From 50bc61e74b16cad5673561dc190f6122296f7913 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 25 Oct 2026 19:53:25 +0000 Subject: [PATCH] CI(actions): Bump the actions-deps group with 4 updates Bumps the actions-deps group with 4 updates: [lfreleng-actions/github2gerrit-action](https://github.com/lfreleng-actions/github2gerrit-action), [actions/setup-java](https://github.com/actions/setup-java), [lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml](https://github.com/lfit/releng-reusable-workflows) and [lfit/gerrit-review-action](https://github.com/lfit/gerrit-review-action). Updates `lfreleng-actions/github2gerrit-action` from 1.4.4 to 2.4.4 - [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases) - [Commits](https://github.com/lfreleng-actions/github2gerrit-action/compare/e06d6a2892efe0cd30259897ecb0eb27bcfb9d10...bb821bec1b2846cd3ab51bac095495bcf9c9abc6) Updates `actions/setup-java` from 5.7.0 to 6.1.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/b6effb05e454b25005698d916606bdc6ffcbf961...b843ebf9b913146b38da2eaa7aeddf76074ae1ad) Updates `lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml` from 0.10.1 to 0.10.4 - [Release notes](https://github.com/lfit/releng-reusable-workflows/releases) - [Commits](https://github.com/lfit/releng-reusable-workflows/compare/f7aae218f1fa0257e3dcd19f5c7d3f88f482f266...fb907909b12bbaf262de6b24fcafd181cabe6b24) Updates `lfit/gerrit-review-action` from 1.1.2 to 1.2.0 - [Release notes](https://github.com/lfit/gerrit-review-action/releases) - [Commits](https://github.com/lfit/gerrit-review-action/compare/a1c036a59b94c8ab89de26d378f6a28cc7378b13...d56b0b5c81402f8cb435aaca513bebdea3be951e) --- updated-dependencies: - dependency-name: lfreleng-actions/github2gerrit-action dependency-version: 2.4.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: actions/setup-java dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml dependency-version: 0.10.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: lfit/gerrit-review-action dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps ... Signed-off-by: dependabot[bot] --- .github/workflows/call-github2gerrit.yaml | 2 +- .github/workflows/clm-scan.yaml | 2 +- .github/workflows/gerrit-sonar.yaml | 2 +- .github/workflows/gerrit-verify.yaml | 4 ++-- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/call-github2gerrit.yaml b/.github/workflows/call-github2gerrit.yaml index e269e4e5a7..06e828df24 100644 --- a/.github/workflows/call-github2gerrit.yaml +++ b/.github/workflows/call-github2gerrit.yaml @@ -32,7 +32,7 @@ jobs: steps: - name: Convert GitHub PR to Gerrit Change - uses: lfreleng-actions/github2gerrit-action@e06d6a2892efe0cd30259897ecb0eb27bcfb9d10 # v1.4.4 + uses: lfreleng-actions/github2gerrit-action@bb821bec1b2846cd3ab51bac095495bcf9c9abc6 # v2.4.4 with: GERRIT_SSH_PRIVKEY_G2G: ${{ secrets.GERRIT_SSH_PRIVKEY_G2G }} GERRIT_KNOWN_HOSTS: ${{ vars.GERRIT_KNOWN_HOSTS }} diff --git a/.github/workflows/clm-scan.yaml b/.github/workflows/clm-scan.yaml index 90b7b99dff..deb850047e 100644 --- a/.github/workflows/clm-scan.yaml +++ b/.github/workflows/clm-scan.yaml @@ -33,7 +33,7 @@ jobs: - name: Setup Java # yamllint disable-line rule:line-length - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0 + uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 with: distribution: "temurin" java-version: "21" diff --git a/.github/workflows/gerrit-sonar.yaml b/.github/workflows/gerrit-sonar.yaml index 75f927ddfc..b3f1aff79a 100644 --- a/.github/workflows/gerrit-sonar.yaml +++ b/.github/workflows/gerrit-sonar.yaml @@ -59,7 +59,7 @@ permissions: jobs: sonar-scan: # yamllint disable-line rule:line-length - uses: lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml@f7aae218f1fa0257e3dcd19f5c7d3f88f482f266 # v0.10.1 + uses: lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml@fb907909b12bbaf262de6b24fcafd181cabe6b24 # v0.10.4 with: GERRIT_BRANCH: ${{ inputs.GERRIT_BRANCH || 'master' }} GERRIT_CHANGE_ID: ${{ inputs.GERRIT_CHANGE_ID || '' }} diff --git a/.github/workflows/gerrit-verify.yaml b/.github/workflows/gerrit-verify.yaml index 94d1913de0..4ef80cb8c7 100644 --- a/.github/workflows/gerrit-verify.yaml +++ b/.github/workflows/gerrit-verify.yaml @@ -59,7 +59,7 @@ jobs: steps: - name: Clear votes # yamllint disable-line rule:line-length - uses: lfit/gerrit-review-action@a1c036a59b94c8ab89de26d378f6a28cc7378b13 # v1.1.2 + uses: lfit/gerrit-review-action@d56b0b5c81402f8cb435aaca513bebdea3be951e # v1.2.0 with: host: ${{ vars.GERRIT_SERVER }} username: ${{ vars.GERRIT_SSH_USER }} @@ -139,7 +139,7 @@ jobs: uses: im-open/workflow-conclusion@8eac7f17381a6917bc04fec3e2c92e70ebc37526 # v3.0.0 - name: Set vote # yamllint disable-line rule:line-length - uses: lfit/gerrit-review-action@a1c036a59b94c8ab89de26d378f6a28cc7378b13 # v1.1.2 + uses: lfit/gerrit-review-action@d56b0b5c81402f8cb435aaca513bebdea3be951e # v1.2.0 with: host: ${{ vars.GERRIT_SERVER }} username: ${{ vars.GERRIT_SSH_USER }}