dependabot[bot] opened a new pull request, #8911: URL: https://github.com/apache/hadoop/pull/8911
Bumps the github-actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `3` | `7` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [actions/labeler](https://github.com/actions/labeler) | `4.3.0` | `7.0.0` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` | | [actions/stale](https://github.com/actions/stale) | `10` | `11` | | [actions/setup-java](https://github.com/actions/setup-java) | `5` | `6` | | [actions/cache/restore](https://github.com/actions/cache) | `5.0.5` | `6.1.0` | | [actions/cache/save](https://github.com/actions/cache) | `5.0.5` | `6.1.0` | Updates `actions/checkout` from 3 to 7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/releases";>actions/checkout's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <ul> <li>block checking out fork pr for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454";>actions/checkout#2454</a></li> <li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2458";>actions/checkout#2458</a></li> <li>Bump flatted from 3.3.1 to 3.4.2 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2460";>actions/checkout#2460</a></li> <li>Bump js-yaml from 4.1.0 to 4.2.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2461";>actions/checkout#2461</a></li> <li>Bump <code>@actions/core</code> and <code>@actions/tool-cache</code> and Remove uuid by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2459";>actions/checkout#2459</a></li> <li>upgrade module to esm and update dependencies by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2463";>actions/checkout#2463</a></li> <li>Bump the minor-npm-dependencies group across 1 directory with 3 updates by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2462";>actions/checkout#2462</a></li> <li>getting ready for checkout v7 release by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2464";>actions/checkout#2464</a></li> <li>update error wording by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2467";>actions/checkout#2467</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2454";>actions/checkout#2454</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.3...v7.0.0";>https://github.com/actions/checkout/compare/v6.0.3...v7.0.0</a></p> <h2>v6.1.0</h2> <h2>What's Changed</h2> <ul> <li><strong>[BREAKING]</strong> backport <code>allow-unsafe-pr-checkout</code> to v6 by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2500";>actions/checkout#2500</a></li> <li>backport fixes to releases-v6 by <a href="https://github.com/aiqiaoy";><code>@aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2527";>actions/checkout#2527</a></li> </ul> <p><a href="https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/";>https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/</a> for more details about this breaking change</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.3...v6.1.0";>https://github.com/actions/checkout/compare/v6.0.3...v6.1.0</a></p> <h2>v6.0.3</h2> <h2>What's Changed</h2> <ul> <li>Update changelog by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2357";>actions/checkout#2357</a></li> <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth";><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414";>actions/checkout#2414</a></li> <li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth";><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439";>actions/checkout#2439</a></li> <li>Update changelog for v6.0.3 by <a href="https://github.com/yaananth";><code>@yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2446";>actions/checkout#2446</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/yaananth";><code>@yaananth</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2414";>actions/checkout#2414</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6...v6.0.3";>https://github.com/actions/checkout/compare/v6...v6.0.3</a></p> <h2>v6.0.2</h2> <h2>What's Changed</h2> <ul> <li>Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by <a href="https://github.com/TingluoHuang";><code>@TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2355";>actions/checkout#2355</a></li> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356";>actions/checkout#2356</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.1...v6.0.2";>https://github.com/actions/checkout/compare/v6.0.1...v6.0.2</a></p> <h2>v6.0.1</h2> <h2>What's Changed</h2> <ul> <li>Update all references from v5 and v4 to v6 by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2314";>actions/checkout#2314</a></li> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327";>actions/checkout#2327</a></li> <li>Clarify v6 README by <a href="https://github.com/ericsciple";><code>@ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2328";>actions/checkout#2328</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/checkout/commit/3d3c42e5aac5ba805825da76410c181273ba90b1";><code>3d3c42e</code></a> prep v7.0.1 release (<a href="https://redirect.github.com/actions/checkout/issues/2531";>#2531</a>)</li> <li><a href="https://github.com/actions/checkout/commit/28802689a136bfcdb721715abd713740beecbe07";><code>2880268</code></a> escape values passed to --unset (<a href="https://redirect.github.com/actions/checkout/issues/2530";>#2530</a>)</li> <li><a href="https://github.com/actions/checkout/commit/12cd2235efa0937479335606d7c3ac9f6c0973b1";><code>12cd223</code></a> trim only ascii whitespace for branch (<a href="https://redirect.github.com/actions/checkout/issues/2521";>#2521</a>)</li> <li><a href="https://github.com/actions/checkout/commit/62661c4e71a304b2823ed026347b8d34c3eac541";><code>62661c4</code></a> skip running unsafe pr check if input is default (<a href="https://redirect.github.com/actions/checkout/issues/2518";>#2518</a>)</li> <li><a href="https://github.com/actions/checkout/commit/e8d4307400f9427dba7cb98e488d6ab85f1cec5f";><code>e8d4307</code></a> Bump the minor-actions-dependencies group with 2 updates (<a href="https://redirect.github.com/actions/checkout/issues/2499";>#2499</a>)</li> <li><a href="https://github.com/actions/checkout/commit/631c942040754b6e095e929c1677c07e10ed4f87";><code>631c942</code></a> eslint 9 (<a href="https://redirect.github.com/actions/checkout/issues/2474";>#2474</a>)</li> <li><a href="https://github.com/actions/checkout/commit/4f1f4aec02e41874fa0262ea8ff5172d7978ad1e";><code>4f1f4ae</code></a> Bump actions/upload-artifact from 4 to 7 (<a href="https://redirect.github.com/actions/checkout/issues/2476";>#2476</a>)</li> <li><a href="https://github.com/actions/checkout/commit/ba097532fb203f7e88c9c3c0b899b49469908a92";><code>ba09753</code></a> Bump actions/checkout from 6 to 7 (<a href="https://redirect.github.com/actions/checkout/issues/2488";>#2488</a>)</li> <li><a href="https://github.com/actions/checkout/commit/b9e0990d219a03df7633c93f6f005a8fecbcab22";><code>b9e0990</code></a> Bump docker/login-action from 3.3.0 to 4.2.0 (<a href="https://redirect.github.com/actions/checkout/issues/2479";>#2479</a>)</li> <li><a href="https://github.com/actions/checkout/commit/e8cb398be4a550817e382abf69e4c12c76fce1f2";><code>e8cb398</code></a> Bump docker/build-push-action from 6.5.0 to 7.2.0 (<a href="https://redirect.github.com/actions/checkout/issues/2478";>#2478</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/checkout/compare/v3...v7";>compare view</a></li> </ul> </details> <br /> Updates `actions/upload-artifact` from 4 to 7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/upload-artifact/releases";>actions/upload-artifact's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>v7 What's new</h2> <h3>Direct Uploads</h3> <p>Adds support for uploading single files directly (unzipped). Callers can set the new <code>archive</code> parameter to <code>false</code> to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The <code>name</code> parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.</p> <h3>ESM</h3> <p>To support new versions of the <code>@actions/*</code> packages, we've upgraded the package to ESM.</p> <h2>What's Changed</h2> <ul> <li>Add proxy integration test by <a href="https://github.com/Link";><code>@Link</code></a>- in <a href="https://redirect.github.com/actions/upload-artifact/pull/754";>actions/upload-artifact#754</a></li> <li>Upgrade the module to ESM and bump dependencies by <a href="https://github.com/danwkennedy";><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/762";>actions/upload-artifact#762</a></li> <li>Support direct file uploads by <a href="https://github.com/danwkennedy";><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/764";>actions/upload-artifact#764</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Link";><code>@Link</code></a>- made their first contribution in <a href="https://redirect.github.com/actions/upload-artifact/pull/754";>actions/upload-artifact#754</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/upload-artifact/compare/v6...v7.0.0";>https://github.com/actions/upload-artifact/compare/v6...v7.0.0</a></p> <h2>v6.0.0</h2> <h2>v6 - What's new</h2> <blockquote> <p>[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (<code>runs.using: node24</code>) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.</p> </blockquote> <h3>Node.js 24</h3> <p>This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.</p> <h2>What's Changed</h2> <ul> <li>Upload Artifact Node 24 support by <a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/719";>actions/upload-artifact#719</a></li> <li>fix: update <code>@actions/artifact</code> for Node.js 24 punycode deprecation by <a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/744";>actions/upload-artifact#744</a></li> <li>prepare release v6.0.0 for Node.js 24 support by <a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/745";>actions/upload-artifact#745</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0";>https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0</a></p> <h2>v5.0.0</h2> <h2>What's Changed</h2> <p><strong>BREAKING CHANGE:</strong> this update supports Node <code>v24.x</code>. This is not a breaking change per-se but we're treating it as such.</p> <ul> <li>Update README.md by <a href="https://github.com/GhadimiR";><code>@GhadimiR</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/681";>actions/upload-artifact#681</a></li> <li>Update README.md by <a href="https://github.com/nebuk89";><code>@nebuk89</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/712";>actions/upload-artifact#712</a></li> <li>Readme: spell out the first use of GHES by <a href="https://github.com/danwkennedy";><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/727";>actions/upload-artifact#727</a></li> <li>Update GHES guidance to include reference to Node 20 version by <a href="https://github.com/patrikpolyak";><code>@patrikpolyak</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/725";>actions/upload-artifact#725</a></li> <li>Bump <code>@actions/artifact</code> to <code>v4.0.0</code></li> <li>Prepare <code>v5.0.0</code> by <a href="https://github.com/danwkennedy";><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/734";>actions/upload-artifact#734</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/upload-artifact/commit/cf430e030ddbb5b0abf93d22962f4752f3646cd9";><code>cf430e0</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/822";>#822</a> from actions/tunc-d-prepare-upload-v7-0-2</li> <li><a href="https://github.com/actions/upload-artifact/commit/c2acdedd35a8824a1552c7137f8c18288c3ea469";><code>c2acded</code></a> chore: prepare v7.0.2 release</li> <li><a href="https://github.com/actions/upload-artifact/commit/4687c1bbaa0a58abb517d90b4bbade6754c80c1a";><code>4687c1b</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/821";>#821</a> from actions/tunc-d-upload-artifact-package-bump</li> <li><a href="https://github.com/actions/upload-artifact/commit/8cbe1bebdb858105d8fdd88f81404d4de4595719";><code>8cbe1be</code></a> Bump <code>@actions/artifact</code> to 6.3.1</li> <li><a href="https://github.com/actions/upload-artifact/commit/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a";><code>043fb46</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/797";>#797</a> from actions/yacaovsnc/update-dependency</li> <li><a href="https://github.com/actions/upload-artifact/commit/634250c1388765ea7ed0f053e636f1f399000b94";><code>634250c</code></a> Include changes in typespec/ts-http-runtime 0.3.5</li> <li><a href="https://github.com/actions/upload-artifact/commit/e454baaac2be505c9450e11b8f3215c6fc023ce8";><code>e454baa</code></a> Readme: bump all the example versions to v7 (<a href="https://redirect.github.com/actions/upload-artifact/issues/796";>#796</a>)</li> <li><a href="https://github.com/actions/upload-artifact/commit/74fad66b98a6d799dc004d3353ccd0e6f6b2530e";><code>74fad66</code></a> Update the readme with direct upload details (<a href="https://redirect.github.com/actions/upload-artifact/issues/795";>#795</a>)</li> <li><a href="https://github.com/actions/upload-artifact/commit/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f";><code>bbbca2d</code></a> Support direct file uploads (<a href="https://redirect.github.com/actions/upload-artifact/issues/764";>#764</a>)</li> <li><a href="https://github.com/actions/upload-artifact/commit/589182c5a4cec8920b8c1bce3e2fab1c97a02296";><code>589182c</code></a> Upgrade the module to ESM and bump dependencies (<a href="https://redirect.github.com/actions/upload-artifact/issues/762";>#762</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/upload-artifact/compare/v4...v7";>compare view</a></li> </ul> </details> <br /> Updates `actions/labeler` from 4.3.0 to 7.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/labeler/releases";>actions/labeler's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <h3>Enhancements:</h3> <ul> <li>Migrate to ESM and update dependencies by <a href="https://github.com/chiranjib-swain";><code>@chiranjib-swain</code></a> in <a href="https://redirect.github.com/actions/labeler/pull/949";>actions/labeler#949</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/labeler/compare/v6...v7.0.0";>https://github.com/actions/labeler/compare/v6...v7.0.0</a></p> <h2>v6.2.0</h2> <h2>What's Changed</h2> <h3>Bug Fix</h3> <ul> <li>Improve PR number validation and warning messages in input handling by <a href="https://github.com/chiranjib-swain";><code>@chiranjib-swain</code></a> in <a href="https://redirect.github.com/actions/labeler/pull/939";>actions/labeler#939</a></li> </ul> <h3>Dependency Updates</h3> <ul> <li>Bump js-yaml to 4.2.0, apply npm audit fix, and add undici override by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/labeler/pull/943";>actions/labeler#943</a></li> <li>Bump <code>@typescript-eslint/eslint-plugin</code> from 8.59.1 to 8.61.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/labeler/pull/942";>actions/labeler#942</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/labeler/compare/v6.1.0...v6.2.0";>https://github.com/actions/labeler/compare/v6.1.0...v6.2.0</a></p> <h2>v6.1.0</h2> <h2>Enhancements</h2> <ul> <li>Add changed-files-labels-limit and max-files-changed configuration options to cap the number of labels added by <a href="https://github.com/bluca";><code>@bluca</code></a> in <a href="https://redirect.github.com/actions/labeler/pull/923";>actions/labeler#923</a></li> </ul> <h2>Bug Fixes</h2> <ul> <li>Improve Labeler Action documentation and permission error handling by <a href="https://github.com/chiranjib-swain";><code>@chiranjib-swain</code></a> in <a href="https://redirect.github.com/actions/labeler/pull/897";>actions/labeler#897</a></li> <li>Preserve manually added labels during workflow runs and refine label synchronization logic by <a href="https://github.com/chiranjib-swain";><code>@chiranjib-swain</code></a> in <a href="https://redirect.github.com/actions/labeler/pull/917";>actions/labeler#917</a></li> </ul> <h2>Dependency Updates</h2> <ul> <li>Upgrade brace-expansion from 1.1.11 to 1.1.12 and document breaking changes in v6 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/labeler/pull/877";>actions/labeler#877</a></li> <li>Upgrade minimatch from 10.0.1 to 10.2.3 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/labeler/pull/926";>actions/labeler#926</a></li> <li>Upgrade dependencies (<code>@actions/core</code>, <code>@actions/github</code>, js-yaml, minimatch, <a href="https://github.com/typescript-eslint";><code>@typescript-eslint</code></a>) by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/actions/labeler/pull/934";>actions/labeler#934</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/chiranjib-swain";><code>@chiranjib-swain</code></a> made their first contribution in <a href="https://redirect.github.com/actions/labeler/pull/897";>actions/labeler#897</a></li> <li><a href="https://github.com/bluca";><code>@bluca</code></a> made their first contribution in <a href="https://redirect.github.com/actions/labeler/pull/923";>actions/labeler#923</a></li> <li><a href="https://github.com/Copilot";><code>@Copilot</code></a> made their first contribution in <a href="https://redirect.github.com/actions/labeler/pull/934";>actions/labeler#934</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/labeler/compare/v6...v6.1.0";>https://github.com/actions/labeler/compare/v6...v6.1.0</a></p> <h2>v6.0.1</h2> <h2>What's Changed</h2> <ul> <li>Upgrade publish-action from 0.2.2 to 0.4.0 by <a href="https://github.com/aparnajyothi-y";><code>@aparnajyothi-y</code></a> in <a href="https://redirect.github.com/actions/labeler/pull/901";>actions/labeler#901</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/aparnajyothi-y";><code>@aparnajyothi-y</code></a> made their first contribution in <a href="https://redirect.github.com/actions/labeler/pull/901";>actions/labeler#901</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/labeler/compare/v6.0.0...v6.0.1";>https://github.com/actions/labeler/compare/v6.0.0...v6.0.1</a></p> <h2>v6.0.0</h2> <h2>What's Changed</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/labeler/commit/bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13";><code>bf12e9b</code></a> feat: migrate to ESM and update dependencies (<a href="https://redirect.github.com/actions/labeler/issues/949";>#949</a>)</li> <li><a href="https://github.com/actions/labeler/commit/b8dd2d9be0f68b860e7dae5dae7d772984eacd6d";><code>b8dd2d9</code></a> Bump <code>@typescript-eslint/eslint-plugin</code> from 8.59.1 to 8.61.1 (<a href="https://redirect.github.com/actions/labeler/issues/942";>#942</a>)</li> <li><a href="https://github.com/actions/labeler/commit/53affe8ca4150876fc7eb7d268d3a1f74511a244";><code>53affe8</code></a> Bump js-yaml to 4.2.0, apply npm audit fix, and add undici override for 0 vul...</li> <li><a href="https://github.com/actions/labeler/commit/f612d9ad188e81643862c2de70f57fbb1d17abd1";><code>f612d9a</code></a> Fix: Improve PR number validation and warning messages in input handling (<a href="https://redirect.github.com/actions/labeler/issues/939";>#939</a>)</li> <li><a href="https://github.com/actions/labeler/commit/f27b608878404679385c85cfa523b85ccb86e213";><code>f27b608</code></a> chore: upgrade dependencies (<code>@actions/core</code>, <code>@actions/github</code>, js-yaml, minimat...</li> <li><a href="https://github.com/actions/labeler/commit/c5dadc2a45784a4b6adfcd20fea3465da3a5f904";><code>c5dadc2</code></a> Add 'changed-files-labels-limit' and 'max-files-changed' configs to allow cap...</li> <li><a href="https://github.com/actions/labeler/commit/e52e4fb63ed5cd0e07abaad9826b2a893ccb921f";><code>e52e4fb</code></a> Bump minimatch from 10.0.1 to 10.2.3 (<a href="https://redirect.github.com/actions/labeler/issues/926";>#926</a>)</li> <li><a href="https://github.com/actions/labeler/commit/77a4082b841706ac431479b7e2bb11216ffef250";><code>77a4082</code></a> Fix: Preserve manually added labels during workflow run and refine label sync...</li> <li><a href="https://github.com/actions/labeler/commit/25abb3cad4f14b7ac27968a495c37798860a5a1a";><code>25abb3c</code></a> Improve Labeler Action Documentation and Error Handling for Permissions (<a href="https://redirect.github.com/actions/labeler/issues/897";>#897</a>)</li> <li><a href="https://github.com/actions/labeler/commit/395c8cfdb1e1e691cc4bad0dd315820af8eb67fd";><code>395c8cf</code></a> Bump brace-expansion from 1.1.11 to 1.1.12 and document breaking changes in v...</li> <li>Additional commits viewable in <a href="https://github.com/actions/labeler/compare/v4.3.0...v7.0.0";>compare view</a></li> </ul> </details> <br /> Updates `actions/download-artifact` from 8.0.1 to 8.0.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/download-artifact/releases";>actions/download-artifact's releases</a>.</em></p> <blockquote> <h2>v8.0.2</h2> <h2>What's Changed</h2> <ul> <li>Update the readme by <a href="https://github.com/danwkennedy";><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/473";>actions/download-artifact#473</a></li> <li>Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.</li> <li>Update <code>@actions/artifact</code> to 6.3.1 by <a href="https://github.com/tunc-d";><code>@tunc-d</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/492";>actions/download-artifact#492</a></li> <li>Prepare download-artifact v8.0.2 by <a href="https://github.com/tunc-d";><code>@tunc-d</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/493";>actions/download-artifact#493</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/tunc-d";><code>@tunc-d</code></a> made their first contribution in <a href="https://redirect.github.com/actions/download-artifact/pull/492";>actions/download-artifact#492</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/download-artifact/compare/v8.0.1...v8.0.2";>https://github.com/actions/download-artifact/compare/v8.0.1...v8.0.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/download-artifact/commit/9000827ccba6bdab643e8b6fd33ac0654aef8333";><code>9000827</code></a> Merge pull request <a href="https://redirect.github.com/actions/download-artifact/issues/493";>#493</a> from actions/tunc-d-prepare-download-v8-0-2</li> <li><a href="https://github.com/actions/download-artifact/commit/e455989ae00f5bdd4054f05d3e972c6bf8a62dc5";><code>e455989</code></a> Prepare download-artifact v8.0.2</li> <li><a href="https://github.com/actions/download-artifact/commit/a00b90c4a2f01d73a8c89552caabca6ea3b43137";><code>a00b90c</code></a> Merge pull request <a href="https://redirect.github.com/actions/download-artifact/issues/492";>#492</a> from actions/tunc-d-download-artifact-package-bump</li> <li><a href="https://github.com/actions/download-artifact/commit/29bb7ce6af5345aeab5bb4774ce7249ee3ccc27f";><code>29bb7ce</code></a> Update <code>@actions/artifact</code> to 6.3.1</li> <li><a href="https://github.com/actions/download-artifact/commit/484a0b528fb4d7bd804637ccb632e47a0e638317";><code>484a0b5</code></a> Update the readme (<a href="https://redirect.github.com/actions/download-artifact/issues/473";>#473</a>)</li> <li>See full diff in <a href="https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333";>compare view</a></li> </ul> </details> <br /> Updates `actions/stale` from 10 to 11 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/stale/releases";>actions/stale's releases</a>.</em></p> <blockquote> <h2>v11.0.0</h2> <h2>What's Changed</h2> <h3>Enhancement</h3> <ul> <li>Migrate to ESM and update dependencies by <a href="https://github-grid.enterprise.slack.com/team/U08CVLQ4JKE";><code>@chiranjib-swain</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1350";>actions/stale#1350</a></li> </ul> <h3>Dependency Update</h3> <ul> <li>Override brace-expansion to 5.0.8 to address 24 high-severity dependency vulnerabilities by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1351";>actions/stale#1351</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/stale/compare/v10...v11.0.0";>https://github.com/actions/stale/compare/v10...v11.0.0</a></p> <h2>v10.4.0</h2> <h2>What's Changed</h2> <h3>Bug Fix</h3> <ul> <li>Fixed <code>only-issue-types</code> validation by <a href="https://github.com/trueberryless";><code>@trueberryless</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1338";>actions/stale#1338</a></li> </ul> <h3>Dependency Updates</h3> <ul> <li>Bump undici to 6.27.0 via override, clean up stale license files, and version to 10.4.0. by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1342";>actions/stale#1342</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/trueberryless";><code>@trueberryless</code></a> made their first contribution in <a href="https://redirect.github.com/actions/stale/pull/1338";>actions/stale#1338</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/stale/compare/v10.3.0...v10.4.0";>https://github.com/actions/stale/compare/v10.3.0...v10.4.0</a></p> <h2>v10.3.0</h2> <h2>What's Changed</h2> <h3>Bug Fix</h3> <ul> <li>Enhancement: ignore stale labeling events by <a href="https://github.com/shamoon";><code>@shamoon</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1311";>actions/stale#1311</a></li> </ul> <h3>Dependency Updates</h3> <ul> <li>Upgrade dependencies (<code>@actions/core</code>, <code>@octokit/plugin-retry</code>, <a href="https://github.com/typescript-eslint";><code>@typescript-eslint</code></a>) by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1335";>actions/stale#1335</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/shamoon";><code>@shamoon</code></a> made their first contribution in <a href="https://redirect.github.com/actions/stale/pull/1311";>actions/stale#1311</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/stale/compare/v10...v10.3.0";>https://github.com/actions/stale/compare/v10...v10.3.0</a></p> <h2>v10.2.0</h2> <h2>What's Changed</h2> <h3>Bug Fix</h3> <ul> <li>Fix checking state cache (fix <a href="https://redirect.github.com/actions/stale/issues/1136";>#1136</a>) and switch to Octokit helper methods by <a href="https://github.com/itchyny";><code>@itchyny</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1152";>actions/stale#1152</a></li> </ul> <h3>Dependency Updates</h3> <ul> <li>Upgrade js-yaml from 4.1.0 to 4.1.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1304";>actions/stale#1304</a></li> <li>Upgrade lodash from 4.17.21 to 4.17.23 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1313";>actions/stale#1313</a></li> <li>Upgrade actions/cache from 4.0.3 to 5.0.2 and actions/github from 5.1.1 to 7.0.0 by <a href="https://github.com/chiranjib-swain";><code>@chiranjib-swain</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1312";>actions/stale#1312</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/itchyny";><code>@itchyny</code></a> made their first contribution in <a href="https://redirect.github.com/actions/stale/pull/1152";>actions/stale#1152</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/stale/compare/v10...v10.2.0";>https://github.com/actions/stale/compare/v10...v10.2.0</a></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/stale/blob/main/CHANGELOG.md";>actions/stale's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h1>[10.1.0]</h1> <h2>What's Changed</h2> <ul> <li>Add only-issue-types option to filter issues by type by <a href="https://github.com/Bibo-Joshi";><code>@Bibo-Joshi</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1255";>actions/stale#1255</a></li> </ul> <h1>[10.0.0]</h1> <h2>What's Changed</h2> <h2>Breaking Changes</h2> <ul> <li>Upgrade to node 24 by <a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1279";>actions/stale#1279</a> Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. <a href="https://github.com/actions/runner/releases/tag/v2.327.1";>Release Notes</a></li> </ul> <h2>Enhancement</h2> <ul> <li>Introducing sort-by option by <a href="https://github.com/suyashgaonkar";><code>@suyashgaonkar</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1254";>actions/stale#1254</a></li> </ul> <h2>Dependency Upgrades</h2> <ul> <li>Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/stale/pull/1186";>actions/stale#1186</a></li> <li>Upgrade undici from 5.28.4 to 5.28.5 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/stale/pull/1201";>actions/stale#1201</a></li> <li>Upgrade <code>@action/cache</code> from 4.0.0 to 4.0.2 by <a href="https://github.com/aparnajyothi-y";><code>@aparnajyothi-y</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1226";>actions/stale#1226</a></li> <li>Upgrade <code>@action/cache</code> from 4.0.2 to 4.0.3 by <a href="https://github.com/suyashgaonkar";><code>@suyashgaonkar</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1233";>actions/stale#1233</a></li> <li>Upgrade undici from 5.28.5 to 5.29.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/stale/pull/1251";>actions/stale#1251</a></li> <li>Upgrade form-data to bring in fix for critical vulnerability by <a href="https://github.com/gowridurgad";><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1277";>actions/stale#1277</a></li> </ul> <h2>Documentation changes</h2> <ul> <li>Changelog update for recent releases by <a href="https://github.com/suyashgaonkar";><code>@suyashgaonkar</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1224";>actions/stale#1224</a></li> <li>Permissions update in Readme by <a href="https://github.com/ghadimir";><code>@ghadimir</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1248";>actions/stale#1248</a></li> </ul> <h1>[9.1.0]</h1> <h2>What's Changed</h2> <ul> <li>Documentation update by <a href="https://github.com/Marukome0743";><code>@Marukome0743</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1116";>actions/stale#1116</a></li> <li>Add workflow file for publishing releases to immutable action package by <a href="https://github.com/Jcambass";><code>@Jcambass</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1179";>actions/stale#1179</a></li> <li>Update undici from 5.28.2 to 5.28.4 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1150";>actions/stale#1150</a></li> <li>Update actions/checkout from 3 to 4 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1091";>actions/stale#1091</a></li> <li>Update actions/publish-action from 0.2.2 to 0.3.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1147";>actions/stale#1147</a></li> <li>Update ts-jest from 29.1.1 to 29.2.5 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1175";>actions/stale#1175</a></li> <li>Update <code>@actions/core</code> from 1.10.1 to 1.11.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1191";>actions/stale#1191</a></li> <li>Update <code>@types/jest</code> from 29.5.11 to 29.5.14 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1193";>actions/stale#1193</a></li> <li>Update <code>@actions/cache</code> from 3.2.2 to 4.0.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/stale/pull/1194";>actions/stale#1194</a></li> </ul> <h1>[9.0.0]</h1> <h2>Breaking Changes</h2> <ol> <li>Action is now stateful: If the action ends because of <a href="https://github.com/actions/stale#operations-per-run";>operations-per-run</a> then the next run will start from the first unprocessed issue skipping the issues processed during the previous run(s). The state is reset when all the issues are processed. This should be considered for scheduling workflow runs.</li> <li>Version 9 of this action updated the runtime to Node.js 20. All scripts are now run with Node.js 20 instead of Node.js 16 and are affected by any breaking changes between Node.js 16 and 20.</li> </ol> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/stale/commit/4391f3da665fdf50b6810c1a66712fb9ba21aa93";><code>4391f3d</code></a> Fix 24 high severity vulnerabilities by overriding brace-expansion to 5.0.8 (...</li> <li><a href="https://github.com/actions/stale/commit/eaf9131fae5eafd0c31a64ebe3a2e183266fec48";><code>eaf9131</code></a> refactor: update imports to use ES module syntax and improve test structure (...</li> <li>See full diff in <a href="https://github.com/actions/stale/compare/v10...v11";>compare view</a></li> </ul> </details> <br /> Updates `actions/setup-java` from 5 to 6 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-java/releases";>actions/setup-java's releases</a>.</em></p> <blockquote> <h2>v6.0.0</h2> <h2>What's Changed</h2> <ul> <li>dist: Migrate from Zulu Discovery API to Azul Metadata API by <a href="https://github.com/jameswald";><code>@jameswald</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1010";>actions/setup-java#1010</a></li> <li>feat: add .mvn/extensions.xml to Maven cache key pattern by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> with <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1041";>actions/setup-java#1041</a></li> <li>Migrate to ESM and upgrade dependencies by <a href="https://github.com/priyagupta108";><code>@priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1078";>actions/setup-java#1078</a></li> <li>Map Zulu x86 architecture to i686 for Azul Metadata API by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1079";>actions/setup-java#1079</a></li> <li>Rename jdkFile input to jdk-file with deprecated alias by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1083";>actions/setup-java#1083</a></li> <li>Infer distribution from asdf .tool-versions vendor prefix by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1084";>actions/setup-java#1084</a></li> <li>Add Maven compiler problem matcher for javac diagnostics by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1086";>actions/setup-java#1086</a></li> <li>feat: expose cache-primary-key output (<a href="https://redirect.github.com/actions/setup-java/issues/597";>#597</a>) by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1088";>actions/setup-java#1088</a></li> <li>docs: clarify V6 ESM migration is not a user-facing breaking change by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1090";>actions/setup-java#1090</a></li> <li>Support multi-field Java versions like <code>18.0.1.1</code> by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1092";>actions/setup-java#1092</a></li> <li>docs: document seeding the Maven cache for plugin dependencies by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1094";>actions/setup-java#1094</a></li> <li>docs: clarify Maven cache paths and key hash inputs by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1096";>actions/setup-java#1096</a></li> <li>Support pinning java-version as "latest" by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1093";>actions/setup-java#1093</a></li> <li>chore(deps-dev): bump eslint from 10.6.0 to 10.7.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1101";>actions/setup-java#1101</a></li> <li>chore(deps-dev): bump eslint-plugin-n from 18.2.1 to 18.2.2 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1103";>actions/setup-java#1103</a></li> <li>chore(deps-dev): bump prettier from 3.9.4 to 3.9.5 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1105";>actions/setup-java#1105</a></li> <li>chore(deps): bump actions/checkout from 6 to 7 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1106";>actions/setup-java#1106</a></li> <li>chore(deps-dev): bump <code>@types/node</code> from 26.1.0 to 26.1.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1104";>actions/setup-java#1104</a></li> <li>dist: Cover Tencent Kona JDK 25 by <a href="https://github.com/johnshajiang";><code>@johnshajiang</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1108";>actions/setup-java#1108</a></li> <li>chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1102";>actions/setup-java#1102</a></li> <li>Preserve Maven toolchains across repeated setup-java runs (<a href="https://redirect.github.com/actions/setup-java/issues/1099";>#1099</a>) by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1111";>actions/setup-java#1111</a></li> <li>dist: Support Liberica NIK (<a href="https://redirect.github.com/actions/setup-java/issues/878";>#878</a>) by <a href="https://github.com/asm0dey";><code>@asm0dey</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1112";>actions/setup-java#1112</a></li> <li>Fix template injection (zizmor alert <a href="https://redirect.github.com/actions/setup-java/issues/118";>#118</a>) in e2e-versions.yml by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> with <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1114";>actions/setup-java#1114</a></li> <li>Fix template injection in e2e-versions.yml (zizmor alert <a href="https://redirect.github.com/actions/setup-java/issues/122";>#122</a>) by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> with <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1120";>actions/setup-java#1120</a></li> <li>Disable persisted checkout credentials in e2e workflow by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> with <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1115";>actions/setup-java#1115</a></li> <li>feat: Update recommended configuration for GPG signing by <a href="https://github.com/wetneb";><code>@wetneb</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/608";>actions/setup-java#608</a></li> <li>Cache Maven and Gradle wrapper distributions separately from the dependency cache by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1097";>actions/setup-java#1097</a></li> <li>Consolidate cache-dependency-path e2e workflow and add maven/sbt coverage by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1124";>actions/setup-java#1124</a></li> <li>Use gpg.passphraseEnvName instead of the deprecated gpg.passphrase server by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1123";>actions/setup-java#1123</a></li> <li>Extract repeated directory-check assertions into check-dir.sh helper by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1127";>actions/setup-java#1127</a></li> <li>Consolidate duplicate jobs in e2e-versions workflow by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1125";>actions/setup-java#1125</a></li> <li>Use YAML anchors to reduce boilerplate in e2e-versions workflow by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1126";>actions/setup-java#1126</a></li> <li>Updated msft json for now by <a href="https://github.com/jmjaffe37";><code>@jmjaffe37</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1129";>actions/setup-java#1129</a></li> <li>Document missing action inputs in README by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1130";>actions/setup-java#1130</a></li> <li>chore(deps): bump <code>@actions/cache</code> to 6.2.0 by <a href="https://github.com/philip-gai";><code>@philip-gai</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1128";>actions/setup-java#1128</a></li> <li>Add an option to disable Java problem matchers by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1133";>actions/setup-java#1133</a></li> <li>docs: update setup-java examples by <a href="https://github.com/HarithaVattikuti";><code>@HarithaVattikuti</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1131";>actions/setup-java#1131</a></li> <li>Clarify credential environment variable inputs by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1134";>actions/setup-java#1134</a></li> <li>chore(deps-dev): bump <code>@typescript-eslint/eslint-plugin</code> from 8.63.0 to 8.64.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1135";>actions/setup-java#1135</a></li> <li>chore(deps): bump actions/setup-python from 6 to 7 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1143";>actions/setup-java#1143</a></li> <li>chore(deps): bump fast-xml-parser from 5.9.3 to 5.10.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1142";>actions/setup-java#1142</a></li> <li>chore(deps-dev): bump <code>@typescript-eslint/parser</code> from 8.64.0 to 8.65.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1138";>actions/setup-java#1138</a></li> <li>chore(deps-dev): bump lint-staged from 17.0.8 to 17.2.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1136";>actions/setup-java#1136</a></li> <li>chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1137";>actions/setup-java#1137</a></li> <li>chore(deps): fix npm audited vulnerabilities by <a href="https://github.com/mhoffrog";><code>@mhoffrog</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1140";>actions/setup-java#1140</a></li> <li>Fix formatting issues in README.md by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1144";>actions/setup-java#1144</a></li> <li>Remediate npm audit findings and rebuild distributions by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> with <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1145";>actions/setup-java#1145</a></li> <li>Set GRAALVM_HOME for GraalVM distributions by <a href="https://github.com/brunoborges";><code>@brunoborges</code></a> with <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1146";>actions/setup-java#1146</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-java/commit/b843ebf9b913146b38da2eaa7aeddf76074ae1ad";><code>b843ebf</code></a> Support Maven plugin repositories in generated settings.xml (<a href="https://redirect.github.com/actions/setup-java/issues/1286";>#1286</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/2a69be27b0baa8a7ec1c0ba665dc022b180664c5";><code>2a69be2</code></a> feat: support Maven server credential origins (<a href="https://redirect.github.com/actions/setup-java/issues/1282";>#1282</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/d0e6e4dbf773b98efde945f446d2099b2c0d8fd2";><code>d0e6e4d</code></a> chore(deps): bump the monthly-npm-updates group with 13 updates (<a href="https://redirect.github.com/actions/setup-java/issues/1276";>#1276</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/b24925bc49b74c38e5a106894c14cfd876ac1ab5";><code>b24925b</code></a> chore(deps): bump undici from 6.28.0 to 6.29.0 (<a href="https://redirect.github.com/actions/setup-java/issues/1274";>#1274</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/47b36480ae3ac5671badb6bde2dec0c1898a1cc9";><code>47b3648</code></a> Support Temurin JEP 322 patch versions like 26.0.2.1+1 (<a href="https://redirect.github.com/actions/setup-java/issues/1270";>#1270</a>) (<a href="https://redirect.github.com/actions/setup-java/issues/1279";>#1279</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/74920aab4a9e7a33c5bd4fd3c8d5a7ba260ae795";><code>74920aa</code></a> Prefer Zulu 4-segment hotfix builds when resolving version ranges (<a href="https://redirect.github.com/actions/setup-java/issues/1278";>#1278</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/a78ec39f1243adc9be41d35a49593a4c665a604c";><code>a78ec39</code></a> Stop GPG agent before removing signature-verification home (<a href="https://redirect.github.com/actions/setup-java/issues/1273";>#1273</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/97c5a5e13aa773f277f72c1287dda3c789f1366c";><code>97c5a5e</code></a> Support Temurin on Linux RISC-V (<a href="https://redirect.github.com/actions/setup-java/issues/1269";>#1269</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/1aa87b638dacaa70f1c903fa9ec9cbd91058e2ff";><code>1aa87b6</code></a> Preserve compound Liberica build versions from .sdkmanrc (<a href="https://redirect.github.com/actions/setup-java/issues/1268";>#1268</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/de7274f081f381c8f8158605e0321c36c376e2e6";><code>de7274f</code></a> Avoid macOS GPG socket overflow on long runner paths (<a href="https://redirect.github.com/actions/setup-java/issues/1266";>#1266</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/setup-java/compare/v5...v6";>compare view</a></li> </ul> </details> <br /> Updates `actions/cache/restore` from 5.0.5 to 6.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/cache/releases";>actions/cache/restore's releases</a>.</em></p> <blockquote> <h2>v6.1.0</h2> <h2>What's Changed</h2> <ul> <li>Bump <code>@actions/cache</code> to v6.1.0 - handle read-only cache access by <a href="https://github.com/jasongin";><code>@jasongin</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1768";>actions/cache#1768</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v6...v6.1.0";>https://github.com/actions/cache/compare/v6...v6.1.0</a></p> <h2>v6.0.0</h2> <h2>What's Changed</h2> <ul> <li>Update packages, migrate to ESM by <a href="https://github.com/Samirat";><code>@Samirat</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1760";>actions/cache#1760</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v5...v6.0.0";>https://github.com/actions/cache/compare/v5...v6.0.0</a></p> <h2>v5.1.0</h2> <h2>What's Changed</h2> <ul> <li>Bump <code>@actions/cache</code> to v5.1.0 - handle read-only cache access by <a href="https://github.com/jasongin";><code>@jasongin</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1775";>actions/cache#1775</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v5...v5.1.0";>https://github.com/actions/cache/compare/v5...v5.1.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/cache/blob/main/RELEASES.md";>actions/cache/restore's changelog</a>.</em></p> <blockquote> <h1>Releases</h1> <h2>How to prepare a release</h2> <blockquote> <p>[!NOTE] Relevant for maintainers with write access only.</p> </blockquote> <ol> <li>Switch to a new branch from <code>main</code>.</li> <li>Run <code>npm test</code> to ensure all tests are passing.</li> <li>Update the version in <a href="https://github.com/actions/cache/blob/main/package.json";><code>https://github.com/actions/cache/blob/main/package.json</code></a>.</li> <li>Run <code>npm run build</code> to update the compiled files.</li> <li>Update this <a href="https://github.com/actions/cache/blob/main/RELEASES.md";><code>https://github.com/actions/cache/blob/main/RELEASES.md</code></a> with the new version and changes in the <code>## Changelog</code> section.</li> <li>Run <code>licensed cache</code> to update the license report.</li> <li>Run <code>licensed status</code> and resolve any warnings by updating the <a href="https://github.com/actions/cache/blob/main/.licensed.yml";><code>https://github.com/actions/cache/blob/main/.licensed.yml</code></a> file with the exceptions.</li> <li>Commit your changes and push your branch upstream.</li> <li>Open a pull request against <code>main</code> and get it reviewed and merged.</li> <li>Draft a new release <a href="https://github.com/actions/cache/releases";>https://github.com/actions/cache/releases</a> use the same version number used in <code>package.json</code> <ol> <li>Create a new tag with the version number.</li> <li>Auto generate release notes and update them to match the changes you made in <code>RELEASES.md</code>.</li> <li>Toggle the set as the latest release option.</li> <li>Publish the release.</li> </ol> </li> <li>Navigate to <a href="https://github.com/actions/cache/actions/workflows/release-new-action-version.yml";>https://github.com/actions/cache/actions/workflows/release-new-action-version.yml</a> <ol> <li>There should be a workflow run queued with the same version number.</li> <li>Approve the run to publish the new version and update the major tags for this action.</li> </ol> </li> </ol> <h2>Changelog</h2> <h3>6.1.0</h3> <ul> <li>Bump <code>@actions/cache</code> to v6.1.0 to pick up <a href="https://redirect.github.com/actions/toolkit/pull/2435";>actions/toolkit#2435 Handle cache write error due to read-only token</a></li> <li>Switch redundant "Cache save failed" warning to debug log in save-only</li> </ul> <h3>6.0.0</h3> <ul> <li>Updated <code>@actions/cache</code> to ^6.0.1, <code>@actions/core</code> to ^3.0.1, <code>@actions/exec</code> to ^3.0.0, <code>@actions/io</code> to ^3.0.2</li> <li>Migrated to ESM module system</li> <li>Upgraded Jest to v30 and test infrastructure to be ESM compatible</li> </ul> <h3>5.0.4</h3> <ul> <li>Bump <code>minimatch</code> to v3.1.5 (fixes ReDoS via globstar patterns)</li> <li>Bump <code>undici</code> to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)</li> <li>Bump <code>fast-xml-parser</code> to v5.5.6</li> </ul> <h3>5.0.3</h3> <ul> <li>Bump <code>@actions/cache</code> to v5.0.5 (Resolves: <a href="https://github.com/actions/cache/security/dependabot/33";>https://github.com/actions/cache/security/dependabot/33</a>)</li> <li>Bump <code>@actions/core</code> to v2.0.3</li> </ul> <h3>5.0.2</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/cache/commit/55cc8345863c7cc4c66a329aec7e433d2d1c52a9";><code>55cc834</code></a> Merge pull request <a href="https://redirect.github.com/actions/cache/issues/1768";>#1768</a> from jasongin/readonly-cache</li> <li><a href="https://github.com/actions/cache/commit/d8cd72f230726cdf4457ebb61ec1b593a8d12337";><code>d8cd72f</code></a> Bump <code>@actions/cache</code> to v6.1.0 - handle cache write error due to RO token</li> <li><a href="https://github.com/actions/cache/commit/2c8a9bd7457de244a408f35966fab2fb45fda9c8";><code>2c8a9bd</code></a> Merge pull request <a href="https://redirect.github.com/actions/cache/issues/1760";>#1760</a> from actions/samirat/esm_migration_and_package_update</li> <li><a href="https://github.com/actions/cache/commit/e9b91fdc3fea7d79165fceb79042ef45c2d51023";><code>e9b91fd</code></a> Prettier fixes</li> <li><a href="https://github.com/actions/cache/commit/e4884b8ff7f92ef6b52c79eda480bbc86e685adb";><code>e4884b8</code></a> Rebuild dist</li> <li><a href="https://github.com/actions/cache/commit/10baf0191a3c426ea0fa4a3253a5c04233b6e18f";><code>10baf01</code></a> Fixed licenses</li> <li><a href="https://github.com/actions/cache/commit/e39b386c9004d72a15d864ade8c0b3a702d47a37";><code>e39b386</code></a> Fix test mock return order</li> <li><a href="https://github.com/actions/cache/commit/b6928203372a8571ff984c0c883ef3a1adfb0c06";><code>b692820</code></a> PR feedback</li> <li><a href="https://github.com/actions/cache/commit/60749128a44d25d3c520a489e576380cf00ff3f1";><code>6074912</code></a> Rebuild dist bundles as ESM to match type:module</li> <li><a href="https://github.com/actions/cache/commit/5a912e8b4af820fa082a0e75cfd2c782f8fbfe0e";><code>5a912e8</code></a> Fix lint and jest issues</li> <li>Additional commits viewable in <a href="https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9";>compare view</a></li> </ul> </details> <br /> Updates `actions/cache/save` from 5.0.5 to 6.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/cache/releases";>actions/cache/save's releases</a>.</em></p> <blockquote> <h2>v6.1.0</h2> <h2>What's Changed</h2> <ul> <li>Bump <code>@actions/cache</code> to v6.1.0 - handle read-only cache access by <a href="https://github.com/jasongin";><code>@jasongin</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1768";>actions/cache#1768</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v6...v6.1.0";>https://github.com/actions/cache/compare/v6...v6.1.0</a></p> <h2>v6.0.0</h2> <h2>What's Changed</h2> <ul> <li>Update packages, migrate to ESM by <a href="https://github.com/Samirat";><code>@Samirat</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1760";>actions/cache#1760</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v5...v6.0.0";>https://github.com/actions/cache/compare/v5...v6.0.0</a></p> <h2>v5.1.0</h2> <h2>What's Changed</h2> <ul> <li>Bump <code>@actions/cache</code> to v5.1.0 - handle read-only cache access by <a href="https://github.com/jasongin";><code>@jasongin</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1775";>actions/cache#1775</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v5...v5.1.0";>https://github.com/actions/cache/compare/v5...v5.1.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/cache/blob/main/RELEASES.md";>actions/cache/save's changelog</a>.</em></p> <blockquote> <h1>Releases</h1> <h2>How to prepare a release</h2> <blockquote> <p>[!NOTE] Relevant for maintainers with write access only.</p> </blockquote> <ol> <li>Switch to a new branch from <code>main</code>.</li> <li>Run <code>npm test</code> to ensure all tests are passing.</li> <li>Update the version in <a href="https://github.com/actions/cache/blob/main/package.json";><code>https://github.com/actions/cache/blob/main/package.json</code></a>.</li> <li>Run <code>npm run build</code> to update the compiled files.</li> <li>Update this <a href="https://github.com/actions/cache/blob/main/RELEASES.md";><code>https://github.com/actions/cache/blob/main/RELEASES.md</code></a> with the new version and changes in the <code>## Changelog</code> section.</li> <li>Run <code>licensed cache</code> to update the license report.</li> <li>Run <code>licensed status</code> and resolve any warnings by updating the <a href="https://github.com/actions/cache/blob/main/.licensed.yml";><code>https://github.com/actions/cache/blob/main/.licensed.yml</code></a> file with the exceptions.</li> <li>Commit your changes and push your branch upstream.</li> <li>Open a pull request against <code>main</code> and get it reviewed and merged.</li> <li>Draft a new release <a href="https://github.com/actions/cache/releases";>https://github.com/actions/cache/releases</a> use the same version number used in <code>package.json</code> <ol> <li>Create a new tag with the version number.</li> <li>Auto generate release notes and update them to match the changes you made in <code>RELEASES.md</code>.</li> <li>Toggle the set as the latest release option.</li> <li>Publish the release.</li> </ol> </li> <li>Navigate to <a href="https://github.com/actions/cache/actions/workflows/release-new-action-version.yml";>https://github.com/actions/cache/actions/workflows/release-new-action-version.yml</a> <ol> <li>There should be a workflow run queued with the same version number.</li> <li>Approve the run to publish the new version and update the major tags for this action.</li> </ol> </li> </ol> <h2>Changelog</h2> <h3>6.1.0</h3> <ul> <li>Bump <code>@actions/cache</code> to v6.1.0 to pick up <a href="https://redirect.github.com/actions/toolkit/pull/2435";>actions/toolkit#2435 Handle cache write error due to read-only token</a></li> <li>Switch redundant "Cache save failed" warning to debug log ... _Description has been truncated_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
