QRun-IO/qbit-printing
3
0 Fork 0
Code Issues Pull Requests 10 Actions Packages Projects Releases 11 Wiki Activity

build(deps): Bump actions/setup-java from 5.2.0 to 6.1.0 #5

Open
dependabot[bot] wants to merge 3 commits from dependabot/github_actions/actions/setup-java-6.1.0 into main
pull from: dependabot/github_actions/actions/setup-java-6.1.0
merge into: QRun-IO:main
Conversation 2 Commits 3 Files Changed 2
+2 -2
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

.github/workflows/ci.yml
+1 -1
View File
@@ -32,7 +32,7 @@ jobs:
ref: a26c18c90c7d6102bbe26eb50cbb90fcd1bd46e3
path: qqq-print-protocol
github-advanced-security[bot] commented 2026-10-29 19:30:39 +00:00 (Migrated from github.com)
Outdated
Review
Copy link
Copy source

zizmor /

runtime artifacts potentially vulnerable to a cache poisoning attack: this step

Show more details

## zizmor / runtime artifacts potentially vulnerable to a cache poisoning attack: this step [Show more details](https://github.com/QRun-IO/qbit-printing/security/code-scanning/4)
persist-credentials: false
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
- uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
with:
distribution: temurin
java-version: '21'
.github/workflows/security.yml
+1 -1
View File
@@ -65,7 +65,7 @@ jobs:
# Resolve the actual deployed profile, including frontend assets.
# Do not restore an Actions cache in this security job.
- name: Set up Java
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0
with:
distribution: temurin
java-version: '21'