Skip to content

ci: Bump the github-actions group with 4 updates - #4203

Merged
chaokunyang merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-e501d169cb
Nov 4, 2026
Merged

chaokunyang merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-e501d169cb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 4 updates: apache/infrastructure-actions/allowlist-check, gradle/actions/setup-gradle, graalvm/setup-graalvm and sbt/setup-sbt.

Updates apache/infrastructure-actions/allowlist-check from e3e0a2261a9c6d5bdd882802b303f34b1511b6df to b41ca1cbe4d8a214dea50788a0e037184a69ad3f

Commits
  • b41ca1c Remove Expired Refs
  • 4dc92d6 Sync actions.yml, composite action, and approved_patterns.yml
  • 2a2744e action-allowlist-review: bump carabiner-dev/actions/install/download-and-veri...
  • 341adfc verify-action-build: recognize multi-org ampel verification (#1483)
  • 4ccfda6 Sync actions.yml, composite action, and approved_patterns.yml
  • b0c6c1f action-allowlist-review: bump carabiner-dev/actions/install/ampel (#1479)
  • 60df90a Sync actions.yml, composite action, and approved_patterns.yml
  • 7c93707 action-allowlist-review: bump commit-check/commit-check-action (#1478)
  • 9dd5da0 Sync actions.yml, composite action, and approved_patterns.yml
  • 01454b1 action-allowlist-review: bump carabiner-dev/actions/install/ampel-bootstrap (...
  • Additional commits viewable in compare view

Updates gradle/actions/setup-gradle from 6.4.0 to 6.4.1

Release notes

Sourced from gradle/actions/setup-gradle's releases.

v6.4.1

Security fix

This release fixes a security vulnerability in the dependency-submission action: GHSA-chpw-2mqm-95cc. All users should upgrade.

What's Changed

Full Changelog: gradle/actions@v6.4.0...v6.4.1

Commits
  • 8da46b5 [bot] Update dist directory
  • dcf6f72 Merge commit from fork
  • bf74269 Update to latest Dependency Graph plugin (#1106)
  • 65a6ba9 [bot] Update dist directory
  • 35eba4f Combined dependency updates (#1105)
  • 1cff18a Update known wrapper checksums (#1075)
  • 399f0d3 Update known wrapper checksums
  • ecf8cf2 Bump references to Develocity Gradle plugin from 4.5.1 to 4.6.0 (#1080)
  • d740e82 Bump references to Develocity Gradle plugin from 4.5.1 to 4.6.0
  • f9f39a9 Bump references to Develocity Gradle plugin from 4.5.0 to 4.5.1 (#1072)
  • Additional commits viewable in compare view

Updates graalvm/setup-graalvm from 1.6.7 to 1.6.8
Updates sbt/setup-sbt from 1.5.12 to 1.5.13

Release notes

Sourced from sbt/setup-sbt's releases.

v1.5.13

updates

Full Changelog: sbt/setup-sbt@v1.5.12...v1.5.13

Commits
  • b113b96 Merge pull request #154 from scala-steward/update/sbt-2.0.12
  • f23886a Regenerated action.yml
  • 0a03ad0 Update sbt to 2.0.12
  • 1644854 Merge pull request #153 from sbt/dependabot/github_actions/github/codeql-acti...
  • 265a80f Bump github/codeql-action/upload-sarif from 4.39.0 to 4.39.1
  • a656b34 Merge pull request #151 from sbt/dependabot/github_actions/ossf/scorecard-act...
  • f319409 Merge pull request #152 from sbt/dependabot/github_actions/github/codeql-acti...
  • 810af81 Merge pull request #150 from sbt/dependabot/github_actions/actions/setup-java...
  • 20b11d1 Bump github/codeql-action/upload-sarif from 4.38.3 to 4.39.0
  • 05a485c Bump ossf/scorecard-action from 2.4.4 to 2.5.0
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---
updated-dependencies:
- dependency-name: apache/infrastructure-actions/allowlist-check
  dependency-version: b41ca1cbe4d8a214dea50788a0e037184a69ad3f
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: gradle/actions/setup-gradle
  dependency-version: 6.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: graalvm/setup-graalvm
  dependency-version: 1.6.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: sbt/setup-sbt
  dependency-version: 1.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 3, 2026
@chaokunyang
chaokunyang merged commit 999aee3 into main Nov 4, 2026
78 checks passed
@chaokunyang
chaokunyang deleted the dependabot/github_actions/github-actions-e501d169cb branch November 4, 2026 02:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant