From 0ce1bf7c648e57c02485a87f16380a80613b68e9 Mon Sep 17 00:00:00 2001
From: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 23 Oct 2026 17:50:51 +0000
Subject: [PATCH] Bump the github-actions group with 4 updates
---
.github/workflows/docker-scan.yml | 2 +-
.github/workflows/codeql.yml | 4 ++--
.github/workflows/deploy.yml | 2 +-
.github/workflows/release.yml | 4 ++--
.github/workflows/build.yml | 8 ++++----
5 files changed, 10 insertions(+), 10 deletions(-)
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 210950a..c532911 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -63,7 +63,7 @@
shell: bash
run: bash .github/scripts/test-refresh-launchers.sh
- name: Java ${{ matrix.Java }} (${{ matrix.os }})
- uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
+ uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
with:
java-version: ${{ matrix.java }}
distribution: 'zulu'
@@ -1056,7 +1056,7 @@
scanners: vuln
cache: false
- name: Upload Trivy report to GitHub Security
- uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
+ uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
# upload even if a preceding step failed, but not without a report to upload
if: ${{ always() && hashFiles('trivy-results.sarif') != '' }}
with:
@@ -1489,7 +1489,7 @@
with:
name: windows-latest-11
- name: Set up Java
- uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
+ uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
with:
java-version: '25'
distribution: 'zulu'
@@ -1677,7 +1677,7 @@
with:
name: windows-latest-11
- name: Set up Java
- uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
+ uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
with:
java-version: '25'
distribution: 'zulu'
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 7ebf103..2b1b74b 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -85,7 +85,7 @@
submodules: recursive
- name: Initialize CodeQL
- uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
+ uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
with:
languages: ${{ matrix.language }}
build-mode: ${{ matrix.build-mode }}
@@ -139,6 +139,6 @@
# ---------------------------------------------------------------------
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
+ uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
with:
category: "/language:${{ matrix.language }}"
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index cefccf8..72b92f5 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -189,7 +189,7 @@
done
echo "::warning title=Could not refresh the launcher binaries::$BRANCH kept moving under this job. Refresh opendj-server-legacy/lib/*.exe from the windows-exe-11 artifact of Build run ${RUN_ID} and commit them."
- name: Set up Java for publishing to Maven Central Repository OSS
- uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
+ uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
with:
java-version: ${{ github.event.workflow_run.head_branch == 'sustaining/4.10.x' && '8' || '11'}}
distribution: 'temurin'
diff --git a/.github/workflows/docker-scan.yml b/.github/workflows/docker-scan.yml
index 3dcfb61..7e691f4 100644
--- a/.github/workflows/docker-scan.yml
+++ b/.github/workflows/docker-scan.yml
@@ -51,7 +51,7 @@
scanners: vuln
cache: false
- name: Upload report to GitHub Security
- uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
+ uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
# upload even if a preceding step failed, but not without a report to upload
if: ${{ always() && hashFiles(format('trivy-{0}.sarif', matrix.tag)) != '' }}
with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b164a7e..778cab2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -55,7 +55,7 @@
fetch-depth: 0
submodules: recursive
- name: Set up Java for publishing to Maven Central Repository OSS
- uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
+ uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
with:
java-version: ${{ github.event.workflow_run.head_branch == 'sustaining/4.10.x' && '8' || '11'}}
distribution: 'temurin'
@@ -190,7 +190,7 @@
ref: ${{ github.event.inputs.releaseVersion }}
submodules: recursive
- name: Set up Java
- uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
+ uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
with:
java-version: '11'
distribution: 'temurin'
--
Gitblit v1.10.0