build(deps): bump the minor-and-patch group across 1 directory with 2 updates#4906
Closed
dependabot[bot] wants to merge 1 commit into
Closed
build(deps): bump the minor-and-patch group across 1 directory with 2 updates#4906dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
Dependencies
DeepDiver1975
left a comment
DeepDiver1975
left a comment
Member
There was a problem hiding this comment.
Reviewed as maintainer.
Scope: Grouped minor-and-patch Dependabot bump of two GitHub Actions, touching only .github/workflows/*.yml (no application/Kotlin code, no Gradle build files or version catalog):
actions/setup-java5.2.0 → 5.4.0 (minor)gradle/actions/setup-gradle6.1.0 → 6.2.0 (minor)
Verification:
- Both bumps are minor — no hidden major version. Confirmed from the PR body release notes.
- Actions are pinned by commit SHA with version comments updated consistently across all six workflow files (instrumented-data-tests, unit-tests, build-apk, detekt, gradle-wrapper-validation, sbom).
- setup-gradle 6.2.0 notes include a ReDoS fix and a fast-xml CVE fix in bundled deps — a net security improvement for CI.
- CI is green: Unit Tests, Instrumented Data Tests, Detekt, Validate strings, Gradle Wrapper validation, Conventional Commits, and CLA all pass. CodeQL is NEUTRAL (no findings).
mergeStateStatus: BLOCKEDreflects branch-protection requiring a review/approval, not a check failure;mergeable: MERGEABLE(no conflicts).
Changelog: n/a — CI action version bumps are not user-facing and require no changelog entry.
LGTM — low-risk, well-scoped CI maintenance.
🤖 Generated with Claude Code
Member
|
@dependabot rebase |
… updates Bumps the minor-and-patch group with 2 updates in the / directory: [actions/setup-java](https://github.com/actions/setup-java) and [gradle/actions/setup-gradle](https://github.com/gradle/actions). Updates `actions/setup-java` from 5.2.0 to 5.4.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@be666c2...1bcf9fb) Updates `gradle/actions/setup-gradle` from 6.1.0 to 6.2.0 - [Release notes](https://github.com/gradle/actions/releases) - [Commits](gradle/actions@50e97c2...3f131e8) --- updated-dependencies: - dependency-name: actions/setup-java dependency-version: 5.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: gradle/actions/setup-gradle dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/minor-and-patch-f18e6d861a
branch
from
b3217d6 to
46ed757
Compare
jesmrec
approved these changes
Jul 3, 2026
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/github_actions/minor-and-patch-f18e6d861a
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the minor-and-patch group with 2 updates in the / directory: actions/setup-java and gradle/actions/setup-gradle.
Updates
actions/setup-javafrom 5.2.0 to 5.4.0Release notes
Sourced from actions/setup-java's releases.
... (truncated)
Commits
1bcf9fbdist: Address Copilot review suggestions from PR #1042 (GraalVM Community) (#...fa2c650docs: note jdkfile approach for Early Access / unreleased JDK builds (#1058)1d56e31dist: Add GraalVM Community distribution support (#1042)1d25252chore: Harden workflows: least-privilege permissions + zizmor integration (#1...668c1eadocs: add post-install keytool import for the JDK cacerts trust store (#1051)a9a46fbdocs: document self-signed certificate / internal CA handling for GitHub Ente...5431e71docs: add JavaFX Maven project configuration instructions (#1044)4baa9b4docs: replace non-existent HelloWorldApp references with java --version (#1043)eab4b08Bump@types/nodefrom 25.9.3 to 26.0.0 (#1031)bf0c0e6Bump actions/checkout from 6 to 7 (#1032)Updates
gradle/actions/setup-gradlefrom 6.1.0 to 6.2.0Release notes
Sourced from gradle/actions/setup-gradle's releases.
Commits
3f131e8[bot] Update dist directory97715a2Redesign the caching Job Summary (#985)8b6cdb5CI: add requireable aggregate/no-op checks for branch protection (#984)5852e0e[bot] Update dist directory318eed7Hide obsolete Job summaries (#902)a740661Improve typings (#938)7ae0d02Update gradle-actions-caching library to v0.6.0 (#982)e473973Scope CI-integ-test concurrency groups per-branch35a4a3fQueue up integ-test runsb6eebf3[bot] Update dist directory