This is an automated email from the ASF dual-hosted git repository.
boris-petrov pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/shiro.git
The following commit(s) were added to refs/heads/main by this push:
new 3e4f9e19d chore(deps): bump the github-actions-dependencies group with
6 updates (#2850)
3e4f9e19d is described below
commit 3e4f9e19dfb2fc2d8fe4ad21d7ef1ba90ee10aba
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Thu Aug 6 10:33:01 2026 +0300
chore(deps): bump the github-actions-dependencies group with 6 updates
(#2850)
Bumps the github-actions-dependencies group with 6 updates:
| Package | From | To |
| --- | --- | --- |
|
[apache/infrastructure-actions/allowlist-check](https://github.com/apache/infrastructure-actions)
| `b5c4adb8b332838f1b8e15c5e055a4cbefd6e693` |
`175b9212cf7c7221c0f8d10d0be3cbc758599e13` |
| [actions/setup-java](https://github.com/actions/setup-java) | `5.6.0` |
`5.7.0` |
| [github/codeql-action/init](https://github.com/github/codeql-action) |
`4.37.3` | `4.37.4` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) |
`4.37.3` | `4.37.4` |
| [j178/prek-action](https://github.com/j178/prek-action) | `2.0.6` |
`3.0.0` |
|
[github/codeql-action/upload-sarif](https://github.com/github/codeql-action) |
`4.37.3` | `4.37.4` |
Updates `apache/infrastructure-actions/allowlist-check` from
b5c4adb8b332838f1b8e15c5e055a4cbefd6e693 to
175b9212cf7c7221c0f8d10d0be3cbc758599e13
-
[Commits](https://github.com/apache/infrastructure-actions/compare/b5c4adb8b332838f1b8e15c5e055a4cbefd6e693...175b9212cf7c7221c0f8d10d0be3cbc758599e13)
Updates `actions/setup-java` from 5.6.0 to 5.7.0
- [Release notes](https://github.com/actions/setup-java/releases)
-
[Commits](https://github.com/actions/setup-java/compare/03ad4de0992f5dab5e18fcb136590ce7c4a0ac95...b6effb05e454b25005698d916606bdc6ffcbf961)
Updates `github/codeql-action/init` from 4.37.3 to 4.37.4
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...f205ea1c3313d32999d8d6a48b4f6530d4437b38)
Updates `github/codeql-action/analyze` from 4.37.3 to 4.37.4
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...f205ea1c3313d32999d8d6a48b4f6530d4437b38)
Updates `j178/prek-action` from 2.0.6 to 3.0.0
- [Release notes](https://github.com/j178/prek-action/releases)
-
[Commits](https://github.com/j178/prek-action/compare/5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16...4e14d07f9231acabce116ccfca13b13dd9755ece)
Updates `github/codeql-action/upload-sarif` from 4.37.3 to 4.37.4
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...f205ea1c3313d32999d8d6a48b4f6530d4437b38)
---
updated-dependencies:
- dependency-name: apache/infrastructure-actions/allowlist-check
dependency-version: 175b9212cf7c7221c0f8d10d0be3cbc758599e13
dependency-type: direct:production
dependency-group: github-actions-dependencies
- dependency-name: actions/setup-java
dependency-version: 5.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-dependencies
- dependency-name: github/codeql-action/init
dependency-version: 4.37.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-dependencies
- dependency-name: github/codeql-action/analyze
dependency-version: 4.37.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-dependencies
- dependency-name: j178/prek-action
dependency-version: 3.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions-dependencies
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.37.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-dependencies
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
.github/workflows/asf-allowlist-check.yml | 2 +-
.github/workflows/codeql.yml | 6 +++---
.github/workflows/maven.yml | 4 ++--
.github/workflows/pre-commit-manual.yml | 2 +-
.github/workflows/pre-commit.yml | 2 +-
.github/workflows/scorecards.yml | 2 +-
6 files changed, 9 insertions(+), 9 deletions(-)
diff --git a/.github/workflows/asf-allowlist-check.yml
b/.github/workflows/asf-allowlist-check.yml
index 6e3b693fc..cb9e34189 100644
--- a/.github/workflows/asf-allowlist-check.yml
+++ b/.github/workflows/asf-allowlist-check.yml
@@ -31,4 +31,4 @@ jobs:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
- - uses:
apache/infrastructure-actions/allowlist-check@b5c4adb8b332838f1b8e15c5e055a4cbefd6e693
# main
+ - uses:
apache/infrastructure-actions/allowlist-check@175b9212cf7c7221c0f8d10d0be3cbc758599e13
# main
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 2327ae8b5..18c338940 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -67,7 +67,7 @@ jobs:
persist-credentials: false
- name: Set up JDK
- uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 #
v5.6.0
+ uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 #
v5.7.0
with:
java-version: 25
distribution: temurin
@@ -81,7 +81,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses:
github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
+ uses:
github/codeql-action/init@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a
config file.
@@ -107,6 +107,6 @@ jobs:
# ./location_of_script_within_repo/buildscript.sh
- name: Perform CodeQL Analysis
- uses:
github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
+ uses:
github/codeql-action/analyze@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
with:
category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index b97c6ebb9..f99c6396b 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -39,7 +39,7 @@ jobs:
persist-credentials: false
- name: Set up JDK
- uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 #
v5.6.0
+ uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 #
v5.7.0
with:
java-version: 25
distribution: temurin
@@ -89,7 +89,7 @@ jobs:
persist-credentials: false
- name: Set up JDK
- uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 #
v5.6.0
+ uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 #
v5.7.0
with:
java-version: ${{ matrix.jdk }}
distribution: ${{ matrix.dist }}
diff --git a/.github/workflows/pre-commit-manual.yml
b/.github/workflows/pre-commit-manual.yml
index 7ac753188..3c4e9e326 100644
--- a/.github/workflows/pre-commit-manual.yml
+++ b/.github/workflows/pre-commit-manual.yml
@@ -33,7 +33,7 @@ jobs:
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
- - uses: j178/prek-action@5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16 #
v2.0.6
+ - uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece #
v3.0.0
with:
install-only: true
- name: Run manual pre-commit hooks
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 89eb221cc..b8d9e7420 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -33,6 +33,6 @@ jobs:
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
- - uses: j178/prek-action@5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16 #
v2.0.6
+ - uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece #
v3.0.0
with:
extra-args: --all-files
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index 2b26d9858..2cfa87de3 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -75,6 +75,6 @@ jobs:
# Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning"
- uses:
github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 #
tag=v2
+ uses:
github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 #
tag=v2
with:
sarif_file: results.sarif
