Skip to content

Bump the pipeline group across 1 directory with 8 updates #144

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 10, 2025

Bumps the pipeline group with 8 updates in the / directory:

Package From To
actions/setup-java 4.2.1 4.7.1
actions/checkout 4.1.6 4.2.2
gradle/actions 3.3.2 4.4.1
docker/setup-buildx-action 3.3.0 3.11.1
docker/metadata-action 5.5.1 5.7.0
docker/login-action 3.2.0 3.4.0
docker/build-push-action 5.3.0 6.18.0
actions/stale 9.0.0 9.1.0

Updates actions/setup-java from 4.2.1 to 4.7.1

Release notes

Sourced from actions/setup-java's releases.

v4.7.1

What's Changed

Documentation changes

Dependency updates:

Full Changelog: actions/setup-java@v4...v4.7.1

v4.7.0

What's Changed

New Contributors

Full Changelog: actions/setup-java@v4...v4.7.0

v4.6.0

What's Changed

Add-ons:

 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: ‘jetbrains’
     java-version: '21'

Bug fixes:

New Contributors

... (truncated)

Commits
  • c5195ef actions/cache upgrade to 4.0.3 (#773)
  • dd38875 Bump ts-jest from 29.1.2 to 29.2.5 (#743)
  • 148017a Bump @​actions/glob from 0.4.0 to 0.5.0 (#744)
  • 3b6c050 Remove duplicated GraalVM section in documentation (#716)
  • b8ebb8b upgrade @​action/cache from 4.0.0 to 4.0.2 (#766)
  • 799ee7c Add Documentation to Recommend Using GraalVM JDK 17 Version to 17.0.12 to Ali...
  • 3a4f6e1 Bump @​types/jest from 29.5.12 to 29.5.14 (#729)
  • 25f376e Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 (#727)
  • d4e4b6b Bump @​actions/http-client from 2.2.1 to 2.2.3 (#728)
  • 28b532b Create dependabot.yml (#722)
  • Additional commits viewable in compare view

Updates actions/checkout from 4.1.6 to 4.2.2

Release notes

Sourced from actions/checkout's releases.

v4.2.2

What's Changed

Full Changelog: actions/checkout@v4.2.1...v4.2.2

v4.2.1

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.2.0...v4.2.1

v4.2.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.1.7...v4.2.0

v4.1.7

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.1.6...v4.1.7

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

... (truncated)

Commits

Updates gradle/actions from 3.3.2 to 4.4.1

Release notes

Sourced from gradle/actions's releases.

v4.4.1

This patch release fixes a bug in Develocity Injection with a custom plugin repository. The gradle-plugin-repository-* action parameters were not being correctly mapped to environment variables that are read by the Develocity Injection init script.

This issue has been fixed by setting the correct environment variables:

  • gradle-plugin-repository-url is mapped to DEVELOCITY_INJECTION_PLUGIN_REPOSITORY_URL
  • gradle-plugin-repository-username is mapped to DEVELOCITY_INJECTION_PLUGIN_REPOSITORY_USERNAME
  • gradle-plugin-repository-password is mapped to DEVELOCITY_INJECTION_PLUGIN_REPOSITORY_PASSWORD

Additionally, these parameters can now be used to configure a custom plugin repository for the GitHub Dependency Graph Gradle Plugin, required for dependency submission.

What's Changed

Full Changelog: gradle/actions@v4.4.0...v4.4.1

v4.4.0

This release updates 2 downstream components:

  • Develocity injection has been updated to v2.0
    • Some environment variables related to Develocity injection have been renamed. All vars now being with DEVELOCITY_INJECTION_. Check the docs for more details.
  • Dependency-graph plugin has been updated to v1.4.0
    • The 'detector' values included in the generated graph can now be configured via environment variables.

What's Changed

New Contributors

Full Changelog: gradle/actions@v4.3.1...v4.4.0

v4.3.1

This release fixes a couple of minor issues, as well as keeping dependencies up to date.

Fixed issues

  • The develocity-allow-untrusted-server parameter should be honoured when fetching short-lived access tokens #583
  • Build summary may incorrectly report build success #415

What's Changed

... (truncated)

Commits
  • ac638b0 [bot] Update dist directory
  • fd88882 Fix setting env vars for plugin repository (#669)
  • 3af3dd3 [bot] Update dist directory
  • bf78bf9 Dependency updates (#667)
  • ca92106 Use Java 17 for toolchain build
  • f7d1903 Update known wrapper checksums
  • eb0816b Fix update-wrapper-checksums workflow
  • d408d62 Bump the npm-dependencies group across 1 directory with 5 updates
  • 306df22 Bump the github-actions group across 1 directory with 3 updates
  • 05baf32 Bump org.gradle.toolchains.foojay-resolver-convention
  • Additional commits viewable in compare view

Updates docker/setup-buildx-action from 3.3.0 to 3.11.1

Release notes

Sourced from docker/setup-buildx-action's releases.

v3.11.1

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

v3.11.0

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

v3.10.0

Full Changelog: docker/setup-buildx-action@v3.9.0...v3.10.0

v3.9.0

Full Changelog: docker/setup-buildx-action@v3.8.0...v3.9.0

v3.8.0

Full Changelog: docker/setup-buildx-action@v3.7.1...v3.8.0

v3.7.1

Full Changelog: docker/setup-buildx-action@v3.7.0...v3.7.1

v3.7.0

Full Changelog: docker/setup-buildx-action@v3.6.1...v3.7.0

v3.6.1

Full Changelog: docker/setup-buildx-action@v3.6.0...v3.6.1

v3.6.0

... (truncated)

Commits
  • e468171 Merge pull request #429 from crazy-max/fix-keep-state
  • a3e7502 chore: update generated content
  • b145473 fix keep-state not being respected
  • 18ce135 Merge pull request #425 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 0e198e9 chore: update generated content
  • 05f3f3a build(deps): bump @​docker/actions-toolkit from 0.61.0 to 0.62.1
  • 6229134 Merge pull request #427 from crazy-max/keep-state
  • c6f6a07 chore: update generated content
  • 6c5e29d skip builder creation if one already exists with the same name
  • 548b297 ci: keep-state check
  • Additional commits viewable in compare view

Updates docker/metadata-action from 5.5.1 to 5.7.0

Release notes

Sourced from docker/metadata-action's releases.

v5.7.0

Full Changelog: docker/metadata-action@v5.6.1...v5.7.0

v5.6.1

Full Changelog: docker/metadata-action@v5.6.0...v5.6.1

v5.6.0

Full Changelog: docker/metadata-action@v5.5.1...v5.6.0

Commits
  • 902fa8e Merge pull request #504 from docker/dependabot/npm_and_yarn/semver-7.7.1
  • c30b9c2 chore: update generated content
  • 0698804 chore(deps): Bump semver from 7.6.3 to 7.7.1
  • bb3eeca Merge pull request #501 from docker/dependabot/npm_and_yarn/moment-timezone-0...
  • 94a839c chore: update generated content
  • ecd51a0 Merge pull request #509 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • a85b1db chore(deps): Bump @​docker/actions-toolkit from 0.55.0 to 0.56.0
  • 5a76a0e chore(deps): Bump moment-timezone from 0.5.46 to 0.5.47
  • 1cc4a98 Merge pull request #482 from docker/dependabot/npm_and_yarn/csv-parse-5.6.0
  • d84de1e chore: update generated content
  • Additional commits viewable in compare view

Updates docker/login-action from 3.2.0 to 3.4.0

Release notes

Sourced from docker/login-action's releases.

v3.4.0

Full Changelog: docker/login-action@v3.3.0...v3.4.0

v3.3.0

Full Changelog: docker/login-action@v3.2.0...v3.3.0

Commits
  • 74a5d14 Merge pull request #856 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
  • 2f4f00e chore: update generated content
  • 67c1845 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
  • 3d4cc89 Merge pull request #844 from graysonpike/master
  • 6cc823a Merge pull request #823 from docker/dependabot/npm_and_yarn/proxy-agent-depen...
  • d94e792 chore: update generated content
  • 033db0d Merge pull request #812 from docker/dependabot/github_actions/codecov/codecov...
  • 09c2ae9 build(deps): bump https-proxy-agent
  • ba56f00 ci: update deprecated input for codecov-action
  • 75bf9a7 Merge pull request #858 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • Additional commits viewable in compare view

Updates docker/build-push-action from 5.3.0 to 6.18.0

Release notes

Sourced from docker/build-push-action's releases.

v6.18.0

[!NOTE] Build summary is now supported with Docker Build Cloud.

Full Changelog: docker/build-push-action@v6.17.0...v6.18.0

v6.17.0

[!NOTE] Build record is now exported using the buildx history export command instead of the legacy export-build tool.

Full Changelog: docker/build-push-action@v6.16.0...v6.17.0

v6.16.0

Full Changelog: docker/build-push-action@v6.15.0...v6.16.0

v6.15.0

Full Changelog: docker/build-push-action@v6.14.0...v6.15.0

v6.14.0

Full Changelog: docker/build-push-action@v6.13.0...v6.14.0

v6.13.0

Full Changelog: docker/build-push-action@v6.12.0...v6.13.0

v6.12.0

Full Changelog: docker/build-push-action@v6.11.0...v6.12.0

v6.11.0

Full Changelog: docker/build-push-action@v6.10.0...v6.11.0

v6.10.0

... (truncated)

Commits
  • 2634353 Merge pull request #1381 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • c0432d2 chore: update generated content
  • 0bb1f27 set builder driver and endpoint attributes for dbc summary support
  • 5f9dbf9 chore(deps): Bump @​docker/actions-toolkit from 0.61.0 to 0.62.1
  • 0788c44 Merge pull request #1375 from crazy-max/remove-gcr
  • aa179ca e2e: remove GCR
  • 1dc7386 Merge pull request #1364 from crazy-max/history-export-cmd
  • 9c9803f chore: update generated content
  • db1f6c4 DOCKER_BUILD_EXPORT_LEGACY env var to opt-in for legacy export
  • 721e8c7 Bump @​docker/actions-toolkit from 0.59.0 to 0.61.0
  • Additional commits viewable in compare view

Updates actions/stale from 9.0.0 to 9.1.0

Release notes

Sourced from actions/stale's releases.

v9.1.0

What's Changed

New Contributors

Full Changelog: actions/stale@v9...v9.1.0

Changelog

Sourced from actions/stale's changelog.

Changelog

[9.1.0]

What's Changed

[9.0.0]

Breaking Changes

  1. Action is now stateful: If the action ends because of operations-per-run then the next run will start from the first unprocessed issue skipping the issues processed during the previous run(s). The state is reset when all the issues are processed. This should be considered for scheduling workflow runs.
  2. Version 9 of this action updated the runtime to Node.js 20. All scripts are now run with Node.js 20 instead of Node.js 16 and are affected by any breaking changes between Node.js 16 and 20.

What Else Changed

  1. Performance optimization that removes unnecessary API calls by @​dsame in #1033; fixes #792
  2. Logs displaying current GitHub API rate limit by @​dsame in #1032; addresses #1029

For more information, please read the action documentation and its section about statefulness

[4.1.1]

In scope of this release we updated actions/core to 1.10.0 for v4 and fixed issues operation count.

[8.0.0]

⚠️ This version contains breaking changes ⚠️

  • New option labels-to-remove-when-stale enables users to specify list of comma delimited labels that will be removed when the issue or PR becomes stale by @​panticmilos actions/stale#770
  • Skip deleting the branch in the upstream of a forked repo by @​dsame actions/stale#913
  • abort the build on the error by

Bumps the pipeline group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/setup-java](https://github.com/actions/setup-java) | `4.2.1` | `4.7.1` |
| [actions/checkout](https://github.com/actions/checkout) | `4.1.6` | `4.2.2` |
| [gradle/actions](https://github.com/gradle/actions) | `3.3.2` | `4.4.1` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.3.0` | `3.11.1` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `5.5.1` | `5.7.0` |
| [docker/login-action](https://github.com/docker/login-action) | `3.2.0` | `3.4.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `5.3.0` | `6.18.0` |
| [actions/stale](https://github.com/actions/stale) | `9.0.0` | `9.1.0` |



Updates `actions/setup-java` from 4.2.1 to 4.7.1
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@99b8673...c5195ef)

Updates `actions/checkout` from 4.1.6 to 4.2.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@a5ac7e5...11bd719)

Updates `gradle/actions` from 3.3.2 to 4.4.1
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](gradle/actions@v3.3.2...v4.4.1)

Updates `docker/setup-buildx-action` from 3.3.0 to 3.11.1
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@d70bba7...e468171)

Updates `docker/metadata-action` from 5.5.1 to 5.7.0
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](docker/metadata-action@8e5442c...902fa8e)

Updates `docker/login-action` from 3.2.0 to 3.4.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@0d4c9c5...74a5d14)

Updates `docker/build-push-action` from 5.3.0 to 6.18.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@2cdde99...2634353)

Updates `actions/stale` from 9.0.0 to 9.1.0
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@28ca103...5bef64f)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 4.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pipeline
- dependency-name: actions/checkout
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pipeline
- dependency-name: gradle/actions
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pipeline
- dependency-name: docker/setup-buildx-action
  dependency-version: 3.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pipeline
- dependency-name: docker/metadata-action
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pipeline
- dependency-name: docker/login-action
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pipeline
- dependency-name: docker/build-push-action
  dependency-version: 6.18.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pipeline
- dependency-name: actions/stale
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pipeline
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 10, 2025
@dependabot dependabot bot requested a review from a team as a code owner July 10, 2025 05:20
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 10, 2025
@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@MattKempfert
Copy link
Member

After #148 gets merged and this rebases, the checks should pass.. or at least get further

Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 27, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jul 27, 2025
@dependabot dependabot bot deleted the dependabot/github_actions/pipeline-cb45e95975 branch July 27, 2025 16:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants