Bump the actions-deps group across 1 directory with 6 updates#20
Bump the actions-deps group across 1 directory with 6 updates#20dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the actions-deps group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [lfreleng-actions/github2gerrit-action](https://github.com/lfreleng-actions/github2gerrit-action) | `1.2.4` | `1.3.3` | | [actions/checkout](https://github.com/actions/checkout) | `6.0.3` | `7.0.0` | | [actions/setup-java](https://github.com/actions/setup-java) | `5.3.0` | `5.4.0` | | [lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml](https://github.com/lfit/releng-reusable-workflows) | `0.6.0` | `0.7.2` | | [lfit/gerrit-review-action](https://github.com/lfit/gerrit-review-action) | `1.1.1` | `1.1.2` | | [im-open/workflow-conclusion](https://github.com/im-open/workflow-conclusion) | `2.2.5` | `3.0.0` | Updates `lfreleng-actions/github2gerrit-action` from 1.2.4 to 1.3.3 - [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases) - [Changelog](https://github.com/lfreleng-actions/github2gerrit-action/blob/main/docs/RELEASE-v0.2.0.md) - [Commits](lfreleng-actions/github2gerrit-action@806c001...f44c168) Updates `actions/checkout` from 6.0.3 to 7.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@df4cb1c...9c091bb) Updates `actions/setup-java` from 5.3.0 to 5.4.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@ad2b381...1bcf9fb) Updates `lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml` from 0.6.0 to 0.7.2 - [Release notes](https://github.com/lfit/releng-reusable-workflows/releases) - [Commits](lfit/releng-reusable-workflows@f43b219...fd3c1b4) Updates `lfit/gerrit-review-action` from 1.1.1 to 1.1.2 - [Release notes](https://github.com/lfit/gerrit-review-action/releases) - [Commits](lfreleng-actions/gerrit-review-action@a5de1d5...a1c036a) Updates `im-open/workflow-conclusion` from 2.2.5 to 3.0.0 - [Commits](im-open/workflow-conclusion@7b14694...8eac7f1) --- updated-dependencies: - dependency-name: lfreleng-actions/github2gerrit-action dependency-version: 1.3.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: actions/setup-java dependency-version: 5.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml dependency-version: 0.7.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: lfit/gerrit-review-action dependency-version: 1.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: im-open/workflow-conclusion dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps ... Signed-off-by: dependabot[bot] <support@github.com>
|
PR: #20 Note: This metadata is also included in the Gerrit commit message for reconciliation. |
|
Change raised in Gerrit by GitHub2Gerrit: https://git.opendaylight.org/gerrit/c/openflowplugin/+/123825 |
Bumps the actions-deps group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [lfreleng-actions/github2gerrit-action](https://github.com/lfreleng-actions/github2gerrit-action) | `1.2.4` | `1.3.3` | | [actions/checkout](https://github.com/actions/checkout) | `6.0.3` | `7.0.0` | | [actions/setup-java](https://github.com/actions/setup-java) | `5.3.0` | `5.4.0` | | [lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml](https://github.com/lfit/releng-reusable-workflows) | `0.6.0` | `0.7.2` | | [lfit/gerrit-review-action](https://github.com/lfit/gerrit-review-action) | `1.1.1` | `1.1.2` | | [im-open/workflow-conclusion](https://github.com/im-open/workflow-conclusion) | `2.2.5` | `3.0.0` | Updates `lfreleng-actions/github2gerrit-action` from 1.2.4 to 1.3.3 - [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases) - [Changelog](https://github.com/lfreleng-actions/github2gerrit-action/blob/main/docs/RELEASE-v0.2.0.md) - [Commits](lfreleng-actions/github2gerrit-action@806c001...f44c168) Updates `actions/checkout` from 6.0.3 to 7.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@df4cb1c...9c091bb) Updates `actions/setup-java` from 5.3.0 to 5.4.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@ad2b381...1bcf9fb) Updates `lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml` from 0.6.0 to 0.7.2 - [Release notes](https://github.com/lfit/releng-reusable-workflows/releases) - [Commits](lfit/releng-reusable-workflows@f43b219...fd3c1b4) Updates `lfit/gerrit-review-action` from 1.1.1 to 1.1.2 - [Release notes](https://github.com/lfit/gerrit-review-action/releases) - [Commits](lfreleng-actions/gerrit-review-action@a5de1d5...a1c036a) Updates `im-open/workflow-conclusion` from 2.2.5 to 3.0.0 - [Commits](im-open/workflow-conclusion@7b14694...8eac7f1) Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I3f3fab20b18af62a5545e83adc2a2fa287e8b28d GitHub-PR: #20 GitHub-Hash: f02fe8baa4ca42c7 Signed-off-by: gh2gerrit <releng+odl-gh2gerrit@linuxfoundation.org>
|
Automated PR Closure This pull request has been automatically closed by GitHub2Gerrit. The corresponding Gerrit change has been accepted and merged ✅ The changes from this PR are now part of the main codebase in Gerrit. This is an automated action performed by the GitHub2Gerrit tool. |
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
Bumps the actions-deps group with 6 updates in the / directory:
1.2.41.3.36.0.37.0.05.3.05.4.00.6.00.7.21.1.11.1.22.2.53.0.0Updates
lfreleng-actions/github2gerrit-actionfrom 1.2.4 to 1.3.3Release notes
Sourced from lfreleng-actions/github2gerrit-action's releases.
Commits
f44c168Merge pull request #291 from modeseven-lfreleng-actions/chore/test-quality-ai...9cb7cbdTest: Address AI code-quality test findings121b6b0Merge pull request #287 from modeseven-lfreleng-actions/chore/codeql-code-qua...5a157deChore: clear CodeQL maintainability warnings1dde219Chore: clear CodeQL reliability warningsd423c3aMerge pull request #286 from modeseven-lfreleng-actions/chore/code-quality-wa...6d38c92Chore: clear CodeQL code-quality warnings192eb96Merge pull request #285 from modeseven-lfreleng-actions/feat/anon-supersessio...d4ba932Feat: anonymous fallback for supersession sweepUpdates
actions/checkoutfrom 6.0.3 to 7.0.0Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
9c091bbupdate error wording (#2467)1044a6dgetting ready for checkout v7 release (#2464)f028218Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)d914b26upgrade module to esm and update dependencies (#2463)537c7efBump@actions/coreand@actions/tool-cacheand Remove uuid (#2459)130a169Bump js-yaml from 4.1.0 to 4.2.0 (#2461)7d09575Bump flatted from 3.3.1 to 3.4.2 (#2460)0f9f3aaBump actions/publish-immutable-action (#2458)f9e715ablock checking out fork pr for pull_request_target and workflow_run (#2454)Updates
actions/setup-javafrom 5.3.0 to 5.4.0Release notes
Sourced from actions/setup-java's releases.
Commits
1bcf9fbdist: Address Copilot review suggestions from PR #1042 (GraalVM Community) (#...fa2c650docs: note jdkfile approach for Early Access / unreleased JDK builds (#1058)1d56e31dist: Add GraalVM Community distribution support (#1042)1d25252chore: Harden workflows: least-privilege permissions + zizmor integration (#1...668c1eadocs: add post-install keytool import for the JDK cacerts trust store (#1051)a9a46fbdocs: document self-signed certificate / internal CA handling for GitHub Ente...5431e71docs: add JavaFX Maven project configuration instructions (#1044)4baa9b4docs: replace non-existent HelloWorldApp references with java --version (#1043)eab4b08Bump@types/nodefrom 25.9.3 to 26.0.0 (#1031)bf0c0e6Bump actions/checkout from 6 to 7 (#1032)Updates
lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yamlfrom 0.6.0 to 0.7.2Release notes
Sourced from lfit/releng-reusable-workflows/.github/workflows/composed-maven-sonar-cloud.yaml's releases.
... (truncated)
Commits
fd3c1b4Merge pull request #749 from modeseven-lfit/fix/scorecard-allow-deps-dev6437f42Fix: Allow api.deps.dev egress in Scorecard scan4a8c7c7Merge pull request #747 from lfit/pre-commit-ci-update-config6186c6bMerge pull request #746 from lfit/dependabot/github_actions/lfit/releng-reusa...8216503Merge pull request #745 from lfit/dependabot/github_actions/lfreleng-actions/...fddb9afMerge pull request #744 from lfit/dependabot/github_actions/lfit/releng-reusa...ff9f178Merge pull request #743 from lfit/dependabot/github_actions/actions/setup-pyt...eeb2995Merge pull request #742 from lfit/dependabot/github_actions/lfit/releng-reusa...951a140Merge pull request #741 from lfit/dependabot/github_actions/actions/cache-6.1.02e47bcaMerge pull request #739 from lfit/dependabot/github_actions/lfreleng-actions/...Updates
lfit/gerrit-review-actionfrom 1.1.1 to 1.1.2Release notes
Sourced from lfit/gerrit-review-action's releases.
Commits
a1c036aMerge pull request #116 from modeseven-lfreleng-actions/fix/zizmor-findings8c9161cFix: resolve Zizmor findings in vote step48d5d48Merge pull request #115 from lfreleng-actions/pre-commit-ci-update-config8cb9127Chore: pre-commit autoupdate3b85ad7Merge pull request #114 from lfreleng-actions/pre-commit-ci-update-configc9bd395Chore: pre-commit autoupdateebd4f19Merge pull request #113 from modeseven-lfreleng-actions/chore/add-security-md0c941e7Docs: Add SECURITY.md security policy46897b3Merge pull request #112 from modeseven-lfreleng-actions/dependabot-cooldownf95da9eCI(dependabot): Add 7-day update cooldownUpdates
im-open/workflow-conclusionfrom 2.2.5 to 3.0.0Commits
8eac7f1Merge pull request #29 from im-open/node24c4d9654Update to node 24aa85805Merge pull request #23 from im-open/dependabot/npm_and_yarn/multi-0f30d60bd340cf9b3Merge branch 'main' into dependabot/npm_and_yarn/multi-0f30d60bd358125f7Bump@octokit/plugin-paginate-restand@actions/githubDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions