chore(deps): bump the all-actions group across 1 directory with 2 updates (#975)

Bumps the all-actions group with 2 updates in the / directory:
[actions/setup-java](https://github.com/actions/setup-java) and
[github/codeql-action](https://github.com/github/codeql-action).

Updates `actions/setup-java` from 5 to 6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-java/releases">actions/setup-java's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>dist: Migrate from Zulu Discovery API to Azul Metadata API by <a
href="https://github.com/jameswald"><code>@​jameswald</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/1010">actions/setup-java#1010</a></li>
<li>feat: add .mvn/extensions.xml to Maven cache key pattern by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1041">actions/setup-java#1041</a></li>
<li>Migrate to ESM and upgrade dependencies by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-java/pull/1078">actions/setup-java#1078</a></li>
<li>Map Zulu x86 architecture to i686 for Azul Metadata API by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1079">actions/setup-java#1079</a></li>
<li>Rename jdkFile input to jdk-file with deprecated alias by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1083">actions/setup-java#1083</a></li>
<li>Infer distribution from asdf .tool-versions vendor prefix by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1084">actions/setup-java#1084</a></li>
<li>Add Maven compiler problem matcher for javac diagnostics by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1086">actions/setup-java#1086</a></li>
<li>feat: expose cache-primary-key output (<a
href="https://redirect.github.com/actions/setup-java/issues/597">#597</a>)
by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1088">actions/setup-java#1088</a></li>
<li>docs: clarify V6 ESM migration is not a user-facing breaking change
by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1090">actions/setup-java#1090</a></li>
<li>Support multi-field Java versions like <code>18.0.1.1</code> by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1092">actions/setup-java#1092</a></li>
<li>docs: document seeding the Maven cache for plugin dependencies by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1094">actions/setup-java#1094</a></li>
<li>docs: clarify Maven cache paths and key hash inputs by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1096">actions/setup-java#1096</a></li>
<li>Support pinning java-version as &quot;latest&quot; by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1093">actions/setup-java#1093</a></li>
<li>chore(deps-dev): bump eslint from 10.6.0 to 10.7.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1101">actions/setup-java#1101</a></li>
<li>chore(deps-dev): bump eslint-plugin-n from 18.2.1 to 18.2.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1103">actions/setup-java#1103</a></li>
<li>chore(deps-dev): bump prettier from 3.9.4 to 3.9.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1105">actions/setup-java#1105</a></li>
<li>chore(deps): bump actions/checkout from 6 to 7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1106">actions/setup-java#1106</a></li>
<li>chore(deps-dev): bump <code>@​types/node</code> from 26.1.0 to
26.1.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1104">actions/setup-java#1104</a></li>
<li>dist: Cover Tencent Kona JDK 25 by <a
href="https://github.com/johnshajiang"><code>@​johnshajiang</code></a>
in <a
href="https://redirect.github.com/actions/setup-java/pull/1108">actions/setup-java#1108</a></li>
<li>chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1102">actions/setup-java#1102</a></li>
<li>Preserve Maven toolchains across repeated setup-java runs (<a
href="https://redirect.github.com/actions/setup-java/issues/1099">#1099</a>)
by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1111">actions/setup-java#1111</a></li>
<li>dist: Support Liberica NIK (<a
href="https://redirect.github.com/actions/setup-java/issues/878">#878</a>)
by <a href="https://github.com/asm0dey"><code>@​asm0dey</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/1112">actions/setup-java#1112</a></li>
<li>Fix template injection (zizmor alert <a
href="https://redirect.github.com/actions/setup-java/issues/118">#118</a>)
in e2e-versions.yml by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1114">actions/setup-java#1114</a></li>
<li>Fix template injection in e2e-versions.yml (zizmor alert <a
href="https://redirect.github.com/actions/setup-java/issues/122">#122</a>)
by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1120">actions/setup-java#1120</a></li>
<li>Disable persisted checkout credentials in e2e workflow by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1115">actions/setup-java#1115</a></li>
<li>feat: Update recommended configuration for GPG signing by <a
href="https://github.com/wetneb"><code>@​wetneb</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/608">actions/setup-java#608</a></li>
<li>Cache Maven and Gradle wrapper distributions separately from the
dependency cache by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1097">actions/setup-java#1097</a></li>
<li>Consolidate cache-dependency-path e2e workflow and add maven/sbt
coverage by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1124">actions/setup-java#1124</a></li>
<li>Use gpg.passphraseEnvName instead of the deprecated gpg.passphrase
server by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1123">actions/setup-java#1123</a></li>
<li>Extract repeated directory-check assertions into check-dir.sh helper
by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1127">actions/setup-java#1127</a></li>
<li>Consolidate duplicate jobs in e2e-versions workflow by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1125">actions/setup-java#1125</a></li>
<li>Use YAML anchors to reduce boilerplate in e2e-versions workflow by
<a href="https://github.com/brunoborges"><code>@​brunoborges</code></a>
in <a
href="https://redirect.github.com/actions/setup-java/pull/1126">actions/setup-java#1126</a></li>
<li>Updated msft json for now by <a
href="https://github.com/jmjaffe37"><code>@​jmjaffe37</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/1129">actions/setup-java#1129</a></li>
<li>Document missing action inputs in README by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1130">actions/setup-java#1130</a></li>
<li>chore(deps): bump <code>@​actions/cache</code> to 6.2.0 by <a
href="https://github.com/philip-gai"><code>@​philip-gai</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/1128">actions/setup-java#1128</a></li>
<li>Add an option to disable Java problem matchers by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1133">actions/setup-java#1133</a></li>
<li>docs: update setup-java examples by <a
href="https://github.com/HarithaVattikuti"><code>@​HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-java/pull/1131">actions/setup-java#1131</a></li>
<li>Clarify credential environment variable inputs by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1134">actions/setup-java#1134</a></li>
<li>chore(deps-dev): bump <code>@​typescript-eslint/eslint-plugin</code>
from 8.63.0 to 8.64.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1135">actions/setup-java#1135</a></li>
<li>chore(deps): bump actions/setup-python from 6 to 7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1143">actions/setup-java#1143</a></li>
<li>chore(deps): bump fast-xml-parser from 5.9.3 to 5.10.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1142">actions/setup-java#1142</a></li>
<li>chore(deps-dev): bump <code>@​typescript-eslint/parser</code> from
8.64.0 to 8.65.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1138">actions/setup-java#1138</a></li>
<li>chore(deps-dev): bump lint-staged from 17.0.8 to 17.2.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1136">actions/setup-java#1136</a></li>
<li>chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-java/pull/1137">actions/setup-java#1137</a></li>
<li>chore(deps): fix npm audited vulnerabilities by <a
href="https://github.com/mhoffrog"><code>@​mhoffrog</code></a> in <a
href="https://redirect.github.com/actions/setup-java/pull/1140">actions/setup-java#1140</a></li>
<li>Fix formatting issues in README.md by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1144">actions/setup-java#1144</a></li>
<li>Remediate npm audit findings and rebuild distributions by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1145">actions/setup-java#1145</a></li>
<li>Set GRAALVM_HOME for GraalVM distributions by <a
href="https://github.com/brunoborges"><code>@​brunoborges</code></a>
with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in
<a
href="https://redirect.github.com/actions/setup-java/pull/1146">actions/setup-java#1146</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="dd06d9cba3"><code>dd06d9c</code></a>
Prepare documentation for v6 release (<a
href="https://redirect.github.com/actions/setup-java/issues/1253">#1253</a>)</li>
<li><a
href="59b3450628"><code>59b3450</code></a>
chore(deps): combine open Dependabot npm updates (<a
href="https://redirect.github.com/actions/setup-java/issues/1252">#1252</a>)</li>
<li><a
href="b96213d9d2"><code>b96213d</code></a>
Set default signature verification for supported distributions (<a
href="https://redirect.github.com/actions/setup-java/issues/1246">#1246</a>)</li>
<li><a
href="1dbac3c9e1"><code>1dbac3c</code></a>
docs: expose contributing guide to GitHub (<a
href="https://redirect.github.com/actions/setup-java/issues/1245">#1245</a>)</li>
<li><a
href="11741d6cfa"><code>11741d6</code></a>
ci: constrain cache e2e job modes (<a
href="https://redirect.github.com/actions/setup-java/issues/1244">#1244</a>)</li>
<li><a
href="ff99aa1c87"><code>ff99aa1</code></a>
Fix Oracle macOS E2E version (<a
href="https://redirect.github.com/actions/setup-java/issues/1243">#1243</a>)</li>
<li><a
href="416c6d1e8a"><code>416c6d1</code></a>
Add Red Hat Build of OpenJDK support (<a
href="https://redirect.github.com/actions/setup-java/issues/1241">#1241</a>)</li>
<li><a
href="5f75b27283"><code>5f75b27</code></a>
Add Maven dependency-resolution repositories (<a
href="https://redirect.github.com/actions/setup-java/issues/1240">#1240</a>)</li>
<li><a
href="a42a52cfb5"><code>a42a52c</code></a>
Add multiple Maven server credentials (<a
href="https://redirect.github.com/actions/setup-java/issues/1239">#1239</a>)</li>
<li><a
href="fb4abd7a70"><code>fb4abd7</code></a>
test: cover JDK 26 from SDKMAN (<a
href="https://redirect.github.com/actions/setup-java/issues/1238">#1238</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/setup-java/compare/v5...v6">compare
view</a></li>
</ul>
</details>
<br />

Updates `github/codeql-action` from 4.37.8 to 4.37.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.37.9</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h2>4.37.9 - 26 Aug 2026</h2>
<ul>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4">2.26.4</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4106">#4106</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="cdf488f595"><code>cdf488f</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4107">#4107</a>
from github/update-v4.37.9-920ba7cd1</li>
<li><a
href="7243f38558"><code>7243f38</code></a>
Update changelog for v4.37.9</li>
<li><a
href="920ba7cd15"><code>920ba7c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4106">#4106</a>
from github/update-bundle/codeql-bundle-v2.26.4</li>
<li><a
href="ecfa6e1681"><code>ecfa6e1</code></a>
Add changelog note</li>
<li><a
href="adcdf4a70d"><code>adcdf4a</code></a>
Update default bundle to codeql-bundle-v2.26.4</li>
<li><a
href="486fec2a3e"><code>486fec2</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4099">#4099</a>
from github/update-supported-enterprise-server-versions</li>
<li><a
href="134624c67b"><code>134624c</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4101">#4101</a>
from github/dependabot/npm_and_yarn/npm-minor-457d82...</li>
<li><a
href="ff43db8f98"><code>ff43db8</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4103">#4103</a>
from github/mergeback/v4.37.8-to-main-db488dde</li>
<li><a
href="4605e03a74"><code>4605e03</code></a>
Rebuild</li>
<li><a
href="099c869cad"><code>099c869</code></a>
Update changelog and version after v4.37.8</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/v4.37.8...v4.37.9">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This commit is contained in:
dependabot[bot] 2026-09-03 11:48:16 +00:00 • committed by GitHub
commit 40a14756ca
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
6 changed files with 13 additions and 13 deletions

View file

@ -27,7 +27,7 @@ jobs:
- uses: actions/checkout@v7
- name: Set up JDK ${{ env.JAVA_VERSION }}
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.JAVA_DISTRIBUTION }}

View file

@ -46,7 +46,7 @@ jobs:
- uses: actions/checkout@v7
- name: Set up JDK ${{ env.JAVA_VERSION }}
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.JAVA_DISTRIBUTION }}
@ -129,7 +129,7 @@ jobs:
- uses: actions/checkout@v7
- name: Set up JDK ${{ env.JAVA_VERSION }}
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.JAVA_DISTRIBUTION }}
@ -171,7 +171,7 @@ jobs:
- uses: actions/checkout@v7
- name: Set up JDK ${{ env.JAVA_VERSION }}
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.JAVA_DISTRIBUTION }}

View file

@ -28,13 +28,13 @@ jobs:
uses: actions/checkout@v7
- name: Set up JDK ${{ env.JAVA_VERSION }}
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
distribution: ${{ env.JAVA_DISTRIBUTION }}
java-version: ${{ env.JAVA_VERSION }}
- name: Initialize CodeQL
uses: github/codeql-action/init@v4.37.8
uses: github/codeql-action/init@v4.37.9
with:
languages: java-kotlin
build-mode: manual
@ -52,6 +52,6 @@ jobs:
--no-daemon --rerun-tasks --stacktrace
- name: Analyze
uses: github/codeql-action/analyze@v4.37.8
uses: github/codeql-action/analyze@v4.37.9
with:
category: '/language:java-kotlin'

View file

@ -28,7 +28,7 @@ jobs:
- uses: actions/checkout@v7
- name: Set up JDK
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.JAVA_DISTRIBUTION }}
@ -79,7 +79,7 @@ jobs:
- uses: actions/checkout@v7
- name: Set up JDK
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.JAVA_DISTRIBUTION }}
@ -110,7 +110,7 @@ jobs:
- uses: actions/checkout@v7
- name: Set up JDK
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.JAVA_DISTRIBUTION }}
@ -149,7 +149,7 @@ jobs:
- uses: actions/checkout@v7
- name: Set up JDK
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.JAVA_DISTRIBUTION }}

View file

@ -19,7 +19,7 @@ jobs:
steps:
- uses: actions/checkout@v7
- name: Set up JDK 21
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: '21'
distribution: 'temurin'

View file

@ -39,7 +39,7 @@ jobs:
- uses: actions/checkout@v7
- name: Set up JDK ${{ env.JAVA_VERSION }}
uses: actions/setup-java@v5
uses: actions/setup-java@v6
with:
java-version: ${{ env.JAVA_VERSION }}
distribution: ${{ env.JAVA_DISTRIBUTION }}