This is an automated email from the ASF dual-hosted git repository.
potiuk pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/main by this push:
new c540289ad94 Bump the github-actions-updates group with 5 updates
(#76767)
c540289ad94 is described below
commit c540289ad94a5e8ee3071233c4b1bbd137b6d72d
Author: Dependabot [bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Tue Nov 10 04:45:31 2026 +0100
Bump the github-actions-updates group with 5 updates (#76767)
Bumps the github-actions-updates group with 5 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/setup-java](https://github.com/actions/setup-java) | `6.1.0` |
`6.2.0` |
| [pnpm/action-setup](https://github.com/pnpm/action-setup) | `6.1.0` |
`6.1.1` |
| [github/codeql-action/init](https://github.com/github/codeql-action) |
`4.39.1` | `4.39.3` |
| [github/codeql-action/autobuild](https://github.com/github/codeql-action)
| `4.39.1` | `4.39.3` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) |
`4.39.1` | `4.39.3` |
Updates `actions/setup-java` from 6.1.0 to 6.2.0
- [Release notes](https://github.com/actions/setup-java/releases)
-
[Commits](https://github.com/actions/setup-java/compare/b843ebf9b913146b38da2eaa7aeddf76074ae1ad...77dd5b2ce225ea11469928ac317850245a74ae78)
Updates `pnpm/action-setup` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/pnpm/action-setup/releases)
-
[Commits](https://github.com/pnpm/action-setup/compare/ea17c68df8912ef543352723c149a84f56e3d413...73e46992e05b19abd31f2f3c20e0e7370d762115)
Updates `github/codeql-action/init` from 4.39.1 to 4.39.3
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/9b3254085494b55a0f7c4c2b3d2d52cc712ce370...33d7b85da1a04171e211befe2c739303b9a4c066)
Updates `github/codeql-action/autobuild` from 4.39.1 to 4.39.3
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/9b3254085494b55a0f7c4c2b3d2d52cc712ce370...33d7b85da1a04171e211befe2c739303b9a4c066)
Updates `github/codeql-action/analyze` from 4.39.1 to 4.39.3
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/9b3254085494b55a0f7c4c2b3d2d52cc712ce370...33d7b85da1a04171e211befe2c739303b9a4c066)
---
updated-dependencies:
- dependency-name: actions/setup-java
dependency-version: 6.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-updates
- dependency-name: pnpm/action-setup
dependency-version: 6.1.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
- dependency-name: github/codeql-action/init
dependency-version: 4.39.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
- dependency-name: github/codeql-action/autobuild
dependency-version: 4.39.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
- dependency-name: github/codeql-action/analyze
dependency-version: 4.39.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
.github/workflows/airflow-e2e-tests.yml | 4 ++--
.github/workflows/basic-tests.yml | 4 ++--
.github/workflows/ci-amd.yml | 8 ++++----
.github/workflows/ci-arm.yml | 8 ++++----
.github/workflows/codeql-analysis.yml | 8 ++++----
.github/workflows/java-sdk-dependabot-verification-metadata.yml | 2 +-
.github/workflows/java-sdk-dependency-security.yml | 2 +-
.github/workflows/java-sdk-release-verify.yml | 4 ++--
.github/workflows/k8s-tests.yml | 4 ++--
.github/workflows/registry-backfill.yml | 2 +-
.github/workflows/registry-build.yml | 2 +-
.github/workflows/ui-e2e-tests.yml | 2 +-
12 files changed, 25 insertions(+), 25 deletions(-)
diff --git a/.github/workflows/airflow-e2e-tests.yml
b/.github/workflows/airflow-e2e-tests.yml
index 184eeb6ac73..a49334cd918 100644
--- a/.github/workflows/airflow-e2e-tests.yml
+++ b/.github/workflows/airflow-e2e-tests.yml
@@ -135,7 +135,7 @@ jobs:
# arch-specific auto-provisioned JDKs (the example pins a Java 11
toolchain).
- name: "Setup Java for the Java SDK build"
if: inputs.e2e_test_mode == 'java_sdk'
- uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad #
v6.1.0
+ uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 #
v6.2.0
with:
distribution: 'temurin'
java-version: ${{ inputs.java-sdk-version }}
@@ -175,7 +175,7 @@ jobs:
e2e-go-sdk-go-v1-${{ runner.os }}-${{ runner.arch }}-
- name: "Setup pnpm for the TypeScript SDK build"
if: inputs.e2e_test_mode == 'ts_sdk'
- uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 #
v6.1.0
+ uses: pnpm/action-setup@73e46992e05b19abd31f2f3c20e0e7370d762115 #
v6.1.1
with:
package_json_file: ts-sdk/package.json
run_install: false
diff --git a/.github/workflows/basic-tests.yml
b/.github/workflows/basic-tests.yml
index 86f59d5f1ac..136c5c65146 100644
--- a/.github/workflows/basic-tests.yml
+++ b/.github/workflows/basic-tests.yml
@@ -131,7 +131,7 @@ jobs:
- name: "Install SVN"
run: sudo apt-get update && sudo apt-get install -y subversion
- name: "Install Java (for Apache RAT)"
- uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad #
v6.1.0
+ uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 #
v6.2.0
with:
distribution: 'temurin'
java-version: '17'
@@ -229,7 +229,7 @@ jobs:
- name: "RunsOn cost summary"
uses: ./.github/actions/runs-on-cost-summary
- name: Setup pnpm
- uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 #
v6.1.0
+ uses: pnpm/action-setup@73e46992e05b19abd31f2f3c20e0e7370d762115 #
v6.1.1
with:
version: 9
run_install: false
diff --git a/.github/workflows/ci-amd.yml b/.github/workflows/ci-amd.yml
index cf6a0dbe352..10eca8e6b66 100644
--- a/.github/workflows/ci-amd.yml
+++ b/.github/workflows/ci-amd.yml
@@ -1338,7 +1338,7 @@ jobs:
- name: "RunsOn cost summary"
uses: ./.github/actions/runs-on-cost-summary
- name: Setup pnpm
- uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 #
v6.1.0
+ uses: pnpm/action-setup@73e46992e05b19abd31f2f3c20e0e7370d762115 #
v6.1.1
with:
package_json_file: ts-sdk/package.json
run_install: false
@@ -1380,7 +1380,7 @@ jobs:
- name: "RunsOn cost summary"
uses: ./.github/actions/runs-on-cost-summary
- name: Setup Java
- uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad #
v6.1.0
+ uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 #
v6.2.0
with:
distribution: 'temurin'
java-version: ${{ env.JAVA_VERSION }}
@@ -1422,13 +1422,13 @@ jobs:
cache-dependency-path: go-sdk/go.sum
- name: Setup Java
if: matrix.sdk == 'java'
- uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad #
v6.1.0
+ uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 #
v6.2.0
with:
distribution: 'temurin'
java-version: ${{ env.JAVA_VERSION }}
- name: Setup pnpm
if: matrix.sdk == 'ts'
- uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 #
v6.1.0
+ uses: pnpm/action-setup@73e46992e05b19abd31f2f3c20e0e7370d762115 #
v6.1.1
with:
package_json_file: ts-sdk/package.json
run_install: false
diff --git a/.github/workflows/ci-arm.yml b/.github/workflows/ci-arm.yml
index 82a8214001b..6047793ec1e 100644
--- a/.github/workflows/ci-arm.yml
+++ b/.github/workflows/ci-arm.yml
@@ -1214,7 +1214,7 @@ jobs:
- name: "RunsOn cost summary"
uses: ./.github/actions/runs-on-cost-summary
- name: Setup pnpm
- uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 #
v6.1.0
+ uses: pnpm/action-setup@73e46992e05b19abd31f2f3c20e0e7370d762115 #
v6.1.1
with:
package_json_file: ts-sdk/package.json
run_install: false
@@ -1256,7 +1256,7 @@ jobs:
- name: "RunsOn cost summary"
uses: ./.github/actions/runs-on-cost-summary
- name: Setup Java
- uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad #
v6.1.0
+ uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 #
v6.2.0
with:
distribution: 'temurin'
java-version: ${{ env.JAVA_VERSION }}
@@ -1298,13 +1298,13 @@ jobs:
cache-dependency-path: go-sdk/go.sum
- name: Setup Java
if: matrix.sdk == 'java'
- uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad #
v6.1.0
+ uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 #
v6.2.0
with:
distribution: 'temurin'
java-version: ${{ env.JAVA_VERSION }}
- name: Setup pnpm
if: matrix.sdk == 'ts'
- uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 #
v6.1.0
+ uses: pnpm/action-setup@73e46992e05b19abd31f2f3c20e0e7370d762115 #
v6.1.1
with:
package_json_file: ts-sdk/package.json
run_install: false
diff --git a/.github/workflows/codeql-analysis.yml
b/.github/workflows/codeql-analysis.yml
index e0de8fc5662..739efd8aae9 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -131,19 +131,19 @@ jobs:
- name: Setup Java
if: matrix.language == 'java'
- uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad #
v6.1.0
+ uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 #
v6.2.0
with:
distribution: 'temurin'
java-version: '11'
- name: Initialize CodeQL
- uses:
github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
+ uses:
github/codeql-action/init@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3
with:
languages: ${{ matrix.language }}
- name: Autobuild
if: matrix.language != 'java'
- uses:
github/codeql-action/autobuild@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 #
v4.39.1
+ uses:
github/codeql-action/autobuild@33d7b85da1a04171e211befe2c739303b9a4c066 #
v4.39.3
- name: Build Java SDK
if: matrix.language == 'java'
@@ -151,7 +151,7 @@ jobs:
run: ./gradlew classes testClasses
- name: Perform CodeQL Analysis
- uses:
github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
+ uses:
github/codeql-action/analyze@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3
with:
# Provide more context to the SARIF output (shows up in
run.automationDetails.id field)
category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/java-sdk-dependabot-verification-metadata.yml
b/.github/workflows/java-sdk-dependabot-verification-metadata.yml
index 81b145465e4..0dd460b5ef4 100644
--- a/.github/workflows/java-sdk-dependabot-verification-metadata.yml
+++ b/.github/workflows/java-sdk-dependabot-verification-metadata.yml
@@ -77,7 +77,7 @@ jobs:
persist-credentials: false
# 11: main build toolchain, 17/21: example toolchains + Gradle runtime.
- name: Install JDK toolchains
- uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad #
v6.1.0
+ uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 #
v6.2.0
with:
distribution: temurin
java-version: |
diff --git a/.github/workflows/java-sdk-dependency-security.yml
b/.github/workflows/java-sdk-dependency-security.yml
index f5350b022fe..c4ad6ac8858 100644
--- a/.github/workflows/java-sdk-dependency-security.yml
+++ b/.github/workflows/java-sdk-dependency-security.yml
@@ -50,7 +50,7 @@ jobs:
# 17: toolchain for scala_spark_example/
# 21: runs Gradle itself — the last entry listed is the one that sets
JAVA_HOME
- name: Install JDK toolchains
- uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad #
v6.1.0
+ uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 #
v6.2.0
with:
distribution: temurin
java-version: |
diff --git a/.github/workflows/java-sdk-release-verify.yml
b/.github/workflows/java-sdk-release-verify.yml
index fcc0e71e82d..ad05c5c122d 100644
--- a/.github/workflows/java-sdk-release-verify.yml
+++ b/.github/workflows/java-sdk-release-verify.yml
@@ -76,7 +76,7 @@ jobs:
fetch-depth: 0
persist-credentials: false
- name: Set up JDK ${{ env.JAVA_VERSION }}
- uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad #
v6.1.0
+ uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 #
v6.2.0
with:
distribution: temurin
java-version: ${{ env.JAVA_VERSION }}
@@ -133,7 +133,7 @@ jobs:
fetch-depth: 0
persist-credentials: false
- name: Set up JDK ${{ env.JAVA_VERSION }}
- uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad #
v6.1.0
+ uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 #
v6.2.0
with:
distribution: temurin
java-version: ${{ env.JAVA_VERSION }}
diff --git a/.github/workflows/k8s-tests.yml b/.github/workflows/k8s-tests.yml
index df0b080b618..90ce5a9ffee 100644
--- a/.github/workflows/k8s-tests.yml
+++ b/.github/workflows/k8s-tests.yml
@@ -206,7 +206,7 @@ jobs:
restore-keys: |
lang-sdk-go-v1-${{ runner.os }}-${{ runner.arch }}-
- name: "Setup Java for lang-SDK build"
- uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad #
v6.1.0
+ uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 #
v6.2.0
with:
distribution: 'temurin'
java-version: ${{ inputs.java-sdk-version }}
@@ -220,7 +220,7 @@ jobs:
restore-keys: |
lang-sdk-gradle-v1-${{ runner.os }}-${{ runner.arch }}-
- name: "Setup pnpm for the lang-SDK TypeScript build"
- uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 #
v6.1.0
+ uses: pnpm/action-setup@73e46992e05b19abd31f2f3c20e0e7370d762115 #
v6.1.1
with:
package_json_file: ts-sdk/package.json
run_install: false
diff --git a/.github/workflows/registry-backfill.yml
b/.github/workflows/registry-backfill.yml
index 58085f9ae61..41c15b307db 100644
--- a/.github/workflows/registry-backfill.yml
+++ b/.github/workflows/registry-backfill.yml
@@ -250,7 +250,7 @@ jobs:
--provider "${PROVIDER}" ${VERSION_ARGS}
- name: "Setup pnpm"
- uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 #
v6.1.0
+ uses: pnpm/action-setup@73e46992e05b19abd31f2f3c20e0e7370d762115 #
v6.1.1
with:
version: 10
diff --git a/.github/workflows/registry-build.yml
b/.github/workflows/registry-build.yml
index 2e7cc9c8516..3c9e42e279d 100644
--- a/.github/workflows/registry-build.yml
+++ b/.github/workflows/registry-build.yml
@@ -325,7 +325,7 @@ jobs:
fi
- name: "Setup pnpm"
- uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 #
v6.1.0
+ uses: pnpm/action-setup@73e46992e05b19abd31f2f3c20e0e7370d762115 #
v6.1.1
with:
version: 10
diff --git a/.github/workflows/ui-e2e-tests.yml
b/.github/workflows/ui-e2e-tests.yml
index 22c24913a1d..96e68f83e12 100644
--- a/.github/workflows/ui-e2e-tests.yml
+++ b/.github/workflows/ui-e2e-tests.yml
@@ -121,7 +121,7 @@ jobs:
uses: ./.github/actions/breeze
if: github.event_name == 'workflow_dispatch'
- name: "Setup pnpm"
- uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 #
v6.1.0
+ uses: pnpm/action-setup@73e46992e05b19abd31f2f3c20e0e7370d762115 #
v6.1.1
with:
version: 9
run_install: false
