Merge pull request #564 from codacy/fix-private-mvn-publish-all-projects

fix: publish all subprojects to private mvn bucket

Merge pull request #563 from codacy/fix/metrics-fixture-drift

Fix CI: update stale metrics test fixture

Security: pin GitHub Actions to SHA hashes (#551)

Replaces mutable tag/branch references with immutable SHA hashes
to prevent supply chain attacks (ref: TeamPCP/Trivy March 2026).

Actions left as tags: 0

Co-authored-by: Codacy Security Bot <security-bot@codacy.com>

Merge pull request #543 from codacy/upload-sourceid-CF-1813

feature: Upload sourceId when available CF-1813

Merge pull request #544 from codacy/fix-metrics

Fix metrics tests

Revert user change dockerfile (#540)

revert user changes in dockerfile

add analysisCli as member of docker group (#539)

* add user analysisCli first
* add docker group afterwards

Merge pull request #538 from codacy/add-group-analysisCli

fix: add docker group to analysisCli user

Merge pull request #537 from codacy/hotfix/high

feat: support for high severity

Fix filtered jar pattern match (#536)