Skip to content

chore(ci): bump the github-actions-non-major group across 1 directory with 3 updates#552

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-non-major-0efb1223a2
Open

chore(ci): bump the github-actions-non-major group across 1 directory with 3 updates#552
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-non-major-0efb1223a2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the github-actions-non-major group with 3 updates in the / directory: astral-sh/setup-uv, actions/setup-java and actions/cache.

Updates astral-sh/setup-uv from 8.2.0 to 8.3.2

Commits
  • 11f9893 chore: roll up Dependabot updates (#948)
  • f798556 docs: update version references to v8.3.1 (#946)
  • e80544d chore: update known checksums for 0.11.28 (#947)
  • f98e069 Change update-docs PR labels from 'update-docs' to 'documentation' (#945)
  • cd46263 chore: update known checksums for 0.11.27 (#944)
  • 11245c7 docs: update version references to v8.3.0 (#939)
  • d31148d Strip environment markers from detected uv dependency pins (#938)
  • 17c3989 Fix cache keys for Python version ranges (#937)
  • 3cc3c11 chore(deps): roll up Dependabot updates (#936)
  • 9225f84 chore(deps): bump release-drafter/release-drafter from 7.3.1 to 7.4.0 (#924)
  • Additional commits viewable in compare view

Updates actions/setup-java from 5.3.0 to 5.5.0

Release notes

Sourced from actions/setup-java's releases.

v5.5.0

What's Changed

New Contributors

Full Changelog: actions/setup-java@v5...v5.5.0

v5.4.0

What's Changed

... (truncated)

Commits
  • 0f481fc feat: Add distribution detection support to .sdkmanrc file (#975)
  • c4922bf docs: document problem matcher (and how to disable it), Maven Wrapper caching...
  • 6657b99 feat: Add set-default option (#1017)
  • a50fdcc dist: Support Tencent Kona JDK (#672)
  • 77ee41d fix: Maven Toolchains grows unexpectedly (#534)
  • 0765b15 chore(deps-dev): bump eslint-plugin-jest from 29.0.1 to 29.15.4 (#1074)
  • c712b2f Bump prettier from 3.6.2 to 3.9.1 (#1066)
  • 733efae feat: Disable interactiveMode in generated Maven settings.xml (#1052)
  • 6c4d4a5 feat: suppress Maven transfer progress via MAVEN_ARGS by default (add show-do...
  • 324b333 Fix arm64 e2e workflow tests mislabeled as x64 (#1073)
  • Additional commits viewable in compare view

Updates actions/cache from 6.0.0 to 6.1.0

Release notes

Sourced from actions/cache's releases.

v6.1.0

What's Changed

Full Changelog: actions/cache@v6...v6.1.0

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE] Relevant for maintainers with write access only.

  1. Switch to a new branch from main.
  2. Run npm test to ensure all tests are passing.
  3. Update the version in https://github.com/actions/cache/blob/main/package.json.
  4. Run npm run build to update the compiled files.
  5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
  6. Run licensed cache to update the license report.
  7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
  8. Commit your changes and push your branch upstream.
  9. Open a pull request against main and get it reviewed and merged.
  10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
  11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

6.1.0

6.0.0

  • Updated @actions/cache to ^6.0.1, @actions/core to ^3.0.1, @actions/exec to ^3.0.0, @actions/io to ^3.0.2
  • Migrated to ESM module system
  • Upgraded Jest to v30 and test infrastructure to be ESM compatible

5.0.4

  • Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
  • Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
  • Bump fast-xml-parser to v5.5.6

5.0.3

5.0.2

... (truncated)

Commits
  • 55cc834 Merge pull request #1768 from jasongin/readonly-cache
  • d8cd72f Bump @​actions/cache to v6.1.0 - handle cache write error due to RO token
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 8, 2026
@dependabot
dependabot Bot requested review from a team as code owners July 8, 2026 05:08
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 8, 2026
@github-actions

github-actions Bot commented Jul 8, 2026

Copy link
Copy Markdown

X-Test Results

✅ java@main-main
✅ go@v0.35.0-main
✅ go@main-main
✅ js@main-main
✅ js@v0.4.0-main
✅ java@v0.17.1-main

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-non-major-0efb1223a2 branch from ac6115d to 65934b6 Compare July 13, 2026 19:00
@github-actions

github-actions Bot commented Jul 13, 2026

Copy link
Copy Markdown

X-Test Results

✅ java@main-v0.20.0
✅ java@main-main
✅ js@main-v0.20.0
✅ java@v0.17.1-main
✅ go@v0.35.0-main
✅ go@main-v0.20.0
✅ go@main-main
✅ js@main-main
✅ java@v0.17.1-v0.20.0
✅ go@v0.35.0-v0.20.0
✅ js@v0.4.0-main
✅ js@v0.4.0-v0.20.0

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-non-major-0efb1223a2 branch from 65934b6 to 34e9350 Compare July 14, 2026 22:07
@github-actions

github-actions Bot commented Jul 14, 2026

Copy link
Copy Markdown

X-Test Results

✅ java@v0.17.1-main
✅ java@main-v0.20.0
✅ go@v0.35.0-main
✅ js@main-v0.20.0
✅ go@main-v0.20.0
✅ go@main-main
✅ java@main-main
✅ js@main-main
✅ java@v0.17.1-v0.20.0
✅ js@v0.4.0-main
✅ go@v0.35.0-v0.20.0
✅ js@v0.4.0-v0.20.0

@dependabot
chore(ci): bump the github-actions-non-major group across 1 directory…
7b87729 
… with 3 updates

Bumps the github-actions-non-major group with 3 updates in the / directory: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv), [actions/setup-java](https://github.com/actions/setup-java) and [actions/cache](https://github.com/actions/cache).


Updates `astral-sh/setup-uv` from 8.2.0 to 8.3.2
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@fac544c...11f9893)

Updates `actions/setup-java` from 5.3.0 to 5.5.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@ad2b381...0f481fc)

Updates `actions/cache` from 6.0.0 to 6.1.0
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@2c8a9bd...55cc834)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-non-major
- dependency-name: actions/setup-java
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-non-major
- dependency-name: astral-sh/setup-uv
  dependency-version: 8.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-non-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-non-major-0efb1223a2 branch from 34e9350 to 7b87729 Compare July 15, 2026 18:17
@sonarqubecloud

sonarqubecloud Bot commented Jul 15, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@github-actions

github-actions Bot commented Jul 15, 2026

Copy link
Copy Markdown

X-Test Results

✅ java@main-v0.20.0
✅ java@main-main
✅ go@v0.35.0-main
✅ java@v0.17.1-main
✅ js@main-main
✅ js@main-v0.20.0
✅ go@main-main
✅ java@v0.17.1-v0.20.0
✅ go@v0.35.0-v0.20.0
✅ js@v0.4.0-main
✅ go@main-v0.20.0
✅ js@v0.4.0-v0.20.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants