From 1d7e860f044782b79427b4bb0c059c736f5ec63c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 30 Jul 2026 20:43:42 +0000 Subject: [PATCH] Bump the github-actions-updates group with 4 updates Bumps the github-actions-updates group with 4 updates: [lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml](https://github.com/lfreleng-actions/github2gerrit-action), [lfreleng-actions/maven-build-action](https://github.com/lfreleng-actions/maven-build-action), [lfreleng-actions/sonatype-lifecycle-scan-action](https://github.com/lfreleng-actions/sonatype-lifecycle-scan-action) and [lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml](https://github.com/lfit/releng-reusable-workflows). Updates `lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml` from 1.4.3 to 1.4.4 - [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases) - [Commits](https://github.com/lfreleng-actions/github2gerrit-action/compare/dac8641c5f3b82636157340c1915999a4c4d7ff7...e06d6a2892efe0cd30259897ecb0eb27bcfb9d10) Updates `lfreleng-actions/maven-build-action` from 0.2.2 to 0.3.0 - [Release notes](https://github.com/lfreleng-actions/maven-build-action/releases) - [Commits](https://github.com/lfreleng-actions/maven-build-action/compare/c2ded37cb11ff1c2bb1eb7df7011906ddf97bd58...79f0851d13bde7aed47a967bfd72682101756f7f) Updates `lfreleng-actions/sonatype-lifecycle-scan-action` from 0.1.4 to 0.2.0 - [Release notes](https://github.com/lfreleng-actions/sonatype-lifecycle-scan-action/releases) - [Commits](https://github.com/lfreleng-actions/sonatype-lifecycle-scan-action/compare/974066f00a3b7989013bd588cd56f7451933fed8...f5b35cbd1c76597611c426e7e788c147e11c8e98) Updates `lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml` from 0.9.1 to 0.10.0 - [Release notes](https://github.com/lfit/releng-reusable-workflows/releases) - [Commits](https://github.com/lfit/releng-reusable-workflows/compare/973bba87aa9cc4ab43242ba9afac37d70c72f134...0688b118b3290649e0cb3580612e6369b6509774) --- updated-dependencies: - dependency-name: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml dependency-version: 1.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates - dependency-name: lfreleng-actions/maven-build-action dependency-version: 0.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-updates - dependency-name: lfreleng-actions/sonatype-lifecycle-scan-action dependency-version: 0.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-updates - dependency-name: lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml dependency-version: 0.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-updates ... Signed-off-by: dependabot[bot] --- .github/workflows/call-github2gerrit.yaml | 2 +- .github/workflows/gerrit-clm.yaml | 4 ++-- .github/workflows/open-ssf-scorecard.yaml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/call-github2gerrit.yaml b/.github/workflows/call-github2gerrit.yaml index 61ae6254e..8455717f6 100644 --- a/.github/workflows/call-github2gerrit.yaml +++ b/.github/workflows/call-github2gerrit.yaml @@ -67,7 +67,7 @@ jobs: pull-requests: write # comment on and close mirrored PRs issues: write # manage PR/issue metadata during mirroring # yamllint disable-line rule:line-length - uses: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml@dac8641c5f3b82636157340c1915999a4c4d7ff7 # v1.4.3 + uses: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml@e06d6a2892efe0cd30259897ecb0eb27bcfb9d10 # v1.4.4 with: USE_PR_AS_COMMIT: true GERRIT_KNOWN_HOSTS: ${{ vars.GERRIT_KNOWN_HOSTS }} diff --git a/.github/workflows/gerrit-clm.yaml b/.github/workflows/gerrit-clm.yaml index c920630aa..6d2c45740 100644 --- a/.github/workflows/gerrit-clm.yaml +++ b/.github/workflows/gerrit-clm.yaml @@ -374,7 +374,7 @@ jobs: if: steps.check-pom-xml.outputs.exists == 'true' continue-on-error: true # yamllint disable-line rule:line-length - uses: lfreleng-actions/maven-build-action@c2ded37cb11ff1c2bb1eb7df7011906ddf97bd58 # v0.2.2 + uses: lfreleng-actions/maven-build-action@79f0851d13bde7aed47a967bfd72682101756f7f # v0.3.0 with: java-version: ${{ env.JAVA_VERSION }} distribution: ${{ env.JAVA_DISTRIBUTION }} @@ -391,7 +391,7 @@ jobs: - name: "Run CLM Scan" # yamllint disable-line rule:line-length - uses: lfreleng-actions/sonatype-lifecycle-scan-action@974066f00a3b7989013bd588cd56f7451933fed8 # v0.1.4 + uses: lfreleng-actions/sonatype-lifecycle-scan-action@f5b35cbd1c76597611c426e7e788c147e11c8e98 # v0.2.0 with: nexus_iq_server: ${{ vars.NEXUS_IQ_SERVER }} nexus_iq_username: ${{ vars.NEXUS_IQ_USERNAME }} diff --git a/.github/workflows/open-ssf-scorecard.yaml b/.github/workflows/open-ssf-scorecard.yaml index 871b8c4a9..184126a3e 100644 --- a/.github/workflows/open-ssf-scorecard.yaml +++ b/.github/workflows/open-ssf-scorecard.yaml @@ -39,7 +39,7 @@ jobs: openssf-scorecard: name: "OpenSSF Scorecard" # yamllint disable-line rule:line-length - uses: lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml@973bba87aa9cc4ab43242ba9afac37d70c72f134 # v0.9.1 + uses: lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml@0688b118b3290649e0cb3580612e6369b6509774 # v0.10.0 permissions: # Needed to upload the results to code-scanning dashboard. security-events: write