Sonar issues: Use full commit SHA hash for this dependency and Avoid expanding secrets in a run block

Author: ak-git

.github/workflows/actions.yml

@@ -22,7 +22,7 @@ jobs:
           java-version: 25
           cache: 'gradle'
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v4
+        uses: gradle/actions/setup-gradle@748248ddd2a24f49513d8f472f81c3a07d4d50e1
         with:
           gradle-version: '9.1.0'
       - name: Cache SonarCloud packages
@@ -48,7 +48,9 @@ jobs:
           gradle version
           echo "BUILD_VERSION=$(gradle version | grep Version | awk '{ print $2 }')" >> $GITHUB_ENV
       - name: Login to Docker Hub
-        run: docker login -u $DOCKER_USER -p ${{ secrets.DOCKER_PASSWORD }}
+        env:
+          DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
+        run: docker login -u $DOCKER_USER -p $DOCKER_PASSWORD
       - name: Build and tag the Docker image
         working-directory: ./mnt/build/docker/main
         run: docker build -t $DOCKER_USER/$DOCKER_IMAGE:${{ env.BUILD_VERSION }} -t $DOCKER_USER/$DOCKER_IMAGE:latest .

README.md

@@ -29,7 +29,7 @@ git tag 2025.09
 ### Plugin [com.github.ben-manes.versions](https://github.com/ben-manes/gradle-versions-plugin)
 
 ```shell
-./gradlew dependencyUpdates
+./gradlew dependencyUpdates --no-parallel
 ```
 
 ## Check dependencies