build(deps): bump actions/setup-java from 5.2.0 to 5.4.0#6708
build(deps): bump actions/setup-java from 5.2.0 to 5.4.0#6708dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5.2.0 to 5.4.0. - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@be666c2...1bcf9fb) --- updated-dependencies: - dependency-name: actions/setup-java dependency-version: 5.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
Dependencies
dependabot
Bot
added
Dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit a938726. Configure here.
| enable-cache: false | ||
| - name: Install Java | ||
| uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5 | ||
| uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5 |
There was a problem hiding this comment.
Generated workflow reverts Java bump
Low Severity
This workflow is auto-generated and the header says not to edit it manually. The actions/setup-java pin was updated here, but scripts/split_tox_gh_actions/templates/test_group.jinja still references the previous commit, so running the generator will overwrite this bump.
Reviewed by Cursor Bugbot for commit a938726. Configure here.
Codecov Results 📊✅ 90018 passed | ⏭️ 6298 skipped | Total: 96316 | Pass Rate: 93.46% | Execution Time: 317m 2s 📊 Comparison with Base Branch
✨ No test changes detected All tests are passing successfully. ✅ Patch coverage is 100.00%. Project has 2444 uncovered lines. Coverage diff@@ Coverage Diff @@
## main #PR +/-##
==========================================
+ Coverage 89.74% 89.74% —%
==========================================
Files 192 192 —
Lines 23819 23819 —
Branches 8222 8222 —
==========================================
+ Hits 21375 21375 —
- Misses 2444 2444 —
- Partials 1348 1348 —Generated by Codecov Action |
Bumps actions/setup-java from 5.2.0 to 5.4.0.
Release notes
Sourced from actions/setup-java's releases.
... (truncated)
Commits
1bcf9fbdist: Address Copilot review suggestions from PR #1042 (GraalVM Community) (#...fa2c650docs: note jdkfile approach for Early Access / unreleased JDK builds (#1058)1d56e31dist: Add GraalVM Community distribution support (#1042)1d25252chore: Harden workflows: least-privilege permissions + zizmor integration (#1...668c1eadocs: add post-install keytool import for the JDK cacerts trust store (#1051)a9a46fbdocs: document self-signed certificate / internal CA handling for GitHub Ente...5431e71docs: add JavaFX Maven project configuration instructions (#1044)4baa9b4docs: replace non-existent HelloWorldApp references with java --version (#1043)eab4b08Bump@types/nodefrom 25.9.3 to 26.0.0 (#1031)bf0c0e6Bump actions/checkout from 6 to 7 (#1032)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)