⚠ This page is served via a proxy. Original site: https://github.com
This service does not collect credentials or authentication data.
Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 3, 2026

Bumps the gh-actions group with 3 updates in the / directory: actions/checkout, actions/setup-java and JetBrains/qodana-action.

Updates actions/checkout from 3.5.0 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

... (truncated)

Commits

Updates actions/setup-java from 3 to 5

Release notes

Sourced from actions/setup-java's releases.

v5.0.0

What's Changed

Breaking Changes

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency Upgrades

Bug Fixes

New Contributors

Full Changelog: actions/setup-java@v4...v5.0.0

v4.8.0

What's Changed

Full Changelog: actions/setup-java@v4...v4.8.0

v4.7.1

What's Changed

Documentation changes

Dependency updates:

Full Changelog: actions/setup-java@v4...v4.7.1

v4.7.0

What's Changed

... (truncated)

Commits
  • be666c2 Chore: Version Update and Checkout Update to v6 (#973)
  • f7a6fef Bump actions/checkout from 5 to 6 (#961)
  • d81c4e4 Upgrade @​actions/cache to v5 (#968)
  • 1b1bbe1 readme update (#972)
  • 5d7b214 Retry on HTTP 522 Connection timed out (#964)
  • f2beeb2 Bump actions/publish-action from 0.3.0 to 0.4.0 (#912)
  • 4e7e684 feat: Add support for .sdkmanrc file in java-version-file parameter (#736)
  • 46c56d6 Add GitHub Token Support for GraalVM and Refactor Code (#849)
  • 66b9457 Update SapMachine URLs (#955)
  • 6ba5449 Enhance error logging for network failures to include endpoint/IP details, ad...
  • Additional commits viewable in compare view

Updates JetBrains/qodana-action from 2022.3.4 to 2025.3.1

Release notes

Sourced from JetBrains/qodana-action's releases.

v2025.3.1

Changelog

  • 3b96197 ⬆️ Update qodana to v2025.3.1
  • 42dad39 ⬆️ Update Qodana Azure version to 2025.3.1

v2025.2.4

Changelog

  • e2d8059 🐛 QD-13112 fix ignore of ignoreReturnCode option in git operations
  • 99ec27a QD-13112 bump version for azure

v2025.2.3

Changelog

  • caabf6f ⬆️ Bump azure-devops-node-api from 14.1.0 to 15.1.0
  • 1374d44 🧱 Update vsts/QodanaScan/index.js
  • 3d4f50e ✨ add more logging around git operations
  • 785712e ⬆️ Bump actions/checkout from 5 to 6 in the dependencies group
  • 8d427a3 ⬆️ Update qodana to v2025.2.3

v2025.2.2

Changelog

  • 99bb9c6 🐛 QD-12042 add fallback when pr-sha is calculated and fix parsing
  • c42bca8 🐛 QD-12042 change wording a little bit
  • ab05ceb 🧱 Update vsts/QodanaScan/index.js
  • d766674 🐛 QD-11047 Allow code gl artifact upload
  • 986309f 🐛 Add system token to Azure git commands and fix action tests (#526)
  • 1c1fbc2 🐛 fix property arg parsing (make it according to doc) + add tests (#528)
  • 2374145 🐛 QD-12128 pass access token directly
  • 1835cfb ✨ QD-12128 add workingDirectory property
  • 8862093 🐛 Fix a patch version in the Azure task
  • 0bde661 ⬆️ Bump the dependencies group across 1 directory with 4 updates
  • 3187f6a ⬆️ Bump the dependencies group across 1 directory with 16 updates
  • 599e8b3 🧱 Update scan/dist/index.js
  • 11c5139 ⬆️ Update qodana to v2025.2.2 (#534)
  • 1725ecf ⬆️ Bump js-yaml from 4.1.0 to 4.1.1 (#536)
  • cd5f7b3 📝 Update release instructions in CONTRIBUTING.md
  • 6dfd39d ⬆️ Bump js-yaml in /common
  • 3c7604d ⬆️ Bump brace-expansion from 1.1.11 to 1.1.12 (#540)
  • 2cbdbde ⬆️ Bump axios from 1.9.0 to 1.12.0 in /gitlab
  • e5d20b1 ⬆️ Bump jest and @​types/jest

v2025.2.1

Changelog

  • db438bd 🐛 QD-11047 fix issue with quick-fixes: brunch and pr-mode: false (#479)
  • 6162bc6 🐛 QD-11047 fix issue with quick-fixes in gitlab in branch mode (#482)
  • 6dfb15c ⬆️ Bump the dependencies group across 1 directory with 7 updates
  • ed82547 🧱 Update scan/dist/index.js
  • 127bb0b ⬆️ Bump @​octokit/types from 13.10.0 to 14.0.0
  • 9f3c5cf 🐛 QD-11709 Support a list of values for --property argument (#481)
  • 36a369f :feature: QD-11663 Azure: make a UI 'push quick-fixes' field a dropdown menu (#484)
  • 0eb994c ⬆️ Bump the dependencies group with 10 updates

... (truncated)

Commits
  • 42dad39 ⬆️ Update Qodana Azure version to 2025.3.1
  • 3b96197 ⬆️ Update qodana to v2025.3.1
  • 99ec27a QD-13112 bump version for azure
  • e2d8059 🐛 QD-13112 fix ignore of ignoreReturnCode option in git operations
  • 8d427a3 ⬆️ Update qodana to v2025.2.3
  • 785712e ⬆️ Bump actions/checkout from 5 to 6 in the dependencies group
  • 3d4f50e ✨ add more logging around git operations
  • 1374d44 🧱 Update vsts/QodanaScan/index.js
  • caabf6f ⬆️ Bump azure-devops-node-api from 14.1.0 to 15.1.0
  • e5d20b1 ⬆️ Bump jest and @​types/jest
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gh-actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/setup-java](https://github.com/actions/setup-java) and [JetBrains/qodana-action](https://github.com/jetbrains/qodana-action).


Updates `actions/checkout` from 3.5.0 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v3.5.0...v6.0.2)

Updates `actions/setup-java` from 3 to 5
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@v3...v5)

Updates `JetBrains/qodana-action` from 2022.3.4 to 2025.3.1
- [Release notes](https://github.com/jetbrains/qodana-action/releases)
- [Commits](JetBrains/qodana-action@v2022.3.4...v2025.3.1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions
- dependency-name: actions/setup-java
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions
- dependency-name: JetBrains/qodana-action
  dependency-version: 2025.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 3, 2026
@wadoon wadoon merged commit 27b5e4e into master Feb 3, 2026
2 of 7 checks passed
@wadoon wadoon deleted the dependabot/github_actions/gh-actions-10b19f1d32 branch February 3, 2026 01:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant