chore(deps): bump the dependencies group across 1 directory with 4 updates by dependabot[bot] · Pull Request #495 · openfga/language

dependabot · 2025-09-12T20:56:52Z

Bumps the dependencies group with 4 updates in the / directory: actions/setup-go, actions/setup-java, gradle/actions and actions/setup-node.

Updates actions/setup-go from 5.5.0 to 6.0.0

Release notes

Sourced from actions/setup-go's releases.

v6.0.0

What's Changed

Breaking Changes

Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by @matthewhughes934 in actions/setup-go#460

Upgrade Nodejs runtime from node20 to node 24 by @salmanmkc in actions/setup-go#624

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot[bot] in actions/setup-go#589

Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot[bot] in actions/setup-go#591

Upgrade @typescript-eslint/parser from 8.31.1 to 8.35.1 by @dependabot[bot] in actions/setup-go#590

Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in actions/setup-go#594

Upgrade typescript from 5.4.2 to 5.8.3 by @dependabot[bot] in actions/setup-go#538

Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by @dependabot[bot] in actions/setup-go#603

Upgrade form-data to bring in fix for critical vulnerability by @matthewhughes934 in actions/setup-go#618

Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in actions/setup-go#631

New Contributors

@matthewhughes934 made their first contribution in actions/setup-go#618

@salmanmkc made their first contribution in actions/setup-go#624

Full Changelog: actions/setup-go@v5...v6.0.0

Commits

4469467 Bump actions/checkout from 4 to 5 (#631)
e093d1e Node 24 upgrade (#624)
1d76b95 Improve toolchain handling (#460)
e75c3e8 Bump form-data to bring in fix for critical vulnerability (#618)
8e57b58 Bump eslint-plugin-jest from 28.11.0 to 29.0.1 (#603)
7c0b336 Bump typescript from 5.4.2 to 5.8.3 (#538)
6f26dcc Bump undici from 5.28.5 to 5.29.0 (#594)
8d4083a Bump @typescript-eslint/parser from 5.62.0 to 8.32.0 (#590)
fa96338 Bump @actions/tool-cache from 2.0.1 to 2.0.2 (#591)
4de67c0 Bump @types/jest from 29.5.12 to 29.5.14 (#589)
See full diff in compare view

Updates actions/setup-java from 4.7.1 to 5.0.0

Release notes

Sourced from actions/setup-java's releases.

v5.0.0

What's Changed

Breaking Changes

Upgrade to node 24 by @salmanmkc in actions/setup-java#888

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency Upgrades

Upgrade Publish Immutable Action by @HarithaVattikuti in actions/setup-java#798

Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @dependabot[bot] in actions/setup-java#730

Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in actions/setup-java#833

Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in actions/setup-java#887

Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in actions/setup-java#896

Bug Fixes

Prevent default installation of JetBrains pre-releases by @priyagupta108 in actions/setup-java#859

Improve Error Handling for Setup-Java Action to Help Debug Intermittent Failures by @gowridurgad in actions/setup-java#848

New Contributors

@gowridurgad made their first contribution in actions/setup-java#848

@salmanmkc made their first contribution in actions/setup-java#888

Full Changelog: actions/setup-java@v4...v5.0.0

Commits

dded088 Bump actions/checkout from 4 to 5 (#896)
0913e9a Upgrade to node 24 (#888)
e9343db Bumps form-data (#887)
ae2b61d Bump undici from 5.28.5 to 5.29.0 (#833)
c190c18 Bump eslint-plugin-jest from 27.9.0 to 29.0.1 (#730)
67aec00 Fix: prevent default installation of JetBrains pre-releases (#859)
ebb356c Improve Error Handling for Setup-Java Action to Help Debug Intermittent Failu...
f4f1212 Update publish-immutable-actions.yml (#798)
See full diff in compare view

Updates gradle/actions from 4.4.2 to 4.4.3

Release notes

Sourced from gradle/actions's releases.

v4.4.3

What's Changed

Adapt tests to future new Build Scan publication message by @alextu in gradle/actions#708

Add missing Gradle version input to setup-gradle by @jprinet in gradle/actions#713

Bump the github-actions group across 2 directories with 4 updates by @dependabot[bot] in gradle/actions#710

Bump references to Develocity Gradle plugin from 4.1 to 4.1.1 by @bot-githubaction in gradle/actions#712

Update known wrapper checksums by @github-actions[bot] in gradle/actions#709

Bump the npm-dependencies group across 1 directory with 4 updates by @dependabot[bot] in gradle/actions#711

Do not run setup-gradle post action if workflow is cancelled by @jprinet in gradle/actions#716

Bump the github-actions group across 2 directories with 2 updates by @dependabot[bot] in gradle/actions#715

Bump the npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in gradle/actions#720

Bump github/codeql-action from 3.29.11 to 3.30.0 in the github-actions group across 1 directory by @dependabot[bot] in gradle/actions#719

Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.19.2 to 2.20.0 in /sources/test/init-scripts in the gradle group across 1 directory by @dependabot[bot] in gradle/actions#718

Update known wrapper checksums by @github-actions[bot] in gradle/actions#723

Bump the npm-dependencies group in /sources with 5 updates by @dependabot[bot] in gradle/actions#725

Full Changelog: gradle/actions@v4.4.2...v4.4.3

Commits

ed40850 Bump the npm-dependencies group in /sources with 5 updates (#725)
c5e1804 [bot] Update dist directory
467e56e Bump the npm-dependencies group in /sources with 5 updates
76d3b99 Update known wrapper checksums (#723)
70908db Update known wrapper checksums
0a4f8b4 Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.19.2 to...
267b96b Merge branch 'main' into dependabot/gradle/sources/test/init-scripts/gradle-e...
9302782 Bump github/codeql-action from 3.29.11 to 3.30.0 in the github-actions group ...
87d1c17 Bump the npm-dependencies group across 1 directory with 3 updates (#720)
5dc5adb Bump the npm-dependencies group across 1 directory with 3 updates
Additional commits viewable in compare view

Updates actions/setup-node from 4.4.0 to 5.0.0

Release notes

Sourced from actions/setup-node's releases.

v5.0.0

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in actions/setup-node#1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set package-manager-cache: false
steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false
Upgrade action to use node24 by @salmanmkc in actions/setup-node#1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in actions/setup-node#1227

Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in actions/setup-node#1273

Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in actions/setup-node#1295

Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in actions/setup-node#1332

Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in actions/setup-node#1345

New Contributors

@priya-kinthali made their first contribution in actions/setup-node#1348

@salmanmkc made their first contribution in actions/setup-node#1325

Full Changelog: actions/setup-node@v4...v5.0.0

Commits

a0853c2 Bump actions/checkout from 4 to 5 (#1345)
b7234cc Upgrade action to use node24 (#1325)
d7a1131 Enhance caching in setup-node with automatic package manager detection (#1348)
5e2628c Bumps form-data (#1332)
65becef Bump undici from 5.28.5 to 5.29.0 (#1295)
7e24a65 Bump uuid from 9.0.1 to 11.1.0 (#1273)
08f58d1 Bump @octokit/request-error and @actions/github (#1227)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

coderabbitai · 2025-09-12T20:57:04Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

adriantam · 2025-09-12T21:13:40Z

@dependabot rebase

…dates Bumps the dependencies group with 4 updates in the / directory: [actions/setup-go](https://github.com/actions/setup-go), [actions/setup-java](https://github.com/actions/setup-java), [gradle/actions](https://github.com/gradle/actions) and [actions/setup-node](https://github.com/actions/setup-node). Updates `actions/setup-go` from 5.5.0 to 6.0.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@d35c59a...4469467) Updates `actions/setup-java` from 4.7.1 to 5.0.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@c5195ef...dded088) Updates `gradle/actions` from 4.4.2 to 4.4.3 - [Release notes](https://github.com/gradle/actions/releases) - [Commits](gradle/actions@017a9ef...ed40850) Updates `actions/setup-node` from 4.4.0 to 5.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@49933ea...a0853c2) --- updated-dependencies: - dependency-name: actions/setup-go dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: actions/setup-java dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: gradle/actions dependency-version: 4.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: actions/setup-node dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 12, 2025

dependabot Bot requested review from a team as code owners September 12, 2025 20:56

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 12, 2025

adriantam approved these changes Sep 12, 2025

View reviewed changes

dependabot Bot force-pushed the dependabot/github_actions/dependencies-a2c32fc042 branch from a6f6c84 to d5a853e Compare September 12, 2025 21:15

adriantam added this pull request to the merge queue Sep 12, 2025

Merged via the queue into main with commit 55a519a Sep 12, 2025
19 of 20 checks passed

adriantam deleted the dependabot/github_actions/dependencies-a2c32fc042 branch September 12, 2025 21:26

Navigation Menu

Uh oh!

chore(deps): bump the dependencies group across 1 directory with 4 updates - #495

chore(deps): bump the dependencies group across 1 directory with 4 updates#495
adriantam merged 1 commit into
mainfrom
dependabot/github_actions/dependencies-a2c32fc042

dependabot Bot commented on behalf of github Sep 12, 2025 •

edited

Loading

Uh oh!

coderabbitai Bot commented Sep 12, 2025

Review skipped

Uh oh!

adriantam commented Sep 12, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 12, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v6.0.0

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

v5.0.0

What's Changed

Breaking Changes

Dependency Upgrades

Bug Fixes

New Contributors

v4.4.3

What's Changed

v5.0.0

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

Uh oh!

coderabbitai Bot commented Sep 12, 2025

Review skipped

Uh oh!

adriantam commented Sep 12, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 12, 2025 •

edited

Loading