diff --git a/.github/workflows/java-gradle-base.yaml b/.github/workflows/java-gradle-base.yaml
index 96025aae3..bd6a39477 100644
--- a/.github/workflows/java-gradle-base.yaml
+++ b/.github/workflows/java-gradle-base.yaml
@@ -14,6 +14,16 @@ on:
         required: false
         type: boolean
         default: true
+      gradle-cache-read-only:
+        description: "Whether Gradle caching should be read-only. Only used for build and test jobs. (Default is false)"
+        required: false
+        type: boolean
+        default: false
+      gradle-refresh-dependencies:
+        description: "Whether Gradle should refresh dependencies. (Default is false)"
+        required: false
+        type: boolean
+        default: false
       gradle-version:
         description: "Gradle version to be installed. (Default is wrapper)"
         required: false
@@ -62,12 +72,14 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Build
-        uses: bakdata/ci-templates/actions/java-gradle-build@v1.16.0
+        uses: bakdata/ci-templates/actions/java-gradle-build@1.42.0
         with:
           java-distribution: ${{ inputs.java-distribution }}
           java-version: ${{ inputs.java-version }}
           gradle-version: ${{ inputs.gradle-version }}
           gradle-cache: ${{ inputs.gradle-cache }}
+          gradle-cache-read-only: ${{ inputs.gradle-cache-read-only }}
+          gradle-refresh-dependencies: ${{ inputs.gradle-refresh-dependencies }}
           working-directory: ${{ inputs.working-directory }}
 
   test:
@@ -76,9 +88,11 @@ jobs:
     needs: build
     steps:
       - name: Run unit tests
-        uses: bakdata/ci-templates/actions/java-gradle-test@1.39.0
+        uses: bakdata/ci-templates/actions/java-gradle-test@1.42.0
         with:
           gradle-cache: ${{ inputs.gradle-cache }}
+          gradle-cache-read-only: ${{ inputs.gradle-cache-read-only }}
+          gradle-refresh-dependencies: ${{ inputs.gradle-refresh-dependencies }}
           gradle-version: ${{ inputs.gradle-version }}
           java-distribution: ${{ inputs.java-distribution }}
           java-version: ${{ inputs.java-version }}
@@ -90,10 +104,12 @@ jobs:
     needs: test
     steps:
       - name: Assess code quality
-        uses: bakdata/ci-templates/actions/java-gradle-assess-code-quality@1.39.0
+        uses: bakdata/ci-templates/actions/java-gradle-assess-code-quality@1.42.0
         with:
           download-lfs-files: ${{ inputs.download-lfs-files }}
           gradle-cache: ${{ inputs.gradle-cache }}
+          gradle-cache-read-only: true
+          gradle-refresh-dependencies: ${{ inputs.gradle-refresh-dependencies }}
           gradle-version: ${{ inputs.gradle-version }}
           java-distribution: ${{ inputs.java-distribution }}
           java-version: ${{ inputs.java-version }}
diff --git a/.github/workflows/java-gradle-docker.yaml b/.github/workflows/java-gradle-docker.yaml
index 1a8a02c9a..13b313859 100644
--- a/.github/workflows/java-gradle-docker.yaml
+++ b/.github/workflows/java-gradle-docker.yaml
@@ -28,6 +28,16 @@ on:
         required: false
         type: boolean
         default: true
+      gradle-cache-read-only:
+        description: "Whether Gradle caching should be read-only. Only used for build and test jobs. (Default is false)"
+        required: false
+        type: boolean
+        default: false
+      gradle-refresh-dependencies:
+        description: "Whether Gradle should refresh dependencies. (Default is false)"
+        required: false
+        type: boolean
+        default: false
       working-directory:
         description: "Working directory of your Gradle artifacts. (Default is .)"
         required: false
@@ -76,12 +86,14 @@ concurrency:
 jobs:
   build-and-test:
     name: Build, Test and Assess code quality
-    uses: bakdata/ci-templates/.github/workflows/java-gradle-base.yaml@1.40.5
+    uses: bakdata/ci-templates/.github/workflows/java-gradle-base.yaml@1.42.0
     with:
       java-distribution: ${{ inputs.java-distribution }}
       java-version: ${{ inputs.java-version }}
       gradle-version: ${{ inputs.gradle-version }}
       gradle-cache: ${{ inputs.gradle-cache }}
+      gradle-cache-read-only: ${{ inputs.gradle-cache-read-only }}
+      gradle-refresh-dependencies: ${{ inputs.gradle-refresh-dependencies }}
       working-directory: ${{ inputs.working-directory }}
     secrets:
       signing-key-id: ${{ secrets.signing-key-id }}
@@ -97,12 +109,14 @@ jobs:
 
     steps:
       - name: Build tarball image
-        uses: bakdata/ci-templates/actions/java-gradle-build-jib@v1.16.0
+        uses: bakdata/ci-templates/actions/java-gradle-build-jib@1.42.0
         with:
           java-distribution: ${{ inputs.java-distribution }}
           java-version: ${{ inputs.java-version }}
           gradle-version: ${{ inputs.gradle-version }}
           gradle-cache: ${{ inputs.gradle-cache }}
+          gradle-cache-read-only: true
+          gradle-refresh-dependencies: ${{ inputs.gradle-refresh-dependencies }}
           working-directory: ${{ inputs.working-directory }}
 
   publish:
@@ -112,7 +126,7 @@ jobs:
 
     steps:
       - name: Publish
-        uses: bakdata/ci-templates/actions/java-gradle-publish@1.41.0
+        uses: bakdata/ci-templates/actions/java-gradle-publish@1.42.0
         with:
           signing-secret-key-ring: ${{ secrets.signing-secret-key-ring }}
           signing-key-id: ${{ secrets.signing-key-id }}
@@ -123,6 +137,8 @@ jobs:
           java-version: ${{ inputs.java-version }}
           gradle-version: ${{ inputs.gradle-version }}
           gradle-cache: ${{ inputs.gradle-cache }}
+          gradle-cache-read-only: true
+          gradle-refresh-dependencies: ${{ inputs.gradle-refresh-dependencies }}
           working-directory: ${{ inputs.working-directory }}
 
   publish-jib-image:
diff --git a/.github/workflows/java-gradle-library.yaml b/.github/workflows/java-gradle-library.yaml
index cc888b7fc..40dd6ff57 100644
--- a/.github/workflows/java-gradle-library.yaml
+++ b/.github/workflows/java-gradle-library.yaml
@@ -24,6 +24,16 @@ on:
         required: false
         type: boolean
         default: true
+      gradle-cache-read-only:
+        description: "Whether Gradle caching should be read-only. Only used for build and test jobs. (Default is false)"
+        required: false
+        type: boolean
+        default: false
+      gradle-refresh-dependencies:
+        description: "Whether Gradle should refresh dependencies. (Default is false)"
+        required: false
+        type: boolean
+        default: false
       working-directory:
         description: "Working directory of your Gradle artifacts. (Default is .)"
         required: false
@@ -66,12 +76,14 @@ concurrency:
 jobs:
   build-and-test:
     name: Build, Test and Assess code quality
-    uses: bakdata/ci-templates/.github/workflows/java-gradle-base.yaml@1.40.5
+    uses: bakdata/ci-templates/.github/workflows/java-gradle-base.yaml@1.42.0
     with:
       java-distribution: ${{ inputs.java-distribution }}
       java-version: ${{ inputs.java-version }}
       gradle-version: ${{ inputs.gradle-version }}
       gradle-cache: ${{ inputs.gradle-cache }}
+      gradle-cache-read-only: ${{ inputs.gradle-cache-read-only }}
+      gradle-refresh-dependencies: ${{ inputs.gradle-refresh-dependencies }}
       working-directory: ${{ inputs.working-directory }}
 
     secrets:
@@ -88,7 +100,7 @@ jobs:
 
     steps:
       - name: Publish
-        uses: bakdata/ci-templates/actions/java-gradle-publish@1.41.0
+        uses: bakdata/ci-templates/actions/java-gradle-publish@1.42.0
         with:
           signing-secret-key-ring: ${{ secrets.signing-secret-key-ring }}
           signing-key-id: ${{ secrets.signing-key-id }}
@@ -99,6 +111,8 @@ jobs:
           java-version: ${{ inputs.java-version }}
           gradle-version: ${{ inputs.gradle-version }}
           gradle-cache: ${{ inputs.gradle-cache }}
+          gradle-cache-read-only: true
+          gradle-refresh-dependencies: ${{ inputs.gradle-refresh-dependencies }}
           working-directory: ${{ inputs.working-directory }}
 
   release:
diff --git a/.github/workflows/java-gradle-plugin.yaml b/.github/workflows/java-gradle-plugin.yaml
index 147e34b42..c38bb774d 100644
--- a/.github/workflows/java-gradle-plugin.yaml
+++ b/.github/workflows/java-gradle-plugin.yaml
@@ -24,6 +24,16 @@ on:
         required: false
         type: boolean
         default: true
+      gradle-cache-read-only:
+        description: "Whether Gradle caching should be read-only. Only used for build and test jobs. (Default is false)"
+        required: false
+        type: boolean
+        default: false
+      gradle-refresh-dependencies:
+        description: "Whether Gradle should refresh dependencies. (Default is false)"
+        required: false
+        type: boolean
+        default: false
       working-directory:
         description: "Working directory of your Gradle artifacts. (Default is .)"
         required: false
@@ -72,12 +82,14 @@ concurrency:
 jobs:
   build-and-test:
     name: Build, Test and Assess code quality
-    uses: bakdata/ci-templates/.github/workflows/java-gradle-base.yaml@1.40.5
+    uses: bakdata/ci-templates/.github/workflows/java-gradle-base.yaml@1.42.0
     with:
       java-distribution: ${{ inputs.java-distribution }}
       java-version: ${{ inputs.java-version }}
       gradle-version: ${{ inputs.gradle-version }}
       gradle-cache: ${{ inputs.gradle-cache }}
+      gradle-cache-read-only: ${{ inputs.gradle-cache-read-only }}
+      gradle-refresh-dependencies: ${{ inputs.gradle-refresh-dependencies }}
       working-directory: ${{ inputs.working-directory }}
     secrets:
       signing-key-id: ${{ secrets.signing-key-id }}
@@ -93,7 +105,7 @@ jobs:
 
     steps:
       - name: Publish
-        uses: bakdata/ci-templates/actions/java-gradle-publish@1.41.0
+        uses: bakdata/ci-templates/actions/java-gradle-publish@1.42.0
         with:
           signing-secret-key-ring: ${{ secrets.signing-secret-key-ring }}
           signing-key-id: ${{ secrets.signing-key-id }}
@@ -104,6 +116,8 @@ jobs:
           java-version: ${{ inputs.java-version }}
           gradle-version: ${{ inputs.gradle-version }}
           gradle-cache: ${{ inputs.gradle-cache }}
+          gradle-cache-read-only: true
+          gradle-refresh-dependencies: ${{ inputs.gradle-refresh-dependencies }}
           working-directory: ${{ inputs.working-directory }}
 
   publish-plugin:
@@ -114,7 +128,7 @@ jobs:
 
     steps:
       - name: Publish plugin
-        uses: bakdata/ci-templates/actions/java-gradle-publish-plugin@1.40.6
+        uses: bakdata/ci-templates/actions/java-gradle-publish-plugin@1.42.0
         with:
           signing-secret-key-ring: ${{ secrets.signing-secret-key-ring }}
           signing-key-id: ${{ secrets.signing-key-id }}
@@ -125,6 +139,8 @@ jobs:
           java-version: ${{ inputs.java-version }}
           gradle-version: ${{ inputs.gradle-version }}
           gradle-cache: ${{ inputs.gradle-cache }}
+          gradle-cache-read-only: true
+          gradle-refresh-dependencies: ${{ inputs.gradle-refresh-dependencies }}
           working-directory: ${{ inputs.working-directory }}
 
   release:
diff --git a/.github/workflows/java-gradle-release.yaml b/.github/workflows/java-gradle-release.yaml
index 247523c43..a12a2b5f7 100644
--- a/.github/workflows/java-gradle-release.yaml
+++ b/.github/workflows/java-gradle-release.yaml
@@ -68,7 +68,7 @@ jobs:
     steps:
       - name: Release on Github
         id: release
-        uses: bakdata/ci-templates/actions/java-gradle-release@1.38.0
+        uses: bakdata/ci-templates/actions/java-gradle-release@1.42.0
         with:
           release-type: ${{ inputs.release-type }}
           changelog-file: "${{ inputs.changelog-file }}"
@@ -79,4 +79,5 @@ jobs:
           java-version: ${{ inputs.java-version }}
           gradle-version: ${{ inputs.gradle-version }}
           gradle-cache: ${{ inputs.gradle-cache }}
+          gradle-cache-read-only: true
           working-directory: ${{ inputs.working-directory }}
diff --git a/actions/java-gradle-assess-code-quality/action.yaml b/actions/java-gradle-assess-code-quality/action.yaml
index 09aec8e46..511a76e67 100644
--- a/actions/java-gradle-assess-code-quality/action.yaml
+++ b/actions/java-gradle-assess-code-quality/action.yaml
@@ -10,6 +10,14 @@ inputs:
     description: "Whether Gradle caching is enabled or not. (Default is true)"
     required: false
     default: true
+  gradle-cache-read-only:
+    description: "Whether Gradle caching should be read-only. By default this value is 'false' for workflows on the GitHub default branch and 'true' for workflows on other branches."
+    required: false
+    default: ${{ github.event.repository != null && github.ref_name != github.event.repository.default_branch }}
+  gradle-refresh-dependencies:
+    description: "Whether Gradle should refresh dependencies. (Default is false)"
+    required: false
+    default: "false"
   gradle-version:
     description: "Gradle version to be installed. (Default is wrapper)"
     required: false
@@ -52,17 +60,18 @@ runs:
         lfs: ${{ inputs.download-lfs-files }}
 
     - name: Set up Gradle with version ${{ inputs.gradle-version }}
-      uses: bakdata/ci-templates/actions/java-gradle-setup@v1.16.0
+      uses: bakdata/ci-templates/actions/java-gradle-setup@1.42.0
       with:
         java-distribution: ${{ inputs.java-distribution }}
         java-version: ${{ inputs.java-version }}
         gradle-version: ${{ inputs.gradle-version }}
         gradle-cache: ${{ inputs.gradle-cache }}
+        gradle-cache-read-only: ${{ inputs.gradle-cache-read-only }}
 
     # sonar.branch.autoconfig.disabled is necessary for autocreation of projects on Sonarcloud to work
     - name: Assess code quality
       if: ${{ inputs.sonar-token != '' && inputs.sonar-organization != '' }}
-      run: ./gradlew -Dsonar.branch.autoconfig.disabled=true -Dsonar.host.url=https://sonarcloud.io -Dsonar.organization=${{ inputs.sonar-organization }} --info --stacktrace sonarqube
+      run: ./gradlew -Dsonar.branch.autoconfig.disabled=true -Dsonar.host.url=https://sonarcloud.io -Dsonar.organization=${{ inputs.sonar-organization }} --info --stacktrace sonarqube ${{ inputs.gradle-refresh-dependencies && '--refresh-dependencies' || '' }}
       shell: bash
       working-directory: ${{ inputs.working-directory }}
       env:
diff --git a/actions/java-gradle-build-jib/action.yaml b/actions/java-gradle-build-jib/action.yaml
index 0083b71bb..c7fd0dd6c 100644
--- a/actions/java-gradle-build-jib/action.yaml
+++ b/actions/java-gradle-build-jib/action.yaml
@@ -26,6 +26,14 @@ inputs:
     description: "Whether Gradle caching is enabled or not. (Default is true)"
     required: false
     default: "true"
+  gradle-cache-read-only:
+    description: "Whether Gradle caching should be read-only. By default this value is 'false' for workflows on the GitHub default branch and 'true' for workflows on other branches."
+    required: false
+    default: ${{ github.event.repository != null && github.ref_name != github.event.repository.default_branch }}
+  gradle-refresh-dependencies:
+    description: "Whether Gradle should refresh dependencies. (Default is false)"
+    required: false
+    default: "false"
   working-directory:
     description: "Working directory of your Gradle artifacts. (Default is .)"
     required: false
@@ -49,12 +57,13 @@ runs:
         lfs: ${{ inputs.download-lfs-files }}
 
     - name: Set up Gradle with version ${{ inputs.gradle-version }}
-      uses: bakdata/ci-templates/actions/java-gradle-setup@v1.16.0
+      uses: bakdata/ci-templates/actions/java-gradle-setup@1.42.0
       with:
         java-distribution: ${{ inputs.java-distribution }}
         java-version: ${{ inputs.java-version }}
         gradle-version: ${{ inputs.gradle-version }}
         gradle-cache: ${{ inputs.gradle-cache }}
+        gradle-cache-read-only: ${{ inputs.gradle-cache-read-only }}
 
     - name: Build Docker image
       run: |
@@ -62,7 +71,8 @@ runs:
           --info --stacktrace \
           --image=${{ inputs.image-name }} \
           ${{ inputs.jib-from-image && format('-Djib.from.image={0}', inputs.jib-from-image) || '' }} \
-          -x test
+          -x test \
+          ${{ inputs.gradle-refresh-dependencies && '--refresh-dependencies' || '' }}
       shell: bash
       working-directory: ${{ inputs.working-directory }}
 
diff --git a/actions/java-gradle-build/action.yaml b/actions/java-gradle-build/action.yaml
index cb857ba86..9c48f5f6e 100644
--- a/actions/java-gradle-build/action.yaml
+++ b/actions/java-gradle-build/action.yaml
@@ -22,6 +22,14 @@ inputs:
     description: "Whether Gradle caching is enabled or not. (Default is true)"
     required: false
     default: "true"
+  gradle-cache-read-only:
+    description: "Whether Gradle caching should be read-only. By default this value is 'false' for workflows on the GitHub default branch and 'true' for workflows on other branches."
+    required: false
+    default: ${{ github.event.repository != null && github.ref_name != github.event.repository.default_branch }}
+  gradle-refresh-dependencies:
+    description: "Whether Gradle should refresh dependencies. (Default is false)"
+    required: false
+    default: "false"
   working-directory:
     description: "Working directory of your Gradle artifacts. (Default is .)"
     required: false
@@ -33,15 +41,16 @@ runs:
       uses: bakdata/ci-templates/actions/checkout@1.32.0
 
     - name: Set up Gradle with version ${{ inputs.gradle-version }}
-      uses: bakdata/ci-templates/actions/java-gradle-setup@v1.16.0
+      uses: bakdata/ci-templates/actions/java-gradle-setup@1.42.0
       with:
         java-distribution: ${{ inputs.java-distribution }}
         java-version: ${{ inputs.java-version }}
         gradle-version: ${{ inputs.gradle-version }}
         gradle-cache: ${{ inputs.gradle-cache }}
+        gradle-cache-read-only: ${{ inputs.gradle-cache-read-only }}
 
     - name: Compile
-      run: ./gradlew --info --stacktrace build -x test
+      run: ./gradlew --info --stacktrace build -x test ${{ inputs.gradle-refresh-dependencies && '--refresh-dependencies' || '' }}
       shell: bash
       working-directory: ${{ inputs.working-directory }}
 
diff --git a/actions/java-gradle-publish-plugin/action.yml b/actions/java-gradle-publish-plugin/action.yml
index e1af32014..a71caad01 100644
--- a/actions/java-gradle-publish-plugin/action.yml
+++ b/actions/java-gradle-publish-plugin/action.yml
@@ -33,6 +33,14 @@ inputs:
     description: "Whether Gradle caching is enabled or not. (Default is true)"
     required: false
     default: "true"
+  gradle-cache-read-only:
+    description: "Whether Gradle caching should be read-only. By default this value is 'false' for workflows on the GitHub default branch and 'true' for workflows on other branches."
+    required: false
+    default: ${{ github.event.repository != null && github.ref_name != github.event.repository.default_branch }}
+  gradle-refresh-dependencies:
+    description: "Whether Gradle should refresh dependencies. (Default is false)"
+    required: false
+    default: "false"
   working-directory:
     description: "Working directory of your Gradle artifacts. (Default is .)"
     required: false
@@ -46,18 +54,19 @@ runs:
         fetch-depth: 0
 
     - name: Set up Gradle with version ${{ inputs.gradle-version }}
-      uses: bakdata/ci-templates/actions/java-gradle-setup@v1.16.0
+      uses: bakdata/ci-templates/actions/java-gradle-setup@1.42.0
       with:
         java-distribution: ${{ inputs.java-distribution }}
         java-version: ${{ inputs.java-version }}
         gradle-version: ${{ inputs.gradle-version }}
         gradle-cache: ${{ inputs.gradle-cache }}
+        gradle-cache-read-only: ${{ inputs.gradle-cache-read-only }}
 
     - name: Publish plugin
       run: |
         export SIGNING_SECRET_KEY_RING_FILE="$(mktemp -d)/secring.gpg"
         echo '${{ inputs.signing-secret-key-ring }}' | base64 -d > $SIGNING_SECRET_KEY_RING_FILE
-        ./gradlew --info --stacktrace -Pgradle.publish.key=${{ inputs.gradle-publish-key }} -Pgradle.publish.secret=${{ inputs.gradle-publish-secret }} publishPlugins -x test
+        ./gradlew --info --stacktrace -Pgradle.publish.key=${{ inputs.gradle-publish-key }} -Pgradle.publish.secret=${{ inputs.gradle-publish-secret }} publishPlugins -x test ${{ inputs.gradle-refresh-dependencies && '--refresh-dependencies' || '' }}
       shell: bash
       working-directory: ${{ inputs.working-directory }}
       env:
diff --git a/actions/java-gradle-publish/action.yaml b/actions/java-gradle-publish/action.yaml
index de7d89308..50420166b 100644
--- a/actions/java-gradle-publish/action.yaml
+++ b/actions/java-gradle-publish/action.yaml
@@ -33,6 +33,14 @@ inputs:
     description: "Whether Gradle caching is enabled or not. (Default is true)"
     required: false
     default: "true"
+  gradle-cache-read-only:
+    description: "Whether Gradle caching should be read-only. By default this value is 'false' for workflows on the GitHub default branch and 'true' for workflows on other branches."
+    required: false
+    default: ${{ github.event.repository != null && github.ref_name != github.event.repository.default_branch }}
+  gradle-refresh-dependencies:
+    description: "Whether Gradle should refresh dependencies. (Default is false)"
+    required: false
+    default: "false"
   working-directory:
     description: "Working directory of your Gradle artifacts. (Default is .)"
     required: false
@@ -46,19 +54,20 @@ runs:
         fetch-depth: 0
 
     - name: Set up Gradle with version ${{ inputs.gradle-version }}
-      uses: bakdata/ci-templates/actions/java-gradle-setup@v1.16.0
+      uses: bakdata/ci-templates/actions/java-gradle-setup@1.42.0
       with:
         java-distribution: ${{ inputs.java-distribution }}
         java-version: ${{ inputs.java-version }}
         gradle-version: ${{ inputs.gradle-version }}
         gradle-cache: ${{ inputs.gradle-cache }}
+        gradle-cache-read-only: ${{ inputs.gradle-cache-read-only }}
 
     - name: Publish snapshots to Nexus
       if: ${{ !startsWith(github.ref, 'refs/tags/') }}
       run: |
         export SIGNING_SECRET_KEY_RING_FILE="$(mktemp -d)/secring.gpg"
         echo '${{ inputs.signing-secret-key-ring }}' | base64 -d > $SIGNING_SECRET_KEY_RING_FILE
-        ./gradlew --info --stacktrace publishToNexus -x test
+        ./gradlew --info --stacktrace publishToNexus -x test ${{ inputs.gradle-refresh-dependencies && '--refresh-dependencies' || '' }}
       shell: bash
       working-directory: ${{ inputs.working-directory }}
       env:
diff --git a/actions/java-gradle-release-github/action.yaml b/actions/java-gradle-release-github/action.yaml
index 7182cf252..6c42a2dc5 100644
--- a/actions/java-gradle-release-github/action.yaml
+++ b/actions/java-gradle-release-github/action.yaml
@@ -6,32 +6,9 @@ inputs:
     description: Path to the changelog file in the GitHub repository
     required: false
     default: "CHANGELOG.md"
-  github-username:
-    description: "GitHub username for requesting changes from API."
-    required: true
   github-token:
     description: "GitHub token for requesting changes from API."
     required: true
-  java-distribution:
-    description: "Java distribution to be installed. (Default is microsoft)"
-    required: false
-    default: "microsoft"
-  java-version:
-    description: "Java version to be installed. (Default is 11)"
-    required: false
-    default: "11"
-  gradle-version:
-    description: "Gradle version to be installed. (Default is wrapper)"
-    required: false
-    default: "wrapper"
-  gradle-cache:
-    description: "Whether Gradle caching is enabled or not. (Default is true)"
-    required: false
-    default: "true"
-  working-directory:
-    description: "Working directory of your Gradle artifacts. (Default is .)"
-    required: false
-    default: "."
 runs:
   using: "composite"
   steps:
diff --git a/actions/java-gradle-release/action.yaml b/actions/java-gradle-release/action.yaml
index 36ed8ce24..8e07364b9 100644
--- a/actions/java-gradle-release/action.yaml
+++ b/actions/java-gradle-release/action.yaml
@@ -22,6 +22,14 @@ inputs:
     description: "Whether Gradle caching is enabled or not. (Default is true)"
     required: false
     default: "true"
+  gradle-cache-read-only:
+    description: "Whether Gradle caching should be read-only. By default this value is 'false' for workflows on the GitHub default branch and 'true' for workflows on other branches."
+    required: false
+    default: ${{ github.event.repository != null && github.ref_name != github.event.repository.default_branch }}
+  gradle-refresh-dependencies:
+    description: "Whether Gradle should refresh dependencies. (Default is false)"
+    required: false
+    default: "false"
   gradle-version:
     description: "Gradle version to be installed. (Default is wrapper)"
     required: false
@@ -66,12 +74,13 @@ runs:
       shell: bash
 
     - name: Set up Gradle with version ${{ inputs.gradle-version }}
-      uses: bakdata/ci-templates/actions/java-gradle-setup@v1.16.0
+      uses: bakdata/ci-templates/actions/java-gradle-setup@1.42.0
       with:
         java-distribution: ${{ inputs.java-distribution }}
         java-version: ${{ inputs.java-version }}
         gradle-version: ${{ inputs.gradle-version }}
         gradle-cache: ${{ inputs.gradle-cache }}
+        gradle-cache-read-only: ${{ inputs.gradle-cache-read-only }}
 
     - name: Bump version
       id: evaluate-version
@@ -86,7 +95,7 @@ runs:
       shell: bash
 
     - name: Create release
-      run: ./gradlew release -x test -Prelease.useAutomaticVersion=true -Prelease.releaseVersion=${{ steps.evaluate-version.outputs.release-version }} -PdisablePushToRemote=true
+      run: ./gradlew release -x test -Prelease.useAutomaticVersion=true -Prelease.releaseVersion=${{ steps.evaluate-version.outputs.release-version }} -PdisablePushToRemote=true ${{ inputs.gradle-refresh-dependencies && '--refresh-dependencies' || '' }}
       shell: bash
       working-directory: ${{ inputs.working-directory }}
 
diff --git a/actions/java-gradle-setup/action.yaml b/actions/java-gradle-setup/action.yaml
index 7949bcdfc..559ccea7a 100644
--- a/actions/java-gradle-setup/action.yaml
+++ b/actions/java-gradle-setup/action.yaml
@@ -18,6 +18,10 @@ inputs:
     description: "Whether Gradle caching is enabled or not. (Default is true)"
     required: false
     default: "true"
+  gradle-cache-read-only:
+    description: "Whether Gradle caching should be read-only. By default this value is 'false' for workflows on the GitHub default branch and 'true' for workflows on other branches."
+    required: false
+    default: ${{ github.event.repository != null && github.ref_name != github.event.repository.default_branch }}
 runs:
   using: "composite"
   steps:
@@ -31,3 +35,4 @@ runs:
       with:
         gradle-version: ${{ inputs.gradle-version }}
         cache-disabled: ${{ inputs.gradle-cache == 'false' }}
+        cache-read-only: ${{ inputs.gradle-cache-read-only == 'true' }}
diff --git a/actions/java-gradle-test/action.yaml b/actions/java-gradle-test/action.yaml
index 375d7064e..dfcebdf17 100644
--- a/actions/java-gradle-test/action.yaml
+++ b/actions/java-gradle-test/action.yaml
@@ -10,6 +10,14 @@ inputs:
     description: "Whether Gradle caching is enabled or not. (Default is true)"
     required: false
     default: true
+  gradle-cache-read-only:
+    description: "Whether Gradle caching should be read-only. By default this value is 'false' for workflows on the GitHub default branch and 'true' for workflows on other branches."
+    required: false
+    default: ${{ github.event.repository != null && github.ref_name != github.event.repository.default_branch }}
+  gradle-refresh-dependencies:
+    description: "Whether Gradle should refresh dependencies. (Default is false)"
+    required: false
+    default: "false"
   gradle-version:
     description: "Gradle version to be installed. (Default is wrapper)"
     required: false
@@ -37,15 +45,16 @@ runs:
         lfs: ${{ inputs.download-lfs-files }}
 
     - name: Set up Gradle with version ${{ inputs.gradle-version }}
-      uses: bakdata/ci-templates/actions/java-gradle-setup@v1.16.0
+      uses: bakdata/ci-templates/actions/java-gradle-setup@1.42.0
       with:
         java-distribution: ${{ inputs.java-distribution }}
         java-version: ${{ inputs.java-version }}
         gradle-version: ${{ inputs.gradle-version }}
         gradle-cache: ${{ inputs.gradle-cache }}
+        gradle-cache-read-only: ${{ inputs.gradle-cache-read-only }}
 
     - name: Run tests
-      run: ./gradlew check --info --stacktrace
+      run: ./gradlew check --info --stacktrace ${{ inputs.gradle-refresh-dependencies && '--refresh-dependencies' || '' }}
       shell: bash
       working-directory: ${{ inputs.working-directory }}
 
diff --git a/docs/actions/java-gradle-assess-code-quality/README.md b/docs/actions/java-gradle-assess-code-quality/README.md
index 7ba5a03f7..78b954d1a 100644
--- a/docs/actions/java-gradle-assess-code-quality/README.md
+++ b/docs/actions/java-gradle-assess-code-quality/README.md
@@ -26,19 +26,21 @@ steps:
 
 <!-- AUTO-DOC-INPUT:START - Do not remove or modify this section -->
 
-| INPUT                   | TYPE   | REQUIRED | DEFAULT       | DESCRIPTION                                                                         |
-| ----------------------- | ------ | -------- | ------------- | ----------------------------------------------------------------------------------- |
-| download-lfs-files      | string | false    | `"false"`     | Whether the Git checkout action should resolve LFS files or not. (Default is false) |
-| gradle-cache            | string | false    | `"true"`      | Whether Gradle caching is enabled or not. (Default is true)                         |
-| gradle-version          | string | false    | `"wrapper"`   | Gradle version to be installed. (Default is wrapper)                                |
-| java-distribution       | string | false    | `"microsoft"` | Java distribution to be installed. (Default is microsoft)                           |
-| java-version            | string | false    | `"11"`        | Java version to be installed. (Default is 11)                                       |
-| signing-key-id          | string | false    |               | Key id for signing the Sonatype publication.                                        |
-| signing-password        | string | false    |               | Password for signing the Sonatype publication.                                      |
-| signing-secret-key-ring | string | false    |               | Key ring (base64 encoded) for signing the Sonatype publication.                     |
-| sonar-organization      | string | false    |               | Organization for Sonarcloud.                                                        |
-| sonar-token             | string | false    |               | Token for Sonarcloud.                                                               |
-| working-directory       | string | false    | `"."`         | Working directory of your Gradle artifacts. (Default is .)                          |
+| INPUT                       | TYPE   | REQUIRED | DEFAULT                                                                                                 | DESCRIPTION                                                                                                                                                         |
+| --------------------------- | ------ | -------- | ------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| download-lfs-files          | string | false    | `"false"`                                                                                               | Whether the Git checkout action should resolve LFS files or not. (Default is false)                                                                                 |
+| gradle-cache                | string | false    | `"true"`                                                                                                | Whether Gradle caching is enabled or not. (Default is true)                                                                                                         |
+| gradle-cache-read-only      | string | false    | `"${{ github.event.repository != null && github.ref_name != github.event.repository.default_branch }}"` | Whether Gradle caching should be read-only. By default this value is 'false' for workflows on the GitHub default branch and 'true' for workflows on other branches. |
+| gradle-refresh-dependencies | string | false    | `"false"`                                                                                               | Whether Gradle should refresh dependencies. (Default is false)                                                                                                      |
+| gradle-version              | string | false    | `"wrapper"`                                                                                             | Gradle version to be installed. (Default is wrapper)                                                                                                                |
+| java-distribution           | string | false    | `"microsoft"`                                                                                           | Java distribution to be installed. (Default is microsoft)                                                                                                           |
+| java-version                | string | false    | `"11"`                                                                                                  | Java version to be installed. (Default is 11)                                                                                                                       |
+| signing-key-id              | string | false    |                                                                                                         | Key id for signing the Sonatype publication.                                                                                                                        |
+| signing-password            | string | false    |                                                                                                         | Password for signing the Sonatype publication.                                                                                                                      |
+| signing-secret-key-ring     | string | false    |                                                                                                         | Key ring (base64 encoded) for signing the Sonatype publication.                                                                                                     |
+| sonar-organization          | string | false    |                                                                                                         | Organization for Sonarcloud.                                                                                                                                        |
+| sonar-token                 | string | false    |                                                                                                         | Token for Sonarcloud.                                                                                                                                               |
+| working-directory           | string | false    | `"."`                                                                                                   | Working directory of your Gradle artifacts. (Default is .)                                                                                                          |
 
 <!-- AUTO-DOC-INPUT:END -->
 
diff --git a/docs/actions/java-gradle-build-jib/README.md b/docs/actions/java-gradle-build-jib/README.md
index 686a83946..baaa45acb 100644
--- a/docs/actions/java-gradle-build-jib/README.md
+++ b/docs/actions/java-gradle-build-jib/README.md
@@ -22,18 +22,20 @@ steps:
 
 <!-- AUTO-DOC-INPUT:START - Do not remove or modify this section -->
 
-| INPUT               | TYPE   | REQUIRED | DEFAULT                                 | DESCRIPTION                                                                                                                              |
-| ------------------- | ------ | -------- | --------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------- |
-| download-lfs-files  | string | false    | `"false"`                               | Whether the Git checkout action should resolve LFS files or not. (Default is false)                                                      |
-| gradle-cache        | string | false    | `"true"`                                | Whether Gradle caching is enabled or not. (Default is true)                                                                              |
-| gradle-version      | string | false    | `"wrapper"`                             | Gradle version to be installed. (Default is wrapper)                                                                                     |
-| image-artifact-name | string | false    | `"image-artifact"`                      | Artifact name to upload tarball image, see https://github.com/actions/upload-artifact                                                    |
-| image-name          | string | false    | `"${{ github.event.repository.name }}"` | Name of Docker image.                                                                                                                    |
-| java-distribution   | string | false    | `"microsoft"`                           | Java distribution to be installed. (Default is microsoft)                                                                                |
-| java-version        | string | false    | `"11"`                                  | Java version to be installed. (Default is 11)                                                                                            |
-| jib-from-image      | string | false    |                                         | The Jib base image to use                                                                                                                |
-| subproject          | string | false    |                                         | The Gradle subproject for which the tarball image should be built (If not specified, a tarball image for the root project will be built) |
-| working-directory   | string | false    | `"."`                                   | Working directory of your Gradle artifacts. (Default is .)                                                                               |
+| INPUT                       | TYPE   | REQUIRED | DEFAULT                                                                                                 | DESCRIPTION                                                                                                                                                         |
+| --------------------------- | ------ | -------- | ------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| download-lfs-files          | string | false    | `"false"`                                                                                               | Whether the Git checkout action should resolve LFS files or not. (Default is false)                                                                                 |
+| gradle-cache                | string | false    | `"true"`                                                                                                | Whether Gradle caching is enabled or not. (Default is true)                                                                                                         |
+| gradle-cache-read-only      | string | false    | `"${{ github.event.repository != null && github.ref_name != github.event.repository.default_branch }}"` | Whether Gradle caching should be read-only. By default this value is 'false' for workflows on the GitHub default branch and 'true' for workflows on other branches. |
+| gradle-refresh-dependencies | string | false    | `"false"`                                                                                               | Whether Gradle should refresh dependencies. (Default is false)                                                                                                      |
+| gradle-version              | string | false    | `"wrapper"`                                                                                             | Gradle version to be installed. (Default is wrapper)                                                                                                                |
+| image-artifact-name         | string | false    | `"image-artifact"`                                                                                      | Artifact name to upload tarball image, see https://github.com/actions/upload-artifact                                                                               |
+| image-name                  | string | false    | `"${{ github.event.repository.name }}"`                                                                 | Name of Docker image.                                                                                                                                               |
+| java-distribution           | string | false    | `"microsoft"`                                                                                           | Java distribution to be installed. (Default is microsoft)                                                                                                           |
+| java-version                | string | false    | `"11"`                                                                                                  | Java version to be installed. (Default is 11)                                                                                                                       |
+| jib-from-image              | string | false    |                                                                                                         | The Jib base image to use                                                                                                                                           |
+| subproject                  | string | false    |                                                                                                         | The Gradle subproject for which the tarball image should be built (If not specified, a tarball image for the root project will be built)                            |
+| working-directory           | string | false    | `"."`                                                                                                   | Working directory of your Gradle artifacts. (Default is .)                                                                                                          |
 
 <!-- AUTO-DOC-INPUT:END -->
 
diff --git a/docs/actions/java-gradle-build/README.md b/docs/actions/java-gradle-build/README.md
index b8d8830d4..cdd2e058a 100644
--- a/docs/actions/java-gradle-build/README.md
+++ b/docs/actions/java-gradle-build/README.md
@@ -22,14 +22,16 @@ steps:
 
 <!-- AUTO-DOC-INPUT:START - Do not remove or modify this section -->
 
-| INPUT               | TYPE   | REQUIRED | DEFAULT            | DESCRIPTION                                                                                                                           |
-| ------------------- | ------ | -------- | ------------------ | ------------------------------------------------------------------------------------------------------------------------------------- |
-| build-artifact-name | string | false    | `"build-artifact"` | Artifact name that is used for uploading build artifacts, see https://github.com/actions/upload-artifact (Default is build-artifact). |
-| gradle-cache        | string | false    | `"true"`           | Whether Gradle caching is enabled or not. (Default is true)                                                                           |
-| gradle-version      | string | false    | `"wrapper"`        | Gradle version to be installed. (Default is wrapper)                                                                                  |
-| java-distribution   | string | false    | `"microsoft"`      | Java distribution to be installed. (Default is microsoft)                                                                             |
-| java-version        | string | false    | `"11"`             | Java version to be installed. (Default is 11)                                                                                         |
-| working-directory   | string | false    | `"."`              | Working directory of your Gradle artifacts. (Default is .)                                                                            |
+| INPUT                       | TYPE   | REQUIRED | DEFAULT                                                                                                 | DESCRIPTION                                                                                                                                                         |
+| --------------------------- | ------ | -------- | ------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| build-artifact-name         | string | false    | `"build-artifact"`                                                                                      | Artifact name that is used for uploading build artifacts, see https://github.com/actions/upload-artifact (Default is build-artifact).                               |
+| gradle-cache                | string | false    | `"true"`                                                                                                | Whether Gradle caching is enabled or not. (Default is true)                                                                                                         |
+| gradle-cache-read-only      | string | false    | `"${{ github.event.repository != null && github.ref_name != github.event.repository.default_branch }}"` | Whether Gradle caching should be read-only. By default this value is 'false' for workflows on the GitHub default branch and 'true' for workflows on other branches. |
+| gradle-refresh-dependencies | string | false    | `"false"`                                                                                               | Whether Gradle should refresh dependencies. (Default is false)                                                                                                      |
+| gradle-version              | string | false    | `"wrapper"`                                                                                             | Gradle version to be installed. (Default is wrapper)                                                                                                                |
+| java-distribution           | string | false    | `"microsoft"`                                                                                           | Java distribution to be installed. (Default is microsoft)                                                                                                           |
+| java-version                | string | false    | `"11"`                                                                                                  | Java version to be installed. (Default is 11)                                                                                                                       |
+| working-directory           | string | false    | `"."`                                                                                                   | Working directory of your Gradle artifacts. (Default is .)                                                                                                          |
 
 <!-- AUTO-DOC-INPUT:END -->
 
diff --git a/docs/actions/java-gradle-publish-plugin/README.md b/docs/actions/java-gradle-publish-plugin/README.md
index 81b0f77b2..c52924e7d 100644
--- a/docs/actions/java-gradle-publish-plugin/README.md
+++ b/docs/actions/java-gradle-publish-plugin/README.md
@@ -26,18 +26,20 @@ steps:
 
 <!-- AUTO-DOC-INPUT:START - Do not remove or modify this section -->
 
-| INPUT                   | TYPE   | REQUIRED | DEFAULT       | DESCRIPTION                                                     |
-| ----------------------- | ------ | -------- | ------------- | --------------------------------------------------------------- |
-| gradle-cache            | string | false    | `"true"`      | Whether Gradle caching is enabled or not. (Default is true)     |
-| gradle-publish-key      | string | true     |               | Key for publishing to Gradle Plugin Portal.                     |
-| gradle-publish-secret   | string | true     |               | Secret for publishing to Gradle Plugin Portal.                  |
-| gradle-version          | string | false    | `"wrapper"`   | Gradle version to be installed. (Default is wrapper)            |
-| java-distribution       | string | false    | `"microsoft"` | Java distribution to be installed. (Default is microsoft)       |
-| java-version            | string | false    | `"11"`        | Java version to be installed. (Default is 11)                   |
-| signing-key-id          | string | true     |               | Key id for signing the Sonatype publication.                    |
-| signing-password        | string | true     |               | Password for signing the Sonatype publication.                  |
-| signing-secret-key-ring | string | true     |               | Key ring (base64 encoded) for signing the Sonatype publication. |
-| working-directory       | string | false    | `"."`         | Working directory of your Gradle artifacts. (Default is .)      |
+| INPUT                       | TYPE   | REQUIRED | DEFAULT                                                                                                 | DESCRIPTION                                                                                                                                                         |
+| --------------------------- | ------ | -------- | ------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| gradle-cache                | string | false    | `"true"`                                                                                                | Whether Gradle caching is enabled or not. (Default is true)                                                                                                         |
+| gradle-cache-read-only      | string | false    | `"${{ github.event.repository != null && github.ref_name != github.event.repository.default_branch }}"` | Whether Gradle caching should be read-only. By default this value is 'false' for workflows on the GitHub default branch and 'true' for workflows on other branches. |
+| gradle-publish-key          | string | true     |                                                                                                         | Key for publishing to Gradle Plugin Portal.                                                                                                                         |
+| gradle-publish-secret       | string | true     |                                                                                                         | Secret for publishing to Gradle Plugin Portal.                                                                                                                      |
+| gradle-refresh-dependencies | string | false    | `"false"`                                                                                               | Whether Gradle should refresh dependencies. (Default is false)                                                                                                      |
+| gradle-version              | string | false    | `"wrapper"`                                                                                             | Gradle version to be installed. (Default is wrapper)                                                                                                                |
+| java-distribution           | string | false    | `"microsoft"`                                                                                           | Java distribution to be installed. (Default is microsoft)                                                                                                           |
+| java-version                | string | false    | `"11"`                                                                                                  | Java version to be installed. (Default is 11)                                                                                                                       |
+| signing-key-id              | string | true     |                                                                                                         | Key id for signing the Sonatype publication.                                                                                                                        |
+| signing-password            | string | true     |                                                                                                         | Password for signing the Sonatype publication.                                                                                                                      |
+| signing-secret-key-ring     | string | true     |                                                                                                         | Key ring (base64 encoded) for signing the Sonatype publication.                                                                                                     |
+| working-directory           | string | false    | `"."`                                                                                                   | Working directory of your Gradle artifacts. (Default is .)                                                                                                          |
 
 <!-- AUTO-DOC-INPUT:END -->
 
diff --git a/docs/actions/java-gradle-publish/README.md b/docs/actions/java-gradle-publish/README.md
index ce70c407a..4260ba35e 100644
--- a/docs/actions/java-gradle-publish/README.md
+++ b/docs/actions/java-gradle-publish/README.md
@@ -26,18 +26,20 @@ steps:
 
 <!-- AUTO-DOC-INPUT:START - Do not remove or modify this section -->
 
-| INPUT                   | TYPE   | REQUIRED | DEFAULT       | DESCRIPTION                                                     |
-| ----------------------- | ------ | -------- | ------------- | --------------------------------------------------------------- |
-| gradle-cache            | string | false    | `"true"`      | Whether Gradle caching is enabled or not. (Default is true)     |
-| gradle-version          | string | false    | `"wrapper"`   | Gradle version to be installed. (Default is wrapper)            |
-| java-distribution       | string | false    | `"microsoft"` | Java distribution to be installed. (Default is microsoft)       |
-| java-version            | string | false    | `"11"`        | Java version to be installed. (Default is 11)                   |
-| ossrh-password          | string | true     |               | Password for signing into Sonatype repository.                  |
-| ossrh-username          | string | true     |               | Username for signing into Sonatype repository.                  |
-| signing-key-id          | string | true     |               | Key id for signing the Sonatype publication.                    |
-| signing-password        | string | true     |               | Password for signing the Sonatype publication.                  |
-| signing-secret-key-ring | string | true     |               | Key ring (base64 encoded) for signing the Sonatype publication. |
-| working-directory       | string | false    | `"."`         | Working directory of your Gradle artifacts. (Default is .)      |
+| INPUT                       | TYPE   | REQUIRED | DEFAULT                                                                                                 | DESCRIPTION                                                                                                                                                         |
+| --------------------------- | ------ | -------- | ------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| gradle-cache                | string | false    | `"true"`                                                                                                | Whether Gradle caching is enabled or not. (Default is true)                                                                                                         |
+| gradle-cache-read-only      | string | false    | `"${{ github.event.repository != null && github.ref_name != github.event.repository.default_branch }}"` | Whether Gradle caching should be read-only. By default this value is 'false' for workflows on the GitHub default branch and 'true' for workflows on other branches. |
+| gradle-refresh-dependencies | string | false    | `"false"`                                                                                               | Whether Gradle should refresh dependencies. (Default is false)                                                                                                      |
+| gradle-version              | string | false    | `"wrapper"`                                                                                             | Gradle version to be installed. (Default is wrapper)                                                                                                                |
+| java-distribution           | string | false    | `"microsoft"`                                                                                           | Java distribution to be installed. (Default is microsoft)                                                                                                           |
+| java-version                | string | false    | `"11"`                                                                                                  | Java version to be installed. (Default is 11)                                                                                                                       |
+| ossrh-password              | string | true     |                                                                                                         | Password for signing into Sonatype repository.                                                                                                                      |
+| ossrh-username              | string | true     |                                                                                                         | Username for signing into Sonatype repository.                                                                                                                      |
+| signing-key-id              | string | true     |                                                                                                         | Key id for signing the Sonatype publication.                                                                                                                        |
+| signing-password            | string | true     |                                                                                                         | Password for signing the Sonatype publication.                                                                                                                      |
+| signing-secret-key-ring     | string | true     |                                                                                                         | Key ring (base64 encoded) for signing the Sonatype publication.                                                                                                     |
+| working-directory           | string | false    | `"."`                                                                                                   | Working directory of your Gradle artifacts. (Default is .)                                                                                                          |
 
 <!-- AUTO-DOC-INPUT:END -->
 
diff --git a/docs/actions/java-gradle-release-github/README.md b/docs/actions/java-gradle-release-github/README.md
index bc5997810..2461ada48 100644
--- a/docs/actions/java-gradle-release-github/README.md
+++ b/docs/actions/java-gradle-release-github/README.md
@@ -23,16 +23,10 @@ steps:
 
 <!-- AUTO-DOC-INPUT:START - Do not remove or modify this section -->
 
-| INPUT             | TYPE   | REQUIRED | DEFAULT          | DESCRIPTION                                                 |
-| ----------------- | ------ | -------- | ---------------- | ----------------------------------------------------------- |
-| changelog-file    | string | false    | `"CHANGELOG.md"` | Path to the changelog file in the GitHub repository         |
-| github-token      | string | true     |                  | GitHub token for requesting changes from API.               |
-| github-username   | string | true     |                  | GitHub username for requesting changes from API.            |
-| gradle-cache      | string | false    | `"true"`         | Whether Gradle caching is enabled or not. (Default is true) |
-| gradle-version    | string | false    | `"wrapper"`      | Gradle version to be installed. (Default is wrapper)        |
-| java-distribution | string | false    | `"microsoft"`    | Java distribution to be installed. (Default is microsoft)   |
-| java-version      | string | false    | `"11"`           | Java version to be installed. (Default is 11)               |
-| working-directory | string | false    | `"."`            | Working directory of your Gradle artifacts. (Default is .)  |
+| INPUT          | TYPE   | REQUIRED | DEFAULT          | DESCRIPTION                                         |
+| -------------- | ------ | -------- | ---------------- | --------------------------------------------------- |
+| changelog-file | string | false    | `"CHANGELOG.md"` | Path to the changelog file in the GitHub repository |
+| github-token   | string | true     |                  | GitHub token for requesting changes from API.       |
 
 <!-- AUTO-DOC-INPUT:END -->
 
diff --git a/docs/actions/java-gradle-release/README.md b/docs/actions/java-gradle-release/README.md
index 34a37afbb..4882b46a5 100644
--- a/docs/actions/java-gradle-release/README.md
+++ b/docs/actions/java-gradle-release/README.md
@@ -26,18 +26,20 @@ steps:
 
 <!-- AUTO-DOC-INPUT:START - Do not remove or modify this section -->
 
-| INPUT             | TYPE   | REQUIRED | DEFAULT          | DESCRIPTION                                                 |
-| ----------------- | ------ | -------- | ---------------- | ----------------------------------------------------------- |
-| changelog-file    | string | false    | `"CHANGELOG.md"` | Path to the changelog file in the GitHub repository         |
-| github-email      | string | true     |                  | GitHub email for requesting changes from API.               |
-| github-token      | string | true     |                  | GitHub token for requesting changes from API.               |
-| github-username   | string | true     |                  | GitHub username for requesting changes from API.            |
-| gradle-cache      | string | false    | `"true"`         | Whether Gradle caching is enabled or not. (Default is true) |
-| gradle-version    | string | false    | `"wrapper"`      | Gradle version to be installed. (Default is wrapper)        |
-| java-distribution | string | false    | `"microsoft"`    | Java distribution to be installed. (Default is microsoft)   |
-| java-version      | string | false    | `"11"`           | Java version to be installed. (Default is 11)               |
-| release-type      | string | true     |                  | Scope of the release                                        |
-| working-directory | string | false    | `"."`            | Working directory of your Gradle artifacts. (Default is .)  |
+| INPUT                       | TYPE   | REQUIRED | DEFAULT                                                                                                 | DESCRIPTION                                                                                                                                                         |
+| --------------------------- | ------ | -------- | ------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| changelog-file              | string | false    | `"CHANGELOG.md"`                                                                                        | Path to the changelog file in the GitHub repository                                                                                                                 |
+| github-email                | string | true     |                                                                                                         | GitHub email for requesting changes from API.                                                                                                                       |
+| github-token                | string | true     |                                                                                                         | GitHub token for requesting changes from API.                                                                                                                       |
+| github-username             | string | true     |                                                                                                         | GitHub username for requesting changes from API.                                                                                                                    |
+| gradle-cache                | string | false    | `"true"`                                                                                                | Whether Gradle caching is enabled or not. (Default is true)                                                                                                         |
+| gradle-cache-read-only      | string | false    | `"${{ github.event.repository != null && github.ref_name != github.event.repository.default_branch }}"` | Whether Gradle caching should be read-only. By default this value is 'false' for workflows on the GitHub default branch and 'true' for workflows on other branches. |
+| gradle-refresh-dependencies | string | false    | `"false"`                                                                                               | Whether Gradle should refresh dependencies. (Default is false)                                                                                                      |
+| gradle-version              | string | false    | `"wrapper"`                                                                                             | Gradle version to be installed. (Default is wrapper)                                                                                                                |
+| java-distribution           | string | false    | `"microsoft"`                                                                                           | Java distribution to be installed. (Default is microsoft)                                                                                                           |
+| java-version                | string | false    | `"11"`                                                                                                  | Java version to be installed. (Default is 11)                                                                                                                       |
+| release-type                | string | true     |                                                                                                         | Scope of the release                                                                                                                                                |
+| working-directory           | string | false    | `"."`                                                                                                   | Working directory of your Gradle artifacts. (Default is .)                                                                                                          |
 
 <!-- AUTO-DOC-INPUT:END -->
 
diff --git a/docs/actions/java-gradle-setup/README.md b/docs/actions/java-gradle-setup/README.md
index 840b5f63e..02613b65a 100644
--- a/docs/actions/java-gradle-setup/README.md
+++ b/docs/actions/java-gradle-setup/README.md
@@ -20,12 +20,13 @@ steps:
 
 <!-- AUTO-DOC-INPUT:START - Do not remove or modify this section -->
 
-| INPUT             | TYPE   | REQUIRED | DEFAULT       | DESCRIPTION                                                 |
-| ----------------- | ------ | -------- | ------------- | ----------------------------------------------------------- |
-| gradle-cache      | string | false    | `"true"`      | Whether Gradle caching is enabled or not. (Default is true) |
-| gradle-version    | string | false    | `"wrapper"`   | Gradle version to be installed. (Default is wrapper)        |
-| java-distribution | string | false    | `"microsoft"` | Java distribution to be installed. (Default is microsoft)   |
-| java-version      | string | false    | `"11"`        | Java version to be installed. (Default is 11)               |
+| INPUT                  | TYPE   | REQUIRED | DEFAULT                                                                                                 | DESCRIPTION                                                                                                                                                         |
+| ---------------------- | ------ | -------- | ------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| gradle-cache           | string | false    | `"true"`                                                                                                | Whether Gradle caching is enabled or not. (Default is true)                                                                                                         |
+| gradle-cache-read-only | string | false    | `"${{ github.event.repository != null && github.ref_name != github.event.repository.default_branch }}"` | Whether Gradle caching should be read-only. By default this value is 'false' for workflows on the GitHub default branch and 'true' for workflows on other branches. |
+| gradle-version         | string | false    | `"wrapper"`                                                                                             | Gradle version to be installed. (Default is wrapper)                                                                                                                |
+| java-distribution      | string | false    | `"microsoft"`                                                                                           | Java distribution to be installed. (Default is microsoft)                                                                                                           |
+| java-version           | string | false    | `"11"`                                                                                                  | Java version to be installed. (Default is 11)                                                                                                                       |
 
 <!-- AUTO-DOC-INPUT:END -->
 
diff --git a/docs/actions/java-gradle-test/README.md b/docs/actions/java-gradle-test/README.md
index 03754b565..95ab5c6a1 100644
--- a/docs/actions/java-gradle-test/README.md
+++ b/docs/actions/java-gradle-test/README.md
@@ -21,14 +21,16 @@ steps:
 
 <!-- AUTO-DOC-INPUT:START - Do not remove or modify this section -->
 
-| INPUT              | TYPE   | REQUIRED | DEFAULT       | DESCRIPTION                                                                         |
-| ------------------ | ------ | -------- | ------------- | ----------------------------------------------------------------------------------- |
-| download-lfs-files | string | false    | `"false"`     | Whether the Git checkout action should resolve LFS files or not. (Default is false) |
-| gradle-cache       | string | false    | `"true"`      | Whether Gradle caching is enabled or not. (Default is true)                         |
-| gradle-version     | string | false    | `"wrapper"`   | Gradle version to be installed. (Default is wrapper)                                |
-| java-distribution  | string | false    | `"microsoft"` | Java distribution to be installed. (Default is microsoft)                           |
-| java-version       | string | false    | `"11"`        | Java version to be installed. (Default is 11)                                       |
-| working-directory  | string | false    | `"."`         | Working directory of your Gradle artifacts. (Default is .)                          |
+| INPUT                       | TYPE   | REQUIRED | DEFAULT                                                                                                 | DESCRIPTION                                                                                                                                                         |
+| --------------------------- | ------ | -------- | ------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| download-lfs-files          | string | false    | `"false"`                                                                                               | Whether the Git checkout action should resolve LFS files or not. (Default is false)                                                                                 |
+| gradle-cache                | string | false    | `"true"`                                                                                                | Whether Gradle caching is enabled or not. (Default is true)                                                                                                         |
+| gradle-cache-read-only      | string | false    | `"${{ github.event.repository != null && github.ref_name != github.event.repository.default_branch }}"` | Whether Gradle caching should be read-only. By default this value is 'false' for workflows on the GitHub default branch and 'true' for workflows on other branches. |
+| gradle-refresh-dependencies | string | false    | `"false"`                                                                                               | Whether Gradle should refresh dependencies. (Default is false)                                                                                                      |
+| gradle-version              | string | false    | `"wrapper"`                                                                                             | Gradle version to be installed. (Default is wrapper)                                                                                                                |
+| java-distribution           | string | false    | `"microsoft"`                                                                                           | Java distribution to be installed. (Default is microsoft)                                                                                                           |
+| java-version                | string | false    | `"11"`                                                                                                  | Java version to be installed. (Default is 11)                                                                                                                       |
+| working-directory           | string | false    | `"."`                                                                                                   | Working directory of your Gradle artifacts. (Default is .)                                                                                                          |
 
 <!-- AUTO-DOC-INPUT:END -->
 
diff --git a/docs/workflows/java-gradle-base/README.md b/docs/workflows/java-gradle-base/README.md
index b9aaec990..9349d0381 100644
--- a/docs/workflows/java-gradle-base/README.md
+++ b/docs/workflows/java-gradle-base/README.md
@@ -48,14 +48,16 @@ jobs:
 
 <!-- AUTO-DOC-INPUT:START - Do not remove or modify this section -->
 
-| INPUT              | TYPE    | REQUIRED | DEFAULT       | DESCRIPTION                                                                         |
-| ------------------ | ------- | -------- | ------------- | ----------------------------------------------------------------------------------- |
-| download-lfs-files | boolean | false    | `false`       | Whether the Git checkout action should resolve LFS files or not. (Default is false) |
-| gradle-cache       | boolean | false    | `true`        | Whether Gradle caching is enabled or not. (Default is true)                         |
-| gradle-version     | string  | false    | `"wrapper"`   | Gradle version to be installed. (Default is wrapper)                                |
-| java-distribution  | string  | false    | `"microsoft"` | Java distribution to be installed. (Default is microsoft)                           |
-| java-version       | string  | false    | `"11"`        | Java version to be installed. (Default is 11)                                       |
-| working-directory  | string  | false    | `"."`         | Working directory of your Gradle artifacts. (Default is .)                          |
+| INPUT                       | TYPE    | REQUIRED | DEFAULT       | DESCRIPTION                                                                                       |
+| --------------------------- | ------- | -------- | ------------- | ------------------------------------------------------------------------------------------------- |
+| download-lfs-files          | boolean | false    | `false`       | Whether the Git checkout action should resolve LFS files or not. (Default is false)               |
+| gradle-cache                | boolean | false    | `true`        | Whether Gradle caching is enabled or not. (Default is true)                                       |
+| gradle-cache-read-only      | boolean | false    | `false`       | Whether Gradle caching should be read-only. Only used for build and test jobs. (Default is false) |
+| gradle-refresh-dependencies | boolean | false    | `false`       | Whether Gradle should refresh dependencies. (Default is false)                                    |
+| gradle-version              | string  | false    | `"wrapper"`   | Gradle version to be installed. (Default is wrapper)                                              |
+| java-distribution           | string  | false    | `"microsoft"` | Java distribution to be installed. (Default is microsoft)                                         |
+| java-version                | string  | false    | `"11"`        | Java version to be installed. (Default is 11)                                                     |
+| working-directory           | string  | false    | `"."`         | Working directory of your Gradle artifacts. (Default is .)                                        |
 
 <!-- AUTO-DOC-INPUT:END -->
 
diff --git a/docs/workflows/java-gradle-docker/README.md b/docs/workflows/java-gradle-docker/README.md
index e0931fd9c..037d08b31 100644
--- a/docs/workflows/java-gradle-docker/README.md
+++ b/docs/workflows/java-gradle-docker/README.md
@@ -58,14 +58,16 @@ jobs:
 
 <!-- AUTO-DOC-INPUT:START - Do not remove or modify this section -->
 
-| INPUT             | TYPE    | REQUIRED | DEFAULT       | DESCRIPTION                                                 |
-| ----------------- | ------- | -------- | ------------- | ----------------------------------------------------------- |
-| docker-publisher  | string  | true     |               | Publisher to prefix Docker image.                           |
-| gradle-cache      | boolean | false    | `true`        | Whether Gradle caching is enabled or not. (Default is true) |
-| gradle-version    | string  | false    | `"wrapper"`   | Gradle version to be installed. (Default is wrapper)        |
-| java-distribution | string  | false    | `"microsoft"` | Java distribution to be installed. (Default is microsoft)   |
-| java-version      | string  | false    | `"11"`        | Java version to be installed. (Default is 11)               |
-| working-directory | string  | false    | `"."`         | Working directory of your Gradle artifacts. (Default is .)  |
+| INPUT                       | TYPE    | REQUIRED | DEFAULT       | DESCRIPTION                                                                                       |
+| --------------------------- | ------- | -------- | ------------- | ------------------------------------------------------------------------------------------------- |
+| docker-publisher            | string  | true     |               | Publisher to prefix Docker image.                                                                 |
+| gradle-cache                | boolean | false    | `true`        | Whether Gradle caching is enabled or not. (Default is true)                                       |
+| gradle-cache-read-only      | boolean | false    | `false`       | Whether Gradle caching should be read-only. Only used for build and test jobs. (Default is false) |
+| gradle-refresh-dependencies | boolean | false    | `false`       | Whether Gradle should refresh dependencies. (Default is false)                                    |
+| gradle-version              | string  | false    | `"wrapper"`   | Gradle version to be installed. (Default is wrapper)                                              |
+| java-distribution           | string  | false    | `"microsoft"` | Java distribution to be installed. (Default is microsoft)                                         |
+| java-version                | string  | false    | `"11"`        | Java version to be installed. (Default is 11)                                                     |
+| working-directory           | string  | false    | `"."`         | Working directory of your Gradle artifacts. (Default is .)                                        |
 
 <!-- AUTO-DOC-INPUT:END -->
 
diff --git a/docs/workflows/java-gradle-library/README.md b/docs/workflows/java-gradle-library/README.md
index 1174eccac..018d28a83 100644
--- a/docs/workflows/java-gradle-library/README.md
+++ b/docs/workflows/java-gradle-library/README.md
@@ -53,13 +53,15 @@ jobs:
 
 <!-- AUTO-DOC-INPUT:START - Do not remove or modify this section -->
 
-| INPUT             | TYPE    | REQUIRED | DEFAULT       | DESCRIPTION                                                 |
-| ----------------- | ------- | -------- | ------------- | ----------------------------------------------------------- |
-| gradle-cache      | boolean | false    | `true`        | Whether Gradle caching is enabled or not. (Default is true) |
-| gradle-version    | string  | false    | `"wrapper"`   | Gradle version to be installed. (Default is wrapper)        |
-| java-distribution | string  | false    | `"microsoft"` | Java distribution to be installed. (Default is microsoft)   |
-| java-version      | string  | false    | `"11"`        | Java version to be installed. (Default is 11)               |
-| working-directory | string  | false    | `"."`         | Working directory of your Gradle artifacts. (Default is .)  |
+| INPUT                       | TYPE    | REQUIRED | DEFAULT       | DESCRIPTION                                                                                       |
+| --------------------------- | ------- | -------- | ------------- | ------------------------------------------------------------------------------------------------- |
+| gradle-cache                | boolean | false    | `true`        | Whether Gradle caching is enabled or not. (Default is true)                                       |
+| gradle-cache-read-only      | boolean | false    | `false`       | Whether Gradle caching should be read-only. Only used for build and test jobs. (Default is false) |
+| gradle-refresh-dependencies | boolean | false    | `false`       | Whether Gradle should refresh dependencies. (Default is false)                                    |
+| gradle-version              | string  | false    | `"wrapper"`   | Gradle version to be installed. (Default is wrapper)                                              |
+| java-distribution           | string  | false    | `"microsoft"` | Java distribution to be installed. (Default is microsoft)                                         |
+| java-version                | string  | false    | `"11"`        | Java version to be installed. (Default is 11)                                                     |
+| working-directory           | string  | false    | `"."`         | Working directory of your Gradle artifacts. (Default is .)                                        |
 
 <!-- AUTO-DOC-INPUT:END -->
 
diff --git a/docs/workflows/java-gradle-plugin/README.md b/docs/workflows/java-gradle-plugin/README.md
index cab0ac399..58ed64107 100644
--- a/docs/workflows/java-gradle-plugin/README.md
+++ b/docs/workflows/java-gradle-plugin/README.md
@@ -57,13 +57,15 @@ jobs:
 
 <!-- AUTO-DOC-INPUT:START - Do not remove or modify this section -->
 
-| INPUT             | TYPE    | REQUIRED | DEFAULT       | DESCRIPTION                                                 |
-| ----------------- | ------- | -------- | ------------- | ----------------------------------------------------------- |
-| gradle-cache      | boolean | false    | `true`        | Whether Gradle caching is enabled or not. (Default is true) |
-| gradle-version    | string  | false    | `"wrapper"`   | Gradle version to be installed. (Default is wrapper)        |
-| java-distribution | string  | false    | `"microsoft"` | Java distribution to be installed. (Default is microsoft)   |
-| java-version      | string  | false    | `"11"`        | Java version to be installed. (Default is 11)               |
-| working-directory | string  | false    | `"."`         | Working directory of your Gradle artifacts. (Default is .)  |
+| INPUT                       | TYPE    | REQUIRED | DEFAULT       | DESCRIPTION                                                                                       |
+| --------------------------- | ------- | -------- | ------------- | ------------------------------------------------------------------------------------------------- |
+| gradle-cache                | boolean | false    | `true`        | Whether Gradle caching is enabled or not. (Default is true)                                       |
+| gradle-cache-read-only      | boolean | false    | `false`       | Whether Gradle caching should be read-only. Only used for build and test jobs. (Default is false) |
+| gradle-refresh-dependencies | boolean | false    | `false`       | Whether Gradle should refresh dependencies. (Default is false)                                    |
+| gradle-version              | string  | false    | `"wrapper"`   | Gradle version to be installed. (Default is wrapper)                                              |
+| java-distribution           | string  | false    | `"microsoft"` | Java distribution to be installed. (Default is microsoft)                                         |
+| java-version                | string  | false    | `"11"`        | Java version to be installed. (Default is 11)                                                     |
+| working-directory           | string  | false    | `"."`         | Working directory of your Gradle artifacts. (Default is .)                                        |
 
 <!-- AUTO-DOC-INPUT:END -->