From bfb8ddd42fe561b91ec28fae6af913e572ac6b3f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 19 Aug 2026 02:56:15 +0000 Subject: [PATCH] chore(deps): bump the minor-and-patch group with 3 updates Bumps the minor-and-patch group with 3 updates: [actions/attest](https://github.com/actions/attest), [actions/setup-java](https://github.com/actions/setup-java) and [gradle/actions/setup-gradle](https://github.com/gradle/actions). Updates `actions/attest` from 4.2.0 to 4.2.2 - [Release notes](https://github.com/actions/attest/releases) - [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest/compare/f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6...1e69f48acb82d1966a394da916b4c1698aa569d6) Updates `actions/setup-java` from 5.6.0 to 5.7.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/03ad4de0992f5dab5e18fcb136590ce7c4a0ac95...b6effb05e454b25005698d916606bdc6ffcbf961) Updates `gradle/actions/setup-gradle` from 6.2.0 to 6.3.0 - [Release notes](https://github.com/gradle/actions/releases) - [Commits](https://github.com/gradle/actions/compare/3f131e8634966bd73d06cc69884922b02e6faf92...9c971963bec38e04b3d30dcc455b5382be2fdbfb) --- updated-dependencies: - dependency-name: actions/attest dependency-version: 4.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: actions/setup-java dependency-version: 5.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: gradle/actions/setup-gradle dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/action-pin-review.yml | 2 +- .github/workflows/android-instrumentation.yml | 4 ++-- .github/workflows/ci.yml | 4 ++-- .github/workflows/compatibility.yml | 4 ++-- .github/workflows/demo-evidence.yml | 4 ++-- .github/workflows/registry-validation.yml | 2 +- .github/workflows/release-evidence-policy-review.yml | 2 +- 7 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/action-pin-review.yml b/.github/workflows/action-pin-review.yml index a01b44e..524e686 100644 --- a/.github/workflows/action-pin-review.yml +++ b/.github/workflows/action-pin-review.yml @@ -127,7 +127,7 @@ jobs: id: attest if: steps.review.outcome == 'success' continue-on-error: true - uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4 + uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4 with: subject-path: action-pin-review/artifact-manifest.json diff --git a/.github/workflows/android-instrumentation.yml b/.github/workflows/android-instrumentation.yml index 9191692..2fb6417 100644 --- a/.github/workflows/android-instrumentation.yml +++ b/.github/workflows/android-instrumentation.yml @@ -25,7 +25,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Setup Java - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 with: distribution: temurin java-version: "21" @@ -58,7 +58,7 @@ jobs: cache-dependency-path: pnpm-lock.yaml - name: Setup Gradle - uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6 + uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6 - name: Install dependencies run: pnpm install --frozen-lockfile diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 858741f..2d9cc11 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -25,7 +25,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Setup Java - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 with: distribution: temurin java-version: "21" @@ -52,7 +52,7 @@ jobs: cache-dependency-path: pnpm-lock.yaml - name: Setup Gradle - uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6 + uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6 - name: Install dependencies run: pnpm install --frozen-lockfile diff --git a/.github/workflows/compatibility.yml b/.github/workflows/compatibility.yml index ad613cf..8292fdf 100644 --- a/.github/workflows/compatibility.yml +++ b/.github/workflows/compatibility.yml @@ -74,7 +74,7 @@ jobs: - name: Setup Java if: matrix.platform == 'android' - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 with: distribution: temurin java-version: "21" @@ -104,7 +104,7 @@ jobs: - name: Setup Gradle if: matrix.platform == 'android' - uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6 + uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6 - name: Install repository dependencies run: pnpm install --frozen-lockfile diff --git a/.github/workflows/demo-evidence.yml b/.github/workflows/demo-evidence.yml index 9898684..cb30f2e 100644 --- a/.github/workflows/demo-evidence.yml +++ b/.github/workflows/demo-evidence.yml @@ -63,7 +63,7 @@ jobs: test "$(git rev-parse HEAD)" = "$EXPECTED_SOURCE_SHA" - name: Setup Java - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 with: distribution: temurin java-version: "21" @@ -93,7 +93,7 @@ jobs: cache-dependency-path: pnpm-lock.yaml - name: Setup Gradle - uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6 + uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6 - name: Install dependencies run: pnpm install --frozen-lockfile diff --git a/.github/workflows/registry-validation.yml b/.github/workflows/registry-validation.yml index 642506c..c1ae4e1 100644 --- a/.github/workflows/registry-validation.yml +++ b/.github/workflows/registry-validation.yml @@ -72,7 +72,7 @@ jobs: id: attest if: steps.validate.outcome == 'success' continue-on-error: true - uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4 + uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4 with: subject-path: registry-validation/bundle-manifest.json diff --git a/.github/workflows/release-evidence-policy-review.yml b/.github/workflows/release-evidence-policy-review.yml index 5b700ea..7ed4091 100644 --- a/.github/workflows/release-evidence-policy-review.yml +++ b/.github/workflows/release-evidence-policy-review.yml @@ -217,7 +217,7 @@ jobs: id: attest if: steps.review.outcome == 'success' continue-on-error: true - uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4 + uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4 with: subject-path: release-evidence-policy-review/artifact-manifest.json