From 36290fc94b1274380673c4b75b08b2c8dfd65b54 Mon Sep 17 00:00:00 2001
From: James Rich <2199651+jamesarich@users.noreply.github.com>
Date: Wed, 25 Mar 2026 20:53:18 -0500
Subject: [PATCH] build(github): add GITHUB_TOKEN to setup-java actions (#4923)

---
 .github/workflows/codeql.yml                | 1 +
 .github/workflows/dependency-submission.yml | 1 +
 .github/workflows/docs.yml                  | 1 +
 .github/workflows/publish-core.yml          | 1 +
 .github/workflows/release.yml               | 5 ++++-
 .github/workflows/reusable-check.yml        | 2 ++
 .github/workflows/scheduled-updates.yml     | 3 +--
 7 files changed, 11 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index c7ad60add..5dc37d875 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -71,6 +71,7 @@ jobs:
       with:
         distribution: 'temurin' # See 'Supported distributions' for available options
         java-version: '17'
+        token: ${{ secrets.GITHUB_TOKEN }}
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
diff --git a/.github/workflows/dependency-submission.yml b/.github/workflows/dependency-submission.yml
index ef4ed9759..1b14d68ba 100644
--- a/.github/workflows/dependency-submission.yml
+++ b/.github/workflows/dependency-submission.yml
@@ -19,6 +19,7 @@ jobs:
         with:
           distribution: jetbrains
           java-version: 17
+          token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Generate and submit dependency graph
         uses: gradle/actions/dependency-submission@v6
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index e74a8e993..475041eaa 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -52,6 +52,7 @@ jobs:
         with:
           java-version: '17'
           distribution: 'jetbrains'
+          token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@v6
diff --git a/.github/workflows/publish-core.yml b/.github/workflows/publish-core.yml
index bbfdb056f..22f89f17f 100644
--- a/.github/workflows/publish-core.yml
+++ b/.github/workflows/publish-core.yml
@@ -28,6 +28,7 @@ jobs:
         with:
           java-version: '17'
           distribution: 'jetbrains'
+          token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@v6
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 74eb572cd..95d301ef4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -120,6 +120,7 @@ jobs:
         with:
           java-version: '17'
           distribution: 'jetbrains'
+          token: ${{ secrets.GITHUB_TOKEN }}
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@v6
         with:
@@ -211,6 +212,7 @@ jobs:
         with:
           java-version: '17'
           distribution: 'jetbrains'
+          token: ${{ secrets.GITHUB_TOKEN }}
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@v6
         with:
@@ -282,7 +284,8 @@ jobs:
         with:
           java-version: '17'
           distribution: 'jetbrains'
-          
+          token: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@v6
         with:
diff --git a/.github/workflows/reusable-check.yml b/.github/workflows/reusable-check.yml
index a20ea28c1..dc8926d79 100644
--- a/.github/workflows/reusable-check.yml
+++ b/.github/workflows/reusable-check.yml
@@ -67,6 +67,7 @@ jobs:
         with:
           java-version: '17'
           distribution: 'jetbrains'
+          token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@v6
@@ -150,6 +151,7 @@ jobs:
         with:
           java-version: '17'
           distribution: 'jetbrains'
+          token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@v6
diff --git a/.github/workflows/scheduled-updates.yml b/.github/workflows/scheduled-updates.yml
index 01403f1e0..cdd9b8bfb 100644
--- a/.github/workflows/scheduled-updates.yml
+++ b/.github/workflows/scheduled-updates.yml
@@ -86,8 +86,7 @@ jobs:
         with:
           java-version: '17'
           distribution: 'jetbrains'
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@v6