diff --git a/.github/workflows/build-and-test.yml b/.github/workflows/build-and-test.yml
index 173b26c6..09c8d107 100644
--- a/.github/workflows/build-and-test.yml
+++ b/.github/workflows/build-and-test.yml
@@ -2,7 +2,6 @@
 name: Build
 
 on:
-  push:
   pull_request:
   workflow_dispatch: # Allow running manually from web UI
 
@@ -10,16 +9,14 @@ jobs:
   package:
     name: Maven Build
     runs-on: ubuntu-latest
-    # Only run on pushes or if pull request from fork
-    if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name != github.event.pull_request.base.repo.full_name
     permissions:
       contents: read
 
     steps:
       - name: Check out
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Set up JDK
-        uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           distribution: 'temurin'
           java-version: '21'