This is an automated email from the ASF dual-hosted git repository.
lprimak pushed a commit to branch 2.x
in repository https://gitbox.apache.org/repos/asf/shiro.git
The following commit(s) were added to refs/heads/2.x by this push:
new 0c0bdde53 chore(deps): bump the github-actions-dependencies group with
8 updates (#2935)
0c0bdde53 is described below
commit 0c0bdde5315aa840f7d5b7a20ef2d15efbee9203
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Sun Nov 1 12:43:08 2026 -0600
chore(deps): bump the github-actions-dependencies group with 8 updates
(#2935)
Bumps the github-actions-dependencies group with 8 updates:
| Package | From | To |
| --- | --- | --- |
|
[apache/infrastructure-actions/allowlist-check](https://github.com/apache/infrastructure-actions)
| `d545588139850a104de28a3a203555f719e0393a` |
`bd72894b857767d42834c186c90767d5c86624bb` |
| [github/codeql-action/init](https://github.com/github/codeql-action) |
`4.38.2` | `4.39.1` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) |
`4.38.2` | `4.39.1` |
| [actions/setup-java](https://github.com/actions/setup-java) | `6.0.1` |
`6.1.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) |
`7.0.1` | `7.0.2` |
| [j178/prek-action](https://github.com/j178/prek-action) | `3.0.0` |
`3.1.0` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action) |
`2.4.4` | `2.5.0` |
|
[github/codeql-action/upload-sarif](https://github.com/github/codeql-action) |
`4.38.2` | `4.39.1` |
Updates `apache/infrastructure-actions/allowlist-check` from
d545588139850a104de28a3a203555f719e0393a to
bd72894b857767d42834c186c90767d5c86624bb
-
[Commits](https://github.com/apache/infrastructure-actions/compare/d545588139850a104de28a3a203555f719e0393a...bd72894b857767d42834c186c90767d5c86624bb)
Updates `github/codeql-action/init` from 4.38.2 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...9b3254085494b55a0f7c4c2b3d2d52cc712ce370)
Updates `github/codeql-action/analyze` from 4.38.2 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...9b3254085494b55a0f7c4c2b3d2d52cc712ce370)
Updates `actions/setup-java` from 6.0.1 to 6.1.0
- [Release notes](https://github.com/actions/setup-java/releases)
-
[Commits](https://github.com/actions/setup-java/compare/de7274f081f381c8f8158605e0321c36c376e2e6...b843ebf9b913146b38da2eaa7aeddf76074ae1ad)
Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
-
[Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9)
Updates `j178/prek-action` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/j178/prek-action/releases)
-
[Commits](https://github.com/j178/prek-action/compare/4e14d07f9231acabce116ccfca13b13dd9755ece...44924fe9ef4a6f88253c4b6b1bf11c689d3ce53d)
Updates `ossf/scorecard-action` from 2.4.4 to 2.5.0
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
-
[Commits](https://github.com/ossf/scorecard-action/compare/2d1146689b8cda280b9bc96326124645441f03bc...fa7117db83c52d787ae5a89f350999701505d78e)
Updates `github/codeql-action/upload-sarif` from 4.38.2 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...9b3254085494b55a0f7c4c2b3d2d52cc712ce370)
---
updated-dependencies:
- dependency-name: apache/infrastructure-actions/allowlist-check
dependency-version: bd72894b857767d42834c186c90767d5c86624bb
dependency-type: direct:production
dependency-group: github-actions-dependencies
- dependency-name: github/codeql-action/init
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-dependencies
- dependency-name: github/codeql-action/analyze
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-dependencies
- dependency-name: actions/setup-java
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-dependencies
- dependency-name: actions/upload-artifact
dependency-version: 7.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-dependencies
- dependency-name: j178/prek-action
dependency-version: 3.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-dependencies
- dependency-name: ossf/scorecard-action
dependency-version: 2.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-dependencies
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-dependencies
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
.github/workflows/asf-allowlist-check.yml | 2 +-
.github/workflows/codeql.yml | 4 ++--
.github/workflows/maven.yml | 6 +++---
.github/workflows/pre-commit-manual.yml | 2 +-
.github/workflows/pre-commit.yml | 2 +-
.github/workflows/scorecards.yml | 6 +++---
6 files changed, 11 insertions(+), 11 deletions(-)
diff --git a/.github/workflows/asf-allowlist-check.yml
b/.github/workflows/asf-allowlist-check.yml
index 7ba986667..451419aa7 100644
--- a/.github/workflows/asf-allowlist-check.yml
+++ b/.github/workflows/asf-allowlist-check.yml
@@ -31,4 +31,4 @@ jobs:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
- - uses:
apache/infrastructure-actions/allowlist-check@d545588139850a104de28a3a203555f719e0393a
# main
+ - uses:
apache/infrastructure-actions/allowlist-check@bd72894b857767d42834c186c90767d5c86624bb
# main
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index f2db9c8c9..0df7b06eb 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -75,7 +75,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses:
github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+ uses:
github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a
config file.
@@ -101,6 +101,6 @@ jobs:
# ./location_of_script_within_repo/buildscript.sh
- name: Perform CodeQL Analysis
- uses:
github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+ uses:
github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
with:
category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index 7e9daa56d..1f9e22153 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -39,7 +39,7 @@ jobs:
persist-credentials: false
- name: Set up JDK
- uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 #
v6.0.1
+ uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad #
v6.1.0
with:
java-version: 25
distribution: temurin
@@ -86,7 +86,7 @@ jobs:
persist-credentials: false
- name: Set up JDK
- uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 #
v6.0.1
+ uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad #
v6.1.0
with:
java-version: ${{ matrix.jdk }}
distribution: ${{ matrix.dist }}
@@ -105,7 +105,7 @@ jobs:
-Pskip_jakarta_ee_tests
- name: Archive test run logs
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
if: always()
with:
name: test-logs-${{ matrix.os }}-${{ matrix.jdk }}-${{ matrix.dist }}
diff --git a/.github/workflows/pre-commit-manual.yml
b/.github/workflows/pre-commit-manual.yml
index 3c4e9e326..42c3bd6d4 100644
--- a/.github/workflows/pre-commit-manual.yml
+++ b/.github/workflows/pre-commit-manual.yml
@@ -33,7 +33,7 @@ jobs:
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
- - uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece #
v3.0.0
+ - uses: j178/prek-action@44924fe9ef4a6f88253c4b6b1bf11c689d3ce53d #
v3.1.0
with:
install-only: true
- name: Run manual pre-commit hooks
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index b8d9e7420..92dca07aa 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -33,6 +33,6 @@ jobs:
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
- - uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece #
v3.0.0
+ - uses: j178/prek-action@44924fe9ef4a6f88253c4b6b1bf11c689d3ce53d #
v3.1.0
with:
extra-args: --all-files
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index a7ba7798d..1da0bd938 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -48,7 +48,7 @@ jobs:
persist-credentials: false
- name: "Run analysis"
- uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc #
tag=2.4.4
+ uses: ossf/scorecard-action@fa7117db83c52d787ae5a89f350999701505d78e #
tag=2.5.0
with:
results_file: results.sarif
results_format: sarif
@@ -67,7 +67,7 @@ jobs:
# Upload the results as artifacts (optional). Commenting out will
disable uploads of run results in SARIF
# format to the repository Actions tab.
- name: "Upload artifact"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# tag=v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# tag=v7.0.2
with:
name: SARIF file
path: results.sarif
@@ -75,6 +75,6 @@ jobs:
# Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning"
- uses:
github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 #
tag=v2
+ uses:
github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 #
tag=v2
with:
sarif_file: results.sarif
