From 84ebf78681398b0b360e10ee30a76737205cc137 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 25 Oct 2026 19:51:28 +0000 Subject: [PATCH] CI(actions): Bump the actions-deps group with 5 updates Bumps the actions-deps group with 5 updates: | Package | From | To | | --- | --- | --- | | [lfreleng-actions/github2gerrit-action](https://github.com/lfreleng-actions/github2gerrit-action) | `1.0.8` | `2.4.4` | | [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.1` | | [actions/setup-java](https://github.com/actions/setup-java) | `5.2.0` | `6.1.0` | | [lfit/releng-reusable-workflows/.github/workflows/gerrit-required-info-yaml-verify.yaml](https://github.com/lfit/releng-reusable-workflows) | `0.2.28` | `0.10.4` | | [im-open/workflow-conclusion](https://github.com/im-open/workflow-conclusion) | `2.2.3` | `3.0.0` | Updates `lfreleng-actions/github2gerrit-action` from 1.0.8 to 2.4.4 - [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases) - [Commits](https://github.com/lfreleng-actions/github2gerrit-action/compare/de8477030c26a8020e9c95cd6312d5647392b347...bb821bec1b2846cd3ab51bac095495bcf9c9abc6) Updates `actions/checkout` from 6.0.2 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `actions/setup-java` from 5.2.0 to 6.1.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/be666c2fcd27ec809703dec50e508c2fdc7f6654...b843ebf9b913146b38da2eaa7aeddf76074ae1ad) Updates `lfit/releng-reusable-workflows/.github/workflows/gerrit-required-info-yaml-verify.yaml` from 0.2.28 to 0.10.4 - [Release notes](https://github.com/lfit/releng-reusable-workflows/releases) - [Commits](https://github.com/lfit/releng-reusable-workflows/compare/b4c8bfdea114d034bfa6ed2fe2c9775bc091d5ca...fb907909b12bbaf262de6b24fcafd181cabe6b24) Updates `im-open/workflow-conclusion` from 2.2.3 to 3.0.0 - [Commits](https://github.com/im-open/workflow-conclusion/compare/e4f7c4980600fbe0818173e30931d3550801b992...8eac7f17381a6917bc04fec3e2c92e70ebc37526) --- updated-dependencies: - dependency-name: lfreleng-actions/github2gerrit-action dependency-version: 2.4.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: actions/setup-java dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: lfit/releng-reusable-workflows/.github/workflows/gerrit-required-info-yaml-verify.yaml dependency-version: 0.10.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: im-open/workflow-conclusion dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps ... Signed-off-by: dependabot[bot] --- .github/workflows/call-github2gerrit.yaml | 2 +- .github/workflows/clm-scan.yaml | 4 ++-- .github/workflows/gerrit-verify.yaml | 4 ++-- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/call-github2gerrit.yaml b/.github/workflows/call-github2gerrit.yaml index a79d83aecfb..7827db97cd7 100644 --- a/.github/workflows/call-github2gerrit.yaml +++ b/.github/workflows/call-github2gerrit.yaml @@ -29,7 +29,7 @@ jobs: steps: - name: Convert GitHub PR to Gerrit Change # yamllint disable-line rule:line-length - uses: lfreleng-actions/github2gerrit-action@de8477030c26a8020e9c95cd6312d5647392b347 # v1.0.8 + uses: lfreleng-actions/github2gerrit-action@bb821bec1b2846cd3ab51bac095495bcf9c9abc6 # v2.4.4 with: GERRIT_SSH_PRIVKEY_G2G: ${{ secrets.GERRIT_SSH_PRIVKEY_G2G }} GERRIT_KNOWN_HOSTS: ${{ vars.GERRIT_KNOWN_HOSTS }} diff --git a/.github/workflows/clm-scan.yaml b/.github/workflows/clm-scan.yaml index ec06c3ea586..deb850047eb 100644 --- a/.github/workflows/clm-scan.yaml +++ b/.github/workflows/clm-scan.yaml @@ -27,13 +27,13 @@ jobs: steps: - name: Checkout repository # yamllint disable-line rule:line-length - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 - name: Setup Java # yamllint disable-line rule:line-length - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0 + uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 with: distribution: "temurin" java-version: "21" diff --git a/.github/workflows/gerrit-verify.yaml b/.github/workflows/gerrit-verify.yaml index cff46af084e..a8d1ecc3c13 100644 --- a/.github/workflows/gerrit-verify.yaml +++ b/.github/workflows/gerrit-verify.yaml @@ -127,7 +127,7 @@ jobs: info-yaml-verify: # yamllint disable-line rule:line-length - uses: lfit/releng-reusable-workflows/.github/workflows/gerrit-required-info-yaml-verify.yaml@b4c8bfdea114d034bfa6ed2fe2c9775bc091d5ca # v0.2.28 + uses: lfit/releng-reusable-workflows/.github/workflows/gerrit-required-info-yaml-verify.yaml@fb907909b12bbaf262de6b24fcafd181cabe6b24 # v0.10.4 with: GERRIT_BRANCH: ${{ inputs.GERRIT_BRANCH }} GERRIT_CHANGE_ID: ${{ inputs.GERRIT_CHANGE_ID }} @@ -150,7 +150,7 @@ jobs: steps: - name: Get conclusion # yamllint disable-line rule:line-length - uses: im-open/workflow-conclusion@e4f7c4980600fbe0818173e30931d3550801b992 # v2.2.3 + uses: im-open/workflow-conclusion@8eac7f17381a6917bc04fec3e2c92e70ebc37526 # v3.0.0 - name: Set vote # yamllint disable-line rule:line-length uses: lfit/gerrit-review-action@537251ec667665b386f70b330b05446e3fc29087 # v0.9