Bump github/codeql-action from 3.27.0 to 3.28.0 #256

	# This workflow will build a Java project with Maven, and cache/restore any dependencies to improve the workflow execution time
	# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-java-with-maven

	name: Java CI with Maven

	permissions:
	# set default workflow permissions to read-only for security reasons
	contents: read

	on:
	push:
	branches: [ "main" ]
	pull_request:
	branches: [ "main" ]

	jobs:

	build:

	strategy:
	matrix:
	os: [macos-latest, windows-latest, ubuntu-latest]

	runs-on: ${{ matrix.os }}

	permissions:
	#write permission needed for updating dependency graph
	contents: write

	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
	with:
	egress-policy: audit

	- name: Checkout
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Set up Java 17
	uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4.5.0
	with:
	java-version: '17'
	distribution: 'temurin'
	cache: maven

	- name: Build with Maven (includes running all tests)
	run: mvn -B package --file pom.xml

Provide feedback