From 1fb084338263f598c8ad42a77bf989b71e7b0bf6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 31 Aug 2026 01:32:57 +0000 Subject: [PATCH] Bump the github-actions group with 7 updates Bumps the github-actions group with 7 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `3.7.0` | `7.0.1` | | [actions/setup-java](https://github.com/actions/setup-java) | `3.12.0` | `6.0.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `2.10.0` | `4.3.0` | | [docker/login-action](https://github.com/docker/login-action) | `1.14.1` | `4.6.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `4.1.1` | `7.3.0` | | [actions/cache](https://github.com/actions/cache) | `3.5.0` | `6.1.0` | | [actions/github-script](https://github.com/actions/github-script) | `7.1.0` | `9.0.0` | Updates `actions/checkout` from 3.7.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v3.7.0...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `actions/setup-java` from 3.12.0 to 6.0.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/v3.12.0...dd06d9cba3e5552c54d9f8ea23572deb30010f7c) Updates `docker/setup-buildx-action` from 2.10.0 to 4.3.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/885d1462b80bc1c1c7f0b00334ad271f09369c55...37fe631027851001ddb9b187196cc803df7f5f0e) Updates `docker/login-action` from 1.14.1 to 4.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/dd4fa0671be5250ee6f50aedf4cb05514abda2c7...dbcb813823bdd20940b903addbd779551569679f) Updates `docker/build-push-action` from 4.1.1 to 7.3.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/2eb1c1961a95fc15694676618e422e8ba1d63825...53b7df96c91f9c12dcc8a07bcb9ccacbed38856a) Updates `actions/cache` from 3.5.0 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/6f8efc29b200d32929f49075959781ed54ec270c...55cc8345863c7cc4c66a329aec7e433d2d1c52a9) Updates `actions/github-script` from 7.1.0 to 9.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/f28e40c7f34bde8b3046d885e986cb6290c5673b...3a2844b7e9c422d3c10d287c895573f7108da1b3) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/build-push-action dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/cache dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/github-script dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .../workflows/asa-sample-helloworld-create-release.yml | 4 ++-- .../workflows/asa-sample-helloworld-docker-image.yml | 10 +++++----- .github/workflows/build.yml | 4 ++-- .github/workflows/sonar-spring-cloud-azure.yml | 6 +++--- .github/workflows/test-spring-boot-rc-version.yml | 6 +++--- .../update-spring-cloud-azure-support-file.yml | 8 ++++---- .github/workflows/update-spring-dependencies.yml | 8 ++++---- 7 files changed, 23 insertions(+), 23 deletions(-) diff --git a/.github/workflows/asa-sample-helloworld-create-release.yml b/.github/workflows/asa-sample-helloworld-create-release.yml index 7aad7f9..72d70ae 100644 --- a/.github/workflows/asa-sample-helloworld-create-release.yml +++ b/.github/workflows/asa-sample-helloworld-create-release.yml @@ -23,12 +23,12 @@ jobs: contents: write steps: - name: Checkout - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: 'spring-guides/gs-spring-boot-for-azure' ref: ${{ github.event.inputs.commit-sha }} - name: Setup Java JDK - uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3.12.0 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0 with: java-version: '17' distribution: 'temurin' diff --git a/.github/workflows/asa-sample-helloworld-docker-image.yml b/.github/workflows/asa-sample-helloworld-docker-image.yml index d2b6192..5ae7de3 100644 --- a/.github/workflows/asa-sample-helloworld-docker-image.yml +++ b/.github/workflows/asa-sample-helloworld-docker-image.yml @@ -25,12 +25,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: 'spring-guides/gs-spring-boot-for-azure' ref: ${{ github.event.inputs.commit-sha }} - name: Setup Java JDK - uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3.12.0 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0 with: java-version: '17' distribution: 'temurin' @@ -42,15 +42,15 @@ jobs: run: ./mvnw clean package working-directory: ./complete - name: Set up Docker Buildx - uses: docker/setup-buildx-action@885d1462b80bc1c1c7f0b00334ad271f09369c55 # v2.10.0 + uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0 - name: Log into registry - uses: docker/login-action@dd4fa0671be5250ee6f50aedf4cb05514abda2c7 # v1.14.1 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ${{ secrets.ACR_ENDPOINT }} username: ${{ secrets.ACR_USERNAME }} password: ${{ secrets.ACR_PASSWORD }} - name: Build and push Docker images - uses: docker/build-push-action@2eb1c1961a95fc15694676618e422e8ba1d63825 # v4.1.1 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 with: context: ./complete platforms: linux/amd64, linux/arm64 diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 47b1fe4..4ee8d25 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -10,9 +10,9 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up JDK 11 - uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4.9.1 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0 with: distribution: 'temurin' java-version: '11' diff --git a/.github/workflows/sonar-spring-cloud-azure.yml b/.github/workflows/sonar-spring-cloud-azure.yml index 8aa051c..bb0343b 100644 --- a/.github/workflows/sonar-spring-cloud-azure.yml +++ b/.github/workflows/sonar-spring-cloud-azure.yml @@ -12,18 +12,18 @@ jobs: name: Build runs-on: ubuntu-latest steps: - - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: 'Azure/azure-sdk-for-java' fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis - name: Set up JDK 17 - uses: actions/setup-java@e9fbacdec3bb3b6036605a3e6f7995d66773a8c6 # v3.14.2 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0 with: java-version: '17' distribution: 'temurin' cache: maven - name: Cache SonarCloud packages - uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3.5.0 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: ~/.sonar/cache key: ${{ runner.os }}-sonar diff --git a/.github/workflows/test-spring-boot-rc-version.yml b/.github/workflows/test-spring-boot-rc-version.yml index 9cd929d..215165e 100644 --- a/.github/workflows/test-spring-boot-rc-version.yml +++ b/.github/workflows/test-spring-boot-rc-version.yml @@ -6,7 +6,7 @@ jobs: name: Build runs-on: ubuntu-latest steps: - - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: 'Azure/spring-cloud-azure-tools' - name: Generate Version File @@ -35,7 +35,7 @@ jobs: else echo "No RC version,cancel update!" fi - - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 if: ${{ env.need_update_version == 'true' }} with: repository: 'Azure/azure-sdk-for-java' @@ -95,7 +95,7 @@ jobs: PULL_REQUEST_DRAFT: true - name: Comment on Pull Requests if: ${{ env.need_update_version == 'true' }} - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: github-token: ${{ secrets.ACCESS_TOKEN }} script: | diff --git a/.github/workflows/update-spring-cloud-azure-support-file.yml b/.github/workflows/update-spring-cloud-azure-support-file.yml index 5006d19..af8ccb7 100644 --- a/.github/workflows/update-spring-cloud-azure-support-file.yml +++ b/.github/workflows/update-spring-cloud-azure-support-file.yml @@ -15,7 +15,7 @@ jobs: steps: - name: Check for Existing Open Pull Request id: check - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: github-token: ${{ secrets.ACCESS_TOKEN }} script: | @@ -41,14 +41,14 @@ jobs: if: ${{ needs.check-open-pr.outputs.has_open_pr == 'false' }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: 'Azure/spring-cloud-azure-tools' - name: Generate Spring Cloud Azure Support File run: | mvn compile mvn exec:java -P github-actions -ntp -Dupdate-spring-cloud-azure-support-file=true - - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: 'Azure/azure-sdk-for-java' path: 'azure-sdk-for-java' @@ -141,7 +141,7 @@ jobs: PULL_REQUEST_BODY: "${{ env.PULL_REQUEST_BODY }}" - name: Comment on Pull Requests if: ${{ env.NEED_UPDATE_FILE == 'true' }} - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: github-token: ${{ secrets.ACCESS_TOKEN }} script: | diff --git a/.github/workflows/update-spring-dependencies.yml b/.github/workflows/update-spring-dependencies.yml index 9ea9b19..7b7e3bd 100644 --- a/.github/workflows/update-spring-dependencies.yml +++ b/.github/workflows/update-spring-dependencies.yml @@ -21,7 +21,7 @@ jobs: steps: - name: Check for Open Spring Boot Upgrade PRs id: check_prs - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: github-token: ${{ secrets.ACCESS_TOKEN }} script: | @@ -51,7 +51,7 @@ jobs: needs: check if: ${{ needs.check.outputs.skip_pipeline != 'true' }} steps: - - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: 'Azure/spring-cloud-azure-tools' - name: Generate Version File @@ -74,7 +74,7 @@ jobs: echo "pr_descriptions=$(cat pr-descriptions.txt)" >> $GITHUB_ENV echo "PR_TITLE=${PR_TITLE_PREFIX} $(sed -n '1p' spring-versions.txt) and Spring Cloud $(sed -n '2p' spring-versions.txt)" >> $GITHUB_ENV fi - - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 if: ${{ env.need_update_version == 'true' }} with: repository: 'Azure/azure-sdk-for-java' @@ -132,7 +132,7 @@ jobs: PULL_REQUEST_DRAFT: false - name: Comment on Pull Requests if: ${{ env.need_update_version == 'true' }} - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: github-token: ${{ secrets.ACCESS_TOKEN }} script: |