distribution: 'adopt'
           java-version: '11'
           cache: sbt
       - name: Setup SBT
-        if: matrix.os == 'macos-15-intel'
+        if: matrix.os == 'macos-13'
         run: |
           echo ""Installing SBT...""
           brew install sbt
@@ -155,17 +141,28 @@ jobs:
         run: sbt update
 
       - name: Check files to cache on macos-latest
-        if: matrix.os == 'macos-15-intel'
+        if: matrix.os == 'macos-13'
-        run: bash "$GITHUB_WORKSPACE/__tests__/check-dir.sh" "$HOME/Library/Caches/Coursier"
+        run: |
+          if [ ! -d ~/Library/Caches/Coursier ]; then
+            echo "::error::The ~/Library/Caches/Coursier directory does not exist unexpectedly"
+            exit 1
+          fi
       - name: Check files to cache on windows-latest
         if: matrix.os == 'windows-latest'
-        run: bash "$GITHUB_WORKSPACE/__tests__/check-dir.sh" "$HOME/AppData/Local/Coursier/Cache"
+        run: |
+          if [ ! -d ~/AppData/Local/Coursier/Cache ]; then
+            echo "::error::The ~/AppData/Local/Coursier/Cache directory does not exist unexpectedly"
+            exit 1
+          fi
       - name: Check files to cache on ubuntu-latest
-        if: matrix.os == 'ubuntu-22.04'
+        if: matrix.os == 'ubuntu-latest'
-        run: bash "$GITHUB_WORKSPACE/__tests__/check-dir.sh" "$HOME/.cache/coursier"
+        run: |
+          if [ ! -d ~/.cache/coursier ]; then
+            echo "::error::The ~/.cache/coursier directory does not exist unexpectedly"
+            exit 1
+          fi
   sbt-restore:
     runs-on: ${{ matrix.os }}
-    cache-mode: read
     defaults:
       run:
         shell: bash
@@ -173,342 +170,40 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [macos-15-intel, windows-latest, ubuntu-22.04]
+        os: [macos-13, windows-latest, ubuntu-latest]
     needs: sbt-save
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
       - name: Run setup-java with the cache for sbt
         uses: ./
         id: setup-java
         with:
-          distribution: 'temurin'
+          distribution: 'adopt'
           java-version: '11'
           cache: sbt
-          cache-read-only: true
 
       - name: Confirm that ~/Library/Caches/Coursier directory has been made
-        if: matrix.os == 'macos-15-intel'
+        if: matrix.os == 'macos-13'
-        run: bash "$GITHUB_WORKSPACE/__tests__/check-dir.sh" "$HOME/Library/Caches/Coursier"
+        run: |
+          if [ ! -d ~/Library/Caches/Coursier ]; then
+            echo "::error::The ~/Library/Caches/Coursier directory does not exist unexpectedly"
+            exit 1
+          fi
+          ls ~/Library/Caches/Coursier
       - name: Confirm that ~/AppData/Local/Coursier/Cache directory has been made
         if: matrix.os == 'windows-latest'
-        run: bash "$GITHUB_WORKSPACE/__tests__/check-dir.sh" "$HOME/AppData/Local/Coursier/Cache"
+        run: |
+          if [ ! -d ~/AppData/Local/Coursier/Cache ]; then
+            echo "::error::The ~/AppData/Local/Coursier/Cache directory does not exist unexpectedly"
+            exit 1
+          fi
+          ls ~/AppData/Local/Coursier/Cache
       - name: Confirm that ~/.cache/coursier directory has been made
-        if: matrix.os == 'ubuntu-22.04'
+        if: matrix.os == 'ubuntu-latest'
-        run: bash "$GITHUB_WORKSPACE/__tests__/check-dir.sh" "$HOME/.cache/coursier"
-  gradle1-save:
-    runs-on: ${{ matrix.os }}
-    cache-mode: write-only
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [macos-latest, windows-latest, ubuntu-latest]
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-        with:
-          persist-credentials: false
-      - name: Run setup-java with the cache for gradle
-        uses: ./
-        id: setup-java
-        with:
-          distribution: 'temurin'
-          java-version: '17'
-          cache: gradle
-          cache-dependency-path: __tests__/cache/gradle1/*.gradle*
-      - name: Create files to cache
-        # Need to avoid using Gradle daemon to stabilize the save process on Windows
-        # https://github.com/actions/cache/issues/454#issuecomment-840493935
         run: |
-          gradle downloadDependencies --no-daemon -p __tests__/cache/gradle1
+          if [ ! -d ~/.cache/coursier ]; then
-          mkdir -p "$HOME/.gradle/wrapper/dists/setup-java-e2e-gradle1"
+            echo "::error::The ~/.cache/coursier directory does not exist unexpectedly"
-          echo "gradle wrapper cache gradle1" > "$HOME/.gradle/wrapper/dists/setup-java-e2e-gradle1/payload"
+            exit 1
-          bash __tests__/check-dir.sh "$HOME/.gradle/caches"
+          fi
-          bash __tests__/check-dir.sh "$HOME/.gradle/wrapper/dists"
+          ls ~/.cache/coursier
-  gradle1-restore:
-    runs-on: ${{ matrix.os }}
-    cache-mode: read
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [macos-latest, windows-latest, ubuntu-latest]
-    needs: gradle1-save
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-        with:
-          persist-credentials: false
-      - name: Run setup-java with the cache for gradle
-        uses: ./
-        id: setup-java
-        with:
-          distribution: 'temurin'
-          java-version: '11'
-          cache: gradle
-          cache-dependency-path: __tests__/cache/gradle1/*.gradle*
-      - name: Confirm that ~/.gradle/caches directory has been made
-        run: bash __tests__/check-dir.sh "$HOME/.gradle/caches"
-      - name: Confirm that the Gradle Wrapper cache has been restored
-        run: bash __tests__/check-dir.sh "$HOME/.gradle/wrapper/dists"
-  gradle2-restore:
-    runs-on: ${{ matrix.os }}
-    cache-mode: read
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [macos-latest, windows-latest, ubuntu-latest]
-    needs: gradle1-save
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-        with:
-          persist-credentials: false
-      - name: Run setup-java with the cache for gradle
-        uses: ./
-        id: setup-java
-        with:
-          distribution: 'temurin'
-          java-version: '11'
-          cache: gradle
-          cache-dependency-path: __tests__/cache/gradle2/*.gradle*
-      - name: Confirm that ~/.gradle/caches directory has not been made
-        run: bash __tests__/check-dir.sh "$HOME/.gradle/caches" absent
-  maven1-save:
-    runs-on: ${{ matrix.os }}
-    cache-mode: write-only
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [macos-15-intel, windows-latest, ubuntu-latest]
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-        with:
-          persist-credentials: false
-      - name: Run setup-java with the cache for maven
-        uses: ./
-        id: setup-java
-        with:
-          distribution: 'temurin'
-          java-version: '11'
-          cache: maven
-          cache-dependency-path: __tests__/cache/maven/pom.xml
-      - name: Create files to cache
-        run: |
-          mvn verify -f __tests__/cache/maven/pom.xml
-          mkdir -p "$HOME/.m2/wrapper/dists/setup-java-e2e-maven1"
-          echo "maven wrapper cache maven1" > "$HOME/.m2/wrapper/dists/setup-java-e2e-maven1/payload"
-          bash __tests__/check-dir.sh "$HOME/.m2/repository"
-          bash __tests__/check-dir.sh "$HOME/.m2/wrapper/dists"
-  maven1-restore:
-    runs-on: ${{ matrix.os }}
-    cache-mode: read
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [macos-15-intel, windows-latest, ubuntu-latest]
-    needs: maven1-save
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-        with:
-          persist-credentials: false
-      - name: Run setup-java with the cache for maven
-        uses: ./
-        id: setup-java
-        with:
-          distribution: 'temurin'
-          java-version: '11'
-          cache: maven
-          cache-dependency-path: __tests__/cache/maven/pom.xml
-      - name: Confirm that ~/.m2/repository directory has been made
-        run: bash __tests__/check-dir.sh "$HOME/.m2/repository"
-      - name: Confirm that the Maven Wrapper cache has been restored
-        run: bash __tests__/check-dir.sh "$HOME/.m2/wrapper/dists"
-  maven2-restore:
-    runs-on: ${{ matrix.os }}
-    cache-mode: read
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [macos-15-intel, windows-latest, ubuntu-latest]
-    needs: maven1-save
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-        with:
-          persist-credentials: false
-      - name: Run setup-java with the cache for maven
-        uses: ./
-        id: setup-java
-        with:
-          distribution: 'temurin'
-          java-version: '11'
-          cache: maven
-          cache-dependency-path: |
-            __tests__/cache/maven2/pom.xml
-            README.md
-      - name: Confirm that ~/.m2/repository directory has not been made
-        run: bash __tests__/check-dir.sh "$HOME/.m2/repository" absent
-  sbt1-save:
-    runs-on: ${{ matrix.os }}
-    cache-mode: write-only
-    defaults:
-      run:
-        shell: bash
-        working-directory: __tests__/cache/sbt
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [macos-15-intel, windows-latest, ubuntu-22.04]
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-        with:
-          persist-credentials: false
-      - name: Run setup-java with the cache for sbt
-        uses: ./
-        id: setup-java
-        with:
-          distribution: 'temurin'
-          java-version: '11'
-          cache: sbt
-          cache-dependency-path: __tests__/cache/sbt/*.sbt
-      - name: Setup SBT
-        if: matrix.os == 'macos-15-intel'
-        run: |
-          echo ""Installing SBT...""
-          brew install sbt
-      - name: Create files to cache
-        run: sbt update
-
-      - name: Check files to cache on macos-latest
-        if: matrix.os == 'macos-15-intel'
-        run: bash "$GITHUB_WORKSPACE/__tests__/check-dir.sh" "$HOME/Library/Caches/Coursier"
-      - name: Check files to cache on windows-latest
-        if: matrix.os == 'windows-latest'
-        run: bash "$GITHUB_WORKSPACE/__tests__/check-dir.sh" "$HOME/AppData/Local/Coursier/Cache"
-      - name: Check files to cache on ubuntu-latest
-        if: matrix.os == 'ubuntu-22.04'
-        run: bash "$GITHUB_WORKSPACE/__tests__/check-dir.sh" "$HOME/.cache/coursier"
-  sbt1-restore:
-    runs-on: ${{ matrix.os }}
-    cache-mode: read
-    defaults:
-      run:
-        shell: bash
-        working-directory: __tests__/cache/sbt
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [macos-15-intel, windows-latest, ubuntu-22.04]
-    needs: sbt1-save
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-        with:
-          persist-credentials: false
-      - name: Run setup-java with the cache for sbt
-        uses: ./
-        id: setup-java
-        with:
-          distribution: 'temurin'
-          java-version: '11'
-          cache: sbt
-          cache-dependency-path: __tests__/cache/sbt/*.sbt
-
-      - name: Confirm that ~/Library/Caches/Coursier directory has been made
-        if: matrix.os == 'macos-15-intel'
-        run: bash "$GITHUB_WORKSPACE/__tests__/check-dir.sh" "$HOME/Library/Caches/Coursier"
-      - name: Confirm that ~/AppData/Local/Coursier/Cache directory has been made
-        if: matrix.os == 'windows-latest'
-        run: bash "$GITHUB_WORKSPACE/__tests__/check-dir.sh" "$HOME/AppData/Local/Coursier/Cache"
-      - name: Confirm that ~/.cache/coursier directory has been made
-        if: matrix.os == 'ubuntu-22.04'
-        run: bash "$GITHUB_WORKSPACE/__tests__/check-dir.sh" "$HOME/.cache/coursier"
-  sbt2-restore:
-    runs-on: ${{ matrix.os }}
-    cache-mode: read
-    defaults:
-      run:
-        shell: bash
-        working-directory: __tests__/cache/sbt2
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [macos-15-intel, windows-latest, ubuntu-22.04]
-    needs: sbt1-save
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-        with:
-          persist-credentials: false
-      - name: Run setup-java with the cache for sbt
-        uses: ./
-        id: setup-java
-        with:
-          distribution: 'temurin'
-          java-version: '11'
-          cache: sbt
-          cache-dependency-path: __tests__/cache/sbt2/*.sbt
-
-      - name: Confirm that ~/Library/Caches/Coursier directory has not been made
-        if: matrix.os == 'macos-15-intel'
-        run: bash "$GITHUB_WORKSPACE/__tests__/check-dir.sh" "$HOME/Library/Caches/Coursier" absent
-      - name: Confirm that ~/AppData/Local/Coursier/Cache directory has not been made
-        if: matrix.os == 'windows-latest'
-        run: bash "$GITHUB_WORKSPACE/__tests__/check-dir.sh" "$HOME/AppData/Local/Coursier/Cache" absent
-      - name: Confirm that ~/.cache/coursier directory has not been made
-        if: matrix.os == 'ubuntu-22.04'
-        run: bash "$GITHUB_WORKSPACE/__tests__/check-dir.sh" "$HOME/.cache/coursier" absent
-  custom-maven-path-save:
-    runs-on: ubuntu-latest
-    cache-mode: write-only
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-        with:
-          persist-credentials: false
-      - name: Run setup-java with a custom Maven cache path
-        uses: ./
-        with:
-          distribution: 'temurin'
-          java-version: '11'
-          cache: maven
-          cache-dependency-path: |
-            __tests__/cache/maven2/pom.xml
-            .github/workflows/e2e-cache.yml
-          cache-path: |
-            ${{ runner.temp }}/setup-java-custom-maven-repository
-            !${{ runner.temp }}/setup-java-custom-maven-repository/**/*.lastUpdated
-      - name: Populate the custom Maven repository
-        run: |
-          mvn -Dmaven.repo.local="$RUNNER_TEMP/setup-java-custom-maven-repository" verify -f __tests__/cache/maven2/pom.xml
-          touch "$RUNNER_TEMP/setup-java-custom-maven-repository/setup-java-cache-path-marker"
-          bash __tests__/check-dir.sh "$RUNNER_TEMP/setup-java-custom-maven-repository"
-  custom-maven-path-restore:
-    runs-on: ubuntu-latest
-    cache-mode: read
-    needs: custom-maven-path-save
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-        with:
-          persist-credentials: false
-      - name: Run setup-java with a custom Maven cache path
-        uses: ./
-        with:
-          distribution: 'temurin'
-          java-version: '11'
-          cache: maven
-          cache-dependency-path: |
-            __tests__/cache/maven2/pom.xml
-            .github/workflows/e2e-cache.yml
-          cache-path: |
-            ${{ runner.temp }}/setup-java-custom-maven-repository
-            !${{ runner.temp }}/setup-java-custom-maven-repository/**/*.lastUpdated
-          cache-read-only: true
-      - name: Confirm that the custom Maven repository has been restored
-        run: test -f "$RUNNER_TEMP/setup-java-custom-maven-repository/setup-java-cache-path-marker"

.github/workflows/e2e-local-file.yml

@@ -11,10 +11,44 @@ on:
     paths-ignore:
       - '**.md'
 
-permissions:
-  contents: read
-
 jobs:
+  setup-java-local-file-adopt:
+    name: Validate installation from local file Adopt
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [macos-latest, windows-latest, ubuntu-latest]
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Download Adopt OpenJDK file
+        run: |
+          if ($IsLinux) {
+            $downloadUrl = "https://github.com/AdoptOpenJDK/openjdk11-binaries/releases/download/jdk-11.0.10%2B9/OpenJDK11U-jdk_x64_linux_hotspot_11.0.10_9.tar.gz"
+            $localFilename = "java_package.tar.gz"
+          } elseif ($IsMacOS) {
+            $downloadUrl = "https://github.com/AdoptOpenJDK/openjdk11-binaries/releases/download/jdk-11.0.10%2B9/OpenJDK11U-jdk_x64_mac_hotspot_11.0.10_9.tar.gz"
+            $localFilename = "java_package.tar.gz"
+          } elseif ($IsWindows) {
+            $downloadUrl = "https://github.com/AdoptOpenJDK/openjdk11-binaries/releases/download/jdk-11.0.10%2B9/OpenJDK11U-jdk_x64_windows_hotspot_11.0.10_9.zip"
+            $localFilename = "java_package.zip"
+          }
+          echo "LocalFilename=$localFilename" | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append
+          (New-Object System.Net.WebClient).DownloadFile($downloadUrl, "$env:RUNNER_TEMP/$localFilename")
+        shell: pwsh
+      - name: setup-java
+        uses: ./
+        id: setup-java
+        with:
+          distribution: 'jdkfile'
+          jdkFile: ${{ runner.temp }}/${{ env.LocalFilename }}
+          java-version: '11.0.0-ea'
+          architecture: x64
+      - name: Verify Java version
+        run: bash __tests__/verify-java.sh "11.0.10" "${{ steps.setup-java.outputs.path }}"
+        shell: bash
+
   setup-java-local-file-zulu:
     name: Validate installation from local file Zulu
     runs-on: ${{ matrix.os }}
@@ -24,9 +58,7 @@ jobs:
         os: [macos-latest, windows-latest, ubuntu-latest]
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
       - name: Download Zulu OpenJDK file
         run: |
           if ($IsLinux) {
@@ -47,13 +79,11 @@ jobs:
         id: setup-java
         with:
           distribution: 'jdkfile'
-          jdk-file: ${{ runner.temp }}/${{ env.LocalFilename }}
+          jdkFile: ${{ runner.temp }}/${{ env.LocalFilename }}
           java-version: '11.0.0-ea'
           architecture: x64
       - name: Verify Java version
-        env:
+        run: bash __tests__/verify-java.sh "11.0" "${{ steps.setup-java.outputs.path }}"
-          JAVA_PATH: ${{ steps.setup-java.outputs.path }}
-        run: bash __tests__/verify-java.sh "11.0" "$JAVA_PATH"
         shell: bash
 
   setup-java-local-file-temurin:
@@ -65,9 +95,7 @@ jobs:
         os: [macos-latest, windows-latest, ubuntu-latest]
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
       - name: Download Eclipse Temurin file
         run: |
           if ($IsLinux) {
@@ -88,12 +116,9 @@ jobs:
         id: setup-java
         with:
           distribution: 'jdkfile'
-          # Intentionally uses the deprecated `jdkFile` alias to keep it covered.
           jdkFile: ${{ runner.temp }}/${{ env.LocalFilename }}
           java-version: '11.0.0-ea'
           architecture: x64
       - name: Verify Java version
-        env:
+        run: bash __tests__/verify-java.sh "11.0.12" "${{ steps.setup-java.outputs.path }}"
-          JAVA_PATH: ${{ steps.setup-java.outputs.path }}
-        run: bash __tests__/verify-java.sh "11.0.12" "$JAVA_PATH"
         shell: bash

.github/workflows/e2e-publishing.yml

@@ -11,9 +11,6 @@ on:
     paths-ignore:
       - '**.md'
 
-permissions:
-  contents: read
-
 defaults:
   run:
     shell: pwsh
@@ -28,43 +25,29 @@ jobs:
         os: [macos-latest, windows-latest, ubuntu-latest]
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
       - name: setup-java
         uses: ./
         id: setup-java
         with:
-          distribution: 'temurin'
+          distribution: 'adopt'
           java-version: '11'
           server-id: maven
-          server-username-env-var: MAVEN_USERNAME
+          server-username: MAVEN_USERNAME
-          server-password-env-var: MAVEN_CENTRAL_TOKEN
+          server-password: MAVEN_CENTRAL_TOKEN
-          gpg-passphrase-env-var: MAVEN_GPG_PASSPHRASE
+          gpg-passphrase: MAVEN_GPG_PASSPHRASE
       - name: Validate settings.xml
         run: |
           $xmlPath = Join-Path $HOME ".m2" "settings.xml"
           Get-Content $xmlPath | ForEach-Object { Write-Host $_ }
 
-          $content = [System.IO.File]::ReadAllText($xmlPath)
+          [xml]$xml = Get-Content $xmlPath
-          $expected = @(
+          $servers = $xml.settings.servers.server
-            '<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0"'
+          if (($servers[0].id -ne 'maven') -or ($servers[0].username -ne '${env.MAVEN_USERNAME}') -or ($servers[0].password -ne '${env.MAVEN_CENTRAL_TOKEN}')) {
-            '  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"'
+            throw "Generated XML file is incorrect"
-            '  xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0 https://maven.apache.org/xsd/settings-1.0.0.xsd">'
+          }
-            '  <interactiveMode>false</interactiveMode>'
-            '  <servers>'
-            '    <server>'
-            '      <id>maven</id>'
-            '      <username>${env.MAVEN_USERNAME}</username>'
-            '      <password>${env.MAVEN_CENTRAL_TOKEN}</password>'
-            '    </server>'
-            '  </servers>'
-            '</settings>'
-          ) -join "`n"
 
-          if ($content -ne $expected) {
+          if (($servers[1].id -ne 'gpg.passphrase') -or ($servers[1].passphrase -ne '${env.MAVEN_GPG_PASSPHRASE}')) {
-            Write-Host "Expected settings.xml:"
-            $expected -split "`n" | ForEach-Object { Write-Host $_ }
             throw "Generated XML file is incorrect"
           }
 
@@ -77,9 +60,7 @@ jobs:
         os: [macos-latest, windows-latest, ubuntu-latest]
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
       - name: Create fake settings.xml
         run: |
           $xmlDirectory = Join-Path $HOME ".m2"
@@ -90,12 +71,12 @@ jobs:
         uses: ./
         id: setup-java
         with:
-          distribution: 'temurin'
+          distribution: 'adopt'
           java-version: '11'
           server-id: maven
-          server-username-env-var: MAVEN_USERNAME
+          server-username: MAVEN_USERNAME
-          server-password-env-var: MAVEN_CENTRAL_TOKEN
+          server-password: MAVEN_CENTRAL_TOKEN
-          gpg-passphrase-env-var: MAVEN_GPG_PASSPHRASE
+          gpg-passphrase: MAVEN_GPG_PASSPHRASE
       - name: Validate settings.xml is overwritten
         run: |
           $xmlPath = Join-Path $HOME ".m2" "settings.xml"
@@ -115,9 +96,7 @@ jobs:
         os: [macos-latest, windows-latest, ubuntu-latest]
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
       - name: Create fake settings.xml
         run: |
           $xmlDirectory = Join-Path $HOME ".m2"
@@ -128,13 +107,13 @@ jobs:
         uses: ./
         id: setup-java
         with:
-          distribution: 'temurin'
+          distribution: 'adopt'
           java-version: '11'
           server-id: maven
-          server-username-env-var: MAVEN_USERNAME
+          server-username: MAVEN_USERNAME
-          server-password-env-var: MAVEN_CENTRAL_TOKEN
+          server-password: MAVEN_CENTRAL_TOKEN
           overwrite-settings: false
-          gpg-passphrase-env-var: MAVEN_GPG_PASSPHRASE
+          gpg-passphrase: MAVEN_GPG_PASSPHRASE
       - name: Validate that settings.xml is not overwritten
         run: |
           $xmlPath = Join-Path $HOME ".m2" "settings.xml"
@@ -154,19 +133,17 @@ jobs:
         os: [macos-latest, windows-latest, ubuntu-latest]
     steps:
       - name: Checkout
-        uses: actions/checkout@v7
+        uses: actions/checkout@v4
-        with:
-          persist-credentials: false
       - name: setup-java
         uses: ./
         id: setup-java
         with:
-          distribution: 'temurin'
+          distribution: 'adopt'
           java-version: '11'
           server-id: maven
-          server-username-env-var: MAVEN_USERNAME
+          server-username: MAVEN_USERNAME
-          server-password-env-var: MAVEN_CENTRAL_TOKEN
+          server-password: MAVEN_CENTRAL_TOKEN
-          gpg-passphrase-env-var: MAVEN_GPG_PASSPHRASE
+          gpg-passphrase: MAVEN_GPG_PASSPHRASE
           settings-path: ${{ runner.temp }}
       - name: Validate settings.xml location
         run: |

.github/workflows/e2e-smoke.yml

@@ -1,87 +0,0 @@
-name: Validate Java e2e smoke
-
-on:
-  push:
-    branches:
-      - main
-    paths-ignore:
-      - '**.md'
-  pull_request:
-    paths-ignore:
-      - '**.md'
-
-permissions:
-  contents: read
-
-jobs:
-  setup-java:
-    name: ${{ matrix.distribution }} ${{ matrix.version }} (${{ matrix.java-package }}) - ${{ matrix.os }}
-    runs-on: ${{ matrix.os }}
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - os: macos-latest
-            distribution: temurin
-            version: '11'
-            java-package: jdk
-          - os: windows-latest
-            distribution: temurin
-            version: '17'
-            java-package: jdk
-          - os: ubuntu-latest
-            distribution: temurin
-            version: '21'
-            java-package: jdk
-          - os: macos-latest
-            distribution: temurin
-            version: '25'
-            java-package: jdk
-          - os: windows-latest
-            distribution: temurin
-            version: '25'
-            java-package: jdk
-          - os: ubuntu-latest
-            distribution: temurin
-            version: '25'
-            java-package: jdk
-          - os: macos-latest
-            distribution: microsoft
-            version: '25'
-            java-package: jdk
-          - os: windows-latest
-            distribution: microsoft
-            version: '25'
-            java-package: jdk
-          - os: ubuntu-latest
-            distribution: microsoft
-            version: '25'
-            java-package: jdk
-          - os: ubuntu-latest
-            distribution: zulu
-            version: '17'
-            java-package: jre
-          - os: ubuntu-latest
-            distribution: liberica
-            version: '21'
-            java-package: jdk+fx
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v7
-        with:
-          persist-credentials: false
-      - name: setup-java
-        uses: ./
-        id: setup-java
-        with:
-          java-version: ${{ matrix.version }}
-          java-package: ${{ matrix.java-package }}
-          distribution: ${{ matrix.distribution }}
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - name: Verify Java
-        env:
-          JAVA_VERSION: ${{ matrix.version }}
-          JAVA_PATH: ${{ steps.setup-java.outputs.path }}
-        run: bash __tests__/verify-java.sh "$JAVA_VERSION" "$JAVA_PATH"
-        shell: bash

.github/workflows/e2e-versions.yml

@@ -3,159 +3,55 @@ name: Validate Java e2e
 on:
   push:
     branches:
+      - main
       - releases/*
     paths-ignore:
       - '**.md'
+  pull_request:
+    paths-ignore:
+      - '**.md'
   schedule:
     - cron: '0 */12 * * *'
   workflow_dispatch:
-
-permissions:
-  contents: read
-
 jobs:
   setup-java-major-versions:
-    name: ${{ matrix.distribution }} ${{ matrix.version }} (jdk-${{ contains(matrix.os, 'macos') && !contains(matrix.os, 'intel') && 'arm64' || 'x64' }}) - ${{ matrix.os }}
+    name: ${{ matrix.distribution }} ${{ matrix.version }} (jdk-x64) - ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
       matrix:
-        os: [macos-15-intel, windows-latest, ubuntu-latest]
+        os: [macos-13, windows-latest, ubuntu-latest]
-        distribution:
+        distribution: [
-          [
             'temurin',
+            'adopt',
+            'adopt-openj9',
             'zulu',
             'liberica',
             'microsoft',
             'semeru',
             'corretto',
-            'dragonwell',
+            'dragonwell'
-            'sapmachine',
+          ] # internally 'adopt-hotspot' is the same as 'adopt'
-            'jetbrains',
-            'kona',
-            'liberica-nik'
-          ]
         version: ['21', '11', '17']
         exclude:
           - distribution: microsoft
             version: 8
           - distribution: dragonwell
-            os: macos-15-intel
+            os: macos-13
         include:
-          - distribution: microsoft
-            os: windows-latest
-            version: 25
-          - distribution: microsoft
-            os: ubuntu-latest
-            version: 25
-          - distribution: microsoft
-            os: macos-latest
-            version: 25
-          - distribution: kona
-            os: windows-latest
-            version: 25
-          - distribution: kona
-            os: ubuntu-latest
-            version: 25
-          - distribution: kona
-            os: macos-latest
-            version: 25
-          - distribution: liberica-nik
-            os: windows-latest
-            version: 25
-          - distribution: liberica-nik
-            os: ubuntu-latest
-            version: 25
-          - distribution: liberica-nik
-            os: macos-latest
-            version: 25
           - distribution: oracle
-            os: macos-15-intel
+            os: macos-13
-            version: 21
+            version: 17
           - distribution: oracle
             os: windows-latest
-            version: 21
+            version: 20
           - distribution: oracle
             os: ubuntu-latest
-            version: 21
+            version: 20
-          - distribution: oracle-openjdk
-            os: macos-15-intel
-            version: 21
-          - distribution: oracle-openjdk
-            os: windows-latest
-            version: 21
-          - distribution: oracle-openjdk
-            os: ubuntu-latest
-            version: 21
-          - distribution: graalvm
-            os: macos-latest
-            version: 17.0.12
-          - distribution: graalvm
-            os: windows-latest
-            version: 21
-          - distribution: graalvm
-            os: ubuntu-latest
-            version: 21
-          - distribution: graalvm
-            os: ubuntu-latest
-            version: '24-ea'
-    steps:
-      - &checkout_step
-        name: Checkout
-        uses: actions/checkout@v7
-        with:
-          persist-credentials: false
-      - name: setup-java
-        uses: ./
-        id: setup-java
-        with:
-          java-version: ${{ matrix.version }}
-          distribution: ${{ matrix.distribution }}
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - name: Verify Java
-        env:
-          JAVA_VERSION: ${{ matrix.version }}
-          JAVA_PATH: ${{ steps.setup-java.outputs.path }}
-          SETUP_JAVA_VERSION: ${{ steps.setup-java.outputs.version }}
-          REQUIRE_CONCRETE_VERSION: ${{ (matrix.distribution == 'oracle' || matrix.distribution == 'graalvm') && !contains(matrix.version, '.') && !contains(matrix.version, '-ea') }}
-        run: bash __tests__/verify-java.sh "$JAVA_VERSION" "$JAVA_PATH" "$SETUP_JAVA_VERSION" "$REQUIRE_CONCRETE_VERSION"
-        shell: bash
 
-  setup-java-checksum-verification:
-    name: Corretto checksum verification - ubuntu-latest
-    runs-on: ubuntu-latest
     steps:
-      - *checkout_step
+      - name: Checkout
-      - name: setup-java with forced download
+        uses: actions/checkout@v4
-        uses: ./
-        id: setup-java
-        with:
-          java-version: '21'
-          distribution: corretto
-          force-download: true
-      - name: Verify Java
-        env:
-          JAVA_VERSION: '21'
-          JAVA_PATH: ${{ steps.setup-java.outputs.path }}
-        run: bash __tests__/verify-java.sh "$JAVA_VERSION" "$JAVA_PATH"
-        shell: bash
-
-  setup-java-alpine-linux:
-    name: ${{ matrix.distribution }} ${{ matrix.version }} (jdk-${{ contains(matrix.os, 'macos') && !contains(matrix.os, 'intel') && 'arm64' || 'x64' }}) - alpine-linux - ${{ matrix.os }}
-    runs-on: ${{ matrix.os }}
-    container:
-      image: alpine:3.21
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [ubuntu-latest]
-        distribution: ['temurin', 'sapmachine']
-        version: ['21', '17']
-    steps:
-      - *checkout_step
-      - name: Install bash and GnuPG
-        run: apk add --no-cache bash gnupg
       - name: setup-java
         uses: ./
         id: setup-java
@@ -163,20 +59,17 @@ jobs:
           java-version: ${{ matrix.version }}
           distribution: ${{ matrix.distribution }}
       - name: Verify Java
-        env:
+        run: bash __tests__/verify-java.sh "${{ matrix.version }}" "${{ steps.setup-java.outputs.path }}"
-          JAVA_VERSION: ${{ matrix.version }}
-          JAVA_PATH: ${{ steps.setup-java.outputs.path }}
-        run: bash __tests__/verify-java.sh "$JAVA_VERSION" "$JAVA_PATH"
         shell: bash
 
   setup-java-major-minor-versions:
-    name: ${{ matrix.distribution }} ${{ matrix.version }} (jdk-${{ contains(matrix.os, 'macos') && !contains(matrix.os, 'intel') && 'arm64' || 'x64' }}) - ${{ matrix.os }}
+    name: ${{ matrix.distribution }} ${{ matrix.version }} (jdk-x64) - ${{ matrix.os }}
     needs: setup-java-major-versions
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
       matrix:
-        os: &default_os [macos-latest, windows-latest, ubuntu-latest]
+        os: [macos-latest, windows-latest, ubuntu-latest]
         distribution: ['temurin', 'zulu', 'liberica']
         version:
           - '11.0'
@@ -185,27 +78,16 @@ jobs:
         include:
           - distribution: oracle
             os: ubuntu-latest
-            version: '21.0.4'
+            version: '20.0.1'
-          - distribution: graalvm
-            os: ubuntu-latest
-            version: '21.0.4'
           - distribution: dragonwell
             os: ubuntu-latest
             version: '11.0'
           - distribution: dragonwell
             os: ubuntu-latest
             version: '11.0.13+9'
-          - distribution: sapmachine
-            os: ubuntu-latest
-            version: '17.0.7'
-          - distribution: jetbrains
-            os: ubuntu-latest
-            version: '11.0.11'
-          - distribution: jetbrains
-            os: ubuntu-latest
-            version: '17.0.7'
     steps:
-      - *checkout_step
+      - name: Checkout
+        uses: actions/checkout@v4
       - name: setup-java
         uses: ./
         id: setup-java
@@ -213,11 +95,7 @@ jobs:
           java-version: ${{ matrix.version }}
           distribution: ${{ matrix.distribution }}
       - name: Verify Java
-        env:
+        run: bash __tests__/verify-java.sh "${{ matrix.version }}" "${{ steps.setup-java.outputs.path }}"
-          JAVA_VERSION: ${{ matrix.version }}
-          JAVA_PATH: ${{ steps.setup-java.outputs.path }}
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: bash __tests__/verify-java.sh "$JAVA_VERSION" "$JAVA_PATH"
         shell: bash
 
   setup-java-check-latest:
@@ -227,21 +105,14 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: *default_os
+        os: [macos-latest, windows-latest, ubuntu-latest]
-        distribution:
+        distribution: ['temurin', 'zulu', 'liberica', 'dragonwell']
-          [
-            'temurin',
-            'zulu',
-            'liberica',
-            'dragonwell',
-            'sapmachine',
-            'jetbrains'
-          ]
         exclude:
           - distribution: dragonwell
             os: macos-latest
     steps:
-      - *checkout_step
+      - name: Checkout
+        uses: actions/checkout@v4
       - name: setup-java
         uses: ./
         id: setup-java
@@ -249,12 +120,8 @@ jobs:
           distribution: ${{ matrix.distribution }}
           java-version: 11
           check-latest: true
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Verify Java
-        env:
+        run: bash __tests__/verify-java.sh "11" "${{ steps.setup-java.outputs.path }}"
-          JAVA_PATH: ${{ steps.setup-java.outputs.path }}
-        run: bash __tests__/verify-java.sh "11" "$JAVA_PATH"
         shell: bash
 
   setup-java-multiple-jdks:
@@ -264,21 +131,14 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: *default_os
+        os: [macos-latest, windows-latest, ubuntu-latest]
-        distribution:
+        distribution: ['temurin', 'zulu', 'liberica', 'dragonwell']
-          [
-            'temurin',
-            'zulu',
-            'liberica',
-            'dragonwell',
-            'sapmachine',
-            'jetbrains'
-          ]
         exclude:
           - distribution: dragonwell
             os: macos-latest
     steps:
-      - *checkout_step
+      - name: Checkout
+        uses: actions/checkout@v4
       - name: setup-java
         uses: ./
         id: setup-java
@@ -287,15 +147,12 @@ jobs:
           java-version: |
             11
             17
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Verify Java env variables
         run: |
-          $javaArch = if ($env:RUNNER_ARCH -eq "ARM64") { "AARCH64" } else { $env:RUNNER_ARCH }
           $versionsArr = "11","17"
           foreach ($version in $versionsArr)
           {
-            $envName = "JAVA_HOME_${version}_${javaArch}"
+            $envName = "JAVA_HOME_${version}_${env:RUNNER_ARCH}"
             $JavaVersionPath = [Environment]::GetEnvironmentVariable($envName)
             if (-not (Test-Path "$JavaVersionPath")) { 
               Write-Host "$envName is not found"
@@ -304,74 +161,51 @@ jobs:
           }
         shell: pwsh
       - name: Verify Java
-        env:
+        run: bash __tests__/verify-java.sh "17" "${{ steps.setup-java.outputs.path }}"
-          JAVA_PATH: ${{ steps.setup-java.outputs.path }}
-        run: bash __tests__/verify-java.sh "17" "$JAVA_PATH"
         shell: bash
 
-  setup-java-ea-versions:
+  setup-java-ea-versions-zulu:
-    name: ${{ matrix.distribution }} ${{ matrix.version }} (jdk-${{ contains(matrix.os, 'macos') && !contains(matrix.os, 'intel') && 'arm64' || 'x64' }}) - ${{ matrix.os }}
+    name: zulu ${{ matrix.version }} (jdk-x64) - ${{ matrix.os }}
     needs: setup-java-major-minor-versions
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
       matrix:
-        include:
+        os: [macos-13, windows-latest, ubuntu-latest]
-          - {os: macos-15-intel, version: '17-ea', distribution: zulu}
+        version: ['17-ea', '15.0.0-ea.14']
-          - {os: windows-latest, version: '17-ea', distribution: zulu}
-          - {os: ubuntu-latest, version: '17-ea', distribution: zulu}
-          - {os: macos-15-intel, version: '15.0.0-ea.14', distribution: zulu}
-          - {os: windows-latest, version: '15.0.0-ea.14', distribution: zulu}
-          - {os: ubuntu-latest, version: '15.0.0-ea.14', distribution: zulu}
-          - {os: macos-latest, version: '17-ea', distribution: temurin}
-          - {os: windows-latest, version: '17-ea', distribution: temurin}
-          - {os: ubuntu-latest, version: '17-ea', distribution: temurin}
-          - {os: macos-latest, version: '17-ea', distribution: sapmachine}
-          - {os: windows-latest, version: '17-ea', distribution: sapmachine}
-          - {os: ubuntu-latest, version: '17-ea', distribution: sapmachine}
-          - {os: macos-latest, version: '21-ea', distribution: sapmachine}
-          - {os: windows-latest, version: '21-ea', distribution: sapmachine}
-          - {os: ubuntu-latest, version: '21-ea', distribution: sapmachine}
     steps:
-      - *checkout_step
+      - name: Checkout
+        uses: actions/checkout@v4
       - name: setup-java
         uses: ./
         id: setup-java
         with:
           java-version: ${{ matrix.version }}
-          distribution: ${{ matrix.distribution }}
+          distribution: zulu
-          verify-signature: ${{ matrix.distribution == 'temurin' && contains(matrix.version, '-ea') && 'false' || '' }}
       - name: Verify Java
-        env:
+        run: bash __tests__/verify-java.sh "${{ matrix.version }}" "${{ steps.setup-java.outputs.path }}"
-          JAVA_VERSION: ${{ matrix.version }}
-          JAVA_PATH: ${{ steps.setup-java.outputs.path }}
-        run: bash __tests__/verify-java.sh "$JAVA_VERSION" "$JAVA_PATH"
         shell: bash
 
-  setup-java-signature-verification:
+  setup-java-ea-versions-temurin:
-    name: ${{ matrix.distribution }} ${{ matrix.version }} signature verification - ${{ matrix.os }}
+    name: temurin ${{ matrix.version }} (jdk-x64) - ${{ matrix.os }}
     needs: setup-java-major-minor-versions
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
       matrix:
-        os: *default_os
+        os: [macos-latest, windows-latest, ubuntu-latest]
-        version: ['21', '17']
+        version: ['17-ea']
-        distribution: [temurin, microsoft]
     steps:
-      - *checkout_step
+      - name: Checkout
-      - name: setup-java with signature verification
+        uses: actions/checkout@v4
+      - name: setup-java
         uses: ./
         id: setup-java
         with:
           java-version: ${{ matrix.version }}
-          distribution: ${{ matrix.distribution }}
+          distribution: temurin
-          verify-signature: true
       - name: Verify Java
-        env:
+        run: bash __tests__/verify-java.sh "${{ matrix.version }}" "${{ steps.setup-java.outputs.path }}"
-          JAVA_VERSION: ${{ matrix.version }}
-          JAVA_PATH: ${{ steps.setup-java.outputs.path }}
-        run: bash __tests__/verify-java.sh "$JAVA_VERSION" "$JAVA_PATH"
         shell: bash
 
   setup-java-custom-package-type:
@@ -381,9 +215,8 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [macos-15-intel, windows-latest, ubuntu-latest]
+        os: [macos-13, windows-latest, ubuntu-latest]
-        distribution:
+        distribution: ['temurin', 'zulu', 'liberica', 'semeru']
-          ['temurin', 'zulu', 'liberica', 'semeru', 'sapmachine', 'jetbrains']
         java-package: ['jre']
         version: ['17.0']
         include:
@@ -403,57 +236,13 @@ jobs:
             java-package: jre+fx
             version: '11'
             os: ubuntu-latest
-          - distribution: 'liberica-nik'
-            java-package: jdk+fx
-            version: '21'
-            os: ubuntu-latest
           - distribution: 'corretto'
             java-package: jre
             version: '8'
             os: windows-latest
-          - distribution: 'jetbrains'
-            java-package: jdk+jcef
-            version: '11'
-            os: ubuntu-latest
-          - distribution: 'jetbrains'
-            java-package: jdk+jcef
-            version: '17'
-            os: ubuntu-latest
-          - distribution: 'jetbrains'
-            java-package: jdk+jcef
-            version: '21'
-            os: ubuntu-latest
-          - distribution: 'jetbrains'
-            java-package: jre+jcef
-            version: '11'
-            os: ubuntu-latest
-          - distribution: 'jetbrains'
-            java-package: jre+jcef
-            version: '17'
-            os: ubuntu-latest
-          - distribution: 'jetbrains'
-            java-package: jre+jcef
-            version: '21'
-            os: ubuntu-latest
-          - distribution: 'jetbrains'
-            java-package: jdk+ft
-            version: '17'
-            os: ubuntu-latest
-          - distribution: 'jetbrains'
-            java-package: jdk+ft
-            version: '21'
-            os: ubuntu-latest
-          - distribution: 'jetbrains'
-            java-package: jre+ft
-            version: '17'
-            os: ubuntu-latest
-          - distribution: 'jetbrains'
-            java-package: jre+ft
-            version: '21'
-            os: ubuntu-latest
-
     steps:
-      - *checkout_step
+      - name: Checkout
+        uses: actions/checkout@v4
       - name: setup-java
         uses: ./
         id: setup-java
@@ -461,13 +250,8 @@ jobs:
           java-version: ${{ matrix.version }}
           java-package: ${{ matrix.java-package }}
           distribution: ${{ matrix.distribution }}
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Verify Java
-        env:
+        run: bash __tests__/verify-java.sh "${{ matrix.version }}" "${{ steps.setup-java.outputs.path }}"
-          JAVA_VERSION: ${{ matrix.version }}
-          JAVA_PATH: ${{ steps.setup-java.outputs.path }}
-        run: bash __tests__/verify-java.sh "$JAVA_VERSION" "$JAVA_PATH"
         shell: bash
 
   # Only Liberica and Zulu provide x86
@@ -479,11 +263,12 @@ jobs:
       fail-fast: false
       matrix:
         # x86 is not supported on macOS
-        os: [windows-latest, ubuntu-22.04]
+        os: [windows-latest, ubuntu-latest]
         distribution: ['liberica', 'zulu', 'corretto']
         version: ['11']
     steps:
-      - *checkout_step
+      - name: Checkout
+        uses: actions/checkout@v4
       - name: setup-java
         uses: ./
         id: setup-java
@@ -492,42 +277,21 @@ jobs:
           java-version: ${{ matrix.version }}
           architecture: 'x86'
       - name: Verify Java
-        env:
+        run: bash __tests__/verify-java.sh "${{ matrix.version }}" "${{ steps.setup-java.outputs.path }}"
-          JAVA_VERSION: ${{ matrix.version }}
-          JAVA_PATH: ${{ steps.setup-java.outputs.path }}
-        run: bash __tests__/verify-java.sh "$JAVA_VERSION" "$JAVA_PATH"
         shell: bash
 
-  setup-java-unsupported-platform:
-    name: Reject unsupported Oracle x86 on Linux
-    runs-on: ubuntu-latest
-    steps:
-      - *checkout_step
-      - name: Attempt unsupported setup
-        id: unsupported-setup
-        continue-on-error: true
-        uses: ./
-        with:
-          distribution: oracle
-          java-version: '21'
-          architecture: x86
-      - name: Verify setup was rejected
-        if: always()
-        env:
-          SETUP_OUTCOME: ${{ steps.unsupported-setup.outcome }}
-        run: test "$SETUP_OUTCOME" = failure
-
   setup-java-version-both-version-inputs-presents:
     name: ${{ matrix.distribution }} version (should be from input) - ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
       matrix:
-        os: *default_os
+        os: [macos-latest, windows-latest, ubuntu-latest]
         distribution: ['temurin', 'microsoft', 'corretto']
         java-version-file: ['.java-version', '.tool-versions']
     steps:
-      - *checkout_step
+      - name: Checkout
+        uses: actions/checkout@v4
       - name: Create .java-version file
         shell: bash
         run: echo "17" > .java-version
@@ -542,9 +306,7 @@ jobs:
           java-version: 11
           java-version-file: ${{matrix.java-version-file }}
       - name: Verify Java
-        env:
+        run: bash __tests__/verify-java.sh "11" "${{ steps.setup-java.outputs.path }}"
-          JAVA_PATH: ${{ steps.setup-java.outputs.path }}
-        run: bash __tests__/verify-java.sh "11" "$JAVA_PATH"
         shell: bash
 
   setup-java-version-from-file-major-notation:
@@ -553,11 +315,12 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: *default_os
+        os: [macos-latest, windows-latest, ubuntu-latest]
         distribution: ['temurin', 'zulu', 'liberica', 'microsoft', 'corretto']
         java-version-file: ['.java-version', '.tool-versions']
     steps:
-      - *checkout_step
+      - name: Checkout
+        uses: actions/checkout@v4
       - name: Create .java-version file
         shell: bash
         run: echo "11" > .java-version
@@ -571,9 +334,7 @@ jobs:
           distribution: ${{ matrix.distribution }}
           java-version-file: ${{matrix.java-version-file }}
       - name: Verify Java
-        env:
+        run: bash __tests__/verify-java.sh "11" "${{ steps.setup-java.outputs.path }}"
-          JAVA_PATH: ${{ steps.setup-java.outputs.path }}
-        run: bash __tests__/verify-java.sh "11" "$JAVA_PATH"
         shell: bash
 
   setup-java-version-from-file-major-minor-patch-notation:
@@ -582,11 +343,12 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: *default_os
+        os: [macos-latest, windows-latest, ubuntu-latest]
-        distribution: ['temurin', 'zulu']
+        distribution: ['adopt', 'adopt-openj9', 'zulu']
         java-version-file: ['.java-version', '.tool-versions']
     steps:
-      - *checkout_step
+      - name: Checkout
+        uses: actions/checkout@v4
       - name: Create .java-version file
         shell: bash
         run: echo "17.0.10" > .java-version
@@ -600,31 +362,27 @@ jobs:
           distribution: ${{ matrix.distribution }}
           java-version-file: ${{matrix.java-version-file }}
       - name: Verify Java
-        env:
+        run: bash __tests__/verify-java.sh "17.0.10" "${{ steps.setup-java.outputs.path }}"
-          JAVA_PATH: ${{ steps.setup-java.outputs.path }}
-        run: bash __tests__/verify-java.sh "17.0.10" "$JAVA_PATH"
         shell: bash
 
   setup-java-version-from-file-major-minor-patch-with-dist:
-    name: ${{ matrix.distribution }} version from file '${{ matrix.java-version-file }}' - ${{ matrix.os }}
+    name: ${{ matrix.distribution }} version from file 'openjdk64-17.0.10' - ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
       matrix:
-        os: *default_os
+        os: [macos-latest, windows-latest, ubuntu-latest]
-        distribution: ['temurin', 'zulu', 'liberica']
+        distribution: ['adopt', 'zulu', 'liberica']
-        java-version-file: ['.java-version', '.tool-versions', '.sdkmanrc']
+        java-version-file: ['.java-version', '.tool-versions']
     steps:
-      - *checkout_step
+      - name: Checkout
+        uses: actions/checkout@v4
       - name: Create .java-version file
         shell: bash
         run: echo "openjdk64-17.0.10" > .java-version
       - name: Create .tool-versions file
         shell: bash
         run: echo "java openjdk64-17.0.10" > .tool-versions
-      - name: Create .sdkmanrc file
-        shell: bash
-        run: echo "java=17.0.10-tem" > .sdkmanrc
       - name: setup-java
         uses: ./
         id: setup-java
@@ -632,106 +390,5 @@ jobs:
           distribution: ${{ matrix.distribution }}
           java-version-file: ${{matrix.java-version-file }}
       - name: Verify Java
-        env:
+        run: bash __tests__/verify-java.sh "17.0.10" "${{ steps.setup-java.outputs.path }}"
-          JAVA_PATH: ${{ steps.setup-java.outputs.path }}
-        run: bash __tests__/verify-java.sh "17.0.10" "$JAVA_PATH"
-        shell: bash
-
-  setup-java-version-from-sdkman-major:
-    name: temurin 26 from .sdkmanrc - ubuntu-latest
-    runs-on: ubuntu-latest
-    steps:
-      - *checkout_step
-      - name: Create SDKMAN and Gradle files
-        run: |
-          echo "java=26-tem" > .sdkmanrc
-          touch build.gradle
-      - name: setup-java
-        uses: ./
-        id: setup-java
-        with:
-          java-version-file: .sdkmanrc
-          cache: gradle
-      - name: Verify Java
-        env:
-          JAVA_PATH: ${{ steps.setup-java.outputs.path }}
-        run: bash __tests__/verify-java.sh "26" "$JAVA_PATH"
-
-  setup-java-set-default:
-    name: set-default option - ${{ matrix.os }}
-    needs: setup-java-major-versions
-    runs-on: ${{ matrix.os }}
-    strategy:
-      fail-fast: false
-      matrix:
-        os: *default_os
-    steps:
-      - *checkout_step
-      - name: Setup Java 17 as default
-        uses: ./
-        id: setup-java-17
-        with:
-          distribution: 'temurin'
-          java-version: '17'
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - name: Setup Java 21 without setting as default
-        uses: ./
-        id: setup-java-21
-        with:
-          distribution: 'temurin'
-          java-version: '21'
-          set-default: false
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - name: Verify JAVA_HOME still points to Java 17
-        env:
-          JAVA_17_PATH: ${{ steps.setup-java-17.outputs.path }}
-        run: |
-          echo "JAVA_HOME=$JAVA_HOME"
-          echo "Java 17 path=$JAVA_17_PATH"
-          if [ "$JAVA_HOME" != "$JAVA_17_PATH" ]; then
-            echo "JAVA_HOME should still point to Java 17"
-            exit 1
-          fi
-        shell: bash
-      - name: Verify java -version reports Java 17
-        run: |
-          JAVA_VERSION=$(java -version 2>&1 | head -1)
-          echo "java -version: $JAVA_VERSION"
-          if ! echo "$JAVA_VERSION" | grep -q "17"; then
-            echo "Default java should still be version 17"
-            exit 1
-          fi
-        shell: bash
-      - name: Verify JAVA_HOME_21 env var is set
-        run: |
-          $javaArch = if ($env:RUNNER_ARCH -eq "ARM64") { "AARCH64" } else { $env:RUNNER_ARCH }
-          $envName = "JAVA_HOME_21_${javaArch}"
-          $JavaVersionPath = [Environment]::GetEnvironmentVariable($envName)
-          if (-not $JavaVersionPath) {
-            Write-Host "$envName is not set"
-            exit 1
-          }
-          if (-not (Test-Path "$JavaVersionPath")) {
-            Write-Host "$envName path does not exist: $JavaVersionPath"
-            exit 1
-          }
-          Write-Host "$envName=$JavaVersionPath"
-        shell: pwsh
-      - name: Verify Java 21 outputs are set
-        env:
-          JAVA_21_PATH: ${{ steps.setup-java-21.outputs.path }}
-          JAVA_21_VERSION: ${{ steps.setup-java-21.outputs.version }}
-        run: |
-          echo "Java 21 path=$JAVA_21_PATH"
-          echo "Java 21 version=$JAVA_21_VERSION"
-          if [ -z "$JAVA_21_PATH" ]; then
-            echo "Java 21 path output should be set"
-            exit 1
-          fi
-          if [ -z "$JAVA_21_VERSION" ]; then
-            echo "Java 21 version output should be set"
-            exit 1
-          fi
         shell: bash

.github/workflows/licensed.yml

@@ -9,9 +9,6 @@ on:
       - main
   workflow_dispatch:
 
-permissions:
-  contents: read
-
 jobs:
   call-licensed:
     name: Licensed

.github/workflows/publish-immutable-actions.yml

@@ -1,25 +0,0 @@
-name: 'Publish Immutable Action Version'
-
-on:
-  release:
-    types: [released]
-  workflow_dispatch:
-
-permissions: {}
-
-jobs:
-  publish:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      id-token: write
-      packages: write
-
-    steps:
-      - name: Checking out
-        uses: actions/checkout@v7
-        with:
-          persist-credentials: false
-      - name: Publish
-        id: publish
-        uses: actions/publish-immutable-action@v0.0.4

.github/workflows/release-new-action-version.yml

@@ -23,7 +23,7 @@ jobs:
     steps:
       - name: Update the ${{ env.TAG_NAME }} tag
         id: update-major-tag
-        uses: actions/publish-action@v0.4.0
+        uses: actions/publish-action@v0.2.2
         with:
           source-tag: ${{ env.TAG_NAME }}
           slack-webhook: ${{ secrets.SLACK_WEBHOOK }}

.github/workflows/update-config-files.yml

@@ -5,12 +5,7 @@ on:
     - cron: '0 3 * * 0'
   workflow_dispatch:
 
-permissions: {}
-
 jobs:
   call-update-configuration-files:
     name: Update configuration files
-    permissions:
-      contents: write # to push the branch with updated configuration files
-      pull-requests: write # to open/update the configuration update PR
     uses: actions/reusable-workflows/.github/workflows/update-config-files.yml@main

.github/workflows/zizmor.yml

@@ -1,48 +0,0 @@
-name: Security analysis with zizmor
-
-on:
-  push:
-    branches:
-      - main
-      - releases/*
-    paths-ignore:
-      - '**.md'
-  pull_request:
-    paths-ignore:
-      - '**.md'
-  workflow_dispatch:
-
-permissions: {}
-
-jobs:
-  zizmor:
-    name: Analyze workflows with zizmor
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      security-events: write # to upload SARIF results to code scanning
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v7
-        with:
-          persist-credentials: false
-
-      - name: Set up Python
-        uses: actions/setup-python@v7
-        with:
-          python-version: '3.x'
-
-      - name: Install zizmor
-        run: pip install zizmor
-
-      - name: Run zizmor
-        run: zizmor --format sarif .github/workflows/ > zizmor.sarif
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Upload SARIF results to code scanning
-        if: always() && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
-        uses: github/codeql-action/upload-sarif@v4
-        with:
-          sarif_file: zizmor.sarif
-          category: zizmor

.github/zizmor.yml

@@ -1,11 +0,0 @@
-# Configuration for zizmor (https://docs.zizmor.sh)
-rules:
-  unpinned-uses:
-    config:
-      # First-party GitHub-maintained actions are trusted and referenced by
-      # major-version tags (the convention used across the actions org).
-      # Any third-party action must be pinned to a full commit SHA.
-      policies:
-        actions/*: ref-pin
-        github/*: ref-pin
-        '*': hash-pin

.husky/pre-commit

@@ -1 +0,0 @@
-npx lint-staged

.husky/pre-push

@@ -1 +0,0 @@
-npm run build && npm test

.licensed.yml

@@ -10,11 +10,6 @@ allowed:
   - mit
   - cc0-1.0
   - unlicense
-  - blueoak-1.0.0
 
 reviewed:
   npm:
-    - "@actions/http-client" # MIT (license text present), but detected as "other"
-    - "argparse" # Python Software Foundation License (PSF), but detected as "other"
-    - "balanced-match"
-    - "brace-expansion"

.prettierrc.js

@@ -0,0 +1,11 @@
+// This is a reusable configuration file copied from https://github.com/actions/reusable-workflows/tree/main/reusable-configurations. Please don't make changes to this file as it's the subject of an automatic update.
+module.exports = {
+  printWidth: 80,
+  tabWidth: 2,
+  useTabs: false,
+  semi: true,
+  singleQuote: true,
+  trailingComma: 'none',
+  bracketSpacing: false,
+  arrowParens: 'avoid'
+};

.prettierrc.json

@@ -1,10 +0,0 @@
-{
-  "printWidth": 80,
-  "tabWidth": 2,
-  "useTabs": false,
-  "semi": true,
-  "singleQuote": true,
-  "trailingComma": "none",
-  "bracketSpacing": false,
-  "arrowParens": "avoid"
-}

README.md

@@ -4,541 +4,269 @@
 [![Validate Java e2e](https://github.com/actions/setup-java/actions/workflows/e2e-versions.yml/badge.svg?branch=main)](https://github.com/actions/setup-java/actions/workflows/e2e-versions.yml)
 [![Validate cache](https://github.com/actions/setup-java/actions/workflows/e2e-cache.yml/badge.svg?branch=main)](https://github.com/actions/setup-java/actions/workflows/e2e-cache.yml)
 
-Set up Java for GitHub Actions workflows. `setup-java` installs a requested Java distribution, adds it to `PATH`, configures `JAVA_HOME`, and can optionally cache build dependencies for Apache Maven, Gradle, and sbt; generate Maven publishing configuration, verify JDK package signatures, manage multiple JDKs, and manage Maven toolchains.
+The `setup-java` action provides the following functionality for GitHub Actions runners:
+- Downloading and setting up a requested version of Java. See [Usage](#usage) for a list of supported distributions.
+- Extracting and caching custom version of Java from a local file.
+- Configuring runner for publishing using Apache Maven.
+- Configuring runner for publishing using Gradle.
+- Configuring runner for using GPG private key.
+- Registering problem matchers for error output.
+- Caching dependencies managed by Apache Maven.
+- Caching dependencies managed by Gradle.
+- Caching dependencies managed by sbt.
+- [Maven Toolchains declaration](https://maven.apache.org/guides/mini/guide-using-toolchains.html) for specified JDK versions.
 
-```yaml
+This action allows you to work with Java and Scala projects.
-steps:
-  - uses: actions/checkout@v7
-  - uses: actions/setup-java@v6
-    with:
-      distribution: temurin
-      java-version: '25'
-  - run: java --version
-```
 
-## Contents
+## V2 vs V1
 
-- [What it does](#what-it-does)
+- V2 supports custom distributions and provides support for Azul Zulu OpenJDK, Eclipse Temurin and AdoptOpenJDK  out of the box. V1 supports only Azul Zulu OpenJDK.
-- [What's new](#whats-new)
+- V2 requires you to specify distribution along with the version. V1 defaults to Azul Zulu OpenJDK, only version input is required. Follow [the migration guide](docs/switching-to-v2.md) to switch from V1 to V2.
-- [Usage](#usage)
-- [Inputs](#inputs)
-- [Supported distributions](#supported-distributions)
-- [Supported version syntax](#supported-version-syntax)
-- [Caching](#caching)
-- [Multiple JDKs and Maven toolchains](#multiple-jdks-and-maven-toolchains)
-- [Publishing packages](#publishing-packages)
-- [Advanced usage](#advanced-usage)
-
-## What it does
-
-- Downloads and installs Java from a supported distribution.
-- Uses a requested Java version, a version file, or the `latest` stable release alias.
-- Extracts and caches a custom JDK archive from a local file.
-- Configures Maven `settings.xml`, Maven Toolchains, Maven GPG signing inputs, and environment-variable based credentials for publishing workflows.
-- Registers Java problem matchers for compiler diagnostics and uncaught exceptions.
-- Caches dependencies for Maven, Gradle, and sbt.
-- Caches downloaded JDK installations between jobs.
-- Verifies downloaded archive checksums when a distribution publishes authoritative checksums.
-- Optionally verifies package signatures for supported distributions.
-
-`setup-java` works with Java, Scala, Kotlin, Gradle, Maven, and sbt projects.
-
-## What's new
-
-### V6
-
-- Migrated the action implementation to ESM to support the latest `@actions/*` packages.
-- Added Oracle OpenJDK (`oracle-openjdk`), Red Hat Build of OpenJDK (`redhat`), and Liberica Native Image Kit (`liberica-nik`), and expanded Tencent Kona support through JDK 25.
-- Added `java-version: latest` to resolve the newest stable GA release from the distribution's remote metadata.
-- Expanded install compatibility with JEP 322 multi-field versions such as `18.0.1.1`, Temurin `jdk+jmods` packages, and native musl artifacts on Alpine for Dragonwell, Corretto, Zulu, and Liberica.
-- JDK downloads now automatically verify authoritative checksums. Package signature verification is supported for Temurin and Microsoft builds, with configurable strict enforcement.
-- Added `force-download: true` to bypass the tool cache and perform a reproducible fresh install.
-- Dependency caching now supports custom paths with `cache-path` and restore-only operation with `cache-read-only: true`.
-- Dependency cache keys now include `.mvn/extensions.xml` and `gradle.properties`, preventing stale restores when Maven extensions or Gradle dependency properties change.
-- Downloaded JDKs are now [cached](#caching-jdk-installations) automatically when `cache` is set; use `cache-jdk` to enable or disable it independently.
-- Warm JDK-cached jobs can reuse cached release metadata, avoiding vendor API calls while retaining a stale-metadata fallback for vendor outages and rate limits.
-- Maven configuration now supports multiple server credentials and custom dependency-resolution repositories.
-- Maven signing keys are imported into an isolated temporary GPG home instead of the runner's default keyring.
-- Set `problem-matcher: false` to disable Java compiler and uncaught-exception annotations.
-- GraalVM distributions now set `GRAALVM_HOME` in addition to `JAVA_HOME`.
-- Invalid boolean values, unsupported distribution/package/platform combinations, and mismatched Maven toolchain ID counts now fail with targeted errors.
-- Renamed environment-variable-name inputs so they are not mistaken for secret values:
-  - `server-username` -> `server-username-env-var`
-  - `server-password` -> `server-password-env-var`
-  - `gpg-passphrase` -> `gpg-passphrase-env-var`
-- Deprecated aliases still work, but emit warnings.
-- Maven GPG passphrases are now passed through `gpg.passphraseEnvName` instead of a deprecated `gpg.passphrase` server entry in `settings.xml`. This requires `maven-gpg-plugin` 3.2.0 or newer. See [GPG](docs/advanced-usage.md#gpg).
-- Legacy AdoptOpenJDK distributions were removed. Use `temurin` instead of `adopt` or `adopt-hotspot`, and `semeru` instead of `adopt-openj9`.
-- See the [complete V6 release notes](https://github.com/actions/setup-java/releases/tag/v6.0.0) for all enhancements and fixes.
-
-### V5
-
-- Upgraded the action runtime from Node 20 to Node 24. Self-hosted runners must use version `v2.327.1` or later. See the [runner release notes](https://github.com/actions/runner/releases/tag/v2.327.1).
-- Added support for [GraalVM Community](#supported-distributions) and [Tencent Kona](#supported-distributions).
-- Expanded `java-version-file` support with `.sdkmanrc` files and automatic distribution detection from SDKMAN and asdf vendor identifiers.
-- Added optional package-signature verification for Eclipse Temurin and Microsoft Build of OpenJDK downloads.
-- Added `set-default: false` for installing a JDK without changing `JAVA_HOME` or `PATH`.
-- Improved dependency caching with separate Maven and Gradle wrapper caches, Maven extension-aware cache keys, and the `cache-primary-key` output.
-- Improved Maven and Java build behavior by preserving toolchain entries across repeated action invocations, suppressing transfer progress by default, generating non-interactive Maven settings, and matching `javac` compiler errors.
-- Renamed the `jdkFile` input to `jdk-file`; the old name remains available as a deprecated alias.
-- See the [complete V5 release history](https://github.com/actions/setup-java/releases?q=v5&expanded=true) for enhancements and fixes across all V5 releases.
-
-### Older versions
-
-> [!WARNING]
-> `actions/setup-java` versions `v1` through `v4` are deprecated. Upgrade workflows to `actions/setup-java@v6`, the latest stable release.
 
 ## Usage
 
-### Install Eclipse Temurin
+  - `java-version`: The Java version that is going to be set up. Takes a whole or [semver](#supported-version-syntax) Java version. If not specified, the action will expect `java-version-file` input to be specified.
 
+  - `java-version-file`: The path to a file containing java version. Supported file types are `.java-version` and `.tool-versions`. See more details in [about .java-version-file](docs/advanced-usage.md#Java-version-file).
+   
+  - `distribution`: _(required)_ Java [distribution](#supported-distributions).
+
+  - `java-package`: The packaging variant of the chosen distribution. Possible values: `jdk`, `jre`, `jdk+fx`, `jre+fx`. Default value: `jdk`.
+
+  - `architecture`: The target architecture of the package. Possible values: `x86`, `x64`, `armv7`, `aarch64`, `ppc64le`. Default value: Derived from the runner machine.
+
+  - `jdkFile`: If a use-case requires a custom distribution setup-java uses the compressed JDK from the location pointed by this input and will take care of the installation and caching on the VM.
+
+  - `check-latest`: Setting this option makes the action to check for the latest available version for the version spec.
+
+  - `cache`: Quick [setup caching](#caching-packages-dependencies) for the dependencies managed through one of the predefined package managers. It can be one of "maven", "gradle" or "sbt".
+
+  - `cache-dependency-path`: The path to a dependency file: pom.xml, build.gradle, build.sbt, etc. This option can be used with the `cache` option. If this option is omitted, the action searches for the dependency file in the entire repository. This option supports wildcards and a list of file names for caching multiple dependencies.
+
+  #### Maven options
+  The action has a bunch of inputs to generate maven's [settings.xml](https://maven.apache.org/settings.html) on the fly and pass the values to Apache Maven GPG Plugin as well as Apache Maven Toolchains. See [advanced usage](docs/advanced-usage.md) for more.
+
+  - `overwrite-settings`: By default action overwrites the settings.xml. In order to skip generation of file if it exists, set this to `false`.
+
+  - `server-id`: ID of the distributionManagement repository in the pom.xml file. Default is `github`.
+
+  - `server-username`: Environment variable name for the username for authentication to the Apache Maven repository. Default is GITHUB_ACTOR.
+
+  - `server-password`: Environment variable name for password or token for authentication to the Apache Maven repository. Default is GITHUB_TOKEN.
+
+  - `settings-path`: Maven related setting to point to the directory where the settings.xml file will be written. Default is ~/.m2.
+
+  - `gpg-private-key`: GPG private key to import. Default is empty string.
+
+  - `gpg-passphrase`: Environment variable name for the GPG private key passphrase. Default is GPG_PASSPHRASE.
+
+  - `mvn-toolchain-id`: Name of Maven Toolchain ID if the default name of `${distribution}_${java-version}` is not wanted.
+
+  - `mvn-toolchain-vendor`: Name of Maven Toolchain Vendor if the default name of `${distribution}` is not wanted.
+
+### Basic Configuration
+
+#### Eclipse Temurin
 ```yaml
 steps:
-  - uses: actions/checkout@v7
+- uses: actions/checkout@v4
-  - uses: actions/setup-java@v6
+- uses: actions/setup-java@v4
-    with:
-      distribution: temurin
-      java-version: '25'
-  - run: java --version
-```
-
-### Install Microsoft Build of OpenJDK
-
-```yaml
-steps:
-  - uses: actions/checkout@v7
-  - uses: actions/setup-java@v6
-    with:
-      distribution: microsoft
-      java-version: '25'
-  - run: java --version
-```
-
-### Read the version from a file
-
-```yaml
-steps:
-  - uses: actions/checkout@v7
-  - uses: actions/setup-java@v6
-    with:
-      distribution: temurin
-      java-version-file: .java-version
-  - run: java --version
-```
-
-Supported version files are `.java-version`, `.tool-versions`, and `.sdkmanrc`. A `.sdkmanrc` file can also provide the distribution when it contains a recognized suffix, such as `java=21.0.5-tem`.
-
-### Use the newest stable Java
-
-```yaml
-steps:
-  - uses: actions/checkout@v7
-  - uses: actions/setup-java@v6
-    with:
-      distribution: temurin
-      java-version: latest
-  - run: java --version
-```
-
-`latest` resolves the newest stable GA release from remote metadata rather than from the runner tool cache. Distributions that do not publish a release listing (such as `oracle` and `graalvm`) resolve the newest GA feature version from the Adoptium available-releases API and then request that version from their own catalog. `latest` is not supported with `java-version-file`, early-access versions, or `distribution: jdkfile`.
-
-## Inputs
-
-| Input | Description | Default |
-| --- | --- | --- |
-| `java-version` | Java version to install. Supports whole versions, semver ranges, early-access versions, and `latest`. Required unless `java-version-file` is set. | |
-| `java-version-file` | Path to `.java-version`, `.tool-versions`, or `.sdkmanrc`. Used when `java-version` is not set. | |
-| `distribution` | Java distribution keyword. Values are case-sensitive and must match one of the supported keywords below. Required unless `java-version-file` points to `.sdkmanrc` with a recognized distribution suffix. | |
-| `java-package` | Package variant such as `jdk`, `jre`, `jdk+fx`, `jre+fx`, `jdk+crac`, `jre+crac`, `jdk+jmods`, `jdk+jcef`, `jre+jcef`, `jdk+ft`, or `jre+ft`. Support varies by distribution. | `jdk` |
-| `architecture` | Package architecture. Canonical values are `x86`, `x64`, `armv7`, `aarch64`, `ppc64le`, `ppc64`, and `s390x`. Aliases `ia32`, `amd64`, `arm`, and `arm64` are normalized. | Runner architecture |
-| `jdk-file` | Local compressed JDK archive. Requires `distribution: jdkfile`. | |
-| `check-latest` | Check remote metadata for the latest version satisfying the version spec before using the runner tool cache. | `false` |
-| `force-download` | Always download Java and replace any matching version in the tool cache. | `false` |
-| `set-default` | Add Java to `PATH` and set `JAVA_HOME`. When `false`, only version-specific `JAVA_HOME_<major>_<arch>` variables are set. | `true` |
-| `problem-matcher` | Register Java compiler and uncaught exception problem matchers. | `true` |
-| `verify-signature` | Verify downloaded Java package signatures when supported. Explicitly setting this to `true` makes verification failures fatal. | Distribution-dependent; see [Download integrity and signatures](#download-integrity-and-signatures) |
-| `verify-signature-public-key` | One or more ASCII-armored GPG public keys used for signature verification. Concatenate multiple armored key blocks. Custom keys replace the bundled distribution keys. | |
-| `token` | Token for fetching GitHub.com-hosted version manifests, useful on GitHub Enterprise Server when unauthenticated requests are rate-limited. | `${{ github.token }}` on GitHub.com; empty string on GHES |
-| `cache` | Enable dependency caching for `maven`, `gradle`, or `sbt`. | |
-| `cache-jdk` | Cache downloaded JDK installations between jobs. When omitted, JDK caching is enabled only if `cache` is set. Set explicitly to `true` or `false` to override. | Enabled when `cache` is set |
-| `cache-dependency-path` | Dependency file paths used for cache key hashing. Supports globs and multiline values. | Auto-detected by package manager |
-| `cache-path` | Cache paths to use instead of the package manager's default dependency cache path. Supports multiline values and exclusions. | |
-| `cache-read-only` | Restore dependency, wrapper, and JDK caches without saving changes in the post step. | `false` |
-| `server-id` | Maven repository ID used in generated `settings.xml`. | `github` |
-| `server-username-env-var` | Environment variable name for Maven repository username. | `GITHUB_ACTOR` |
-| `server-password-env-var` | Environment variable name for Maven repository password or token. | `GITHUB_TOKEN` |
-| `mvn-server-credentials` | Multiline Maven server credentials in the format `server-id:USERNAME_ENV:PASSWORD_ENV`. Replaces the single server configured by the three inputs above when set. | |
-| `mvn-repositories` | Multiline Maven dependency repositories in the format `repository-id:repository-url:snapshots-enabled`. | |
-| `mvn-repositories-include-central` | Include Maven Central in the generated dependency repositories profile. When `false`, Central is disabled unless an explicit `central` repository is declared. | `true` |
-| `mvn-repositories-prioritize-central` | Place Maven Central before custom dependency repositories. Has no effect when Maven Central is excluded. | `true` |
-| `settings-path` | Directory where `settings.xml` is written. | `~/.m2` |
-| `overwrite-settings` | Overwrite an existing `settings.xml`. | `true` |
-| `gpg-private-key` | GPG private key to import into an isolated temporary keyring. | |
-| `gpg-passphrase-env-var` | Environment variable name for the GPG private key passphrase. | `GPG_PASSPHRASE` when a key is set |
-| `mvn-toolchain-id` | Maven Toolchain ID. When multiple Java versions are installed, the number of IDs must match the number of versions. | `${mvn-toolchain-vendor}_${java-version}` |
-| `mvn-toolchain-vendor` | Maven Toolchain vendor value. | `${distribution}` |
-| `show-download-progress` | Keep Maven artifact download and transfer progress in logs. When `false`, the action adds `-ntp` to `MAVEN_ARGS`. | `false` |
-
-- `java-package`: Supported package types are `jdk`, `jre`, `jdk+fx`, `jre+fx`, `jdk+crac`, `jre+crac`, `jdk+jmods`, `jdk+jcef`, `jre+jcef`, `jdk+ft`, and `jre+ft`. Availability varies by distribution.
-
-Deprecated aliases `jdkFile`, `server-username`, `server-password`, and `gpg-passphrase` remain accepted for compatibility, but should be replaced with the current input names.
-
-## Outputs
-
-| Output | Description |
-| --- | --- |
-| `distribution` | Distribution that was installed. |
-| `version` | Actual Java version that was installed. |
-| `path` | Installation path, also used for `JAVA_HOME` when `set-default` is enabled. |
-| `cache-hit` | Whether an exact dependency cache match was restored. |
-| `cache-primary-key` | Primary cache key computed for the selected package manager. Empty when caching is disabled or skipped. |
-
-## Supported distributions
-
-| Keyword | Distribution | License |
-| --- | --- | --- |
-| `corretto` | [Amazon Corretto](https://aws.amazon.com/corretto/) | [License](https://aws.amazon.com/corretto/faqs/) |
-| `dragonwell` | [Alibaba Dragonwell JDK](https://dragonwell-jdk.io/) | [License](https://www.aliyun.com/product/dragonwell/) |
-| `graalvm` | [Oracle GraalVM](https://www.graalvm.org/) | [License](https://www.oracle.com/downloads/licenses/graal-free-license.html) |
-| `graalvm-community` | [GraalVM Community](https://github.com/graalvm/graalvm-ce-builds/releases) | [License](https://github.com/oracle/graal/blob/master/LICENSE) |
-| `jetbrains` | [JetBrains Runtime](https://github.com/JetBrains/JetBrainsRuntime/) | [License](https://github.com/JetBrains/JetBrainsRuntime/blob/main/LICENSE) |
-| `kona` | [Tencent Kona JDK](https://tencent.github.io/konajdk/) | [License](https://tencent.github.io/konajdk/LICENSE.txt) |
-| `liberica` | [Liberica JDK](https://bell-sw.com/) | [License](https://bell-sw.com/liberica_eula/) |
-| `liberica-nik` | [Liberica Native Image Kit](https://bell-sw.com/pages/downloads/native-image-kit/) | [License](https://bell-sw.com/liberica_nik_eula/) |
-| `microsoft` | [Microsoft Build of OpenJDK](https://www.microsoft.com/openjdk) | [License](https://docs.microsoft.com/java/openjdk/faq) |
-| `oracle` | [Oracle JDK](https://www.oracle.com/java/technologies/downloads/) | [License](https://java.com/freeuselicense) |
-| `oracle-openjdk` | [Oracle OpenJDK](https://jdk.java.net/) | [License](https://openjdk.org/legal/gplv2+ce.html) |
-| `redhat` | [Red Hat Build of OpenJDK](https://developers.redhat.com/products/openjdk/overview) | [License](https://openjdk.org/legal/gplv2+ce.html) |
-| `sapmachine` | [SAP SapMachine JDK/JRE](https://sapmachine.io/) | [License](https://github.com/SAP/SapMachine/blob/sapmachine/LICENSE) |
-| `semeru` | [IBM Semeru Runtime Open Edition](https://developer.ibm.com/languages/java/semeru-runtimes/downloads/) | [License](https://openjdk.java.net/legal/gplv2+ce.html) |
-| `temurin` | [Eclipse Temurin](https://adoptium.net/) | [License](https://adoptium.net/about.html) |
-| `zulu` | [Azul Zulu OpenJDK](https://www.azul.com/downloads/zulu-community/?package=jdk) | [License](https://www.azul.com/products/zulu-and-zulu-enterprise/zulu-terms-of-use/) |
-| `jdkfile` | Custom JDK archive | |
-
-> [!NOTE]
-> Distribution availability, package variants, architectures, and version metadata differ by vendor. Check the vendor documentation when a specific version or platform matters.
-
-Additional distribution notes:
-
-- Oracle OpenJDK builds are archived after a limited number of releases and no longer receive security updates. To continue receiving security patches, use Oracle JDK or another vendor.
-- Azul Zulu maps `arm64` to `aarch64` when querying the Azul Metadata API.
-- GraalVM Community is available as `distribution: graalvm-community` for stable JDK 17 and later releases.
-- On Ubuntu runners, commands executed with `sudo` do not inherit the `JAVA_HOME` and `PATH` set by `setup-java` and may fall back to the system-default JDK.
-
-## Supported version syntax
-
-`java-version` accepts exact versions, version ranges, early-access versions, and `latest`.
-
-| Syntax | Examples |
-| --- | --- |
-| Major version | `8`, `11`, `17`, `21`, `25` |
-| Specific feature or patch version | `11.0`, `11.0.4`, `17.0`, `8.0.282+8` |
-| JEP 322 multi-field versions | `11.0.9.1`, `18.0.1.1` |
-| Early access | `15-ea`, `15.0.0-ea`, `27-ea` |
-| Latest stable GA release | `latest` |
-
-When `check-latest` is `false`, the action first tries the runner tool cache for the requested distribution, package type, architecture, and version range. It downloads Java only when no matching cached version is found. When `check-latest` is `true`, the action checks remote metadata first and downloads if the cached version is not current.
-
-GitHub-hosted runners primarily pre-cache Eclipse Temurin JDKs. See the installed Java versions for [Ubuntu](https://github.com/actions/runner-images/blob/main/images/ubuntu/Ubuntu2404-Readme.md#java), [Windows](https://github.com/actions/runner-images/blob/main/images/windows/Windows2025-Readme.md#java), and [macOS](https://github.com/actions/runner-images/blob/main/images/macos/macos-15-Readme.md#java). On a fresh GitHub-hosted runner, requests for other distributions usually miss the tool cache and resolve from remote metadata. For broad version ranges such as a major version (`21`, `25`), this often behaves similarly to `check-latest: true` because the action downloads the latest available release that satisfies the range.
-
-## Download integrity and signatures
-
-`setup-java` automatically verifies downloaded archive checksums when a selected distribution publishes an authoritative checksum. Automatic checksum verification currently applies to `temurin`, `semeru`, `corretto`, `dragonwell`, `kona`, `sapmachine`, `graalvm`, `graalvm-community`, `zulu`, `oracle`, `oracle-openjdk`, `microsoft`, and `jetbrains`.
-
-Distributions or individual releases without an authoritative checksum continue to install normally, with the omission reported in debug logs. Installations resolved directly from the runner tool cache — including JDKs preinstalled on the runner image and JDKs installed by an earlier step of the same job — are not downloaded again and are not reverified, even when `verify-signature: true` is set. Use `force-download: true` to always download and verify the archive.
-
-Package signature verification is supported for `temurin` and `microsoft`. When `verify-signature` is omitted, the action checks the signature and warns if GPG is unavailable or verification fails, but does not enforce the result. Explicitly setting `verify-signature: true` enforces verification and makes these failures fatal. Setting `verify-signature: true` for an unsupported distribution also fails the workflow.
-
-> [!WARNING]
-> Requesting explicit signature verification with verify-signature can fail a build after an unexpected but legitimate vendor signing-key rotation, because the action's bundled keys may not yet include the new key. Confirm a new key through the vendor's trusted documentation before using it.
-
-After confirming a legitimate rotation, configure the updated key with `verify-signature-public-key`. The input accepts one or more ASCII-armored public keys; concatenate complete armored key blocks when both old and new vendor keys are needed during a transition. Custom keys replace, rather than extend, the keys bundled with the selected distribution.
-
-```yaml
-- uses: actions/setup-java@v6
   with:
-    distribution: temurin
+    distribution: 'temurin' # See 'Supported distributions' for available options
-    java-version: '25'
+    java-version: '21'
-    verify-signature: true
+- run: java HelloWorldApp.java
-    verify-signature-public-key: |
-      -----BEGIN PGP PUBLIC KEY BLOCK-----
-      ...vendor key material...
-      -----END PGP PUBLIC KEY BLOCK-----
 ```
 
-As a temporary fallback while a legitimate rotation is being investigated, set `verify-signature: false`. This disables package signature verification, although authoritative checksum verification still applies when the vendor publishes a checksum.
+#### Azul Zulu OpenJDK
-
-```yaml
-- uses: actions/setup-java@v6
-  with:
-    distribution: temurin
-    java-version: '25'
-    verify-signature: false
-```
-
-## Caching
-
-`setup-java` manages three kinds of caches. Each one is restored and saved as a separate cache entry.
-
-| Cache | What it stores | Key based on | How it is enabled |
-| --- | --- | --- | --- |
-| Dependency cache | Downloaded dependencies, such as `~/.m2/repository`, `~/.gradle/caches`, or the sbt cache paths | Runner OS, architecture, package manager, and a hash of the dependency files | Set `cache` to `maven`, `gradle`, or `sbt` |
-| Wrapper caches | Maven and Gradle wrapper distributions (`~/.m2/wrapper/dists`, `~/.gradle/wrapper`) | Runner OS, architecture, wrapper cache name, and a hash of the wrapper properties | Set `cache` to `maven` or `gradle` |
-| JDK cache | The downloaded JDK installation | Runner OS, architecture, distribution, package type, resolved version, release identity, and signature-verification identity | Enabled implicitly whenever `cache` is set, or explicitly with `cache-jdk: true`. Opt out with `cache-jdk: false` |
-
-Set `cache` to `maven`, `gradle`, or `sbt` to cache dependencies with minimal configuration.
-
 ```yaml
 steps:
-  - uses: actions/checkout@v7
+- uses: actions/checkout@v4
-  - uses: actions/setup-java@v6
+- uses: actions/setup-java@v4
-    with:
+  with:
-      distribution: temurin
+    distribution: 'zulu' # See 'Supported distributions' for available options
-      java-version: '25'
+    java-version: '21'
-      cache: maven
+- run: java HelloWorldApp.java
-  - run: mvn verify
 ```
 
-The primary dependency cache key is `setup-java-<runner-os>-<node-arch>-<package-manager>-<file-hash>`, where `<node-arch>` is the runner's Node.js process architecture. The primary cache stores dependency directories such as `~/.m2/repository`, `~/.gradle/caches`, or the sbt cache paths. Its file hash is based on these files by default:
+#### Supported version syntax
+The `java-version` input supports an exact version or a version range using [SemVer](https://semver.org/) notation:
+- major versions: `8`, `11`, `16`, `17`, `21`
+- more specific versions: `8.0.282+8`, `8.0.232`, `11.0`, `11.0.4`, `17.0`
+- early access (EA) versions: `15-ea`, `15.0.0-ea`
 
-| Package manager | Files used for the primary dependency-cache key |
+#### Supported distributions
-| --- | --- |
+Currently, the following distributions are supported:
-| Gradle | `**/*.gradle*`, `**/gradle.properties`, `**/gradle-wrapper.properties`, `buildSrc/**/Versions.kt`, `buildSrc/**/Dependencies.kt`, `gradle/*.versions.toml`, `**/versions.properties` |
+| Keyword | Distribution | Official site | License
-| Maven | `**/pom.xml`, `**/.mvn/wrapper/maven-wrapper.properties`, `**/.mvn/extensions.xml` |
+|-|-|-|-|
-| sbt | `**/*.sbt`, `**/project/build.properties`, `**/project/**.scala`, `**/project/**.sbt` |
+| `temurin` | Eclipse Temurin | [Link](https://adoptium.net/) | [Link](https://adoptium.net/about.html)
+| `zulu` | Azul Zulu OpenJDK | [Link](https://www.azul.com/downloads/zulu-community/?package=jdk) | [Link](https://www.azul.com/products/zulu-and-zulu-enterprise/zulu-terms-of-use/) |
+| `adopt` or `adopt-hotspot` | AdoptOpenJDK Hotspot | [Link](https://adoptopenjdk.net/) | [Link](https://adoptopenjdk.net/about.html) |
+| `adopt-openj9` | AdoptOpenJDK OpenJ9 | [Link](https://adoptopenjdk.net/) | [Link](https://adoptopenjdk.net/about.html) |
+| `liberica` | Liberica JDK | [Link](https://bell-sw.com/) | [Link](https://bell-sw.com/liberica_eula/) |
+| `microsoft` | Microsoft Build of OpenJDK | [Link](https://www.microsoft.com/openjdk) | [Link](https://docs.microsoft.com/java/openjdk/faq)
+| `corretto` | Amazon Corretto Build of OpenJDK | [Link](https://aws.amazon.com/corretto/) | [Link](https://aws.amazon.com/corretto/faqs/)
+| `semeru` | IBM Semeru Runtime Open Edition | [Link](https://developer.ibm.com/languages/java/semeru-runtimes/downloads/) | [Link](https://openjdk.java.net/legal/gplv2+ce.html) |
+| `oracle` | Oracle JDK | [Link](https://www.oracle.com/java/technologies/downloads/) | [Link](https://java.com/freeuselicense)
+| `dragonwell` | Alibaba Dragonwell JDK | [Link](https://dragonwell-jdk.io/) | [Link](https://www.aliyun.com/product/dragonwell/)
 
-Use `cache-dependency-path` to override the files used for key hashing, especially in monorepos:
+**NOTE:** The different distributors can provide discrepant list of available versions / supported configurations. Please refer to the official documentation to see the list of supported versions.
 
+**NOTE:** AdoptOpenJDK got moved to Eclipse Temurin and won't be updated anymore. It is highly recommended to migrate workflows from `adopt` and `adopt-openj9`, to `temurin` and `semeru` respectively, to keep receiving software and security updates. See more details in the [Good-bye AdoptOpenJDK post](https://blog.adoptopenjdk.net/2021/08/goodbye-adoptopenjdk-hello-adoptium/).
+
+**NOTE:** For Azul Zulu OpenJDK architectures x64 and arm64 are mapped to x86 / arm with proper hw_bitness.
+
+### Caching packages dependencies
+The action has a built-in functionality for caching and restoring dependencies. It uses [toolkit/cache](https://github.com/actions/toolkit/tree/main/packages/cache) under hood for caching dependencies but requires less configuration settings. Supported package managers are gradle, maven and sbt. The format of the used cache key is `setup-java-${{ platform }}-${{ packageManager }}-${{ fileHash }}`, where the hash is based on the following files:
+
+- gradle: `**/*.gradle*`, `**/gradle-wrapper.properties`, `buildSrc/**/Versions.kt`, `buildSrc/**/Dependencies.kt`, `gradle/*.versions.toml`, and `**/versions.properties`
+- maven: `**/pom.xml`
+- sbt: all sbt build definition files `**/*.sbt`, `**/project/build.properties`, `**/project/**.scala`, `**/project/**.sbt`
+
+When the option `cache-dependency-path` is specified, the hash is based on the matching file. This option supports wildcards and a list of file names, and is especially useful for monorepos.
+
+The workflow output `cache-hit` is set to indicate if an exact match was found for the key [as actions/cache does](https://github.com/actions/cache/tree/main#outputs).
+
+The cache input is optional, and caching is turned off by default.
+
+#### Caching gradle dependencies
 ```yaml
-- uses: actions/setup-java@v6
+steps:
+- uses: actions/checkout@v4
+- uses: actions/setup-java@v4
   with:
-    distribution: temurin
+    distribution: 'temurin'
-    java-version: '25'
+    java-version: '21'
-    cache: gradle
+    cache: 'gradle'
-    cache-dependency-path: |
+    cache-dependency-path: | # optional
       sub-project/*.gradle*
       sub-project/**/gradle-wrapper.properties
+- run: ./gradlew build --no-daemon
 ```
 
-Use `cache-path` when the build tool stores dependencies outside the default location:
+#### Caching maven dependencies
-
 ```yaml
-- uses: actions/setup-java@v6
+steps:
+- uses: actions/checkout@v4
+- uses: actions/setup-java@v4
   with:
-    distribution: temurin
+    distribution: 'temurin'
-    java-version: '25'
+    java-version: '21'
-    cache: maven
+    cache: 'maven'
-    cache-path: |
+    cache-dependency-path: 'sub-project/pom.xml' # optional
-      /custom/maven/repository
+- name: Build with Maven
-      !/custom/maven/repository/**/*.lastUpdated
+  run: mvn -B package --file pom.xml
-- run: mvn -Dmaven.repo.local=/custom/maven/repository verify
 ```
 
-`cache-path` changes what is restored and saved, but not the cache key. Jobs that should share a cache key must use the same OS, architecture, package manager, dependency files, and cache paths.
+#### Caching sbt dependencies
-
-### Wrapper caches
-
-Maven and Gradle wrapper distributions are restored and saved as additional cache entries, separate from the primary dependency cache. These entries have their own keys in the form `setup-java-<runner-os>-<node-arch>-<wrapper-cache-name>-<file-hash>`.
-
-| Package manager | Wrapper cache name | Cached path | Files used for wrapper-cache key |
-| --- | --- | --- | --- |
-| Maven | `maven-wrapper` | `~/.m2/wrapper/dists` | `**/.mvn/wrapper/maven-wrapper.properties` |
-| Gradle | `gradle-wrapper` | `~/.gradle/wrapper` | `**/gradle-wrapper.properties` |
-
-These wrapper caches are independent from dependency caches, so they remain useful even when dependency files change frequently. The wrapper properties are also part of the Maven and Gradle primary dependency-cache key because wrapper changes can affect how dependencies are resolved, but the wrapper distribution files themselves are stored in the separate wrapper cache entries above.
-
-For advanced Gradle caching features such as build output caching, configuration cache support, encrypted cache storage, cleanup, and fine-grained cache control, consider [`gradle/actions/setup-gradle`](https://github.com/gradle/actions/tree/main/setup-gradle).
-
-### Caching JDK installations
-
-The JDK cache stores the downloaded JDK installation so later runs skip the download. It is enabled implicitly whenever dependency `cache` is set, so most workflows that cache dependencies are already caching the JDK. Set `cache-jdk: true` to enable it without dependency caching, or `cache-jdk: false` to opt out while keeping dependency caching. With neither `cache` nor `cache-jdk` set, nothing is cached.
-
-> [!IMPORTANT]
-> Because JDK caching is on by default whenever `cache` is set, review [Caching JDK installations](docs/advanced-usage.md#caching-jdk-installations)
-> for the full `cache`/`cache-jdk` matrix, cache identity and storage impact.
-
-### Read-only caches
-
-Set `cache-read-only: true` to restore dependency, wrapper, and JDK caches without saving changes in the post action. This is useful for pull requests, merge queues, short-lived branches, and matrix fan-out jobs that should only consume caches produced elsewhere.
-
 ```yaml
-- uses: actions/setup-java@v6
+steps:
+- uses: actions/checkout@v4
+- uses: actions/setup-java@v4
   with:
-    distribution: temurin
+    distribution: 'temurin'
-    java-version: '25'
+    java-version: '21'
-    cache: maven
+    cache: 'sbt'
-    cache-read-only: ${{ github.ref != 'refs/heads/main' }}
+    cache-dependency-path: | # optional
+      sub-project/build.sbt
+      sub-project/project/build.properties
+- name: Build with SBT
+  run: sbt package
 ```
 
-For matrix fan-out, seed the cache once and make matrix jobs read-only consumers:
+#### Cache segment restore timeout
-
+Usually, cache gets downloaded in multiple segments of fixed sizes. Sometimes, a segment download gets stuck, which causes the workflow job to be stuck. The cache segment download timeout [was introduced](https://github.com/actions/toolkit/tree/main/packages/cache#cache-segment-restore-timeout) to solve this issue as it allows the segment download to get aborted and hence allows the job to proceed with a cache miss. The default value of the cache segment download timeout is set to 10 minutes and can be customized by specifying an environment variable named `SEGMENT_DOWNLOAD_TIMEOUT_MINS` with a timeout value in minutes.
-```yaml
-jobs:
-  seed-cache:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v7
-      - uses: actions/setup-java@v6
-        with:
-          distribution: temurin
-          java-version: '25'
-          cache: maven
-      - run: mvn dependency:go-offline dependency:resolve-plugins
-
-  build:
-    needs: seed-cache
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        goal: [test, verify, package]
-    steps:
-      - uses: actions/checkout@v7
-      - uses: actions/setup-java@v6
-        with:
-          distribution: temurin
-          java-version: '25'
-          cache: maven
-          cache-read-only: true
-      - run: mvn ${{ matrix.goal }}
-```
-
-### Cache segment restore timeout
-
-Cache downloads are split into segments. To reduce the chance of a stuck segment blocking a workflow, set `SEGMENT_DOWNLOAD_TIMEOUT_MINS`:
 
 ```yaml
 env:
   SEGMENT_DOWNLOAD_TIMEOUT_MINS: '5'
 steps:
-  - uses: actions/checkout@v7
+- uses: actions/checkout@v4
-  - uses: actions/setup-java@v6
+- uses: actions/setup-java@v4
-    with:
+  with:
-      distribution: temurin
+    distribution: 'temurin'
-      java-version: '25'
+    java-version: '21'
-      cache: gradle
+    cache: 'gradle'
-  - run: ./gradlew build --no-daemon
+- run: ./gradlew build --no-daemon
 ```
 
-## Multiple JDKs and Maven toolchains
+### Check latest
+
+In the basic examples above, the `check-latest` flag defaults to `false`. When set to `false`, the action tries to first resolve a version of Java from the local tool cache on the runner. If unable to find a specific version in the cache, the action will download a version of Java. Use the default or set `check-latest` to `false` if you prefer a faster more consistent setup experience that prioritizes trying to use the cached versions at the expense of newer versions sometimes being available for download.
+
+If `check-latest` is set to `true`, the action first checks if the cached version is the latest one. If the locally cached version is not the most up-to-date, the latest version of Java will be downloaded. Set `check-latest` to `true` if you want the most up-to-date version of Java to always be used. Setting `check-latest` to `true` has performance implications as downloading versions of Java is slower than using cached versions.
+
+For Java distributions that are not cached on Hosted images, `check-latest` always behaves as `true` and downloads Java on-flight. Check out [Hosted Tool Cache](docs/advanced-usage.md#Hosted-Tool-Cache) for more details about pre-cached Java versions.
 
-Install multiple Java versions by providing a multiline `java-version` value. All configured JDKs are installed. The last one added to `PATH` becomes the default.
 
 ```yaml
 steps:
-  - uses: actions/setup-java@v6
+- uses: actions/checkout@v4
-    with:
+- uses: actions/setup-java@v4
-      distribution: temurin
+  with:
-      java-version: |
+    distribution: 'temurin'
-        8
+    java-version: '21'
-        11
+    check-latest: true
-        17
+- run: java HelloWorldApp.java
-        21
-        25
 ```
 
-Other installed JDKs are available through version-specific variables such as `JAVA_HOME_17_X64`. To use a specific version later in the job, set `JAVA_HOME` and prepend its `bin` directory to `PATH`.
+### Testing against different Java versions
-
-`setup-java` writes a Maven Toolchains declaration for each installed JDK. When multiple JDKs are installed, the declaration contains all of them. Customize the generated toolchain values with `mvn-toolchain-id` and `mvn-toolchain-vendor`.
-
-## Testing with a Java matrix
-
 ```yaml
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     strategy:
       matrix:
-        java: ['8', '11', '17', '21', '25']
+        java: [ '8', '11', '17', '21' ]
-    name: Java ${{ matrix.java }}
+    name: Java ${{ matrix.Java }} sample
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v4
-      - uses: actions/setup-java@v6
+      - name: Setup java
+        uses: actions/setup-java@v4
         with:
-          distribution: temurin
+          distribution: '<distribution>'
           java-version: ${{ matrix.java }}
-      - run: java --version
+      - run: java HelloWorldApp.java
-      - run: mvn verify
 ```
 
-## Publishing packages
+### Install multiple JDKs
 
-`setup-java` generates Maven `settings.xml` and Maven Toolchains configuration. For Gradle publishing, it installs Java for the workflow; the Gradle build file remains responsible for reading credentials from environment variables.
+All versions are added to the PATH. The last version will be used and available globally. Other Java versions can be accessed through env variables with such specification as 'JAVA_HOME_{{ MAJOR_VERSION }}_{{ ARCHITECTURE }}'.
-
-### Maven
 
 ```yaml
-steps:
+    steps:
-  - uses: actions/checkout@v7
+      - uses: actions/setup-java@v4
-  - uses: actions/setup-java@v6
+        with:
-    with:
+          distribution: '<distribution>'
-      distribution: temurin
+          java-version: |
-      java-version: '25'
+            8
-      server-id: github
+            11
-      server-username-env-var: GITHUB_ACTOR
+            15
-      server-password-env-var: GITHUB_TOKEN
-  - run: mvn --batch-mode deploy
-    env:
-      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 ```
 
-For dependencies hosted outside Maven Central, use `mvn-repositories` to add
+### Using Maven Toolchains
-resolution repositories to an active profile in the generated `settings.xml`.
+In the example above multiple JDKs are installed for the same job. The result after the last JDK is installed is a Maven Toolchains declaration containing references to all three JDKs. The values for `id`, `version`, and `vendor` of the individual Toolchain entries are the given input values for `distribution` and `java-version` (`vendor` being the combination of `${distribution}_${java-version}`) by default.
-Repository IDs can match `mvn-server-credentials` IDs when authentication is
-required. See [Resolving Maven dependencies from custom repositories](docs/advanced-usage.md#resolving-maven-dependencies-from-custom-repositories).
 
-### GPG signing
+### Advanced Configuration
 
-```yaml
+- [Selecting a Java distribution](docs/advanced-usage.md#Selecting-a-Java-distribution)
-steps:
+  - [Eclipse Temurin](docs/advanced-usage.md#Eclipse-Temurin)
-  - uses: actions/checkout@v7
+  - [Adopt](docs/advanced-usage.md#Adopt)
-  - uses: actions/setup-java@v6
+  - [Zulu](docs/advanced-usage.md#Zulu)
-    with:
+  - [Liberica](docs/advanced-usage.md#Liberica)
-      distribution: temurin
+  - [Microsoft](docs/advanced-usage.md#Microsoft)
-      java-version: '25'
+  - [Amazon Corretto](docs/advanced-usage.md#Amazon-Corretto)
-      gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
+  - [Oracle](docs/advanced-usage.md#Oracle)
-      gpg-passphrase-env-var: GPG_PASSPHRASE
+  - [Alibaba Dragonwell](docs/advanced-usage.md#Alibaba-Dragonwell)
-  - run: mvn --batch-mode deploy
+- [Installing custom Java package type](docs/advanced-usage.md#Installing-custom-Java-package-type)
-    env:
+- [Installing custom Java architecture](docs/advanced-usage.md#Installing-custom-Java-architecture)
-      GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
+- [Installing custom Java distribution from local file](docs/advanced-usage.md#Installing-Java-from-local-file)
-```
+- [Testing against different Java distributions](docs/advanced-usage.md#Testing-against-different-Java-distributions)
-
+- [Testing against different platforms](docs/advanced-usage.md#Testing-against-different-platforms)
-Maven GPG signing requires `maven-gpg-plugin` 3.2.0 or newer because `setup-java` passes the passphrase through `gpg.passphraseEnvName`.
+- [Publishing using Apache Maven](docs/advanced-usage.md#Publishing-using-Apache-Maven)
-
+- [Publishing using Gradle](docs/advanced-usage.md#Publishing-using-Gradle)
-## Recommended permissions
+- [Hosted Tool Cache](docs/advanced-usage.md#Hosted-Tool-Cache)
-
+- [Modifying Maven Toolchains](docs/advanced-usage.md#Modifying-Maven-Toolchains)
-When using the `setup-java` action in your GitHub Actions workflow, it is recommended to set the following permissions to ensure proper functionality:
+- [Java Version File](docs/advanced-usage.md#Java-version-file)
-
-```yaml
-permissions:
-  contents: read # access to check out code and install dependencies
-```
-
-Publishing workflows may require additional permissions depending on the target registry.
-
-## Advanced usage
-
-See [advanced usage](docs/advanced-usage.md) for detailed examples:
-
-- [Selecting a Java distribution](docs/advanced-usage.md#selecting-a-java-distribution)
-- [Installing custom Java package types](docs/advanced-usage.md#installing-custom-java-package-type)
-- [Package compatibility](docs/advanced-usage.md#package-compatibility)
-- [Ensuring the Maven cache is complete](docs/advanced-usage.md#ensuring-the-maven-cache-is-complete-plugin-dependencies)
-- [Caching JDK installations](docs/advanced-usage.md#caching-jdk-installations)
-- [Platform and architecture compatibility](docs/advanced-usage.md#platform-and-architecture-compatibility)
-- [Installing custom Java architecture](docs/advanced-usage.md#installing-custom-java-architecture)
-- [Installing a JDK without setting it as default](docs/advanced-usage.md#installing-jdk-without-setting-as-default)
-- [Installing Java from a local file](docs/advanced-usage.md#installing-java-from-local-file)
-- [Testing against different Java distributions](docs/advanced-usage.md#testing-against-different-java-distributions)
-- [Testing against different platforms](docs/advanced-usage.md#testing-against-different-platforms)
-- [Publishing using Apache Maven](docs/advanced-usage.md#publishing-using-apache-maven)
-- [Apache Maven with a settings path](docs/advanced-usage.md#apache-maven-with-a-settings-path)
-- [Maven transfer progress](docs/advanced-usage.md#maven-transfer-progress-download-logs)
-- [Java problem matcher](docs/advanced-usage.md#java-problem-matcher-compiler-annotations)
-- [Publishing using Gradle](docs/advanced-usage.md#publishing-using-gradle)
-- [Hosted tool cache](docs/advanced-usage.md#hosted-tool-cache)
-- [Modifying Maven Toolchains](docs/advanced-usage.md#modifying-maven-toolchains)
-- [Java version files](docs/advanced-usage.md#java-version-file)
-- [Self-signed certificates and internal CAs on GitHub Enterprise](docs/advanced-usage.md#self-signed-certificates-and-internal-cas-github-enterprise)
 
 ## License
 
@@ -546,8 +274,4 @@ The scripts and documentation in this project are released under the [MIT Licens
 
 ## Contributions
 
-Contributions are welcome. See our [Contributor's Guide](docs/CONTRIBUTING.md).
+Contributions are welcome! See [Contributor's Guide](docs/contributors.md)
-
-## Code of Conduct
-
-:wave: Be nice. See [our code of conduct](CODE_OF_CONDUCT.md)

__tests__/auth.test.ts

@@ -1,99 +1,27 @@
-import {
-  jest,
-  describe,
-  it,
-  expect,
-  beforeEach,
-  afterEach,
-  beforeAll,
-  afterAll
-} from '@jest/globals';
-import {fileURLToPath} from 'url';
 import * as io from '@actions/io';
+import * as core from '@actions/core';
 import * as fs from 'fs';
 import * as path from 'path';
 import os from 'os';
-import {XMLParser} from 'fast-xml-parser';
 
-// Mock @actions/core before importing source modules that depend on it
+import * as auth from '../src/auth';
-jest.unstable_mockModule('@actions/core', () => ({
+import {M2_DIR, MVN_SETTINGS_FILE} from '../src/constants';
-  info: jest.fn(),
-  warning: jest.fn(),
-  debug: jest.fn(),
-  error: jest.fn(),
-  notice: jest.fn(),
-  setFailed: jest.fn(),
-  setOutput: jest.fn(),
-  getInput: jest.fn(),
-  getBooleanInput: jest.fn(),
-  getMultilineInput: jest.fn(() => []),
-  addPath: jest.fn(),
-  exportVariable: jest.fn(),
-  saveState: jest.fn(),
-  getState: jest.fn(),
-  setSecret: jest.fn(),
-  isDebug: jest.fn(() => false),
-  startGroup: jest.fn(),
-  endGroup: jest.fn(),
-  group: jest.fn((_name: string, fn: () => Promise<unknown>) => fn()),
-  toPlatformPath: jest.fn((p: string) => p),
-  toWin32Path: jest.fn((p: string) => p),
-  toPosixPath: jest.fn((p: string) => p)
-}));
 
-jest.unstable_mockModule('../src/gpg.js', () => ({
-  importKey: jest.fn(),
-  removeGpgHome: jest.fn(),
-  toGpgPath: jest.fn()
-}));
-
-// Dynamic imports after mocking
-const core = await import('@actions/core');
-const gpg = await import('../src/gpg.js');
-const auth = await import('../src/auth.js');
-const {M2_DIR, MVN_SETTINGS_FILE, STATE_GPG_HOME} =
-  await import('../src/constants.js');
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const m2Dir = path.join(__dirname, M2_DIR);
 const settingsFile = path.join(m2Dir, MVN_SETTINGS_FILE);
-const credentials = (id: string, username: string, password: string) => [
-  {id, usernameEnvVar: username, passwordEnvVar: password}
-];
-const repositorySettings = (
-  repositories: auth.MavenRepository[],
-  includeCentral = true,
-  prioritizeCentral = true
-): auth.MavenRepositorySettings => ({
-  repositories,
-  includeCentral,
-  prioritizeCentral
-});
 
 describe('auth tests', () => {
-  let spyOSHomedir: any;
+  let spyOSHomedir: jest.SpyInstance;
-  let spyInfo: any;
+  let spyInfo: jest.SpyInstance;
 
   beforeEach(async () => {
     await io.rmRF(m2Dir);
     spyOSHomedir = jest.spyOn(os, 'homedir');
     spyOSHomedir.mockReturnValue(__dirname);
-    spyInfo = core.info as jest.Mock;
+    spyInfo = jest.spyOn(core, 'info');
     spyInfo.mockImplementation(() => null);
-    (gpg.toGpgPath as jest.Mock<any>).mockImplementation((p: string) => p);
   }, 300000);
 
-  afterEach(() => {
-    (core.getInput as jest.Mock).mockReset();
-    (core.getMultilineInput as jest.Mock).mockReset();
-    (core.getMultilineInput as jest.Mock).mockReturnValue([]);
-    (core.warning as jest.Mock).mockReset();
-    (core.exportVariable as jest.Mock).mockReset();
-    (gpg.importKey as jest.Mock).mockReset();
-    (gpg.removeGpgHome as jest.Mock).mockReset();
-    (gpg.toGpgPath as jest.Mock).mockReset();
-  });
-
   afterAll(async () => {
     try {
       await io.rmRF(m2Dir);
@@ -115,7 +43,9 @@ describe('auth tests', () => {
     await io.rmRF(altHome); // ensure it doesn't already exist
 
     await auth.createAuthenticationSettings(
-      credentials(id, username, password),
+      id,
+      username,
+      password,
       altHome,
       true
     );
@@ -126,7 +56,7 @@ describe('auth tests', () => {
     expect(fs.existsSync(altHome)).toBe(true);
     expect(fs.existsSync(altSettingsFile)).toBe(true);
     expect(fs.readFileSync(altSettingsFile, 'utf-8')).toEqual(
-      auth.generate(credentials(id, username, password))
+      auth.generate(id, username, password)
     );
 
     await io.rmRF(altHome);
@@ -138,7 +68,9 @@ describe('auth tests', () => {
     const password = 'TOKEN';
 
     await auth.createAuthenticationSettings(
-      credentials(id, username, password),
+      id,
+      username,
+      password,
       m2Dir,
       true
     );
@@ -146,7 +78,7 @@ describe('auth tests', () => {
     expect(fs.existsSync(m2Dir)).toBe(true);
     expect(fs.existsSync(settingsFile)).toBe(true);
     expect(fs.readFileSync(settingsFile, 'utf-8')).toEqual(
-      auth.generate(credentials(id, username, password))
+      auth.generate(id, username, password)
     );
   }, 100000);
 
@@ -157,7 +89,9 @@ describe('auth tests', () => {
     const gpgPassphrase = 'GPG';
 
     await auth.createAuthenticationSettings(
-      credentials(id, username, password),
+      id,
+      username,
+      password,
       m2Dir,
       true,
       gpgPassphrase
@@ -166,56 +100,10 @@ describe('auth tests', () => {
     expect(fs.existsSync(m2Dir)).toBe(true);
     expect(fs.existsSync(settingsFile)).toBe(true);
     expect(fs.readFileSync(settingsFile, 'utf-8')).toEqual(
-      auth.generate(credentials(id, username, password), gpgPassphrase)
+      auth.generate(id, username, password, gpgPassphrase)
     );
   }, 100000);
 
-  it('exports a GPG-compatible path and persists the native GPG home', async () => {
-    const gpgHome = 'D:\\a\\_temp\\setup-java-gpg-1';
-    const exportedGpgHome = '/d/a/_temp/setup-java-gpg-1';
-    (gpg.importKey as jest.Mock<any>).mockResolvedValue(gpgHome);
-    (gpg.toGpgPath as jest.Mock<any>).mockReturnValue(exportedGpgHome);
-    (core.getInput as jest.Mock<any>).mockImplementation((name: string) => {
-      const inputs: Record<string, string> = {
-        'server-id': 'packages',
-        'server-username-env-var': 'USERNAME',
-        'server-password-env-var': 'PASSWORD',
-        'settings-path': m2Dir,
-        'gpg-private-key': 'KEY ONE\nKEY TWO'
-      };
-      return inputs[name] ?? '';
-    });
-
-    await auth.configureAuthentication();
-
-    expect(gpg.importKey).toHaveBeenCalledWith('KEY ONE\nKEY TWO');
-    expect(core.saveState).toHaveBeenCalledWith(STATE_GPG_HOME, gpgHome);
-    expect(gpg.toGpgPath).toHaveBeenCalledWith(gpgHome);
-    expect(core.exportVariable).toHaveBeenCalledWith(
-      'GNUPGHOME',
-      exportedGpgHome
-    );
-  });
-
-  it('removes the isolated GPG home when environment export fails', async () => {
-    const gpgHome = path.join(__dirname, 'runner', 'temp', 'setup-java-gpg-2');
-    (gpg.importKey as jest.Mock<any>).mockResolvedValue(gpgHome);
-    (core.exportVariable as jest.Mock<any>).mockImplementation(() => {
-      throw new Error('environment file unavailable');
-    });
-    (core.getInput as jest.Mock<any>).mockImplementation((name: string) => {
-      if (name === 'gpg-private-key') return 'KEY CONTENTS';
-      if (name === 'settings-path') return m2Dir;
-      return '';
-    });
-
-    await expect(auth.configureAuthentication()).rejects.toThrow(
-      'environment file unavailable'
-    );
-
-    expect(gpg.removeGpgHome).toHaveBeenCalledWith(gpgHome);
-  });
-
   it('overwrites existing settings.xml files', async () => {
     const id = 'packages';
     const username = 'USERNAME';
@@ -227,7 +115,9 @@ describe('auth tests', () => {
     expect(fs.existsSync(settingsFile)).toBe(true);
 
     await auth.createAuthenticationSettings(
-      credentials(id, username, password),
+      id,
+      username,
+      password,
       m2Dir,
       true
     );
@@ -235,7 +125,7 @@ describe('auth tests', () => {
     expect(fs.existsSync(m2Dir)).toBe(true);
     expect(fs.existsSync(settingsFile)).toBe(true);
     expect(fs.readFileSync(settingsFile, 'utf-8')).toEqual(
-      auth.generate(credentials(id, username, password))
+      auth.generate(id, username, password)
     );
   }, 100000);
 
@@ -250,7 +140,9 @@ describe('auth tests', () => {
     expect(fs.existsSync(settingsFile)).toBe(true);
 
     await auth.createAuthenticationSettings(
-      credentials(id, username, password),
+      id,
+      username,
+      password,
       m2Dir,
       false
     );
@@ -268,7 +160,6 @@ describe('auth tests', () => {
     const expectedSettings = `<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0"
   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
   xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0 https://maven.apache.org/xsd/settings-1.0.0.xsd">
-  <interactiveMode>false</interactiveMode>
   <servers>
     <server>
       <id>${id}</id>
@@ -278,9 +169,7 @@ describe('auth tests', () => {
   </servers>
 </settings>`;
 
-    expect(auth.generate(credentials(id, username, password))).toEqual(
+    expect(auth.generate(id, username, password)).toEqual(expectedSettings);
-      expectedSettings
-    );
   });
 
   it('generates valid settings.xml with additional configuration', () => {
@@ -292,583 +181,21 @@ describe('auth tests', () => {
     const expectedSettings = `<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0"
   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
   xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0 https://maven.apache.org/xsd/settings-1.0.0.xsd">
-  <interactiveMode>false</interactiveMode>
   <servers>
     <server>
       <id>${id}</id>
       <username>\${env.${username}}</username>
       <password>\${env.&amp;&lt;&gt;"''"&gt;&lt;&amp;}</password>
     </server>
-  </servers>
-  <profiles>
-    <profile>
-      <id>setup-java-gpg</id>
-      <properties>
-        <gpg.passphraseEnvName>${gpgPassphrase}</gpg.passphraseEnvName>
-      </properties>
-    </profile>
-  </profiles>
-  <activeProfiles>
-    <activeProfile>setup-java-gpg</activeProfile>
-  </activeProfiles>
-</settings>`;
-
-    expect(
-      auth.generate(credentials(id, username, password), gpgPassphrase)
-    ).toEqual(expectedSettings);
-  });
-
-  it('does not add a gpg profile when the passphrase env var is the maven-gpg-plugin default', () => {
-    const id = 'packages';
-    const username = 'USER';
-    const password = '&<>"\'\'"><&';
-    const gpgPassphrase = 'MAVEN_GPG_PASSPHRASE';
-
-    const expectedSettings = `<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0"
-  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
-  xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0 https://maven.apache.org/xsd/settings-1.0.0.xsd">
-  <interactiveMode>false</interactiveMode>
-  <servers>
     <server>
-      <id>${id}</id>
+      <id>gpg.passphrase</id>
-      <username>\${env.${username}}</username>
+      <passphrase>\${env.${gpgPassphrase}}</passphrase>
-      <password>\${env.&amp;&lt;&gt;"''"&gt;&lt;&amp;}</password>
     </server>
   </servers>
 </settings>`;
 
-    expect(
+    expect(auth.generate(id, username, password, gpgPassphrase)).toEqual(
-      auth.generate(credentials(id, username, password), gpgPassphrase)
+      expectedSettings
-    ).toEqual(expectedSettings);
-  });
-
-  it('escapes settings.xml values while preserving parsed semantics', () => {
-    const id = `packages&<>"'é`;
-    const username = `USER&<>"'é`;
-    const password = `TOKEN&<>"'é`;
-    const gpgPassphrase = `GPG&<>"'é`;
-
-    const xml = auth.generate(
-      credentials(id, username, password),
-      gpgPassphrase
     );
-    const parsed = parseXmlObject(xml) as any;
-
-    expect(parsed.settings.interactiveMode).toBe('false');
-    expect(xmlElementText(xml, 'id')).toBe(id);
-    expect(xmlElementText(xml, 'username')).toBe(`\${env.${username}}`);
-    expect(xmlElementText(xml, 'password')).toBe(`\${env.${password}}`);
-    expect(xmlElementText(xml, 'gpg.passphraseEnvName')).toBe(gpgPassphrase);
-    expect(parsed.settings.activeProfiles.activeProfile).toBe('setup-java-gpg');
-  });
-
-  it('generates ordered settings.xml entries for multiple servers', () => {
-    const servers = [
-      {
-        id: 'releases',
-        usernameEnvVar: 'RELEASES_USERNAME',
-        passwordEnvVar: 'RELEASES_PASSWORD'
-      },
-      {
-        id: 'snapshots',
-        usernameEnvVar: 'SNAPSHOTS_USERNAME',
-        passwordEnvVar: 'SNAPSHOTS_PASSWORD'
-      }
-    ];
-
-    const parsed = parseXmlObject(auth.generate(servers)) as any;
-
-    expect(parsed.settings.servers.server).toEqual([
-      {
-        id: 'releases',
-        username: '${env.RELEASES_USERNAME}',
-        password: '${env.RELEASES_PASSWORD}'
-      },
-      {
-        id: 'snapshots',
-        username: '${env.SNAPSHOTS_USERNAME}',
-        password: '${env.SNAPSHOTS_PASSWORD}'
-      }
-    ]);
-  });
-
-  it('generates an active profile with Central before custom repositories by default', () => {
-    const parsed = parseXmlObject(
-      auth.generate(
-        credentials('packages', 'USERNAME', 'PASSWORD'),
-        undefined,
-        repositorySettings([
-          {
-            id: 'private',
-            url: 'https://repo.example.com/maven',
-            snapshotsEnabled: true
-          }
-        ])
-      )
-    ) as any;
-
-    expect(parsed.settings.profiles.profile).toEqual({
-      id: 'setup-java-repositories',
-      repositories: {
-        repository: [
-          {
-            id: 'central',
-            url: 'https://repo.maven.apache.org/maven2',
-            snapshots: {enabled: 'false'}
-          },
-          {
-            id: 'private',
-            url: 'https://repo.example.com/maven',
-            snapshots: {enabled: 'true'}
-          }
-        ]
-      }
-    });
-    expect(parsed.settings.activeProfiles.activeProfile).toBe(
-      'setup-java-repositories'
-    );
-  });
-
-  it('places custom repositories before Central when configured', () => {
-    const parsed = parseXmlObject(
-      auth.generate(
-        credentials('packages', 'USERNAME', 'PASSWORD'),
-        undefined,
-        repositorySettings(
-          [
-            {
-              id: 'first',
-              url: 'https://first.example.com',
-              snapshotsEnabled: false
-            },
-            {
-              id: 'second',
-              url: 'https://second.example.com',
-              snapshotsEnabled: true
-            }
-          ],
-          true,
-          false
-        )
-      )
-    ) as any;
-
-    expect(
-      parsed.settings.profiles.profile.repositories.repository.map(
-        (repository: {id: string}) => repository.id
-      )
-    ).toEqual(['first', 'second', 'central']);
-  });
-
-  it('excludes Central from the generated repository profile when configured', () => {
-    const parsed = parseXmlObject(
-      auth.generate(
-        credentials('packages', 'USERNAME', 'PASSWORD'),
-        undefined,
-        repositorySettings(
-          [
-            {
-              id: 'private',
-              url: 'https://repo.example.com',
-              snapshotsEnabled: false
-            }
-          ],
-          false
-        )
-      )
-    ) as any;
-
-    expect(parsed.settings.profiles.profile.repositories.repository).toEqual([
-      {
-        id: 'private',
-        url: 'https://repo.example.com',
-        snapshots: {enabled: 'false'}
-      },
-      {
-        id: 'central',
-        url: 'https://repo.maven.apache.org/maven2',
-        releases: {enabled: 'false'},
-        snapshots: {enabled: 'false'}
-      }
-    ]);
-  });
-
-  it('combines repository and GPG configuration in shared profile blocks', () => {
-    const parsed = parseXmlObject(
-      auth.generate(
-        credentials('packages', 'USERNAME', 'PASSWORD'),
-        'GPG_PASSPHRASE',
-        repositorySettings(
-          [
-            {
-              id: 'private',
-              url: 'https://repo.example.com',
-              snapshotsEnabled: false
-            }
-          ],
-          false
-        )
-      )
-    ) as any;
-
-    expect(parsed.settings.profiles.profile).toEqual([
-      {
-        id: 'setup-java-repositories',
-        repositories: {
-          repository: [
-            {
-              id: 'private',
-              url: 'https://repo.example.com',
-              snapshots: {enabled: 'false'}
-            },
-            {
-              id: 'central',
-              url: 'https://repo.maven.apache.org/maven2',
-              releases: {enabled: 'false'},
-              snapshots: {enabled: 'false'}
-            }
-          ]
-        }
-      },
-      {
-        id: 'setup-java-gpg',
-        properties: {['gpg.passphraseEnvName']: 'GPG_PASSPHRASE'}
-      }
-    ]);
-    expect(parsed.settings.activeProfiles.activeProfile).toEqual([
-      'setup-java-repositories',
-      'setup-java-gpg'
-    ]);
-  });
-
-  it('escapes repository values while preserving parsed semantics', () => {
-    const repository = {
-      id: `private&<>"'é`,
-      url: `https://repo.example.com/a?x=1&y=<value>"'é`,
-      snapshotsEnabled: true
-    };
-    const xml = auth.generate(
-      credentials('packages', 'USERNAME', 'PASSWORD'),
-      undefined,
-      repositorySettings([repository], false)
-    );
-    const parsed = parseXmlObject(xml) as any;
-
-    expect(
-      parsed.settings.profiles.profile.repositories.repository.find(
-        (entry: {id: string}) => entry.id === repository.id
-      )
-    ).toEqual({
-      id: repository.id,
-      url: repository.url,
-      snapshots: {enabled: 'true'}
-    });
-  });
-
-  it('parses and trims multiline Maven server credentials', () => {
-    expect(
-      auth.parseMavenServerCredentials([
-        '',
-        ' releases : RELEASES_USERNAME : RELEASES_PASSWORD ',
-        'snapshots:SNAPSHOTS_USERNAME:SNAPSHOTS_PASSWORD'
-      ])
-    ).toEqual([
-      {
-        id: 'releases',
-        usernameEnvVar: 'RELEASES_USERNAME',
-        passwordEnvVar: 'RELEASES_PASSWORD'
-      },
-      {
-        id: 'snapshots',
-        usernameEnvVar: 'SNAPSHOTS_USERNAME',
-        passwordEnvVar: 'SNAPSHOTS_PASSWORD'
-      }
-    ]);
-  });
-
-  it('parses Maven repositories while preserving colons in URLs', () => {
-    expect(
-      auth.parseMavenRepositories(
-        [
-          '',
-          ' private : https://repo.example.com:8443/maven : true ',
-          'releases:https://repo.example.com/releases:false'
-        ],
-        true
-      )
-    ).toEqual([
-      {
-        id: 'private',
-        url: 'https://repo.example.com:8443/maven',
-        snapshotsEnabled: true
-      },
-      {
-        id: 'releases',
-        url: 'https://repo.example.com/releases',
-        snapshotsEnabled: false
-      }
-    ]);
-  });
-
-  it.each([
-    {
-      entries: ['private'],
-      error:
-        'Invalid mvn-repositories entry at line 1. Expected format: repository-id:repository-url:snapshots-enabled'
-    },
-    {
-      entries: ['private:https://repo.example.com'],
-      error:
-        "Invalid snapshots-enabled value '//repo.example.com' in mvn-repositories entry at line 1. Expected true or false"
-    },
-    {
-      entries: ['private::true'],
-      error:
-        'Invalid mvn-repositories entry at line 1. repository-id, repository URL, and snapshots-enabled are required'
-    },
-    {
-      entries: ['private:https://repo.example.com:sometimes'],
-      error:
-        "Invalid snapshots-enabled value 'sometimes' in mvn-repositories entry at line 1. Expected true or false"
-    }
-  ])('rejects malformed Maven repositories: $entries', ({entries, error}) => {
-    expect(() => auth.parseMavenRepositories(entries, true)).toThrow(error);
-  });
-
-  it('rejects duplicate Maven repository ids', () => {
-    expect(() =>
-      auth.parseMavenRepositories(
-        [
-          'private:https://first.example.com:false',
-          'private:https://second.example.com:true'
-        ],
-        true
-      )
-    ).toThrow("Duplicate repository-id 'private' in mvn-repositories input");
-  });
-
-  it('reserves the Central repository id only when automatic Central inclusion is enabled', () => {
-    const central = 'central:https://custom.example.com/maven:false';
-
-    expect(() => auth.parseMavenRepositories([central], true)).toThrow(
-      "Repository-id 'central' is reserved when mvn-repositories-include-central is enabled"
-    );
-    expect(auth.parseMavenRepositories([central], false)).toEqual([
-      {
-        id: 'central',
-        url: 'https://custom.example.com/maven',
-        snapshotsEnabled: false
-      }
-    ]);
-  });
-
-  it('uses an explicit Central repository instead of adding a disabled override', () => {
-    const parsed = parseXmlObject(
-      auth.generate(
-        credentials('packages', 'USERNAME', 'PASSWORD'),
-        undefined,
-        repositorySettings(
-          auth.parseMavenRepositories(
-            ['central:https://mirror.example.com/maven:true'],
-            false
-          ),
-          false
-        )
-      )
-    ) as any;
-
-    expect(parsed.settings.profiles.profile.repositories.repository).toEqual({
-      id: 'central',
-      url: 'https://mirror.example.com/maven',
-      snapshots: {enabled: 'true'}
-    });
-  });
-
-  it('reads Maven repository settings and Central controls', () => {
-    (core.getMultilineInput as jest.Mock).mockImplementation((name: string) =>
-      name === 'mvn-repositories'
-        ? ['private:https://repo.example.com:true']
-        : []
-    );
-    (core.getInput as jest.Mock).mockImplementation((name: string) => {
-      const inputs: Record<string, string> = {
-        'mvn-repositories-include-central': 'false',
-        'mvn-repositories-prioritize-central': 'false'
-      };
-      return inputs[name] ?? '';
-    });
-
-    expect(auth.getMavenRepositorySettings()).toEqual({
-      repositories: [
-        {
-          id: 'private',
-          url: 'https://repo.example.com',
-          snapshotsEnabled: true
-        }
-      ],
-      includeCentral: false,
-      prioritizeCentral: false
-    });
-  });
-
-  it('does not read repository controls when no repositories are configured', () => {
-    expect(auth.getMavenRepositorySettings()).toBeUndefined();
-    expect(core.getInput).not.toHaveBeenCalled();
-  });
-
-  it.each([
-    {
-      entries: ['releases:RELEASES_USERNAME'],
-      error:
-        'Invalid mvn-server-credentials entry at line 1. Expected format: server-id:USERNAME_ENV:PASSWORD_ENV'
-    },
-    {
-      entries: ['', 'releases:RELEASES_USERNAME:RELEASES_PASSWORD:EXTRA'],
-      error:
-        'Invalid mvn-server-credentials entry at line 2. Expected format: server-id:USERNAME_ENV:PASSWORD_ENV'
-    },
-    {
-      entries: ['releases::RELEASES_PASSWORD'],
-      error:
-        'Invalid mvn-server-credentials entry at line 1. server-id, username environment variable, and password environment variable are required'
-    }
-  ])(
-    'rejects malformed Maven server credentials: $entries',
-    ({entries, error}) => {
-      expect(() => auth.parseMavenServerCredentials(entries)).toThrow(error);
-    }
-  );
-
-  it('rejects duplicate Maven server ids', () => {
-    expect(() =>
-      auth.parseMavenServerCredentials([
-        'releases:RELEASES_USERNAME:RELEASES_PASSWORD',
-        'releases:OTHER_USERNAME:OTHER_PASSWORD'
-      ])
-    ).toThrow("Duplicate server-id 'releases' in mvn-server-credentials input");
-  });
-
-  it('uses multiline Maven server credentials instead of single-server inputs', () => {
-    (core.getMultilineInput as jest.Mock).mockReturnValue([
-      'releases:RELEASES_USERNAME:RELEASES_PASSWORD',
-      'snapshots:SNAPSHOTS_USERNAME:SNAPSHOTS_PASSWORD'
-    ]);
-
-    expect(auth.getMavenServerSettings()).toEqual([
-      {
-        id: 'releases',
-        usernameEnvVar: 'RELEASES_USERNAME',
-        passwordEnvVar: 'RELEASES_PASSWORD'
-      },
-      {
-        id: 'snapshots',
-        usernameEnvVar: 'SNAPSHOTS_USERNAME',
-        passwordEnvVar: 'SNAPSHOTS_PASSWORD'
-      }
-    ]);
-    expect(core.getInput).not.toHaveBeenCalled();
-  });
-
-  it('uses the existing single-server inputs when multiline credentials are absent', () => {
-    (core.getInput as jest.Mock).mockImplementation((name: string) =>
-      name === 'server-id' ? 'github' : ''
-    );
-
-    expect(auth.getMavenServerSettings()).toEqual([
-      {
-        id: 'github',
-        usernameEnvVar: 'GITHUB_ACTOR',
-        passwordEnvVar: 'GITHUB_TOKEN'
-      }
-    ]);
-  });
-
-  it('preserves deprecated single-server aliases as fallback inputs', () => {
-    (core.getInput as jest.Mock).mockImplementation((name: string) => {
-      const inputs: Record<string, string> = {
-        'server-id': 'legacy',
-        'server-username': 'LEGACY_USERNAME',
-        'server-password': 'LEGACY_PASSWORD'
-      };
-      return inputs[name] ?? '';
-    });
-
-    expect(auth.getMavenServerSettings()).toEqual([
-      {
-        id: 'legacy',
-        usernameEnvVar: 'LEGACY_USERNAME',
-        passwordEnvVar: 'LEGACY_PASSWORD'
-      }
-    ]);
-    expect(core.warning).toHaveBeenCalledTimes(2);
-  });
-
-  function xmlElementText(xml: string, tagName: string): string {
-    const match = new RegExp(`<${tagName}>([\\s\\S]*?)</${tagName}>`).exec(xml);
-    expect(match).not.toBeNull();
-    return (parseXmlObject(`<value>${match?.[1]}</value>`) as {value: string})
-      .value;
-  }
-
-  function parseXmlObject(xml: string): unknown {
-    const parser = new XMLParser({
-      ignoreAttributes: false,
-      attributeNamePrefix: '@',
-      parseAttributeValue: false,
-      parseTagValue: false,
-      trimValues: true
-    });
-    return parser.parse(xml);
-  }
-
-  it('uses deprecated input aliases and warns', () => {
-    const mockGetInput = core.getInput as jest.MockedFunction<
-      typeof core.getInput
-    >;
-    const mockWarning = core.warning as jest.MockedFunction<
-      typeof core.warning
-    >;
-    mockGetInput.mockImplementation(name =>
-      name === 'server-username' ? 'LEGACY_USERNAME' : ''
-    );
-
-    expect(
-      auth.getInputWithDeprecatedAlias(
-        'server-username-env-var',
-        'server-username',
-        'GITHUB_ACTOR'
-      )
-    ).toBe('LEGACY_USERNAME');
-    expect(mockWarning).toHaveBeenCalledWith(
-      "The 'server-username' input is deprecated and may be removed in a future release. Please use 'server-username-env-var' instead."
-    );
-
-    mockGetInput.mockReset();
-    mockWarning.mockReset();
-  });
-
-  it('prefers the replacement input over its deprecated alias', () => {
-    const mockGetInput = core.getInput as jest.MockedFunction<
-      typeof core.getInput
-    >;
-    mockGetInput.mockImplementation(name => {
-      const inputs: Record<string, string> = {
-        'server-password-env-var': 'NEW_PASSWORD',
-        'server-password': 'LEGACY_PASSWORD'
-      };
-      return inputs[name] || '';
-    });
-
-    expect(
-      auth.getInputWithDeprecatedAlias(
-        'server-password-env-var',
-        'server-password',
-        'GITHUB_TOKEN'
-      )
-    ).toBe('NEW_PASSWORD');
-    expect(core.warning).toHaveBeenCalled();
-
-    mockGetInput.mockReset();
-    (core.warning as jest.Mock).mockReset();
   });
 });