Bump actions/setup-java from 5.6.0 to 5.7.0

[dependabot]

Bumps actions/setup-java from 5.6.0 to 5.7.0.

Release notes

Sourced from actions/setup-java's releases.

v5.7.0

What's Changed

• Fix npm audit failures on releases/v5 by @​brunoborges in actions/setup-java#1154
• Backport #1151: Fix missing wrapper cache distributions by @​brunoborges in actions/setup-java#1153
• Deprecate legacy Adopt distributions in v5 by @​brunoborges in actions/setup-java#1186

Full Changelog: actions/setup-java@v5.6.0...v5.7.0

Commits

• b6effb0 Deprecate legacy Adopt distributions in v5 (#1186)
• e498d2a Backport #1151: Fix missing wrapper cache distributions (#1153)
• 6a3384d Fix npm audit failures on releases/v5 (#1154)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

PR Code Review

This PR bumps actions/setup-java from v5.6.0 to v5.7.0 across three GitHub Actions workflow files. Small, mechanical dependency bump.

Code Quality

• ✅ Follows standard conventions — consistent uses: pin style matches existing workflow formatting
• ✅ No commented-out code
• ✅ N/A — no variables introduced
• ✅ DRY — same change applied consistently across all three workflow files (darwin, linux, windows)
• ✅ No defects identified — this is a routine version bump of a well-maintained GitHub Action, no logic changes, no new attack surface
• ✅ No .claude/CLAUDE.md changes in this diff, so nothing to flag re: local-environment-specificity

Testing

• N/A — CI workflow version bump; no application code, so unit/integration tests, edge cases, and coverage thresholds don't apply. The workflows will self-validate on the next CI run.

Documentation

• N/A — no README, API docs, or CHANGELOG changes needed for a CI dependency bump
• No markdown files touched, so CommonMark/prettier formatting is not applicable here

Security

• ✅ No hardcoded credentials
• ✅ N/A — input validation not applicable to this diff
• ✅ N/A — error handling not applicable
• ✅ No sensitive data in logs
• ✅ No .lic files or AQAAAD-prefixed strings present in this diff

Summary

Clean, low-risk dependency bump (likely from Dependabot). No issues found. Approving.

Automated code review analyzing defects and coding standards

[github-actions]

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

[dependabot]

Superseded by #219.