Skip to content

CI(actions): Bump the actions-deps group with 3 updates - #54

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions-deps-c5fe5f23ef
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions-deps-c5fe5f23ef

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions-deps group with 3 updates: lfreleng-actions/github2gerrit-action, actions/setup-java and lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml.

Updates lfreleng-actions/github2gerrit-action from 2.4.3 to 2.4.4

Release notes

Sourced from lfreleng-actions/github2gerrit-action's releases.

v2.4.4

Downloads for this release

🐛 Bug Fixes 🐛

🔧 Maintenance 🔧

Links

Commits
  • bb821be Merge pull request #478 from lfreleng-actions/pre-commit-ci-update-config
  • 8647da1 Chore: Pre-commit autoupdate
  • 8ba96ba Merge pull request #477 from modeseven-lfreleng-actions/fix/abandon-url-error
  • 651cdff Merge pull request #479 from modeseven-lfreleng-actions/style/ruff-format-pyg...
  • 60b113a Style: Drop redundant pygerrit2 type ignores
  • 595f314 Fix: Log why the abandoned change URL failed
  • 810db5c Test: Expect the URL fallback to log its cause
  • 57b0081 Merge pull request #476 from lfreleng-actions/dependabot/uv/ruff-0.16.10
  • 3fb8346 Merge pull request #475 from lfreleng-actions/dependabot/uv/cryptography-50.0.2
  • 695ee79 Merge pull request #474 from lfreleng-actions/dependabot/github_actions/relea...
  • Additional commits viewable in compare view

Updates actions/setup-java from 6.0.1 to 6.1.0

Release notes

Sourced from actions/setup-java's releases.

v6.1.0

What's Changed

New Contributors

Full Changelog: actions/setup-java@v6.0.1...v6.1.0

Commits
  • b843ebf Support Maven plugin repositories in generated settings.xml (#1286)
  • 2a69be2 feat: support Maven server credential origins (#1282)
  • d0e6e4d chore(deps): bump the monthly-npm-updates group with 13 updates (#1276)
  • b24925b chore(deps): bump undici from 6.28.0 to 6.29.0 (#1274)
  • 47b3648 Support Temurin JEP 322 patch versions like 26.0.2.1+1 (#1270) (#1279)
  • 74920aa Prefer Zulu 4-segment hotfix builds when resolving version ranges (#1278)
  • a78ec39 Stop GPG agent before removing signature-verification home (#1273)
  • 97c5a5e Support Temurin on Linux RISC-V (#1269)
  • 1aa87b6 Preserve compound Liberica build versions from .sdkmanrc (#1268)
  • See full diff in compare view

Updates lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml from 0.9.3 to 0.9.4

Release notes

Sourced from lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml's releases.

v0.9.4

Downloads for this release

🔧 Maintenance 🔧

  • Chore: pre-commit autoupdate @pre-commit-ci[bot] (#139)
  • CI(actions): Bump lfreleng-actions/harden-runner-block-action from 0.12.2 to 0.13.1 @dependabot[bot] (#140)
  • CI(actions): Bump step-security/harden-runner from 2.21.1 to 2.22.1 @dependabot[bot] (#141)
  • CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.4.0 to 0.4.3 @dependabot[bot] (#142)
  • CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.4.0 to 0.4.3 @dependabot[bot] (#143)
  • CI(actions): Bump lfreleng-actions/checkout-gerrit-change-action from 1.1.0 to 1.1.2 @dependabot[bot] (#144)
  • CI(actions): Bump lfreleng-actions/go-test-action from 0.1.1 to 0.1.2 @dependabot[bot] (#145)
  • CI(actions): Bump actions/upload-artifact from 7.0.1 to 7.0.2 @dependabot[bot] (#146)
  • CI(actions): Bump release-drafter/release-drafter from 7.7.0 to 7.10.0 @dependabot[bot] (#147)
  • CI(actions): Bump lfreleng-actions/build-metadata-action from 0.8.3 to 0.9.0 @dependabot[bot] (#148)
  • CI(actions): Bump actions/download-artifact from 8.0.1 to 8.0.2 @dependabot[bot] (#149)
  • CI(actions): Bump lfreleng-actions/maven-xml-settings-action from 0.1.1 to 0.2.0 @dependabot[bot] (#150)

🎓 Code Quality 🎓

Links

Commits
  • 179b57c Merge pull request #150 from lfreleng-actions/dependabot/github_actions/lfrel...
  • d3ad53e Merge pull request #149 from lfreleng-actions/dependabot/github_actions/actio...
  • 26bdd1a Merge pull request #148 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 3484268 Merge pull request #147 from lfreleng-actions/dependabot/github_actions/relea...
  • 3f166b8 Merge pull request #146 from lfreleng-actions/dependabot/github_actions/actio...
  • 2b3a5f1 Merge pull request #145 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 6f7d524 Merge pull request #144 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 877fb2d Merge pull request #143 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 7803a31 Merge pull request #142 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 285f984 Merge pull request #141 from lfreleng-actions/dependabot/github_actions/step-...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions-deps group with 3 updates: [lfreleng-actions/github2gerrit-action](https://github.com/lfreleng-actions/github2gerrit-action), [actions/setup-java](https://github.com/actions/setup-java) and [lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml](https://github.com/lfreleng-actions/security-workflows).


Updates `lfreleng-actions/github2gerrit-action` from 2.4.3 to 2.4.4
- [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases)
- [Commits](lfreleng-actions/github2gerrit-action@f2ffe06...bb821be)

Updates `actions/setup-java` from 6.0.1 to 6.1.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@de7274f...b843ebf)

Updates `lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml` from 0.9.3 to 0.9.4
- [Release notes](https://github.com/lfreleng-actions/security-workflows/releases)
- [Commits](lfreleng-actions/security-workflows@6c2ced2...179b57c)

---
updated-dependencies:
- dependency-name: lfreleng-actions/github2gerrit-action
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: actions/setup-java
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml
  dependency-version: 0.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 23, 2026
@github-actions

Copy link
Copy Markdown

PR: #54
Mode: squash
Topic: GH-controller-54
Change-Ids:
I12f86ad83309203d7168897dc8480ade5a2c9a77
Digest: fc28981d1eab
GitHub-Hash: 5789dd3dfeff5f4b

Note: This metadata is also included in the Gerrit commit message for reconciliation.

@github-actions

Copy link
Copy Markdown

Change raised in Gerrit by GitHub2Gerrit: https://git.opendaylight.org/gerrit/c/controller/+/127095

odl-github pushed a commit that referenced this pull request Oct 25, 2026
Bumps the actions-deps group with 3 updates: [lfreleng-actions/github2gerrit-action](https://github.com/lfreleng-actions/github2gerrit-action), [actions/setup-java](https://github.com/actions/setup-java) and [lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml](https://github.com/lfreleng-actions/security-workflows).
Updates `lfreleng-actions/github2gerrit-action` from 2.4.3 to 2.4.4
- [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases)
- [Commits](lfreleng-actions/github2gerrit-action@f2ffe06...bb821be)
Updates `actions/setup-java` from 6.0.1 to 6.1.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@de7274f...b843ebf)
Updates `lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml` from 0.9.3 to 0.9.4
- [Release notes](https://github.com/lfreleng-actions/security-workflows/releases)
- [Commits](lfreleng-actions/security-workflows@6c2ced2...179b57c)

Signed-off-by: dependabot[bot] <support@github.com>
Change-Id: I12f86ad83309203d7168897dc8480ade5a2c9a77
GitHub-PR: #54
GitHub-Hash: 5789dd3dfeff5f4b
Signed-off-by: gh2gerrit <releng+odl-gh2gerrit@linuxfoundation.org>
@github-actions

Copy link
Copy Markdown

Automated PR Closure

This pull request has been automatically closed by GitHub2Gerrit.

The corresponding Gerrit change has been accepted and merged ✅

The changes from this PR are now part of the main codebase in Gerrit.


This is an automated action performed by the GitHub2Gerrit tool.

@github-actions github-actions Bot closed this Oct 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Development

Successfully merging this pull request may close these issues.

0 participants