Skip to content

⬆️ Bump the dependencies group across 1 directory with 5 updates - #612

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/dependencies-807cbc729a
Open

⬆️ Bump the dependencies group across 1 directory with 5 updates#612
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/dependencies-807cbc729a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 5 updates in the / directory:

Package From To
actions/checkout 6 7
actions/setup-java 5 5.6.0
actions/upload-artifact 5 7
actions/setup-node 6 7
actions/setup-go 6 7

Updates actions/checkout from 6 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates actions/setup-java from 5 to 5.6.0

Release notes

Sourced from actions/setup-java's releases.

v5.6.0

What's Changed

Full Changelog: actions/setup-java@v5...v5.6.0

v5.5.0

What's Changed

New Contributors

Full Changelog: actions/setup-java@v5...v5.5.0

v5.4.0

What's Changed

... (truncated)

Commits
  • c5f2f2e Bump github/codeql-action from 3 to 4 (#1069)
  • 623c707 chore: enforce pre-PR validation (aggregate scripts, git hooks, PR checklist)...
  • 1bcf9fb dist: Address Copilot review suggestions from PR #1042 (GraalVM Community) (#...
  • See full diff in compare view

Updates actions/upload-artifact from 5 to 7

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

Commits
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
  • 02a8460 Add proxy integration test
  • b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
  • e516bc8 docs: correct description of Node.js 24 support in README
  • Additional commits viewable in compare view

Updates actions/setup-node from 6 to 7

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

v6.3.0

What's Changed

Enhancements:

... (truncated)

Commits
  • 8207627 Migrate to ESM and upgrade dependencies (#1574)
  • 04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
  • 7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
  • 6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
  • 30eb73b Resolve high-severity audit issues
  • 4e1a87a Update dist
  • 360237f Strict equality
  • 4f8aac5 Bump @​actions/cache to 5.1.0, log cache write denied
  • f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
  • 0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
  • Additional commits viewable in compare view

Updates actions/setup-go from 6 to 7

Release notes

Sourced from actions/setup-go's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/setup-go@v6...v7.0.0

v6.5.0

What's Changed

Dependency update

New Contributors

Full Changelog: actions/setup-go@v6...v6.5.0

v6.4.0

What's Changed

Enhancement

Dependency update

Documentation update

New Contributors

Full Changelog: actions/setup-go@v6...v6.4.0

v6.3.0

What's Changed

Full Changelog: actions/setup-go@v6...v6.3.0

v6.2.0

What's Changed

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6` | `7` |
| [actions/setup-java](https://github.com/actions/setup-java) | `5` | `5.6.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `5` | `7` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6` | `7` |
| [actions/setup-go](https://github.com/actions/setup-go) | `6` | `7` |



Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

Updates `actions/setup-java` from 5 to 5.6.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@v5...v5.6.0)

Updates `actions/upload-artifact` from 5 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v5...v7)

Updates `actions/setup-node` from 6 to 7
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v6...v7)

Updates `actions/setup-go` from 6 to 7
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: actions/setup-java
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: actions/setup-go
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Aug 1, 2026
@dependabot
dependabot Bot requested a review from Viktor (tiulpin) as a code owner August 1, 2026 04:13
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Aug 1, 2026
@github-actions

github-actions Bot commented Aug 1, 2026

Copy link
Copy Markdown

Qodana for JVM

It seems all right 👌

No new problems were found according to the checks applied

💡 Qodana analysis was run in the pull request mode: only the changed files were checked
☁️ View the detailed Qodana report

Detected 190 dependencies

Third-party software list

This page lists the third-party software dependencies used in qodana

Dependency Version Licenses
@actions/artifact 2.3.2 MIT
@actions/cache 4.1.0 MIT
@actions/core 1.11.1 MIT
@actions/exec 1.1.1 MIT
@actions/github 5.1.1 MIT
@actions/github 6.0.1 MIT
@actions/glob 0.1.2 MIT
@actions/http-client 2.2.1 MIT
@actions/io 1.1.3 MIT
@actions/tool-cache 2.0.2 MIT
@azure/abort-controller 1.1.0 MIT
@azure/abort-controller 2.1.2 MIT
@azure/core-auth 1.7.2 MIT
@azure/core-util 1.9.0 MIT
@azure/ms-rest-js 2.7.0 MIT
@azure/storage-blob 12.17.0 MIT
@fastify/busboy 2.1.1 MIT
@gitbeaker/core 43.8.0 MIT
@gitbeaker/requester-utils 43.8.0 MIT
@gitbeaker/rest 43.8.0 MIT
@isaacs/fs-minipass 4.0.1 ISC
@octokit/auth-token 2.5.0 MIT
@octokit/core 3.6.0 MIT
@octokit/core 5.2.0 MIT
@octokit/core 7.0.6 MIT
@octokit/endpoint 6.0.12 MIT
@octokit/endpoint 9.0.6 MIT
@octokit/graphql 4.8.0 MIT
@octokit/openapi-types 12.11.0 MIT
@octokit/openapi-types 20.0.0 MIT
@octokit/openapi-types 27.0.0 MIT
@octokit/openapi-webhooks-types 12.1.0 MIT
@octokit/plugin-paginate-rest 14.0.0 MIT
@octokit/plugin-paginate-rest 2.21.3 MIT
@octokit/plugin-paginate-rest 9.2.2 MIT
@octokit/plugin-request-log 1.0.4 MIT
@octokit/plugin-request-log 6.0.0 MIT
@octokit/plugin-rest-endpoint-methods 10.4.1 MIT
@octokit/plugin-rest-endpoint-methods 17.0.0 MIT
@octokit/plugin-rest-endpoint-methods 5.16.2 MIT
@octokit/plugin-retry 3.0.9 MIT
@octokit/request-error 2.1.0 MIT
@octokit/request-error 5.1.1 MIT
@octokit/request-error 7.0.0 MIT
@octokit/request 5.6.3 MIT
@octokit/request 8.4.1 MIT
@octokit/rest 22.0.1 MIT
@octokit/types 12.6.0 MIT
@octokit/types 13.10.0 MIT
@octokit/types 14.1.0 MIT
@octokit/types 16.0.0 MIT
@octokit/types 6.41.0 MIT
@octokit/webhooks-methods 6.0.0 MIT
@octokit/webhooks 14.2.0 MIT
@protobuf-ts/plugin-framework 2.9.4 Apache-2.0
BSD-3-Clause
@protobuf-ts/plugin 2.9.4 Apache-2.0
@protobuf-ts/protoc 2.9.4 Apache-2.0
@protobuf-ts/runtime-rpc 2.11.1 Apache-2.0
@protobuf-ts/runtime 2.11.1 Apache-2.0
BSD-3-Clause
@qodana/action 1.0.0 Apache-2.0
@qodana/ci-common 1.0.0 Apache-2.0
@qodana/gitlab 1.0.0 Apache-2.0
@qodana/vsts 1.0.0 Apache-2.0
@types/adm-zip 0.5.7 MIT
@types/node 16.18.126 MIT
@types/node 25.5.2 MIT
@types/sarif 2.1.7 MIT
@types/semver 5.5.0 MIT
@types/uuid 3.4.13 MIT
abort-controller 3.0.0 MIT
adm-zip 0.5.17 MIT
annotations 13.0 Apache-2.0
archiver-utils 5.0.2 MIT
archiver 7.0.1 MIT
argparse 1.0.10 MIT
async 3.2.5 MIT
asynckit 0.4.0 MIT
axios 1.15.2 MIT
azure-devops-node-api 15.1.2 MIT
azure-pipelines-task-lib 5.2.8 MIT
azure-pipelines-tasks-utility-common 3.272.0 MIT
azure-pipelines-tool-lib 2.0.12 MIT
b4a 1.6.6 Apache-2.0
balanced-match 1.0.2 MIT
bare-events 2.2.2 Apache-2.0
before-after-hook 2.2.3 Apache-2.0
binary 0.3.0 MIT
bottleneck 2.19.5 MIT
brace-expansion 2.0.2 MIT
buffer-crc32 1.0.0 MIT
buffers 0.1.1 MIT
call-bind-apply-helpers 1.0.2 MIT
chainsaw 0.1.0 MIT
chownr 3.0.0 BlueOak-1.0.0
combined-stream 1.0.8 MIT
compress-commons 6.0.2 MIT
core-util-is 1.0.3 MIT
crc-32 1.2.2 Apache-2.0
crc32-stream 6.0.0 MIT
delayed-stream 1.0.0 MIT
deprecation 2.3.1 ISC
des.js 1.1.0 MIT
dunder-proto 1.0.1 MIT
es-define-property 1.0.1 MIT
es-errors 1.3.0 MIT
es-object-atoms 1.1.1 MIT
es-set-tostringtag 2.1.0 MIT
esprima 4.0.1 BSD-2-Clause
event-target-shim 5.0.1 MIT
fast-fifo 1.3.2 MIT
follow-redirects 1.15.11 MIT
form-data 2.5.1 MIT
form-data 4.0.5 MIT
function-bind 1.1.2 MIT
get-intrinsic 1.3.0 MIT
get-proto 1.0.1 MIT
gopd 1.2.0 MIT
has-symbols 1.1.0 MIT
has-tostringtag 1.0.2 MIT
hasown 2.0.2 MIT
immediate 3.0.6 MIT
inherits 2.0.4 ISC
is-plain-object 5.0.0 MIT
is-stream 2.0.1 MIT
isarray 1.0.0 MIT
js-md4 0.3.2 MIT
js-yaml 3.14.2 MIT
jszip 3.10.1 GPL-3.0-or-later
MIT
jwt-decode 3.1.2 MIT
kotlin-reflect 1.9.20 Apache-2.0
kotlin-stdlib 1.9.20 Apache-2.0
lie 3.3.0 MIT
math-intrinsics 1.1.0 MIT
mime-db 1.52.0 MIT
mime-types 2.1.35 MIT
minimatch 3.1.5 ISC
minimatch 5.1.6 ISC
minimist 1.2.8 MIT
minipass 7.1.2 ISC
minizlib 3.1.0 MIT
mkdirp 0.5.6 MIT
node-fetch 2.7.0 MIT
normalize-path 3.0.0 MIT
once 1.4.0 ISC
pako 1.0.11 MIT
Zlib
picomatch-browser 2.2.6 MIT
process-nextick-args 2.0.1 MIT
proxy-from-env 2.1.0 MIT
qs 6.15.0 BSD-3-Clause
queue-tick 1.0.1 MIT
rate-limiter-flexible 8.3.0 ISC
readable-stream 2.3.8 MIT
readable-stream 4.5.2 MIT
readdir-glob 1.1.3 Apache-2.0
safe-buffer 5.1.2 MIT
sax 1.3.0 ISC
semver-compare 1.0.0 MIT
semver 5.7.2 ISC
semver 6.3.1 ISC
setimmediate 1.0.5 MIT
shell-quote 1.8.3 MIT
sprintf-js 1.0.3 BSD-3-Clause
streamx 2.16.1 MIT
string_decoder 1.1.1 MIT
tar-stream 3.1.7 MIT
tar 7.5.13 BlueOak-1.0.0
tr46 0.0.3 MIT
traverse 0.3.9 MIT
tslib 1.14.1 0BSD
tslib 2.8.1 0BSD
tunnel 0.0.6 MIT
typed-rest-client 1.8.11 MIT
typed-rest-client 2.1.0 MIT
typed-rest-client 2.2.0 MIT
typescript 3.9.10 Apache-2.0
underscore 1.13.6 MIT
undici-types 7.18.2 MIT
undici 5.29.0 MIT
universal-user-agent 6.0.1 ISC
unzip-stream 0.3.4 MIT
util-deprecate 1.0.2 MIT
uuid 3.4.0 MIT
uuid 8.3.2 MIT
webidl-conversions 3.0.1 BSD-2-Clause
whatwg-url 5.0.0 MIT
xcase 2.0.1 MIT
xml2js 0.5.0 MIT
xmlbuilder 11.0.1 MIT
yallist 5.0.0 BlueOak-1.0.0
zip-stream 6.0.1 MIT
Contact Qodana team

Contact us at qodana-support@jetbrains.com

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants