From f13e0dae9e43422a6af9bb9998c3b867cf16b9cb Mon Sep 17 00:00:00 2001
From: James Fredley <jamesfredley@users.noreply.github.com>
Date: Wed, 19 Aug 2026 16:32:30 -0400
Subject: [PATCH] Replace blocked surefire-report action in Java CI

scacap/action-surefire-report is not on the ASF GitHub Actions
allowlist and fails the workflow at startup. Switch the failure
report step to mikepenz/action-junit-report, which is allowlisted.

Assisted-by: Sisyphus:grok-4.6
---
 .github/workflows/gradle.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/gradle.yml b/.github/workflows/gradle.yml
index 266e1b20e50..9ff65a8acff 100644
--- a/.github/workflows/gradle.yml
+++ b/.github/workflows/gradle.yml
@@ -32,7 +32,6 @@ jobs:
           (set -x; ./gradlew clean check --no-daemon)
       - name: Publish Test Report
         if: failure()
-        uses: scacap/action-surefire-report@3dacff26879cd2a7f2160d101254032a3707fe6f # v1.12.0
+        uses: mikepenz/action-junit-report@d9f48fc87bc235f7e214acf696ca5abc0a986f16 # v6.4.2
         with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
           report_paths: '**/build/test-results/test/TEST-*.xml'