From 3fc72ef626c38caa78fe5429bc9350e92199117b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 1 Jul 2026 02:33:57 +0000 Subject: [PATCH] Bump the actions-deps group across 1 directory with 6 updates Bumps the actions-deps group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [lfreleng-actions/github2gerrit-action](https://github.com/lfreleng-actions/github2gerrit-action) | `1.2.4` | `1.3.3` | | [actions/checkout](https://github.com/actions/checkout) | `6.0.3` | `7.0.0` | | [actions/setup-java](https://github.com/actions/setup-java) | `5.3.0` | `5.4.0` | | [lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml](https://github.com/lfit/releng-reusable-workflows) | `0.6.0` | `0.7.2` | | [lfit/gerrit-review-action](https://github.com/lfit/gerrit-review-action) | `1.1.1` | `1.1.2` | | [im-open/workflow-conclusion](https://github.com/im-open/workflow-conclusion) | `2.2.5` | `3.0.0` | Updates `lfreleng-actions/github2gerrit-action` from 1.2.4 to 1.3.3 - [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases) - [Changelog](https://github.com/lfreleng-actions/github2gerrit-action/blob/main/docs/RELEASE-v0.2.0.md) - [Commits](https://github.com/lfreleng-actions/github2gerrit-action/compare/806c001f17c98cd22176c805a721260b6985963f...f44c168376b369be0f306b6bdc07c80f67cceb05) Updates `actions/checkout` from 6.0.3 to 7.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0) Updates `actions/setup-java` from 5.3.0 to 5.4.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/ad2b38190b15e4d6bdf0c97fb4fca8412226d287...1bcf9fb12cf4aa7d266a90ae39939e61372fe520) Updates `lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml` from 0.6.0 to 0.7.2 - [Release notes](https://github.com/lfit/releng-reusable-workflows/releases) - [Commits](https://github.com/lfit/releng-reusable-workflows/compare/f43b219b8a91dcd082f26419008c8bf5544ec212...fd3c1b43bc919e9e70787b009ffa2768ddbb1267) Updates `lfit/gerrit-review-action` from 1.1.1 to 1.1.2 - [Release notes](https://github.com/lfit/gerrit-review-action/releases) - [Commits](https://github.com/lfit/gerrit-review-action/compare/a5de1d5bf17c2603ae81544dc2a455017b454ec8...a1c036a59b94c8ab89de26d378f6a28cc7378b13) Updates `im-open/workflow-conclusion` from 2.2.5 to 3.0.0 - [Commits](https://github.com/im-open/workflow-conclusion/compare/7b146947e59eaf7fc3328822357861ab1758c088...8eac7f17381a6917bc04fec3e2c92e70ebc37526) --- updated-dependencies: - dependency-name: lfreleng-actions/github2gerrit-action dependency-version: 1.3.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: actions/setup-java dependency-version: 5.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml dependency-version: 0.7.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: lfit/gerrit-review-action dependency-version: 1.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: im-open/workflow-conclusion dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps ... Signed-off-by: dependabot[bot] --- .github/workflows/call-github2gerrit.yaml | 2 +- .github/workflows/clm-scan.yaml | 4 ++-- .github/workflows/gerrit-sonar.yaml | 2 +- .github/workflows/gerrit-verify.yaml | 6 +++--- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/call-github2gerrit.yaml b/.github/workflows/call-github2gerrit.yaml index 2f9a6bbe20..84eb29a35f 100644 --- a/.github/workflows/call-github2gerrit.yaml +++ b/.github/workflows/call-github2gerrit.yaml @@ -32,7 +32,7 @@ jobs: steps: - name: Convert GitHub PR to Gerrit Change - uses: lfreleng-actions/github2gerrit-action@806c001f17c98cd22176c805a721260b6985963f # v1.2.4 + uses: lfreleng-actions/github2gerrit-action@f44c168376b369be0f306b6bdc07c80f67cceb05 # v1.3.3 with: GERRIT_SSH_PRIVKEY_G2G: ${{ secrets.GERRIT_SSH_PRIVKEY_G2G }} GERRIT_KNOWN_HOSTS: ${{ vars.GERRIT_KNOWN_HOSTS }} diff --git a/.github/workflows/clm-scan.yaml b/.github/workflows/clm-scan.yaml index d7153f359d..cdd5ab8bf7 100644 --- a/.github/workflows/clm-scan.yaml +++ b/.github/workflows/clm-scan.yaml @@ -27,13 +27,13 @@ jobs: steps: - name: Checkout repository # yamllint disable-line rule:line-length - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: fetch-depth: 0 - name: Setup Java # yamllint disable-line rule:line-length - uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0 + uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0 with: distribution: "temurin" java-version: "21" diff --git a/.github/workflows/gerrit-sonar.yaml b/.github/workflows/gerrit-sonar.yaml index 0d4e2bc951..2d3ad7ad77 100644 --- a/.github/workflows/gerrit-sonar.yaml +++ b/.github/workflows/gerrit-sonar.yaml @@ -56,7 +56,7 @@ concurrency: jobs: sonar-scan: # yamllint disable-line rule:line-length - uses: lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml@f43b219b8a91dcd082f26419008c8bf5544ec212 # v0.6.0 + uses: lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml@fd3c1b43bc919e9e70787b009ffa2768ddbb1267 # v0.7.2 with: GERRIT_BRANCH: ${{ inputs.GERRIT_BRANCH || 'master' }} GERRIT_CHANGE_ID: ${{ inputs.GERRIT_CHANGE_ID || '' }} diff --git a/.github/workflows/gerrit-verify.yaml b/.github/workflows/gerrit-verify.yaml index 277ea1dc5e..49f88a29c7 100644 --- a/.github/workflows/gerrit-verify.yaml +++ b/.github/workflows/gerrit-verify.yaml @@ -56,7 +56,7 @@ jobs: steps: - name: Clear votes # yamllint disable-line rule:line-length - uses: lfit/gerrit-review-action@a5de1d5bf17c2603ae81544dc2a455017b454ec8 # v1.1.1 + uses: lfit/gerrit-review-action@a1c036a59b94c8ab89de26d378f6a28cc7378b13 # v1.1.2 with: host: ${{ vars.GERRIT_SERVER }} username: ${{ vars.GERRIT_SSH_USER }} @@ -134,10 +134,10 @@ jobs: steps: - name: Get conclusion # yamllint disable-line rule:line-length - uses: im-open/workflow-conclusion@7b146947e59eaf7fc3328822357861ab1758c088 # v2.2.5 + uses: im-open/workflow-conclusion@8eac7f17381a6917bc04fec3e2c92e70ebc37526 # v3.0.0 - name: Set vote # yamllint disable-line rule:line-length - uses: lfit/gerrit-review-action@a5de1d5bf17c2603ae81544dc2a455017b454ec8 # v1.1.1 + uses: lfit/gerrit-review-action@a1c036a59b94c8ab89de26d378f6a28cc7378b13 # v1.1.2 with: host: ${{ vars.GERRIT_SERVER }} username: ${{ vars.GERRIT_SSH_USER }}