mirror of https://github.com/OpenIdentityPlatform/OpenDJ.git
parent: 47d8021e | patch | commit | show whitespace
dependabot[bot]
20 hours ago 0ce1bf7c648e57c02485a87f16380a80613b68e9 
Bump the github-actions group with 4 updates

Bumps the github-actions group with 4 updates: [actions/setup-java](https://github.com/actions/setup-java), [github/codeql-action/upload-sarif](https://github.com/github/codeql-action), [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).


Updates `actions/setup-java` from 6.0.1 to 6.1.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/de7274f081f381c8f8158605e0321c36c376e2e6...b843ebf9b913146b38da2eaa7aeddf76074ae1ad)

Updates `github/codeql-action/upload-sarif` from 4.38.3 to 4.39.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee)

Updates `github/codeql-action/init` from 4.38.3 to 4.39.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee)

Updates `github/codeql-action/analyze` from 4.38.3 to 4.39.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/codeql-action/init
  dependency-version: 4.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
5 files modified
20 ■■■■■ changed files
.github/workflows/build.yml 8 ●●●●● patch | view | raw | blame | history
.github/workflows/codeql.yml 4 ●●●●● patch | view | raw | blame | history
.github/workflows/deploy.yml 2 ●●●●● patch | view | raw | blame | history
.github/workflows/docker-scan.yml 2 ●●●●● patch | view | raw | blame | history
.github/workflows/release.yml 4 ●●●●● patch | view | raw | blame | history 
 .github/workflows/build.yml


@@ -63,7 +63,7 @@


      shell: bash


      run: bash .github/scripts/test-refresh-launchers.sh


    - name: Java ${{ matrix.Java }} (${{ matrix.os }})


      uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1


      uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0


      with:


        java-version: ${{ matrix.java }}


        distribution: 'zulu'


@@ -1056,7 +1056,7 @@


          scanners: vuln


          cache: false


      - name: Upload Trivy report to GitHub Security


        uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3


        uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0


        # upload even if a preceding step failed, but not without a report to upload


        if: ${{ always() && hashFiles('trivy-results.sarif') != '' }}


        with:


@@ -1489,7 +1489,7 @@


        with:


          name: windows-latest-11


      - name: Set up Java


        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1


        uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0


        with:


          java-version: '25'


          distribution: 'zulu'


@@ -1677,7 +1677,7 @@


        with:


          name: windows-latest-11


      - name: Set up Java


        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1


        uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0


        with:


          java-version: '25'


          distribution: 'zulu'




 .github/workflows/codeql.yml


@@ -85,7 +85,7 @@


          submodules: recursive




      - name: Initialize CodeQL


        uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3


        uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0


        with:


          languages: ${{ matrix.language }}


          build-mode: ${{ matrix.build-mode }}


@@ -139,6 +139,6 @@


      # ---------------------------------------------------------------------




      - name: Perform CodeQL Analysis


        uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3


        uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0


        with:


          category: "/language:${{ matrix.language }}"




 .github/workflows/deploy.yml


@@ -189,7 +189,7 @@


          done


          echo "::warning title=Could not refresh the launcher binaries::$BRANCH kept moving under this job. Refresh opendj-server-legacy/lib/*.exe from the windows-exe-11 artifact of Build run ${RUN_ID} and commit them."


      - name: Set up Java for publishing to Maven Central Repository OSS


        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1


        uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0


        with:


          java-version: ${{ github.event.workflow_run.head_branch == 'sustaining/4.10.x' && '8' || '11'}}


          distribution: 'temurin'




 .github/workflows/docker-scan.yml


@@ -51,7 +51,7 @@


          scanners: vuln


          cache: false


      - name: Upload report to GitHub Security


        uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3


        uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0


        # upload even if a preceding step failed, but not without a report to upload


        if: ${{ always() && hashFiles(format('trivy-{0}.sarif', matrix.tag)) != '' }}


        with:




 .github/workflows/release.yml


@@ -55,7 +55,7 @@


          fetch-depth: 0


          submodules: recursive


      - name: Set up Java for publishing to Maven Central Repository OSS


        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1


        uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0


        with:


          java-version: ${{ github.event.workflow_run.head_branch == 'sustaining/4.10.x' && '8' || '11'}}


          distribution: 'temurin'


@@ -190,7 +190,7 @@


          ref: ${{ github.event.inputs.releaseVersion }}


          submodules: recursive


      - name: Set up Java


        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1


        uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0


        with:


          java-version: '11'


          distribution: 'temurin'