---
title: "What’s New in actions/setup-java 5.4 and 5.5: Signature Verification, Kona JDK, and a Better Maven Experience"
url: https://daily.dev/posts/what-s-new-in-actions-setup-java-5-4-and-5-5-signature-verification-kona-jdk-and-a-better-maven-e-ngnjbvif7
source_url: https://foojay.io/today/whats-new-in-actions-setup-java-5-4-and-5-5-signature-verification-kona-jdk-and-a-better-maven-experience
type: article
source: "Foojay.io"
published: 2026-07-08T18:58:21.105Z
updated: 2026-07-08T18:58:45.653Z
tags: ["security", "java", "github-actions", "maven"]
reading_time: 8
upvotes: 1
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# What’s New in actions/setup-java 5.4 and 5.5: Signature Verification, Kona JDK, and a Better Maven Experience

**[Foojay.io](https://daily.dev/sources/foojayio)** · 8 min read · 1 upvotes · 0 comments

## Summary

The actions/setup-java GitHub Action received two notable releases (v5.4.0 and v5.5.0) with several improvements for Java CI pipelines. The headline feature in v5.5.0 is GPG signature verification for downloaded JDK archives, currently supporting Temurin and Microsoft distributions, with a custom key option for internal mirrors. Other additions include: Tencent Kona JDK as a new first-class distribution, a set-default: false option to install secondary JDKs without overriding JAVA_HOME, auto-detection of distribution from .sdkmanrc version files, and multiple Maven quality-of-life improvements (quieter logs via --no-transfer-progress by default, non-interactive settings.xml, and deduplicated toolchains.xml). v5.4.0 also added GraalVM Community Edition support, a javac problem matcher for inline PR annotations, and Maven Wrapper caching.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://foojay.io/today/whats-new-in-actions-setup-java-5-4-and-5-5-signature-verification-kona-jdk-and-a-better-maven-experience>

## Similar posts on daily.dev

- [setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes](https://daily.dev/posts/setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes-nhpa3vyav) · GitHub Changelog · 0 upvotes · 0 comments
- [You Are Probably Already Running gradle/actions](https://daily.dev/posts/you-are-probably-already-running-gradle-actions-zt0kzwkho) · Gradle Blog · 2 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#java](https://daily.dev/tags/java), [#github-actions](https://daily.dev/tags/github-actions), [#maven](https://daily.dev/tags/maven)

[View this post on daily.dev](https://daily.dev/posts/what-s-new-in-actions-setup-java-5-4-and-5-5-signature-verification-kona-jdk-and-a-better-maven-e-ngnjbvif7)