The actions/setup-java GitHub Action received two notable releases (v5.4.0 and v5.5.0) with several improvements for Java CI pipelines. The headline feature in v5.5.0 is GPG signature verification for downloaded JDK archives, currently supporting Temurin and Microsoft distributions, with a custom key option for internal mirrors. Other additions include: Tencent Kona JDK as a new first-class distribution, a set-default: false option to install secondary JDKs without overriding JAVA_HOME, auto-detection of distribution from .sdkmanrc version files, and multiple Maven quality-of-life improvements (quieter logs via --no-transfer-progress by default, non-interactive settings.xml, and deduplicated toolchains.xml). v5.4.0 also added GraalVM Community Edition support, a javac problem matcher for inline PR annotations, and Maven Wrapper caching.
