Skip to content

build(deps): bump actions/setup-java from 6.0.0 to 6.0.1 in the github-actions-patch group - #482

Merged
bomly-guy merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-patch-4cf73e6ad1
Oct 3, 2026
Merged

build(deps): bump actions/setup-java from 6.0.0 to 6.0.1 in the github-actions-patch group#482
bomly-guy merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-patch-4cf73e6ad1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the github-actions-patch group with 1 update: actions/setup-java.

Updates actions/setup-java from 6.0.0 to 6.0.1

Release notes

Sourced from actions/setup-java's releases.

v6.0.1

What's Changed

New Contributors

Full Changelog: actions/setup-java@v6.0.0...v6.0.1

Commits
  • de7274f Avoid macOS GPG socket overflow on long runner paths (#1266)
  • 134912a Fix import-safe checks when scripts are run from a path with symlinks (#1265)
  • 0781fc6 Fix alpine failures by switching default back to only warn on verification fa...
  • 4889c4a Fix Temurin EA E2E signature verification (#1260)
  • 8fd3240 [WIP] Fix failing GitHub Actions job for temurin 17 (#1259)
  • 2732291 chore(deps-dev): update eslint and globals (#1256)
  • 1a8f22b chore: streamline Dependabot updates (#1255)
  • 85030b7 docs: complete v6 release highlights (#1254)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump actions/setup-java in the github-actions-patch group
23b69d6 
Bumps the github-actions-patch group with 1 update: [actions/setup-java](https://github.com/actions/setup-java).


Updates `actions/setup-java` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@dd06d9c...de7274f)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 21, 2026
@dependabot
dependabot Bot requested a review from bomly-guy as a code owner September 21, 2026 19:03
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 21, 2026
@coderabbitai

coderabbitai Bot commented Sep 21, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: bomly-dev/bomly-cli/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: 7d1c310e-9019-41b4-9838-744070a5b8d2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bomly Diff Summary

Compared 46f8b75663d2833c3750cf0c8edf1ead613f478a to 23b69d6e65c892d4be665be024aec1eb75866ec6.

Overview

Status Manifests Dependencies Findings Duration
⚠️ Warnings +0 / ~4 / -0 0 added / 4 version changed / 0 detail changes / 0 removed 0 introduced / 1 persisted / 0 resolved 1m 7s

Dependency Changes

Summary: 0 added, 1 version changed, 0 detail changes, 0 removed.

Changed Dependencies

Change Package Version Direct? Scope Licenses
changed actions:setup-java dd06d9cba3e5552c54d9f8ea23572deb30010f7c → de7274f081f381c8f8158605e0321c36c376e2e6 Yes runtime -

Vulnerabilities

✅ No vulnerability changes.

License Changes

⚠️ 1 package still carries an unresolved license issue (see Policy Findings).

Project Posture

✅ No project posture changes (--matchers +scorecard was not selected).

Policy Findings

Summary: 0 introduced, 1 persisted, 0 resolved.

Persisted Findings

Status Category Severity ID Package Fixed In Title
⚠️ persisted license WARNING UNKNOWN-faab-aa3b-dldr actions:setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 - Package license is unknown

Legend: ✅ resolved · ❌ failing · ⚠️ warning

@bomly-guy
bomly-guy merged commit e81adc6 into main Oct 3, 2026
13 checks passed
@bomly-guy
bomly-guy deleted the dependabot/github_actions/github-actions-patch-4cf73e6ad1 branch October 3, 2026 22:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bomly-guy bomly-guy Awaiting requested review from bomly-guy bomly-guy is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bomly-guy