fix(deps): update dependency net.fellbaum:jemoji to v1.7.6

Reviewed-on: #12

.gitea/workflows/ci.yml

@@ -5,118 +5,41 @@ on:
     branches:
       - "main"
     tags:
-      - 'v*'
+      - '*'
   pull_request:
     branches:
       - "main"
 
-env:
-  MAVEN_OPTS: "-Dhttps.protocols=TLSv1.2 -Dmaven.repo.local=${{ github.workspace }}/.m2/repository -Dorg.slf4j.simpleLogger.showDateTime=true -Djava.awt.headless=true"
-  MAVEN_CLI_OPTS: "--batch-mode --errors --fail-at-end --show-version --no-transfer-progress -DinstallAtEnd=true -DdeployAtEnd=true"
-  # Docker image name; expects REGISTRY_URL like registry.example.com
-  CI_REGISTRY_IMAGE: "${{ secrets.REGISTRY_URL }}/${{ github.repository }}"
-
 jobs:
-  compile:
+  package:
-    name: Compile
+    name: Package
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Set up JDK
-        uses: actions/setup-java@v5
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
         with:
           distribution: 'temurin'
           java-version: '25'
-          cache: 'maven'
 
-      - name: Cache Maven local repo and wrapper
+      - name: Build package
-        uses: actions/cache@v5
-        with:
-          path: |
-            ${{ github.workspace }}/.m2/repository
-            .mvn
-          key: m2-${{ runner.os }}-${{ hashFiles('**/pom.xml') }}
-          restore-keys: |
-            m2-${{ runner.os }}-
-
-      - name: Compile
         run: |
           chmod +x ./mvnw
-          ./mvnw $MAVEN_CLI_OPTS compile
+          ./mvnw --batch-mode --update-snapshots verify
 
-  test:
+      - name: Upload test reports
-    name: Test
-    runs-on: ubuntu-latest
-    needs: compile
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Set up JDK
-        uses: actions/setup-java@v5
-        with:
-          distribution: 'temurin'
-          java-version: '25'
-          cache: 'maven'
-
-      - name: Cache Maven local repo and wrapper
-        uses: actions/cache@v5
-        with:
-          path: |
-            ${{ github.workspace }}/.m2/repository
-            .mvn
-          key: m2-${{ runner.os }}-${{ hashFiles('**/pom.xml') }}
-          restore-keys: |
-            m2-${{ runner.os }}-
-
-      - name: Run tests
-        run: |
-          chmod +x ./mvnw
-          ./mvnw $MAVEN_CLI_OPTS test
-
-      - name: Upload test reports (artifact)
         if: always()
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@c6a366c94c3e0affe28c06c8df20a878f24da3cf # v3
         with:
           name: junit-reports
           path: |
             **/target/*-reports/TEST-*.xml
           if-no-files-found: ignore
 
-  package:
-    name: Package
-    runs-on: ubuntu-latest
-    needs: test
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Set up JDK
-        uses: actions/setup-java@v5
-        with:
-          distribution: 'temurin'
-          java-version: '25'
-          cache: 'maven'
-
-      - name: Cache Maven local repo and wrapper
-        uses: actions/cache@v5
-        with:
-          path: |
-            ${{ github.workspace }}/.m2/repository
-            .mvn
-          key: m2-${{ runner.os }}-${{ hashFiles('**/pom.xml') }}
-          restore-keys: |
-            m2-${{ runner.os }}-
-
-      - name: Build package (skip tests)
-        run: |
-          chmod +x ./mvnw
-          ./mvnw $MAVEN_CLI_OPTS package -DskipTests=true
-
       - name: Upload Maven artifacts
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@c6a366c94c3e0affe28c06c8df20a878f24da3cf # v3
         with:
           name: maven-artifacts
           path: |
@@ -134,23 +57,23 @@ jobs:
       packages: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Download build artifacts
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@a9bc5e6ef2cb54c177f32aa5726adaa15e7e2d59 # v3
         with:
           name: maven-artifacts
           path: .
 
       - name: Log in to registry
-        uses: docker/login-action@v4
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
         with:
           registry: ${{ secrets.REGISTRY_URL }}
           username: ${{ secrets.REGISTRY_USER }}
           password: ${{ secrets.REGISTRY_PASSWORD }}
 
       - name: Build and push (main)
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
         with:
           context: .
           file: ./Dockerfile
@@ -167,10 +90,10 @@ jobs:
       packages: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Download build artifacts
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@a9bc5e6ef2cb54c177f32aa5726adaa15e7e2d59 # v3
         with:
           name: maven-artifacts
           path: .
@@ -184,14 +107,14 @@ jobs:
           echo "version=$ver" >> "$GITHUB_OUTPUT"
 
       - name: Log in to registry
-        uses: docker/login-action@v4
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
         with:
           registry: ${{ secrets.REGISTRY_URL }}
           username: ${{ secrets.REGISTRY_USER }}
           password: ${{ secrets.REGISTRY_PASSWORD }}
 
       - name: Build and push (release + latest)
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
         with:
           context: .
           file: ./Dockerfile

Dockerfile

@@ -1,4 +1,4 @@
-FROM eclipse-temurin:25-jre
+FROM eclipse-temurin:25-jre@sha256:ff82c74a630c08b417502c4c18189e62074edbb28eb1f2d31b799ac138c01058
 
 RUN apt-get update && apt-get install -y --no-install-recommends netcat-openbsd curl && rm -rf /var/lib/apt/lists/*
 

pom.xml

@@ -224,7 +224,7 @@
         <dependency>
             <groupId>net.fellbaum</groupId>
             <artifactId>jemoji</artifactId>
-            <version>1.7.5</version>
+            <version>1.7.6</version>
         </dependency>
 
         <dependency>