This is an automated email from the ASF dual-hosted git repository.
shahar1 pushed a commit to branch v3-3-test
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/v3-3-test by this push:
new 6a9e83c0a7b Bump the github-actions-updates group with 5 updates
(#73344)
6a9e83c0a7b is described below
commit 6a9e83c0a7b3052d47a399a17d1e8ead3f5c21af
Author: Dependabot [bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Sat Sep 19 09:26:02 2026 +0300
Bump the github-actions-updates group with 5 updates (#73344)
Bumps the github-actions-updates group with 5 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/setup-java](https://github.com/actions/setup-java) | `6.0.0` |
`6.0.1` |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.0.1` |
`10.1.0` |
| [github/codeql-action/init](https://github.com/github/codeql-action) |
`4.37.9` | `4.38.0` |
| [github/codeql-action/autobuild](https://github.com/github/codeql-action)
| `4.37.9` | `4.38.0` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) |
`4.37.9` | `4.38.0` |
Updates `actions/setup-java` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/actions/setup-java/releases)
-
[Commits](https://github.com/actions/setup-java/compare/dd06d9cba3e5552c54d9f8ea23572deb30010f7c...de7274f081f381c8f8158605e0321c36c376e2e6)
Updates `astral-sh/setup-uv` from 10.0.1 to 10.1.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
-
[Commits](https://github.com/astral-sh/setup-uv/compare/20cfd1bf945f4377ade1205e4dbc17946fc9a30d...bec219d24cd3e171d82865faccec33120bb574f4)
Updates `github/codeql-action/init` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63)
Updates `github/codeql-action/autobuild` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63)
Updates `github/codeql-action/analyze` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63)
---
updated-dependencies:
- dependency-name: actions/setup-java
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
- dependency-name: astral-sh/setup-uv
dependency-version: 10.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-updates
- dependency-name: github/codeql-action/init
dependency-version: 4.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-updates
- dependency-name: github/codeql-action/autobuild
dependency-version: 4.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-updates
- dependency-name: github/codeql-action/analyze
dependency-version: 4.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-updates
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
.github/workflows/basic-tests.yml | 2 +-
.github/workflows/ci-amd.yml | 2 +-
.github/workflows/ci-arm.yml | 2 +-
.github/workflows/ci-notification.yml | 2 +-
.github/workflows/codeql-analysis.yml | 8 ++++----
.github/workflows/java-sdk-dependency-security.yml | 2 +-
.github/workflows/k8s-tests.yml | 2 +-
.github/workflows/notify-uv-lock-conflicts.yml | 2 +-
.github/workflows/registry-tests.yml | 2 +-
.github/workflows/scheduled-verify-release-calendar.yml | 2 +-
10 files changed, 13 insertions(+), 13 deletions(-)
diff --git a/.github/workflows/basic-tests.yml
b/.github/workflows/basic-tests.yml
index de33b0a49cb..e685797a103 100644
--- a/.github/workflows/basic-tests.yml
+++ b/.github/workflows/basic-tests.yml
@@ -115,7 +115,7 @@ jobs:
- name: "Install SVN"
run: sudo apt-get update && sudo apt-get install -y subversion
- name: "Install Java (for Apache RAT)"
- uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c #
v6.0.0
+ uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 #
v6.0.1
with:
distribution: 'temurin'
java-version: '17'
diff --git a/.github/workflows/ci-amd.yml b/.github/workflows/ci-amd.yml
index 567df5b02c1..f5700cfe1d4 100644
--- a/.github/workflows/ci-amd.yml
+++ b/.github/workflows/ci-amd.yml
@@ -983,7 +983,7 @@ jobs:
with:
persist-credentials: false
- name: Setup Java
- uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c #
v6.0.0
+ uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 #
v6.0.1
with:
distribution: 'temurin'
java-version: ${{ env.JAVA_VERSION }}
diff --git a/.github/workflows/ci-arm.yml b/.github/workflows/ci-arm.yml
index 7ea253c0987..ae1c6068a3e 100644
--- a/.github/workflows/ci-arm.yml
+++ b/.github/workflows/ci-arm.yml
@@ -976,7 +976,7 @@ jobs:
with:
persist-credentials: false
- name: Setup Java
- uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c #
v6.0.0
+ uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 #
v6.0.1
with:
distribution: 'temurin'
java-version: ${{ env.JAVA_VERSION }}
diff --git a/.github/workflows/ci-notification.yml
b/.github/workflows/ci-notification.yml
index 4cf6f087bda..d883fbe6cb3 100644
--- a/.github/workflows/ci-notification.yml
+++ b/.github/workflows/ci-notification.yml
@@ -48,7 +48,7 @@ jobs:
persist-credentials: false
- name: "Install uv"
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d #
v10.0.1
+ uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 #
v10.1.0
with:
version-file: uv.lock
diff --git a/.github/workflows/codeql-analysis.yml
b/.github/workflows/codeql-analysis.yml
index 608f5be312e..dbfb1bee0da 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -116,19 +116,19 @@ jobs:
- name: Setup Java
if: matrix.language == 'java'
- uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c #
v6.0.0
+ uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 #
v6.0.1
with:
distribution: 'temurin'
java-version: '11'
- name: Initialize CodeQL
- uses:
github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
+ uses:
github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
with:
languages: ${{ matrix.language }}
- name: Autobuild
if: matrix.language != 'java'
- uses:
github/codeql-action/autobuild@cdf488f595d80d6e07e03d4674febd5ab45fa938 #
v4.37.9
+ uses:
github/codeql-action/autobuild@b96794f015dfd88f77b49b1c93e0fa7110f94c63 #
v4.38.0
- name: Build Java SDK
if: matrix.language == 'java'
@@ -136,7 +136,7 @@ jobs:
run: ./gradlew classes testClasses
- name: Perform CodeQL Analysis
- uses:
github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
+ uses:
github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
with:
# Provide more context to the SARIF output (shows up in
run.automationDetails.id field)
category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/java-sdk-dependency-security.yml
b/.github/workflows/java-sdk-dependency-security.yml
index b7b488dafab..81743c9314c 100644
--- a/.github/workflows/java-sdk-dependency-security.yml
+++ b/.github/workflows/java-sdk-dependency-security.yml
@@ -76,7 +76,7 @@ jobs:
# 17: toolchain for scala_spark_example/
# 21: runs Gradle itself — the last entry listed is the one that sets
JAVA_HOME
- name: Install JDK toolchains
- uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c #
v6.0.0
+ uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 #
v6.0.1
with:
distribution: temurin
java-version: |
diff --git a/.github/workflows/k8s-tests.yml b/.github/workflows/k8s-tests.yml
index 4481a12d165..ecad4e15e02 100644
--- a/.github/workflows/k8s-tests.yml
+++ b/.github/workflows/k8s-tests.yml
@@ -203,7 +203,7 @@ jobs:
restore-keys: |
lang-sdk-go-v1-${{ runner.os }}-${{ runner.arch }}-
- name: "Setup Java for lang-SDK build"
- uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c #
v6.0.0
+ uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 #
v6.0.1
with:
distribution: 'temurin'
java-version: ${{ inputs.java-sdk-version }}
diff --git a/.github/workflows/notify-uv-lock-conflicts.yml
b/.github/workflows/notify-uv-lock-conflicts.yml
index ec0ea2c28f6..77b9b74e1b0 100644
--- a/.github/workflows/notify-uv-lock-conflicts.yml
+++ b/.github/workflows/notify-uv-lock-conflicts.yml
@@ -37,7 +37,7 @@ jobs:
with:
persist-credentials: false
- name: "Install uv"
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d #
v10.0.1
+ uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 #
v10.1.0
with:
version-file: uv.lock
- name: "Notify open PRs"
diff --git a/.github/workflows/registry-tests.yml
b/.github/workflows/registry-tests.yml
index 9f9a8343356..6a85c04689c 100644
--- a/.github/workflows/registry-tests.yml
+++ b/.github/workflows/registry-tests.yml
@@ -52,7 +52,7 @@ jobs:
persist-credentials: false
- name: "Install uv"
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d #
v10.0.1
+ uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 #
v10.1.0
with:
python-version: "3.12"
diff --git a/.github/workflows/scheduled-verify-release-calendar.yml
b/.github/workflows/scheduled-verify-release-calendar.yml
index a4b18d10136..5660e274bc3 100644
--- a/.github/workflows/scheduled-verify-release-calendar.yml
+++ b/.github/workflows/scheduled-verify-release-calendar.yml
@@ -35,7 +35,7 @@ jobs:
with:
persist-credentials: false
- name: "Install uv"
- uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d #
v10.0.1
+ uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 #
v10.1.0
with:
version-file: uv.lock
- name: "Verify release calendar"