GHA-197 Update Java installation in workflow and upgrade action versions in update-rule-metadata action (#104)

Author: nils-werner-sonarsource

update-rule-metadata/action.yml

@@ -24,7 +24,6 @@ inputs:
     default: master
   labels:
     description: 'Labels to add to the PR'
-    default: skip-qa
   post-update:
     description: 'Additional commands to run after rule-api.jar update'
     required: false
@@ -46,12 +45,12 @@ outputs:
 runs:
   using: "composite"
   steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
         ref: ${{ inputs.branch }}
     - name: Get vault secrets
       id: secrets
-      uses: SonarSource/vault-action-wrapper@320bd31b03e5dacaac6be51bbbb15adf7caccc32 # v3.1
+      uses: SonarSource/vault-action-wrapper@v3
       with:
         secrets: |
           development/artifactory/token/{REPO_OWNER_NAME_DASH}-private-reader access_token | ARTIFACTORY_ACCESS_TOKEN;
@@ -61,11 +60,17 @@ runs:
     - name: Cache rule-api jar
       id: cache-rule-api
       if: ${{ inputs.rule-api-version != '' }}
-      uses: actions/cache@v4
+      uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
       with:
         path: rule-api.jar
         key: rule-api-${{ inputs.rule-api-version }}
 
+    - name: Install Java
+      uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+      with:
+        distribution: corretto
+        java-version: 21
+
     - name: Setup JFrog
       if: ${{ inputs.rule-api-version == '' }}
       uses: SonarSource/jfrog-setup-wrapper@v3
@@ -94,12 +99,6 @@ runs:
           rm -rf META-INF
         fi
 
-    - name: Install Java to run rule-api
-      uses: actions/setup-java@v4
-      with:
-        distribution: temurin
-        java-version: 17
-
     - name: Run rule-api to update metadata
       shell: bash
       env: