From 642c084be02b12b9bcd0c9944c9923718de5f7e5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 7 Nov 2026 08:03:26 +0000 Subject: [PATCH] chore(deps): bump the all-actions group with 3 updates Bumps the all-actions group with 3 updates: [jdx/mise-action](https://github.com/jdx/mise-action), [actions/setup-java](https://github.com/actions/setup-java) and [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer). Updates `jdx/mise-action` from 5.2.4 to 5.2.6 - [Release notes](https://github.com/jdx/mise-action/releases) - [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/jdx/mise-action/compare/6be3c7ed4c21d4f76b208d351d95aac273ebb76d...f5be966e4a917d54244728e6a5fdcd1d93a35e6c) Updates `actions/setup-java` from 6.1.0 to 6.2.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/b843ebf9b913146b38da2eaa7aeddf76074ae1ad...77dd5b2ce225ea11469928ac317850245a74ae78) Updates `sigstore/cosign-installer` from 4.1.2 to 4.1.3 - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](https://github.com/sigstore/cosign-installer/compare/6f9f17788090df1f26f669e9d70d6ae9567deba6...756fe2d284c7292c4e9b62c8a28f1e5629c59532) --- updated-dependencies: - dependency-name: jdx/mise-action dependency-version: 5.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-actions - dependency-name: actions/setup-java dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-actions - dependency-name: sigstore/cosign-installer dependency-version: 4.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/_acceptance.yml | 8 ++++---- .github/workflows/_backend.yml | 10 +++++----- .github/workflows/_contract.yml | 2 +- .github/workflows/docker-publish.yml | 4 ++-- 4 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/_acceptance.yml b/.github/workflows/_acceptance.yml index 5c63637bc..116805372 100644 --- a/.github/workflows/_acceptance.yml +++ b/.github/workflows/_acceptance.yml @@ -12,8 +12,8 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: jdx/mise-action@6be3c7ed4c21d4f76b208d351d95aac273ebb76d # v5.2.4 - - uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 + - uses: jdx/mise-action@f5be966e4a917d54244728e6a5fdcd1d93a35e6c # v5.2.6 + - uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 # v6.2.0 with: distribution: temurin java-version: '17' @@ -33,8 +33,8 @@ jobs: with: persist-credentials: false - uses: ./.github/actions/setup-frontend - - uses: jdx/mise-action@6be3c7ed4c21d4f76b208d351d95aac273ebb76d # v5.2.4 - - uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 + - uses: jdx/mise-action@f5be966e4a917d54244728e6a5fdcd1d93a35e6c # v5.2.6 + - uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 # v6.2.0 with: distribution: temurin java-version: '17' diff --git a/.github/workflows/_backend.yml b/.github/workflows/_backend.yml index a73c40524..81d97ff37 100644 --- a/.github/workflows/_backend.yml +++ b/.github/workflows/_backend.yml @@ -24,7 +24,7 @@ jobs: persist-credentials: false - name: Setup JDK 17 - uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 + uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 # v6.2.0 with: distribution: 'temurin' java-version: ${{ env.JAVA_VERSION }} @@ -81,7 +81,7 @@ jobs: persist-credentials: false - name: Setup JDK 17 - uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 + uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 # v6.2.0 with: distribution: 'temurin' java-version: ${{ env.JAVA_VERSION }} @@ -165,7 +165,7 @@ jobs: persist-credentials: false - name: Setup JDK 17 - uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 + uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 # v6.2.0 with: distribution: 'temurin' java-version: ${{ env.JAVA_VERSION }} @@ -244,10 +244,10 @@ jobs: persist-credentials: false - name: Setup mise for repository toolchain - uses: jdx/mise-action@6be3c7ed4c21d4f76b208d351d95aac273ebb76d # v5.2.4 + uses: jdx/mise-action@f5be966e4a917d54244728e6a5fdcd1d93a35e6c # v5.2.6 - name: Setup JDK 17 for registry contracts - uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 + uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 # v6.2.0 with: distribution: 'temurin' java-version: ${{ env.JAVA_VERSION }} diff --git a/.github/workflows/_contract.yml b/.github/workflows/_contract.yml index 07e0d881b..ac4d79981 100644 --- a/.github/workflows/_contract.yml +++ b/.github/workflows/_contract.yml @@ -49,7 +49,7 @@ jobs: fi - name: Setup JDK 17 - uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 + uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 # v6.2.0 with: distribution: 'temurin' java-version: ${{ env.JAVA_VERSION }} diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index 79479d93e..863142781 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -131,7 +131,7 @@ jobs: if-no-files-found: warn retention-days: 30 - name: Install Cosign - uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 + uses: sigstore/cosign-installer@756fe2d284c7292c4e9b62c8a28f1e5629c59532 # v4.1.3 with: cosign-release: v2.5.3 - name: Sign candidate and attest SBOM/provenance @@ -207,7 +207,7 @@ jobs: - name: Set up Docker Buildx uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4 - name: Install Cosign - uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 + uses: sigstore/cosign-installer@756fe2d284c7292c4e9b62c8a28f1e5629c59532 # v4.1.3 with: cosign-release: v2.5.3 - name: Log in to GHCR