This is an automated email from the ASF dual-hosted git repository.
ramanathan1504 pushed a commit to branch gha/v0
in repository https://gitbox.apache.org/repos/asf/logging-parent.git
The following commit(s) were added to refs/heads/gha/v0 by this push:
new f595285 Bump the dependencies group across 1 directory with 3 updates
(#491)
f595285 is described below
commit f595285ad17d6cdef97f873ff606a212d6a9df62
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Tue Jul 21 23:17:12 2026 +0530
Bump the dependencies group across 1 directory with 3 updates (#491)
* Bump the dependencies group across 1 directory with 3 updates
Bumps the dependencies group with 3 updates in the / directory:
[dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata),
[actions/checkout](https://github.com/actions/checkout) and
[actions/cache](https://github.com/actions/cache).
Updates `dependabot/fetch-metadata` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
-
[Commits](https://github.com/dependabot/fetch-metadata/compare/ffa630c65fa7e0ecfa0625b5ceda64399aea1b36...25dd0e34f4fe68f24cc83900b1fe3fe149efef98)
Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)
Updates `actions/cache` from 5 to 6
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v5...v6)
---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
dependency-version: 3.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: dependencies
- dependency-name: actions/checkout
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: dependencies
- dependency-name: actions/cache
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: dependencies
...
Signed-off-by: dependabot[bot] <[email protected]>
* Update process-dependabot-reusable.yaml
Fix: Add allow-unsafe-pr-checkout to unblock Dependabot changelog generation
---------
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ramanathan <[email protected]>
---
.github/workflows/analyze-dependabot-reusable.yaml | 2 +-
.github/workflows/build-reusable.yaml | 4 ++--
.github/workflows/codeql-analysis-reusable.yaml | 2 +-
.github/workflows/codeql-analysis.yaml | 2 +-
.github/workflows/deploy-release-reusable.yaml | 4 ++--
.github/workflows/deploy-site-reusable.yaml | 8 ++++----
.github/workflows/deploy-snapshot-reusable.yaml | 2 +-
.github/workflows/process-dependabot-reusable.yaml | 3 ++-
.github/workflows/verify-reproducibility-reusable.yaml | 4 ++--
9 files changed, 16 insertions(+), 15 deletions(-)
diff --git a/.github/workflows/analyze-dependabot-reusable.yaml
b/.github/workflows/analyze-dependabot-reusable.yaml
index 326656d..c5f3e90 100644
--- a/.github/workflows/analyze-dependabot-reusable.yaml
+++ b/.github/workflows/analyze-dependabot-reusable.yaml
@@ -40,7 +40,7 @@ jobs:
- name: Fetch Dependabot metadata
id: dependabot
- uses:
dependabot/fetch-metadata@ffa630c65fa7e0ecfa0625b5ceda64399aea1b36 # 3.0.0
+ uses:
dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 # 3.1.0
with:
github-token: ${{ github.token }}
diff --git a/.github/workflows/build-reusable.yaml
b/.github/workflows/build-reusable.yaml
index 315b9e8..d90aee0 100644
--- a/.github/workflows/build-reusable.yaml
+++ b/.github/workflows/build-reusable.yaml
@@ -79,7 +79,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@v6
+ uses: actions/checkout@v7
with:
repository: ${{ inputs.repository }}
ref: ${{ inputs.ref }}
@@ -116,7 +116,7 @@ jobs:
- name: Set up Node.js cache
if: inputs.site-enabled
id: nodejs-cache
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
# We should be calculating the cache key using `package-lock.json`
instead!
# See https://stackoverflow.com/a/48524475/1278899
diff --git a/.github/workflows/codeql-analysis-reusable.yaml
b/.github/workflows/codeql-analysis-reusable.yaml
index 4aae1e8..b4116ea 100644
--- a/.github/workflows/codeql-analysis-reusable.yaml
+++ b/.github/workflows/codeql-analysis-reusable.yaml
@@ -47,7 +47,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@v6
+ uses: actions/checkout@v7
- name: Initialize CodeQL
uses: github/codeql-action/init@v4
diff --git a/.github/workflows/codeql-analysis.yaml
b/.github/workflows/codeql-analysis.yaml
index 138f15b..56e08b8 100644
--- a/.github/workflows/codeql-analysis.yaml
+++ b/.github/workflows/codeql-analysis.yaml
@@ -45,7 +45,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@v6
+ uses: actions/checkout@v7
- name: Initialize CodeQL
uses: github/codeql-action/init@v4
diff --git a/.github/workflows/deploy-release-reusable.yaml
b/.github/workflows/deploy-release-reusable.yaml
index 5332ea5..fc3a143 100644
--- a/.github/workflows/deploy-release-reusable.yaml
+++ b/.github/workflows/deploy-release-reusable.yaml
@@ -69,7 +69,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@v6
+ uses: actions/checkout@v7
- name: Set up Java & GPG
uses: actions/setup-java@v5
@@ -173,7 +173,7 @@ jobs:
# Node.js cache is needed for Antora
- name: Set up Node.js cache
id: nodejs-cache
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
# We should be calculating the cache key using `package-lock.json`
instead!
# See https://stackoverflow.com/a/48524475/1278899
diff --git a/.github/workflows/deploy-site-reusable.yaml
b/.github/workflows/deploy-site-reusable.yaml
index aec007a..e19f7f7 100644
--- a/.github/workflows/deploy-site-reusable.yaml
+++ b/.github/workflows/deploy-site-reusable.yaml
@@ -60,7 +60,7 @@ jobs:
steps:
- name: Checkout the source branch
- uses: actions/checkout@v6
+ uses: actions/checkout@v7
- name: Set up Java
uses: actions/setup-java@v5
@@ -82,7 +82,7 @@ jobs:
# Node.js cache is needed for Antora
- name: Restore Node.js cache
id: nodejs-cache-restore
- uses: actions/cache/restore@v5
+ uses: actions/cache/restore@v6
with:
# The cache is OS independent
enableCrossOsArchive: true
@@ -112,7 +112,7 @@ jobs:
# Checking out a new branch will delete the `node_modules` folder,
# so we need to save the cache here.
- name: Save Node.js cache
- uses: actions/cache/save@v5
+ uses: actions/cache/save@v6
with:
key: ${{ steps.nodejs-cache-restore.outputs.cache-primary-key }}
path: node_modules
@@ -132,7 +132,7 @@ jobs:
}
- name: Checkout the target branch
- uses: actions/checkout@v6
+ uses: actions/checkout@v7
with:
ref: ${{ inputs.target-branch }}
diff --git a/.github/workflows/deploy-snapshot-reusable.yaml
b/.github/workflows/deploy-snapshot-reusable.yaml
index f5d3e84..172620d 100644
--- a/.github/workflows/deploy-snapshot-reusable.yaml
+++ b/.github/workflows/deploy-snapshot-reusable.yaml
@@ -48,7 +48,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@v6
+ uses: actions/checkout@v7
- name: Set up Java
uses: actions/setup-java@v5
diff --git a/.github/workflows/process-dependabot-reusable.yaml
b/.github/workflows/process-dependabot-reusable.yaml
index 3b90208..cc41d7b 100644
--- a/.github/workflows/process-dependabot-reusable.yaml
+++ b/.github/workflows/process-dependabot-reusable.yaml
@@ -76,9 +76,10 @@ jobs:
run-id: ${{ github.event.workflow_run.id }}
- name: Check out repository
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+ uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # 7.0.0
with:
ref: ${{ steps.pr.outputs.head-ref }}
+ allow-unsafe-pr-checkout: true
- name: Create changelog entries
shell: bash
diff --git a/.github/workflows/verify-reproducibility-reusable.yaml
b/.github/workflows/verify-reproducibility-reusable.yaml
index 53d585a..99f791e 100644
--- a/.github/workflows/verify-reproducibility-reusable.yaml
+++ b/.github/workflows/verify-reproducibility-reusable.yaml
@@ -56,7 +56,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@v6
+ uses: actions/checkout@v7
with:
ref: ${{ github.ref }}
@@ -83,7 +83,7 @@ jobs:
# preventing reproducibility results from being affected by cached
outputs from other workflows.
#
- name: Set up Maven Cache
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: ~/.m2/repository
key: "${{ env.CACHE_KEY }}-${{ runner.os }}-${{
hashFiles('**/pom.xml') }}"
