Skip to content

chore(deps): bump the github-actions group across 1 directory with 2 updates - #226

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/master/github-actions-ac70275fa0
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/master/github-actions-ac70275fa0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 13, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 2 updates in the / directory: actions/setup-java and red-gate/setup-flyway.

Updates actions/setup-java from 6.0.0 to 6.0.1

Release notes

Sourced from actions/setup-java's releases.

v6.0.1

What's Changed

New Contributors

Full Changelog: actions/setup-java@v6.0.0...v6.0.1

Commits
  • de7274f Avoid macOS GPG socket overflow on long runner paths (#1266)
  • 134912a Fix import-safe checks when scripts are run from a path with symlinks (#1265)
  • 0781fc6 Fix alpine failures by switching default back to only warn on verification fa...
  • 4889c4a Fix Temurin EA E2E signature verification (#1260)
  • 8fd3240 [WIP] Fix failing GitHub Actions job for temurin 17 (#1259)
  • 2732291 chore(deps-dev): update eslint and globals (#1256)
  • 1a8f22b chore: streamline Dependabot updates (#1255)
  • 85030b7 docs: complete v6 release highlights (#1254)
  • See full diff in compare view

Updates red-gate/setup-flyway from 3.3.2 to 3.3.3

Release notes

Sourced from red-gate/setup-flyway's releases.

v3.3.3

What's Changed

Full Changelog: red-gate/setup-flyway@v3.3.2...v3.3.3

Commits
  • 85d1712 Merge pull request #350 from red-gate/dependabot/npm_and_yarn/dev-dependencie...
  • 00f3626 update vulnerable dep
  • 38de07a Bump the dev-dependencies group across 1 directory with 5 updates
  • a19ef7d Merge pull request #351 from red-gate/dependabot/npm_and_yarn/vitest/coverage...
  • e2abe05 rebuild
  • a50b3a3 Bump @​vitest/coverage-v8 from 4.1.11 to 5.0.0
  • d1ff0be Merge pull request #352 from red-gate/dependabot/npm_and_yarn/vitest-5.0.0
  • 2cf9760 Bump vitest from 4.1.11 to 5.0.0
  • ad05167 Merge pull request #349 from red-gate/dependabot/npm_and_yarn/prod-dependenci...
  • 850a1a1 Rebuild dist/ for fast-xml-parser 5.11.1
  • Additional commits viewable in compare view

Summary by CodeRabbit

  • Chores
    • Updated the pinned setup actions used during integration testing to newer revisions.

@dependabot dependabot Bot added auto update Changes by automated library update tool infrastructure Project setup and deployment no RN No release notes required labels Sep 13, 2026
@dependabot dependabot Bot added infrastructure Project setup and deployment auto update Changes by automated library update tool no RN No release notes required labels Sep 13, 2026
@coderabbitai

coderabbitai Bot commented Sep 13, 2026 •

Copy link
Copy Markdown
Contributor

Review Change StackReview Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 6bf332e3-dba5-40ef-b2f0-cbb04557b9a1

📥 Commits

Reviewing files that changed from the base of the PR and between 8a8e9f9 and be1d498.

📒 Files selected for processing (1)
  • .github/workflows/quality_gates.yml

Included review availability: Your plan provides up to 10 included reviews per hour; 9 remain after this review.


Walkthrough

Changes

CI action pin updates

Layer / File(s) Summary
Update setup action revisions
.github/workflows/quality_gates.yml
The integration-tests job uses updated pinned revisions for actions/setup-java and red-gate/setup-flyway. Java and Flyway settings remain unchanged.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately identifies a dependency update to the GitHub Actions group and states that two updates affect one directory.
Description check ✅ Passed The description clearly explains both dependency updates and includes detailed release information. It does not use the template headings or provide a Related issue entry, but it is mostly complete an…
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR

A rabbit checks the workflow line
Two pinned actions now align
Java hops, Flyway follows
Settings stay on steady pillows
Green gates wait in quiet time

Comment @coderabbitai help to get the list of available commands.

@github-actions
github-actions Bot enabled auto-merge (squash) September 13, 2026 23:53
…updates

Bumps the github-actions group with 2 updates in the / directory: [actions/setup-java](https://github.com/actions/setup-java) and [red-gate/setup-flyway](https://github.com/red-gate/setup-flyway).


Updates `actions/setup-java` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@dd06d9c...de7274f)

Updates `red-gate/setup-flyway` from 3.3.2 to 3.3.3
- [Release notes](https://github.com/red-gate/setup-flyway/releases)
- [Commits](red-gate/setup-flyway@e024a17...85d1712)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: red-gate/setup-flyway
  dependency-version: 3.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the github-actions group with 2 updates chore(deps): bump the github-actions group across 1 directory with 2 updates Sep 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/master/github-actions-ac70275fa0 branch from cceae09 to be1d498 Compare September 20, 2026 23:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto update Changes by automated library update tool infrastructure Project setup and deployment no RN No release notes required

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants