fix: hardens the release action

[pandeymangg]

Hardens the release action by pinning the action versions to specific SHAs

[coderabbitai]

Walkthrough

The CI workflows were adjusted and a version bump was applied. In publish-to-maven-central.yml, a hardened-runner step with egress-policy: audit was added, actions/checkout and actions/setup-java were pinned to specific commit SHAs, the checkout step now precedes JDK setup, and the publish step label was updated; a minor blank line was removed. In sonarcloud.yml, the checkout step gained a name without altering behavior. In android/build.gradle.kts, the top-level version was updated from 1.0.2 to 1.1.0.

Pre-merge checks

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title Check	✅ Passed	The title "fix: hardens the release action" clearly and concisely summarizes the primary objective of pinning action versions and strengthening the release workflow without extraneous detail, matching the main changes in the pull request.
Description Check	✅ Passed	The description succinctly states that the release action is hardened by pinning action versions to specific SHAs, which directly corresponds to the changes in the GitHub workflows without including unrelated content.
Docstring Coverage	✅ Passed	No functions found in the changes. Docstring coverage check skipped.

---

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: ASSERTIVE

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 765026f and fba3f56.

📒 Files selected for processing (3)

• .github/workflows/publish-to-maven-central.yml (1 hunks)
• .github/workflows/sonarcloud.yml (1 hunks)
• android/build.gradle.kts (1 hunks)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (1)

• GitHub Check: SonarCloud

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[pandeymangg]

@coderabbitai review

[coderabbitai]

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud