QRun-IO/qbit-printing
3
0 Fork 0
Code Issues Pull Requests 10 Actions Packages Projects Releases 11 Wiki Activity

build(deps): Bump actions/setup-java from 5.2.0 to 6.1.0 #5

Open
dependabot[bot] wants to merge 3 commits from dependabot/github_actions/actions/setup-java-6.1.0 into main
pull from: dependabot/github_actions/actions/setup-java-6.1.0
merge into: QRun-IO:main
Conversation 2 Commits 3 Files Changed 2
+2 -2
dependabot[bot] commented 2026-10-29 19:28:58 +00:00 (Migrated from github.com)
Copy link
Copy source

Bumps actions/setup-java from 5.2.0 to 6.1.0.

Release notes

Sourced from actions/setup-java's releases.

v6.1.0

What's Changed

New Contributors

Full Changelog: https://github.com/actions/setup-java/compare/v6.0.1...v6.1.0

v6.0.1

What's Changed

New Contributors

Full Changelog: https://github.com/actions/setup-java/compare/v6.0.0...v6.0.1

v6.0.0

What's Changed

... (truncated)

Commits
  • b843ebf Support Maven plugin repositories in generated settings.xml (#1286)
  • 2a69be2 feat: support Maven server credential origins (#1282)
  • d0e6e4d chore(deps): bump the monthly-npm-updates group with 13 updates (#1276)
  • b24925b chore(deps): bump undici from 6.28.0 to 6.29.0 (#1274)
  • 47b3648 Support Temurin JEP 322 patch versions like 26.0.2.1+1 (#1270) (#1279)
  • 74920aa Prefer Zulu 4-segment hotfix builds when resolving version ranges (#1278)
  • a78ec39 Stop GPG agent before removing signature-verification home (#1273)
  • 97c5a5e Support Temurin on Linux RISC-V (#1269)
  • 1aa87b6 Preserve compound Liberica build versions from .sdkmanrc (#1268)
  • de7274f Avoid macOS GPG socket overflow on long runner paths (#1266)
  • Additional commits viewable in compare view

Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5.2.0 to 6.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-java/releases">actions/setup-java's releases</a>.</em></p> <blockquote> <h2>v6.1.0</h2> <h2>What's Changed</h2> <ul> <li>Preserve compound Liberica build versions from .sdkmanrc by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1268">actions/setup-java#1268</a></li> <li>Support Temurin on Linux RISC-V by <a href="https://github.com/yawkat"><code>@​yawkat</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1269">actions/setup-java#1269</a></li> <li>Stop GPG agent before removing signature-verification home by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1273">actions/setup-java#1273</a></li> <li>Prefer Zulu 4-segment hotfix builds when resolving version ranges by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1278">actions/setup-java#1278</a></li> <li>Support Temurin JEP 322 patch versions like 26.0.2.1+1 by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1279">actions/setup-java#1279</a></li> <li>chore(deps): bump undici from 6.28.0 to 6.29.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1274">actions/setup-java#1274</a></li> <li>chore(deps): bump the monthly-npm-updates group with 13 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1276">actions/setup-java#1276</a></li> <li>feat: support Maven server credential origins by <a href="https://github.com/YunaBraska"><code>@​YunaBraska</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1282">actions/setup-java#1282</a></li> <li>Support Maven plugin repositories in generated settings.xml by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1286">actions/setup-java#1286</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/yawkat"><code>@​yawkat</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/1269">actions/setup-java#1269</a></li> <li><a href="https://github.com/YunaBraska"><code>@​YunaBraska</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/1282">actions/setup-java#1282</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-java/compare/v6.0.1...v6.1.0">https://github.com/actions/setup-java/compare/v6.0.1...v6.1.0</a></p> <h2>v6.0.1</h2> <h2>What's Changed</h2> <ul> <li>Fix failing GitHub Actions job for temurin 17 by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1259">actions/setup-java#1259</a></li> <li>Fix Temurin EA E2E signature verification by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1260">actions/setup-java#1260</a></li> <li>Fix Alpine GPG verification failures and support multiple keys by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1262">actions/setup-java#1262</a></li> <li>Fix import-safe checks when scripts are run from a path with symlinks by <a href="https://github.com/otaconix"><code>@​otaconix</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1265">actions/setup-java#1265</a></li> <li>Avoid macOS GPG socket overflow on long runner paths by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1266">actions/setup-java#1266</a></li> <li>Complete v6 release highlights in README by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1254">actions/setup-java#1254</a></li> <li>Group and slow routine Dependabot updates by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1255">actions/setup-java#1255</a></li> <li>chore(deps-dev): update eslint and globals by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1256">actions/setup-java#1256</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/otaconix"><code>@​otaconix</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/1265">actions/setup-java#1265</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-java/compare/v6.0.0...v6.0.1">https://github.com/actions/setup-java/compare/v6.0.0...v6.0.1</a></p> <h2>v6.0.0</h2> <h2>What's Changed</h2> <ul> <li>dist: Migrate from Zulu Discovery API to Azul Metadata API by <a href="https://github.com/jameswald"><code>@​jameswald</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1010">actions/setup-java#1010</a></li> <li>feat: add .mvn/extensions.xml to Maven cache key pattern by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1041">actions/setup-java#1041</a></li> <li>Migrate to ESM and upgrade dependencies by <a href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1078">actions/setup-java#1078</a></li> <li>Map Zulu x86 architecture to i686 for Azul Metadata API by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1079">actions/setup-java#1079</a></li> <li>Rename jdkFile input to jdk-file with deprecated alias by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1083">actions/setup-java#1083</a></li> <li>Infer distribution from asdf .tool-versions vendor prefix by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1084">actions/setup-java#1084</a></li> <li>Add Maven compiler problem matcher for javac diagnostics by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1086">actions/setup-java#1086</a></li> <li>feat: expose cache-primary-key output (<a href="https://redirect.github.com/actions/setup-java/issues/597">#597</a>) by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1088">actions/setup-java#1088</a></li> <li>docs: clarify V6 ESM migration is not a user-facing breaking change by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1090">actions/setup-java#1090</a></li> <li>Support multi-field Java versions like <code>18.0.1.1</code> by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1092">actions/setup-java#1092</a></li> <li>docs: document seeding the Maven cache for plugin dependencies by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1094">actions/setup-java#1094</a></li> <li>docs: clarify Maven cache paths and key hash inputs by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1096">actions/setup-java#1096</a></li> <li>Support pinning java-version as &quot;latest&quot; by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1093">actions/setup-java#1093</a></li> <li>chore(deps-dev): bump eslint from 10.6.0 to 10.7.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1101">actions/setup-java#1101</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-java/commit/b843ebf9b913146b38da2eaa7aeddf76074ae1ad"><code>b843ebf</code></a> Support Maven plugin repositories in generated settings.xml (<a href="https://redirect.github.com/actions/setup-java/issues/1286">#1286</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/2a69be27b0baa8a7ec1c0ba665dc022b180664c5"><code>2a69be2</code></a> feat: support Maven server credential origins (<a href="https://redirect.github.com/actions/setup-java/issues/1282">#1282</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/d0e6e4dbf773b98efde945f446d2099b2c0d8fd2"><code>d0e6e4d</code></a> chore(deps): bump the monthly-npm-updates group with 13 updates (<a href="https://redirect.github.com/actions/setup-java/issues/1276">#1276</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/b24925bc49b74c38e5a106894c14cfd876ac1ab5"><code>b24925b</code></a> chore(deps): bump undici from 6.28.0 to 6.29.0 (<a href="https://redirect.github.com/actions/setup-java/issues/1274">#1274</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/47b36480ae3ac5671badb6bde2dec0c1898a1cc9"><code>47b3648</code></a> Support Temurin JEP 322 patch versions like 26.0.2.1+1 (<a href="https://redirect.github.com/actions/setup-java/issues/1270">#1270</a>) (<a href="https://redirect.github.com/actions/setup-java/issues/1279">#1279</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/74920aab4a9e7a33c5bd4fd3c8d5a7ba260ae795"><code>74920aa</code></a> Prefer Zulu 4-segment hotfix builds when resolving version ranges (<a href="https://redirect.github.com/actions/setup-java/issues/1278">#1278</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/a78ec39f1243adc9be41d35a49593a4c665a604c"><code>a78ec39</code></a> Stop GPG agent before removing signature-verification home (<a href="https://redirect.github.com/actions/setup-java/issues/1273">#1273</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/97c5a5e13aa773f277f72c1287dda3c789f1366c"><code>97c5a5e</code></a> Support Temurin on Linux RISC-V (<a href="https://redirect.github.com/actions/setup-java/issues/1269">#1269</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/1aa87b638dacaa70f1c903fa9ec9cbd91058e2ff"><code>1aa87b6</code></a> Preserve compound Liberica build versions from .sdkmanrc (<a href="https://redirect.github.com/actions/setup-java/issues/1268">#1268</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/de7274f081f381c8f8158605e0321c36c376e2e6"><code>de7274f</code></a> Avoid macOS GPG socket overflow on long runner paths (<a href="https://redirect.github.com/actions/setup-java/issues/1266">#1266</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/setup-java/compare/be666c2fcd27ec809703dec50e508c2fdc7f6654...b843ebf9b913146b38da2eaa7aeddf76074ae1ad">compare view</a></li> </ul> </details> <br />
KofTwentyTwo (Migrated from github.com) reviewed 2026-10-29 19:28:58 +00:00
github-advanced-security[bot] (Migrated from github.com) reviewed 2026-10-29 19:30:39 +00:00
.github/workflows/ci.yml Outdated
@@ -31,3 +31,3 @@
persist-credentials: false
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
- uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
with:
github-advanced-security[bot] (Migrated from github.com) commented 2026-10-29 19:30:39 +00:00
Copy link
Copy source

zizmor /

runtime artifacts potentially vulnerable to a cache poisoning attack: this step

Show more details

## zizmor / runtime artifacts potentially vulnerable to a cache poisoning attack: this step [Show more details](https://github.com/QRun-IO/qbit-printing/security/code-scanning/4)
forge-recovery added 2 commits 2026-11-01 23:50:09 +00:00
chore(deps): Bump actions/setup-java from 5.2.0 to 6.1.0
QRun-IO/ci-policy: Shared Java Maven CI / verify (pull_request) Failing after 3m30s
Details
QRun-IO/ci-policy: ci / fork-guard (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / gradle-0 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / java-docker-1 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / node-4 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / source-config-5 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / not-enrolled (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / node-3 (pull_request) Skipped
Details
QRun-IO/ci-policy: Shared Java Maven CI / secrets (pull_request) Successful in 17s
Details
QRun-IO/ci-policy: Shared Java Maven CI / gate (pull_request) Failing after 12s
Details
QRun-IO/ci-policy: ci / java-maven-2 (pull_request) Failing after 10m12s
Details
QRun-IO/ci-policy: ci / ci-result (pull_request) Failing after 5s
Details
2cec82bf4a 
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5.2.0 to 6.1.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/be666c2fcd27ec809703dec50e508c2fdc7f6654...b843ebf9b913146b38da2eaa7aeddf76074ae1ad)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Merge pull request 'Preserve both pre-cutoff dependency branch histories' (#11) from migration/cutoff-2cec82bf4aa9-68d7f8 into dependabot/github_actions/actions/setup-java-6.1.0
QRun-IO/ci-policy: ci / java-maven-2 (pull_request) Failing after 6m41s
Details
QRun-IO/ci-policy: Shared Java Maven CI / gate (pull_request) Failing after 8s
Details
QRun-IO/ci-policy: ci / java-docker-1 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / fork-guard (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / gradle-0 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / ci-result (pull_request) Failing after 5s
Details
QRun-IO/ci-policy: ci / source-config-5 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / node-3 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / node-4 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / not-enrolled (pull_request) Skipped
Details
QRun-IO/ci-policy: Shared Java Maven CI / verify (pull_request) Failing after 3m1s
Details
QRun-IO/ci-policy: Shared Java Maven CI / secrets (pull_request) Successful in 14s
Details
1e02dbfff0
Some checks are pending
QRun-IO/ci-policy: ci / fork-guard (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / gradle-0 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / java-docker-1 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / node-3 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / node-4 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / source-config-5 (pull_request) Skipped
Details
QRun-IO/ci-policy: ci / not-enrolled (pull_request) Skipped
Details
QRun-IO/ci-policy: Shared Java Maven CI / verify (pull_request) Failing after 3m1s
Details
QRun-IO/ci-policy: Shared Java Maven CI / secrets (pull_request) Successful in 14s
Details
QRun-IO/ci-policy: Shared Java Maven CI / gate (pull_request) Failing after 8s
Details
QRun-IO/ci-policy: ci / java-maven-2 (pull_request) Failing after 6m41s
Details
QRun-IO/ci-policy: ci / ci-result (pull_request) Failing after 5s
Details
maven / build (push)
Required
Checking for merge conflicts…
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin dependabot/github_actions/actions/setup-java-6.1.0:dependabot/github_actions/actions/setup-java-6.1.0
git checkout dependabot/github_actions/actions/setup-java-6.1.0
Sign in to join this conversation.
Reviewers
No Reviewers
KofTwentyTwo
github-advanced-security[bot]
Labels
Clear labels
bug
Something isn't working
 dependencies
documentation
Improvements or additions to documentation
 duplicate
This issue or pull request already exists
 enhancement
New feature or request
 github_actions
Pull requests that update GitHub Actions code
 good first issue
Good for newcomers
 help wanted
Extra attention is needed
 invalid
This doesn't seem right
 java
Pull requests that update java code
 question
Further information is requested
 secuurity
wontfix
This will not be worked on
No labels dependencies github_actions
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
forge-recovery (Forge Recovery) james.maes (James Maes)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: QRun-IO/qbit-printing#5