Skip to content

Bump the github-actions group with 3 updates#10

Merged
krotname merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-2cb1120ac7
Jun 29, 2026
Merged

Bump the github-actions group with 3 updates#10
krotname merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-2cb1120ac7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 3 updates: raven-actions/actionlint, actions/setup-java and actions/attest.

Updates raven-actions/actionlint from 2.1.2 to 2.2.0

Release notes

Sourced from raven-actions/actionlint's releases.

v2.2.0

🔄️ What's Changed

🚀 Features

👥 Contributors

@​DariuszPorowski, @​dependabot[bot] and dependabot[bot]

See details of all code changes: raven-actions/actionlint@v2.1.2...v2.2.0 since previous release.

Commits
  • 3d39aea fix: update link format for Code of Conduct in CONTRIBUTING.md
  • 04e3273 ci: add dog-food regression test for pnpm/workspace repos (#68)
  • cfcda4a feat(ghes): fetch tool from configurable server (#22)
  • fed4b9b fix: optimize tool release fetching to reduce API calls and handle errors gra...
  • 65c4544 fix: update schema URL in action.yml and format table in SECURITY.md
  • 7cc9be5 ci(deps): bump the all group across 1 directory with 3 updates (#65)
  • 8761bcd build(deps): bump the all group with 2 updates (#62)
  • See full diff in compare view

Updates actions/setup-java from 5.3.0 to 5.4.0

Release notes

Sourced from actions/setup-java's releases.

v5.4.0

What's Changed

New Contributors

Full Changelog: actions/setup-java@v5...v5.4.0

Commits
  • 1bcf9fb dist: Address Copilot review suggestions from PR #1042 (GraalVM Community) (#...
  • fa2c650 docs: note jdkfile approach for Early Access / unreleased JDK builds (#1058)
  • 1d56e31 dist: Add GraalVM Community distribution support (#1042)
  • 1d25252 chore: Harden workflows: least-privilege permissions + zizmor integration (#1...
  • 668c1ea docs: add post-install keytool import for the JDK cacerts trust store (#1051)
  • a9a46fb docs: document self-signed certificate / internal CA handling for GitHub Ente...
  • 5431e71 docs: add JavaFX Maven project configuration instructions (#1044)
  • 4baa9b4 docs: replace non-existent HelloWorldApp references with java --version (#1043)
  • eab4b08 Bump @​types/node from 25.9.3 to 26.0.0 (#1031)
  • bf0c0e6 Bump actions/checkout from 6 to 7 (#1032)
  • Additional commits viewable in compare view

Updates actions/attest from 4.1.0 to 4.1.1

Release notes

Sourced from actions/attest's releases.

v4.1.1

What's Changed

Full Changelog: actions/attest@v4.1.0...v4.1.1

Commits
  • a1948c3 Bump @​sigstore/oci from 0.6.1 to 0.7.1 (#432)
  • b21da33 Bump csv-parse from 5.6.0 to 6.2.1 (#414)
  • d811ccf Bump actions/checkout from 6.0.3 to 7.0.0 (#431)
  • 2e48bd5 Bump the npm-development group across 1 directory with 4 updates (#433)
  • 4ad76f8 Bump markdown-it and markdownlint-cli (#425)
  • 701ae0b Bump tar from 7.5.11 to 7.5.17 (#429)
  • a8f22ca Bump form-data from 4.0.5 to 4.0.6 (#428)
  • 01540af Bump typescript from 5.9.3 to 6.0.3 (#407)
  • 5ec407f Bump github/codeql-action in the actions-minor group (#422)
  • 08210f8 Bump the npm-development group across 1 directory with 8 updates (#419)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the github-actions group with 3 updates
5d618fe 
Bumps the github-actions group with 3 updates: [raven-actions/actionlint](https://github.com/raven-actions/actionlint), [actions/setup-java](https://github.com/actions/setup-java) and [actions/attest](https://github.com/actions/attest).


Updates `raven-actions/actionlint` from 2.1.2 to 2.2.0
- [Release notes](https://github.com/raven-actions/actionlint/releases)
- [Commits](raven-actions/actionlint@205b530...3d39aea)

Updates `actions/setup-java` from 5.3.0 to 5.4.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@ad2b381...1bcf9fb)

Updates `actions/attest` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](actions/attest@59d8942...a1948c3)

---
updated-dependencies:
- dependency-name: raven-actions/actionlint
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/setup-java
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/attest
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 29, 2026
@dependabot dependabot Bot requested a review from krotname as a code owner June 29, 2026 06:55
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 29, 2026
@codecov

codecov Bot commented Jun 29, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

krotname
krotname approved these changes Jun 29, 2026
View reviewed changes

@krotname krotname left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependency update looks scoped and CI is green.

@krotname krotname merged commit 80dff32 into main Jun 29, 2026
9 checks passed
@krotname krotname deleted the dependabot/github_actions/github-actions-2cb1120ac7 branch June 29, 2026 22:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@krotname krotname krotname approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@krotname