From 08d4a2479b9cae4b34c21d27e85561ff50bf13bb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 2 Aug 2026 23:45:05 +0000 Subject: [PATCH] chore(deps): bump the actions group across 1 directory with 2 updates Bumps the actions group with 2 updates in the / directory: [actions/setup-java](https://github.com/actions/setup-java) and [ossf/scorecard-action](https://github.com/ossf/scorecard-action). Updates `actions/setup-java` from 5 to 5.6.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/v5...v5.6.0) Updates `ossf/scorecard-action` from 2.4.3 to 2.4.4 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/v2.4.3...v2.4.4) --- updated-dependencies: - dependency-name: actions/setup-java dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: ossf/scorecard-action dependency-version: 2.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- .github/workflows/codeql.yml | 2 +- .github/workflows/scorecard.yml | 2 +- .github/workflows/security.yml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 952a9cf..0935096 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -22,7 +22,7 @@ jobs: uses: actions/checkout@v7 - name: Set up Java 21 - uses: actions/setup-java@v5 + uses: actions/setup-java@v5.6.0 with: distribution: temurin java-version: "21" diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index ede4fa2..58308c8 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -33,7 +33,7 @@ jobs: - name: Set up Java 21 if: matrix.language == 'java-kotlin' - uses: actions/setup-java@v5 + uses: actions/setup-java@v5.6.0 with: distribution: temurin java-version: "21" diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index c601727..f2e731a 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -30,7 +30,7 @@ jobs: run: mkdir -p security-reports - name: Run OpenSSF Scorecard - uses: ossf/scorecard-action@v2.4.3 + uses: ossf/scorecard-action@v2.4.4 with: results_file: security-reports/scorecard.sarif results_format: sarif diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 36eb740..7f317b4 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -119,7 +119,7 @@ jobs: uses: actions/checkout@v7 - name: Set up Java 21 - uses: actions/setup-java@v5 + uses: actions/setup-java@v5.6.0 with: distribution: temurin java-version: "21"