Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 3, 2026

Bumps the gh-actions group with 5 updates in the / directory:

Package From To
actions/checkout 3.5.0 6.0.2
actions/setup-java 3 5
actions/cache 3 5
dorny/test-reporter 1 2
JetBrains/qodana-action 2022.3.4 2025.3.1

Updates actions/checkout from 3.5.0 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

... (truncated)

Commits

Updates actions/setup-java from 3 to 5

Release notes

Sourced from actions/setup-java's releases.

v5.0.0

What's Changed

Breaking Changes

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency Upgrades

Bug Fixes

New Contributors

Full Changelog: actions/setup-java@v4...v5.0.0

v4.8.0

What's Changed

Full Changelog: actions/setup-java@v4...v4.8.0

v4.7.1

What's Changed

Documentation changes

Dependency updates:

Full Changelog: actions/setup-java@v4...v4.7.1

v4.7.0

What's Changed

... (truncated)

Commits
  • be666c2 Chore: Version Update and Checkout Update to v6 (#973)
  • f7a6fef Bump actions/checkout from 5 to 6 (#961)
  • d81c4e4 Upgrade @​actions/cache to v5 (#968)
  • 1b1bbe1 readme update (#972)
  • 5d7b214 Retry on HTTP 522 Connection timed out (#964)
  • f2beeb2 Bump actions/publish-action from 0.3.0 to 0.4.0 (#912)
  • 4e7e684 feat: Add support for .sdkmanrc file in java-version-file parameter (#736)
  • 46c56d6 Add GitHub Token Support for GraalVM and Refactor Code (#849)
  • 66b9457 Update SapMachine URLs (#955)
  • 6ba5449 Enhance error logging for network failures to include endpoint/IP details, ad...
  • Additional commits viewable in compare view

Updates actions/cache from 3 to 5

Release notes

Sourced from actions/cache's releases.

v5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.


What's Changed

Full Changelog: actions/cache@v4.3.0...v5.0.0

v4.3.0

What's Changed

New Contributors

Full Changelog: actions/cache@v4...v4.3.0

v4.2.4

What's Changed

New Contributors

Full Changelog: actions/cache@v4...v4.2.4

v4.2.3

What's Changed

  • Update to use @​actions/cache 4.0.3 package & prepare for new release by @​salmanmkc in actions/cache#1577 (SAS tokens for cache entries are now masked in debug logs)

New Contributors

Full Changelog: actions/cache@v4.2.2...v4.2.3

... (truncated)

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

  1. Switch to a new branch from main.
  2. Run npm test to ensure all tests are passing.
  3. Update the version in https://github.com/actions/cache/blob/main/package.json.
  4. Run npm run build to update the compiled files.
  5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
  6. Run licensed cache to update the license report.
  7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
  8. Commit your changes and push your branch upstream.
  9. Open a pull request against main and get it reviewed and merged.
  10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
  11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.3

5.0.2

  • Bump @actions/cache to v5.0.3 #1692

5.0.1

  • Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

4.3.0

  • Bump @actions/cache to v4.1.0

... (truncated)

Commits

Updates dorny/test-reporter from 1 to 2

Release notes

Sourced from dorny/test-reporter's releases.

v2.0.0

What's Changed

New Contributors

Full Changelog: dorny/test-reporter@v1.9.1...v2.0.0

v1.9.1

What's Changed

New Contributors

Full Changelog: dorny/test-reporter@v1.9.0...v1.9.1

... (truncated)

Changelog

Sourced from dorny/test-reporter's changelog.

Changelog

2.5.0

2.4.0

2.3.0

2.2.0

2.1.1

2.1.0

2.0.0

1.9.1

... (truncated)

Commits
  • b082adf test-reporter release v2.5.0
  • bcafc9f Merge pull request #707 from dorny/feature/700-nette-tester-junit-reporter
  • b0cbac6 Rebuild the dist/index.js file
  • c92a289 Remove unnecessary output files
  • 6697ec4 Merge pull request #695 from dorny/dependabot/github_actions/actions/upload-a...
  • 6387029 Create tester-junit reporter for Nette Tester tool
  • 6896772 Merge pull request #706 from dorny/release/v2.4.0
  • e17be7e test-reporter release v2.4.0
  • 6efb86e Merge pull request #704 from dorny/bugfix/703-refactor-deprecated-substr-func...
  • 055bc8c Rebuild the dist/index.js file
  • Additional commits viewable in compare view

Updates JetBrains/qodana-action from 2022.3.4 to 2025.3.1

Release notes

Sourced from JetBrains/qodana-action's releases.

v2025.3.1

Changelog

  • 3b96197 ⬆️ Update qodana to v2025.3.1
  • 42dad39 ⬆️ Update Qodana Azure version to 2025.3.1

v2025.2.4

Changelog

  • e2d8059 🐛 QD-13112 fix ignore of ignoreReturnCode option in git operations
  • 99ec27a QD-13112 bump version for azure

v2025.2.3

Changelog

  • caabf6f ⬆️ Bump azure-devops-node-api from 14.1.0 to 15.1.0
  • 1374d44 🧱 Update vsts/QodanaScan/index.js
  • 3d4f50e ✨ add more logging around git operations
  • 785712e ⬆️ Bump actions/checkout from 5 to 6 in the dependencies group
  • 8d427a3 ⬆️ Update qodana to v2025.2.3

v2025.2.2

Changelog

  • 99bb9c6 🐛 QD-12042 add fallback when pr-sha is calculated and fix parsing
  • c42bca8 🐛 QD-12042 change wording a little bit
  • ab05ceb 🧱 Update vsts/QodanaScan/index.js
  • d766674 🐛 QD-11047 Allow code gl artifact upload
  • 986309f 🐛 Add system token to Azure git commands and fix action tests (#526)
  • 1c1fbc2 🐛 fix property arg parsing (make it according to doc) + add tests (#528)
  • 2374145 🐛 QD-12128 pass access token directly
  • 1835cfb ✨ QD-12128 add workingDirectory property
  • 8862093 🐛 Fix a patch version in the Azure task
  • 0bde661 ⬆️ Bump the dependencies group across 1 directory with 4 updates
  • 3187f6a ⬆️ Bump the dependencies group across 1 directory with 16 updates
  • 599e8b3 🧱 Update scan/dist/index.js
  • 11c5139 ⬆️ Update qodana to v2025.2.2 (#534)
  • 1725ecf ⬆️ Bump js-yaml from 4.1.0 to 4.1.1 (#536)
  • cd5f7b3 📝 Update release instructions in CONTRIBUTING.md
  • 6dfd39d ⬆️ Bump js-yaml in /common
  • 3c7604d ⬆️ Bump brace-expansion from 1.1.11 to 1.1.12 (#540)
  • 2cbdbde ⬆️ Bump axios from 1.9.0 to 1.12.0 in /gitlab
  • e5d20b1 ⬆️ Bump jest and @​types/jest

v2025.2.1

Changelog

  • db438bd 🐛 QD-11047 fix issue with quick-fixes: brunch and pr-mode: false (#479)
  • 6162bc6 🐛 QD-11047 fix issue with quick-fixes in gitlab in branch mode (#482)
  • 6dfb15c ⬆️ Bump the dependencies group across 1 directory with 7 updates
  • ed82547 🧱 Update scan/dist/index.js
  • 127bb0b ⬆️ Bump @​octokit/types from 13.10.0 to 14.0.0
  • 9f3c5cf 🐛 QD-11709 Support a list of values for --property argument (#481)
  • 36a369f :feature: QD-11663 Azure: make a UI 'push quick-fixes' field a dropdown menu (#484)
  • 0eb994c ⬆️ Bump the dependencies group with 10 updates

... (truncated)

Commits
  • 42dad39 ⬆️ Update Qodana Azure version to 2025.3.1
  • 3b96197 ⬆️ Update qodana to v2025.3.1
  • 99ec27a QD-13112 bump version for azure
  • e2d8059 🐛 QD-13112 fix ignore of ignoreReturnCode option in git operations
  • 8d427a3 ⬆️ Update qodana to v2025.2.3
  • 785712e ⬆️ Bump actions/checkout from 5 to 6 in the dependencies group
  • 3d4f50e ✨ add more logging around git operations
  • 1374d44 🧱 Update vsts/QodanaScan/index.js
  • caabf6f ⬆️ Bump azure-devops-node-api from 14.1.0 to 15.1.0
  • e5d20b1 ⬆️ Bump jest and @​types/jest
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gh-actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `3.5.0` | `6.0.2` |
| [actions/setup-java](https://github.com/actions/setup-java) | `3` | `5` |
| [actions/cache](https://github.com/actions/cache) | `3` | `5` |
| [dorny/test-reporter](https://github.com/dorny/test-reporter) | `1` | `2` |
| [JetBrains/qodana-action](https://github.com/jetbrains/qodana-action) | `2022.3.4` | `2025.3.1` |



Updates `actions/checkout` from 3.5.0 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v3.5.0...v6.0.2)

Updates `actions/setup-java` from 3 to 5
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@v3...v5)

Updates `actions/cache` from 3 to 5
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v3...v5)

Updates `dorny/test-reporter` from 1 to 2
- [Release notes](https://github.com/dorny/test-reporter/releases)
- [Changelog](https://github.com/dorny/test-reporter/blob/main/CHANGELOG.md)
- [Commits](dorny/test-reporter@v1...v2)

Updates `JetBrains/qodana-action` from 2022.3.4 to 2025.3.1
- [Release notes](https://github.com/jetbrains/qodana-action/releases)
- [Commits](JetBrains/qodana-action@v2022.3.4...v2025.3.1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions
- dependency-name: actions/setup-java
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions
- dependency-name: actions/cache
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions
- dependency-name: dorny/test-reporter
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions
- dependency-name: JetBrains/qodana-action
  dependency-version: 2025.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 3, 2026
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 3, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Feb 3, 2026
@dependabot dependabot bot deleted the dependabot/github_actions/gh-actions-26955341ec branch February 3, 2026 01:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants