From 0c6a04960bac5b0d08b89978a92c7aeecd662b73 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 25 Oct 2026 19:51:32 +0000 Subject: [PATCH] CI(actions): Bump the actions-deps group with 4 updates Bumps the actions-deps group with 4 updates: [lfreleng-actions/github2gerrit-action](https://github.com/lfreleng-actions/github2gerrit-action), [actions/setup-java](https://github.com/actions/setup-java), [lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml](https://github.com/lfreleng-actions/security-workflows) and [lfit/gerrit-review-action](https://github.com/lfit/gerrit-review-action). Updates `lfreleng-actions/github2gerrit-action` from 1.4.4 to 2.4.4 - [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases) - [Commits](https://github.com/lfreleng-actions/github2gerrit-action/compare/e06d6a2892efe0cd30259897ecb0eb27bcfb9d10...bb821bec1b2846cd3ab51bac095495bcf9c9abc6) Updates `actions/setup-java` from 5.7.0 to 6.1.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/b6effb05e454b25005698d916606bdc6ffcbf961...b843ebf9b913146b38da2eaa7aeddf76074ae1ad) Updates `lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml` from 0.3.0 to 0.9.4 - [Release notes](https://github.com/lfreleng-actions/security-workflows/releases) - [Commits](https://github.com/lfreleng-actions/security-workflows/compare/5882f138dd24fcd6cb4ebc8bb3a68cee45a437a6...179b57cc41fbdae90d68237b418539d33e5ba091) Updates `lfit/gerrit-review-action` from 1.1.2 to 1.2.0 - [Release notes](https://github.com/lfit/gerrit-review-action/releases) - [Commits](https://github.com/lfit/gerrit-review-action/compare/a1c036a59b94c8ab89de26d378f6a28cc7378b13...d56b0b5c81402f8cb435aaca513bebdea3be951e) --- updated-dependencies: - dependency-name: lfreleng-actions/github2gerrit-action dependency-version: 2.4.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: actions/setup-java dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml dependency-version: 0.9.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: lfit/gerrit-review-action dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps ... Signed-off-by: dependabot[bot] --- .github/workflows/call-github2gerrit.yaml | 2 +- .github/workflows/clm-scan.yaml | 2 +- .github/workflows/gerrit-sonar.yaml | 2 +- .github/workflows/gerrit-verify.yaml | 4 ++-- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/call-github2gerrit.yaml b/.github/workflows/call-github2gerrit.yaml index 9e6f48a3134..fa9ee8891e6 100644 --- a/.github/workflows/call-github2gerrit.yaml +++ b/.github/workflows/call-github2gerrit.yaml @@ -33,7 +33,7 @@ jobs: steps: - name: Convert GitHub PR to Gerrit Change # yamllint disable-line rule:line-length - uses: lfreleng-actions/github2gerrit-action@e06d6a2892efe0cd30259897ecb0eb27bcfb9d10 # v1.4.4 + uses: lfreleng-actions/github2gerrit-action@bb821bec1b2846cd3ab51bac095495bcf9c9abc6 # v2.4.4 with: GERRIT_SSH_PRIVKEY_G2G: ${{ secrets.GERRIT_SSH_PRIVKEY_G2G }} GERRIT_KNOWN_HOSTS: ${{ vars.GERRIT_KNOWN_HOSTS }} diff --git a/.github/workflows/clm-scan.yaml b/.github/workflows/clm-scan.yaml index 90b7b99dff1..deb850047eb 100644 --- a/.github/workflows/clm-scan.yaml +++ b/.github/workflows/clm-scan.yaml @@ -33,7 +33,7 @@ jobs: - name: Setup Java # yamllint disable-line rule:line-length - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0 + uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 with: distribution: "temurin" java-version: "21" diff --git a/.github/workflows/gerrit-sonar.yaml b/.github/workflows/gerrit-sonar.yaml index fefd3ef32ef..5319583d28d 100644 --- a/.github/workflows/gerrit-sonar.yaml +++ b/.github/workflows/gerrit-sonar.yaml @@ -60,7 +60,7 @@ jobs: permissions: contents: read # yamllint disable-line rule:line-length - uses: lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml@5882f138dd24fcd6cb4ebc8bb3a68cee45a437a6 # v0.3.0 + uses: lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml@179b57cc41fbdae90d68237b418539d33e5ba091 # v0.9.4 with: # Gerrit dispatches carry a refspec and check out the change; # the weekly schedule leaves it empty and takes the branch. diff --git a/.github/workflows/gerrit-verify.yaml b/.github/workflows/gerrit-verify.yaml index fe8fda3e883..eb75c9b3875 100644 --- a/.github/workflows/gerrit-verify.yaml +++ b/.github/workflows/gerrit-verify.yaml @@ -59,7 +59,7 @@ jobs: steps: - name: Clear votes # yamllint disable-line rule:line-length - uses: lfit/gerrit-review-action@a1c036a59b94c8ab89de26d378f6a28cc7378b13 # v1.1.2 + uses: lfit/gerrit-review-action@d56b0b5c81402f8cb435aaca513bebdea3be951e # v1.2.0 with: host: ${{ vars.GERRIT_SERVER }} username: ${{ vars.GERRIT_SSH_USER }} @@ -139,7 +139,7 @@ jobs: uses: im-open/workflow-conclusion@8eac7f17381a6917bc04fec3e2c92e70ebc37526 # v3.0.0 - name: Set vote # yamllint disable-line rule:line-length - uses: lfit/gerrit-review-action@a1c036a59b94c8ab89de26d378f6a28cc7378b13 # v1.1.2 + uses: lfit/gerrit-review-action@d56b0b5c81402f8cb435aaca513bebdea3be951e # v1.2.0 with: host: ${{ vars.GERRIT_SERVER }} username: ${{ vars.GERRIT_SSH_USER }}