Bump actions/setup-java from 4.3.0 to 4.4.0 in /github/workflows (Chr…

…isCarini/github-repo-files-sync#210)

Bumps [actions/setup-java](https:/actions/setup-java) from 4.3.0 to 4.4.0.
- [Release notes](https:/actions/setup-java/releases)
- [Commits](actions/setup-java@2dfa201...b36c23c)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/scorecards-analysis.yml

@@ -68,6 +68,6 @@ jobs:
 
  # Upload the results to GitHub's code scanning dashboard.
  - name: "Upload to code-scanning"
- uses: github/codeql-action/upload-sarif@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
+ uses: github/codeql-action/upload-sarif@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8
  with:
  sarif_file: results.sarif

.github/workflows/update-gradle-wrapper.yml

@@ -24,7 +24,7 @@ jobs:
  cache: gradle
 
  - name: Update Gradle Wrapper
- uses: gradle-update/update-gradle-wrapper-action@9268373d69bd0974b6318eb3b512b8e025060bbe # v2.0.0
+ uses: gradle-update/update-gradle-wrapper-action@0407394b9d173dfc9cf5695f9f560fef6d61a5fe # v1.0.20
  with:
  repo-token: ${{ secrets.GH_PAT_REPO_SCOPE_FOR_ACTIONS_THAT_OPEN_PRS }}
  merge-method: SQUASH