Skip to content

CI(actions): Bump the actions-deps group across 1 directory with 4 updates - #57

Closed
dependabot[bot] wants to merge 1 commit into
13.0.xfrom
dependabot/github_actions/13.0.x/actions-deps-22e20653ca
Closed

dependabot[bot] wants to merge 1 commit into
13.0.xfrom
dependabot/github_actions/13.0.x/actions-deps-22e20653ca

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 25, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the actions-deps group with 4 updates in the / directory: lfreleng-actions/github2gerrit-action, actions/setup-java, lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml and lfit/gerrit-review-action.

Updates lfreleng-actions/github2gerrit-action from 1.4.4 to 2.4.6

Release notes

Sourced from lfreleng-actions/github2gerrit-action's releases.

v2.4.6

Downloads for this release

🐛 Bug Fixes 🐛

🔧 Maintenance 🔧

Links

v2.4.5

Downloads for this release

🐛 Bug Fixes 🐛

🔧 Maintenance 🔧

🎓 Code Quality 🎓

Links

v2.4.4

Downloads for this release

... (truncated)

Commits
  • 8da085e Merge pull request #503 from modeseven-lfreleng-actions/fix/target-branch-gaps
  • e0e155b Fix: Honour GERRIT_BRANCH in closers and cleanup
  • 1048d33 Docs: Describe handling of non-default branches
  • 204559c Test: Route the push argv through real git-review
  • ee3b940 Fix: Compare duplicates on the target branch only
  • 2f0e72a Test: Expect duplicates compared per branch
  • 981c96e Fix: Close PRs only for changes on their branch
  • 37cb483 Test: Expect closers to match the PR's branch
  • f8ff1b7 Fix: Abandon only the closed PR's own changes
  • bae338b Test: Expect cleanup to spare others' changes
  • Additional commits viewable in compare view

Updates actions/setup-java from 5.7.0 to 6.1.0

Release notes

Sourced from actions/setup-java's releases.

v6.1.0

What's Changed

New Contributors

Full Changelog: actions/setup-java@v6.0.1...v6.1.0

v6.0.1

What's Changed

New Contributors

Full Changelog: actions/setup-java@v6.0.0...v6.0.1

v6.0.0

What's Changed

... (truncated)

Commits
  • b843ebf Support Maven plugin repositories in generated settings.xml (#1286)
  • 2a69be2 feat: support Maven server credential origins (#1282)
  • d0e6e4d chore(deps): bump the monthly-npm-updates group with 13 updates (#1276)
  • b24925b chore(deps): bump undici from 6.28.0 to 6.29.0 (#1274)
  • 47b3648 Support Temurin JEP 322 patch versions like 26.0.2.1+1 (#1270) (#1279)
  • 74920aa Prefer Zulu 4-segment hotfix builds when resolving version ranges (#1278)
  • a78ec39 Stop GPG agent before removing signature-verification home (#1273)
  • 97c5a5e Support Temurin on Linux RISC-V (#1269)
  • 1aa87b6 Preserve compound Liberica build versions from .sdkmanrc (#1268)
  • de7274f Avoid macOS GPG socket overflow on long runner paths (#1266)
  • Additional commits viewable in compare view

Updates lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml from 0.3.0 to 0.9.7

Release notes

Sourced from lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml's releases.

v0.9.7

Downloads for this release

🎓 Code Quality 🎓

Links

v0.9.6

Downloads for this release

🐛 Bug Fixes 🐛

🔧 Maintenance 🔧

🎓 Code Quality 🎓

Links

v0.9.5

Downloads for this release

🔧 Maintenance 🔧

... (truncated)

Commits
  • 378fcc1 Merge pull request #179 from lfreleng-bot-forks/code-monkey/issue-178
  • a2c895d CI: Bump all action and workflow pins to latest
  • 0f985c4 Merge pull request #177 from lfreleng-bot-forks/code-monkey/issue-176
  • 5cb158e CI: Bump step-security/harden-runner to v2.22.3
  • 05b20c6 Merge pull request #175 from lfreleng-actions/dependabot/github_actions/githu...
  • 1bd174c Merge pull request #174 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 1dacb17 Merge pull request #173 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 0730bf2 Merge pull request #172 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 51000a5 Merge pull request #171 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 6ea2ca9 Merge pull request #170 from lfreleng-actions/dependabot/github_actions/githu...
  • Additional commits viewable in compare view

Updates lfit/gerrit-review-action from 1.1.2 to 1.3.0

Release notes

Sourced from lfit/gerrit-review-action's releases.

v1.3.0

Downloads for this release

✨ New Features ✨

🔧 Maintenance 🔧

🎓 Code Quality 🎓

Links

v1.2.0

Downloads for this release

✨ New Features ✨

🔧 Maintenance 🔧

... (truncated)

Commits
  • 264fe20 Merge pull request #176 from lfreleng-bot-forks/code-monkey/issue-175
  • bcd3f35 Feat: Warn instead of failing on a closed change
  • db837dc Test: Add expected-fail send-review tests
  • cdfcca9 Merge pull request #174 from lfreleng-actions/pre-commit-ci-update-config
  • 0990d05 Chore: pre-commit autoupdate
  • 9ebb057 Merge pull request #173 from lfreleng-actions/pre-commit-ci-update-config
  • ed76ea3 Chore: pre-commit autoupdate
  • 2373fda Merge pull request #169 from lfreleng-actions/dependabot/github_actions/relea...
  • 72c7203 Merge pull request #170 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 9aaf2fb Merge pull request #171 from lfreleng-actions/dependabot/github_actions/lfrel...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 25, 2026
…dates

Bumps the actions-deps group with 4 updates in the / directory: [lfreleng-actions/github2gerrit-action](https://github.com/lfreleng-actions/github2gerrit-action), [actions/setup-java](https://github.com/actions/setup-java), [lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml](https://github.com/lfreleng-actions/security-workflows) and [lfit/gerrit-review-action](https://github.com/lfit/gerrit-review-action).


Updates `lfreleng-actions/github2gerrit-action` from 1.4.4 to 2.4.6
- [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases)
- [Commits](lfreleng-actions/github2gerrit-action@e06d6a2...8da085e)

Updates `actions/setup-java` from 5.7.0 to 6.1.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@b6effb0...b843ebf)

Updates `lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml` from 0.3.0 to 0.9.7
- [Release notes](https://github.com/lfreleng-actions/security-workflows/releases)
- [Commits](lfreleng-actions/security-workflows@5882f13...378fcc1)

Updates `lfit/gerrit-review-action` from 1.1.2 to 1.3.0
- [Release notes](https://github.com/lfit/gerrit-review-action/releases)
- [Commits](lfreleng-actions/gerrit-review-action@a1c036a...264fe20)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: lfit/gerrit-review-action
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: lfreleng-actions/github2gerrit-action
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-deps
- dependency-name: lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml
  dependency-version: 0.9.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title CI(actions): Bump the actions-deps group with 4 updates CI(actions): Bump the actions-deps group across 1 directory with 4 updates Nov 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/13.0.x/actions-deps-22e20653ca branch from 0c6a049 to bcc8101 Compare November 6, 2026 08:54
@dependabot @github

dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 6, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/13.0.x/actions-deps-22e20653ca branch November 6, 2026 19:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Development

Successfully merging this pull request may close these issues.

0 participants