setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes - GitHub Changelog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes \u00b7 GitHub Changelog\" \/>\n<meta property=\"og:description\" content=\"The actions\/setup-java v5.5.0 release adds cryptographic signature verification for downloaded JDKs, support for a new distribution, and several quality-of-life improvements for Maven users. Here’s what changed since v5.4.0. Verify JDK…\" \/>\n<meta property=\"og:url\" content=\"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\/\" \/>\n<meta property=\"og:site_name\" content=\"The GitHub Blog\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-15T17:22:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-content\/uploads\/2026\/07\/SetupKonaMavenFixes_NewRelease_Unfurl_TextOnly.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"Allison\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\\\/\",\"url\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\\\/\",\"name\":\"setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes - The GitHub Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/github.blog\\\/#website\"},\"datePublished\":\"2026-07-08T17:05:06+00:00\",\"dateModified\":\"2026-07-15T17:22:38+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/github.blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Changelogs\",\"item\":\"https:\\\/\\\/github.blog\\\/changelog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/github.blog\\\/#website\",\"url\":\"https:\\\/\\\/github.blog\\\/\",\"name\":\"The GitHub Blog\",\"description\":\"Updates, ideas, and inspiration from GitHub to help developers build and design software.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/github.blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n","yoast_head_json":{"title":"setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes - GitHub Changelog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\/","og_locale":"en_US","og_type":"article","og_title":"setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes \u00b7 GitHub Changelog","og_description":"The actions\/setup-java v5.5.0 release adds cryptographic signature verification for downloaded JDKs, support for a new distribution, and several quality-of-life improvements for Maven users. Here’s what changed since v5.4.0. Verify JDK…","og_url":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\/","og_site_name":"The GitHub Blog","article_modified_time":"2026-07-15T17:22:38+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-content\/uploads\/2026\/07\/SetupKonaMavenFixes_NewRelease_Unfurl_TextOnly.jpg","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes","Written by":"Allison"},"schema":{"@context":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\/","url":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\/","name":"setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes - The GitHub Blog","isPartOf":{"@id":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/#website"},"datePublished":"2026-07-08T17:05:06+00:00","dateModified":"2026-07-15T17:22:38+00:00","breadcrumb":{"@id":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/"},{"@type":"ListItem","position":2,"name":"Changelogs","item":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/"},{"@type":"ListItem","position":3,"name":"setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes"}]},{"@type":"WebSite","@id":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/#website","url":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/","name":"The GitHub Blog","description":"Updates, ideas, and inspiration from GitHub to help developers build and design software.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/changelogs\/97395","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/changelogs"}],"about":[{"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/types\/changelog"}],"author":[{"embeddable":true,"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/users\/2106"}],"version-history":[{"count":2,"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/changelogs\/97395\/revisions"}],"predecessor-version":[{"id":97397,"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/changelogs\/97395\/revisions\/97397"}],"wp:attachment":[{"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/media?parent=97395"}],"wp:term":[{"taxonomy":"changelog-type","embeddable":true,"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/type?post=97395"},{"taxonomy":"changelog-label","embeddable":true,"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/label?post=97395"},{"taxonomy":"changelog-group","embeddable":true,"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/group?post=97395"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/coauthors?post=97395"}],"curies":[{"name":"wp","href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/api.w.org\/{rel}","templated":true}]}}

{"id":97395,"date":"2026-07-08T10:05:06","date_gmt":"2026-07-08T17:05:06","guid":{"rendered":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes"},"modified":"2026-07-15T10:22:38","modified_gmt":"2026-07-15T17:22:38","slug":"setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes","status":"publish","type":[3521],"link":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes","title":{"rendered":"setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes"},"content":{"rendered":"\n

The actions\/setup-java<\/code> v5.5.0 release adds cryptographic signature verification for downloaded JDKs, support for a new distribution, and several quality-of-life improvements for Maven users. Here’s what changed since v5.4.0.<\/p>\n

\nVerify JDK download signatures:<\/strong> Set verify-signature: true<\/code> and the action downloads the detached GPG signature and validates the JDK archive before installing it. Verification is supported today for the Temurin and Microsoft distributions, and enabling it for a distribution that doesn’t support it fails fast rather than silently skipping the check. You can supply your own trusted key with verify-signature-public-key<\/code>.<\/li>\n
New Tencent Kona JDK distribution:<\/strong> The new kona<\/code> distribution lets you install Tencent Kona JDK<\/a> directly.<\/li>\n
Install a JDK without making it the default.<\/strong> With set-default: false<\/code>, the action leaves JAVA_HOME<\/code> and PATH<\/code> untouched while still exporting JAVA_HOME__<\/code> and registering the JDK in Maven toolchains, so a single step can use a specific JDK without disturbing the rest of your workflow.<\/li>\n
Auto-detect the distribution from .sdkmanrc<\/code>:<\/strong> When you drive your Java version from a .sdkmanrc<\/code> file, the action now infers the distribution from the SDKMAN identifier suffix (e.g., -tem<\/code> resolves to Temurin), so you no longer have to repeat it in the distribution<\/code> input.<\/li>\n
Cleaner Maven build logs by default:<\/strong> The action now sets --no-transfer-progress<\/code> in MAVEN_ARGS<\/code> by default for Maven 3.9+ and the Maven Wrapper, giving you quieter logs out of the box. Any existing MAVEN_ARGS<\/code> value is preserved, and you can restore the progress output with show-download-progress: true<\/code>. The generated settings.xml<\/code> also disables interactive mode so Maven never blocks a CI run waiting on a prompt.<\/li>\n
Fixed Maven toolchains no longer grow unexpectedly:<\/strong> Running the action multiple times in a job previously appended duplicate entries to toolchains.xml<\/code>. The generated file is now deduplicated by toolchain type and id, and your existing root attributes and non-JDK toolchains are preserved.<\/li>\n<\/ul>\nThe v5.4.0 release shipped without a changelog post, so a few notable additions from that version are worth calling out too:<\/p>\n\nThe free GraalVM Community distribution (graalvm-community<\/code>)<\/li>\n
A javac<\/code> problem matcher that surfaces compiler errors and warnings as inline annotations on your pull requests<\/li>\nMaven Wrapper caching when you enable cache: maven<\/code><\/li>\n<\/ul>\nFor reproducible, supply-chain-safe builds, pin the action to the exact v5.5.0<\/code> release tag or to its full commit SHA (0f481fcb613427c0f801b606911222b5b6f3083a<\/code>) for the strongest guarantee, rather than the floating v5<\/code> major tag.<\/p>\nFor the full list of inputs and examples, see the setup-java advanced usage guide<\/a> and the v5.5.0 release notes<\/a>. As always, we welcome feedback and issues in the actions\/setup-java<\/a> repository.<\/p>\n<\/body><\/html>\n","protected":false},"excerpt":{"rendered":"
The actions\/setup-java v5.5.0 release adds cryptographic signature verification for downloaded JDKs, support for a new distribution, and several quality-of-life improvements for Maven users. Here’s what changed since v5.4.0. Verify JDK…<\/p>\n","protected":false},"author":2106,"featured_media":0,"template":"","meta":{"_gh_post_show_toc":"","_gh_post_is_no_robots":"","_gh_post_is_featured":"","_gh_post_is_excluded":"","_gh_post_is_unlisted":"","_gh_post_related_link_1":"","_gh_post_related_link_2":"","_gh_post_related_link_3":"","_gh_post_sq_img":"","_gh_post_sq_img_id":"","_gh_post_cta_title":"","_gh_post_cta_text":"","_gh_post_cta_link":"","_gh_post_cta_button":"","_gh_post_recirc_hide":"","_gh_post_recirc_col_1":"","_gh_post_recirc_col_2":"","_gh_post_recirc_col_3":"","_gh_post_recirc_col_4":"","_featured_video":"","_gh_post_additional_query_params":"","footnotes":"","_links_to":"","_links_to_target":"","primary_cta":"","primary_cta_url":"","secondary_cta":"","secondary_cta_url":""},"label":[1836],"group":[3866],"coauthors":[3100],"class_list":["post-97395","changelog","type-changelog","status-publish","hentry","changelog-type-new-releases","changelog-label-actions","changelog-group-07-2026"],"yoast_head":"\nsetup-java v5.5.0: signature verification, Kona JDK, and Maven fixes - GitHub Changelog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes \u00b7 GitHub Changelog\" \/>\n<meta property=\"og:description\" content=\"The actions\/setup-java v5.5.0 release adds cryptographic signature verification for downloaded JDKs, support for a new distribution, and several quality-of-life improvements for Maven users. Here’s what changed since v5.4.0. Verify JDK…\" \/>\n<meta property=\"og:url\" content=\"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\/\" \/>\n<meta property=\"og:site_name\" content=\"The GitHub Blog\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-15T17:22:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-content\/uploads\/2026\/07\/SetupKonaMavenFixes_NewRelease_Unfurl_TextOnly.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"Allison\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\\\/\",\"url\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\\\/\",\"name\":\"setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes - The GitHub Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/github.blog\\\/#website\"},\"datePublished\":\"2026-07-08T17:05:06+00:00\",\"dateModified\":\"2026-07-15T17:22:38+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/github.blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Changelogs\",\"item\":\"https:\\\/\\\/github.blog\\\/changelog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/github.blog\\\/#website\",\"url\":\"https:\\\/\\\/github.blog\\\/\",\"name\":\"The GitHub Blog\",\"description\":\"Updates, ideas, and inspiration from GitHub to help developers build and design software.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/github.blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes - GitHub Changelog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\/","og_locale":"en_US","og_type":"article","og_title":"setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes \u00b7 GitHub Changelog","og_description":"The actions\/setup-java v5.5.0 release adds cryptographic signature verification for downloaded JDKs, support for a new distribution, and several quality-of-life improvements for Maven users. Here’s what changed since v5.4.0. Verify JDK…","og_url":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\/","og_site_name":"The GitHub Blog","article_modified_time":"2026-07-15T17:22:38+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-content\/uploads\/2026\/07\/SetupKonaMavenFixes_NewRelease_Unfurl_TextOnly.jpg","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes","Written by":"Allison"},"schema":{"@context":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\/","url":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\/","name":"setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes - The GitHub Blog","isPartOf":{"@id":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/#website"},"datePublished":"2026-07-08T17:05:06+00:00","dateModified":"2026-07-15T17:22:38+00:00","breadcrumb":{"@id":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/2026-07-08-setup-java-v5-5-0-signature-verification-kona-jdk-and-maven-fixes\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/"},{"@type":"ListItem","position":2,"name":"Changelogs","item":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/changelog\/"},{"@type":"ListItem","position":3,"name":"setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes"}]},{"@type":"WebSite","@id":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/#website","url":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/","name":"The GitHub Blog","description":"Updates, ideas, and inspiration from GitHub to help developers build and design software.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/changelogs\/97395","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/changelogs"}],"about":[{"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/types\/changelog"}],"author":[{"embeddable":true,"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/users\/2106"}],"version-history":[{"count":2,"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/changelogs\/97395\/revisions"}],"predecessor-version":[{"id":97397,"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/changelogs\/97395\/revisions\/97397"}],"wp:attachment":[{"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/media?parent=97395"}],"wp:term":[{"taxonomy":"changelog-type","embeddable":true,"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/type?post=97395"},{"taxonomy":"changelog-label","embeddable":true,"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/label?post=97395"},{"taxonomy":"changelog-group","embeddable":true,"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/group?post=97395"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/github.blog\/wp-json\/wp\/v2\/coauthors?post=97395"}],"curies":[{"name":"wp","href":"https:\/\/summer-heart-0930.chufeiyun1688.workers.dev:443\/https\/api.w.org\/{rel}","templated":true}]}}