Bump the actions-deps group with 3 updates#37
Conversation
Bumps the actions-deps group with 3 updates: [actions/setup-java](https://github.com/actions/setup-java), [lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml](https://github.com/lfit/releng-reusable-workflows) and [lfit/gerrit-review-action](https://github.com/lfit/gerrit-review-action). Updates `actions/setup-java` from 5.3.0 to 5.4.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@ad2b381...1bcf9fb) Updates `lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/lfit/releng-reusable-workflows/releases) - [Commits](lfit/releng-reusable-workflows@f43b219...f412e6f) Updates `lfit/gerrit-review-action` from 1.1.1 to 1.1.2 - [Release notes](https://github.com/lfit/gerrit-review-action/releases) - [Commits](lfreleng-actions/gerrit-review-action@a5de1d5...a1c036a) --- updated-dependencies: - dependency-name: actions/setup-java dependency-version: 5.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: lfit/gerrit-review-action dependency-version: 1.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps ... Signed-off-by: dependabot[bot] <support@github.com>
|
PR: #37 Note: This metadata is also included in the Gerrit commit message for reconciliation. |
|
Change raised in Gerrit by GitHub2Gerrit: https://git.opendaylight.org/gerrit/c/controller/+/123765 |
Bumps the actions-deps group with 3 updates: [actions/setup-java](https://github.com/actions/setup-java), [lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml](https://github.com/lfit/releng-reusable-workflows) and [lfit/gerrit-review-action](https://github.com/lfit/gerrit-review-action). Updates `actions/setup-java` from 5.3.0 to 5.4.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@ad2b381...1bcf9fb) Updates `lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/lfit/releng-reusable-workflows/releases) - [Commits](lfit/releng-reusable-workflows@f43b219...f412e6f) Updates `lfit/gerrit-review-action` from 1.1.1 to 1.1.2 - [Release notes](https://github.com/lfit/gerrit-review-action/releases) - [Commits](lfreleng-actions/gerrit-review-action@a5de1d5...a1c036a) Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I59e59391ac14f28e1e3fc00de24b879c6a0f8e29 GitHub-PR: #37 GitHub-Hash: c6e261703e86ad66 Signed-off-by: gh2gerrit <releng+odl-gh2gerrit@linuxfoundation.org>
|
Automated PR Closure This pull request has been automatically closed by GitHub2Gerrit. The corresponding Gerrit change has been accepted and merged ✅ The changes from this PR are now part of the main codebase in Gerrit. This is an automated action performed by the GitHub2Gerrit tool. |
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
Bumps the actions-deps group with 3 updates: actions/setup-java, lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml and lfit/gerrit-review-action.
Updates
actions/setup-javafrom 5.3.0 to 5.4.0Release notes
Sourced from actions/setup-java's releases.
Commits
1bcf9fbdist: Address Copilot review suggestions from PR #1042 (GraalVM Community) (#...fa2c650docs: note jdkfile approach for Early Access / unreleased JDK builds (#1058)1d56e31dist: Add GraalVM Community distribution support (#1042)1d25252chore: Harden workflows: least-privilege permissions + zizmor integration (#1...668c1eadocs: add post-install keytool import for the JDK cacerts trust store (#1051)a9a46fbdocs: document self-signed certificate / internal CA handling for GitHub Ente...5431e71docs: add JavaFX Maven project configuration instructions (#1044)4baa9b4docs: replace non-existent HelloWorldApp references with java --version (#1043)eab4b08Bump@types/nodefrom 25.9.3 to 26.0.0 (#1031)bf0c0e6Bump actions/checkout from 6 to 7 (#1032)Updates
lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yamlfrom 0.6.0 to 0.7.0Release notes
Sourced from lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml's releases.
... (truncated)
Commits
f412e6fMerge pull request #720 from modeseven-lfit/feat/change-isolation-verify-work...1166fedMerge pull request #723 from lfit/dependabot/github_actions/actions/cache-6.0.03fc98eeMerge pull request #721 from lfit/dependabot/github_actions/lfreleng-actions/...aba6169Merge pull request #722 from lfit/dependabot/github_actions/lfreleng-actions/...4ae5d81Merge pull request #726 from lfit/dependabot/github_actions/lfreleng-actions/...8d1c791Merge pull request #724 from lfit/dependabot/github_actions/lfreleng-actions/...5faf233Merge pull request #725 from lfit/dependabot/github_actions/lfreleng-actions/...33fa048Merge pull request #730 from lfit/dependabot/github_actions/lfreleng-actions/...8be9f51Merge pull request #728 from lfit/dependabot/github_actions/lfreleng-actions/...4da3597Merge pull request #729 from lfit/dependabot/github_actions/actions/setup-pyt...Updates
lfit/gerrit-review-actionfrom 1.1.1 to 1.1.2Release notes
Sourced from lfit/gerrit-review-action's releases.
Commits
a1c036aMerge pull request #116 from modeseven-lfreleng-actions/fix/zizmor-findings8c9161cFix: resolve Zizmor findings in vote step48d5d48Merge pull request #115 from lfreleng-actions/pre-commit-ci-update-config8cb9127Chore: pre-commit autoupdate3b85ad7Merge pull request #114 from lfreleng-actions/pre-commit-ci-update-configc9bd395Chore: pre-commit autoupdateebd4f19Merge pull request #113 from modeseven-lfreleng-actions/chore/add-security-md0c941e7Docs: Add SECURITY.md security policy46897b3Merge pull request #112 from modeseven-lfreleng-actions/dependabot-cooldownf95da9eCI(dependabot): Add 7-day update cooldownDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions