--- title: setup-java v5.5.0: signature verification, Kona JDK, and... description: The actions/setup-java GitHub Action v5.5.0 introduces cryptographic GPG signature verification for downloaded JDKs (supported for Temurin and Microsoft... canonical: https://daily.dev/posts/setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes-nhpa3vyav twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes | daily.dev og:description: The actions/setup-java GitHub Action v5.5.0 introduces cryptographic GPG signature verification for downloaded JDKs (supported for Temurin and Microsoft... og:url: https://daily.dev/posts/setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes-nhpa3vyav og:image: https://api.daily.dev/og/posts/NhPA3VyaV.png og:image:alt: setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes **[GitHub Changelog](https://daily.dev/sources/github_updates)** · 3 min read · 0 upvotes · 0 comments ## Summary The actions/setup-java GitHub Action v5.5.0 introduces cryptographic GPG signature verification for downloaded JDKs (supported for Temurin and Microsoft distributions), adds support for the Tencent Kona JDK distribution, and includes several Maven improvements. New features include a set-default: false option to install a JDK without overriding JAVA_HOME, auto-detection of distribution from .sdkmanrc files, quieter Maven build logs via --no-transfer-progress by default, and a fix for duplicate entries in toolchains.xml. The post also highlights v5.4.0 additions: GraalVM Community distribution, a javac problem matcher for inline PR annotations, and Maven Wrapper caching. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [What’s New in actions/setup-java 5.4 and 5.5: Signature Verification, Kona JDK, and a Better Maven Experience](https://daily.dev/posts/what-s-new-in-actions-setup-java-5-4-and-5-5-signature-verification-kona-jdk-and-a-better-maven-e-ngnjbvif7) · Foojay.io · 1 upvotes · 0 comments - [You Are Probably Already Running gradle/actions](https://daily.dev/posts/you-are-probably-already-running-gradle-actions-zt0kzwkho) · Gradle Blog · 2 upvotes · 0 comments - [Java News Roundup: Spring Shell, JReleaser, TornadoInsight, Apache Camel](https://daily.dev/posts/java-news-roundup-spring-shell-jreleaser-tornadoinsight-apache-camel-xvg3gz8un) · InfoQ · 4 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#java](https://daily.dev/tags/java), [#cicd](https://daily.dev/tags/cicd), [#github-actions](https://daily.dev/tags/github-actions), [#maven](https://daily.dev/tags/maven) [View this post on daily.dev](https://daily.dev/posts/setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes-nhpa3vyav) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes","url":"https://daily.dev/posts/setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes-nhpa3vyav","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes-nhpa3vyav"},"datePublished":"2026-07-08T18:28:02.614Z","dateModified":"2026-07-08T18:28:20.235Z","description":"The actions/setup-java GitHub Action v5.5.0 introduces cryptographic GPG signature verification for downloaded JDKs (supported for Temurin and Microsoft...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7e8577c6287118db52aacbd83e810ab9?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7e8577c6287118db52aacbd83e810ab9?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"GitHub Changelog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"GitHub Changelog","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/15004b7835da4d89b02b115871f0f6dc","url":"https://daily.dev/sources/github_updates"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes-nhpa3vyav","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,java,cicd,github-actions,maven","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"GitHub Changelog","item":"https://daily.dev/sources/github_updates"},{"@type":"ListItem","position":3,"name":"setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes"}]} ```