Skip to content

Bump the github-actions-updates group with 3 updates - #32

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/github-actions-updates-bfcbcc8e2e
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/github-actions-updates-bfcbcc8e2e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions-updates group with 3 updates: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml, lfreleng-actions/maven-build-action and lfreleng-actions/sonatype-lifecycle-scan-action.

Updates lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml from 2.2.2 to 2.4.0

Release notes

Sourced from lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml's releases.

v2.4.0

Downloads for this release

✨ New Features ✨

Links

v2.3.0

Downloads for this release

✨ New Features ✨

Links

Commits
  • df12d7f Merge pull request #455 from modeseven-lfreleng-actions/feat/scheduled-sweep
  • 56d3246 Feat: Sweep approved fork PRs on a schedule
  • 2fbfa39 Test: Share the reusable workflow test harness
  • a483c25 Merge pull request #454 from modeseven-lfreleng-actions/feat/sweep-fan-out-id...
  • edb2d7b Fix: Address Copilot review feedback
  • bced4e6 Feat: Fan bulk dispatch out to a job per PR
  • 48bbc46 Feat: Record fork transfers so sweeps skip them
  • See full diff in compare view

Updates lfreleng-actions/maven-build-action from 0.4.2 to 0.4.3

Release notes

Sourced from lfreleng-actions/maven-build-action's releases.

v0.4.3

Downloads for this release

🔧 Maintenance 🔧

  • Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.1.0 to 0.2.2 @dependabot[bot] (#142)
  • Chore: Bump lfreleng-actions/harden-runner-block-action from 0.11.1 to 0.12.1 @dependabot[bot] (#140)
  • Chore: Bump step-security/harden-runner from 2.20.1 to 2.21.0 @dependabot[bot] (#141)
  • Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.1.0 to 0.2.2 @dependabot[bot] (#143)
  • Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.10.1 to 0.10.3 @dependabot[bot] (#144)
  • Chore: pre-commit autoupdate @pre-commit-ci[bot] (#145)
  • Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.2.2 to 0.3.0 @dependabot[bot] (#146)
  • Chore: Bump s4u/setup-maven-action from 1.20.0 to 1.21.0 @dependabot[bot] (#147)
  • Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.2.2 to 0.3.0 @dependabot[bot] (#148)
  • Chore: Bump step-security/harden-runner from 2.21.0 to 2.21.1 @dependabot[bot] (#149)
  • Chore: Bump actions/setup-java from 5.7.0 to 6.0.0 @dependabot[bot] (#150)
  • Chore: pre-commit autoupdate @pre-commit-ci[bot] (#151)
  • Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.3.0 to 0.3.1 @dependabot[bot] (#152)
  • Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.3.0 to 0.3.1 @dependabot[bot] (#153)
  • Chore: Bump actions/setup-java from 6.0.0 to 6.0.1 @dependabot[bot] (#154)
  • Chore: pre-commit autoupdate @pre-commit-ci[bot] (#155)

Links

Commits
  • 7781c31 Merge pull request #155 from lfreleng-actions/pre-commit-ci-update-config
  • 853195e Chore: pre-commit autoupdate
  • 516893d Merge pull request #154 from lfreleng-actions/dependabot/github_actions/actio...
  • f8ce718 Merge pull request #153 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 4b35f8b Merge pull request #152 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 7285454 Chore: Bump actions/setup-java from 6.0.0 to 6.0.1
  • ae9d152 Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml
  • 6008d80 Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action...
  • d6e6324 Merge pull request #151 from lfreleng-actions/pre-commit-ci-update-config
  • 228e1dd Chore: pre-commit autoupdate
  • Additional commits viewable in compare view

Updates lfreleng-actions/sonatype-lifecycle-scan-action from 0.2.1 to 0.2.2

Release notes

Sourced from lfreleng-actions/sonatype-lifecycle-scan-action's releases.

v0.2.2

Downloads for this release

🔧 Maintenance 🔧

Links

Commits
  • 71c04eb Merge pull request #189 from lfreleng-actions/pre-commit-ci-update-config
  • f995330 Chore: pre-commit autoupdate
  • 238e0be Merge pull request #188 from lfreleng-actions/dependabot/github_actions/sonat...
  • 00081bc Merge pull request #187 from lfreleng-actions/dependabot/github_actions/sonat...
  • 2309117 Merge pull request #186 from lfreleng-actions/dependabot/github_actions/actio...
  • 40f8eda Merge pull request #185 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 1bebdab Chore: Bump sonatype/actions/run-iq-cli from 1.14.0 to 1.14.1
  • 45110b8 Chore: Bump sonatype/actions/setup-iq-cli from 1.14.0 to 1.14.1
  • 16c77b1 Chore: Bump actions/setup-java from 6.0.0 to 6.0.1
  • c663e6b Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions-updates group with 3 updates: [lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml](https://github.com/lfreleng-actions/github2gerrit-action), [lfreleng-actions/maven-build-action](https://github.com/lfreleng-actions/maven-build-action) and [lfreleng-actions/sonatype-lifecycle-scan-action](https://github.com/lfreleng-actions/sonatype-lifecycle-scan-action).


Updates `lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml` from 2.2.2 to 2.4.0
- [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases)
- [Commits](lfreleng-actions/github2gerrit-action@5f84610...df12d7f)

Updates `lfreleng-actions/maven-build-action` from 0.4.2 to 0.4.3
- [Release notes](https://github.com/lfreleng-actions/maven-build-action/releases)
- [Commits](lfreleng-actions/maven-build-action@3c48aed...7781c31)

Updates `lfreleng-actions/sonatype-lifecycle-scan-action` from 0.2.1 to 0.2.2
- [Release notes](https://github.com/lfreleng-actions/sonatype-lifecycle-scan-action/releases)
- [Commits](lfreleng-actions/sonatype-lifecycle-scan-action@bfe8863...71c04eb)

---
updated-dependencies:
- dependency-name: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-updates
- dependency-name: lfreleng-actions/maven-build-action
  dependency-version: 0.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-updates
- dependency-name: lfreleng-actions/sonatype-lifecycle-scan-action
  dependency-version: 0.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 1, 2026
@github-actions

github-actions Bot commented Oct 1, 2026

Copy link
Copy Markdown

PR: #32
Mode: squash
Topic: GH-policy-models-32
Change-Ids:
I94e671ba0e8097f4f341e19d6ee015ad934d3a5d
Digest: 3044ccf51531
GitHub-Hash: 2d148bb8f5628ab8

Note: This metadata is also included in the Gerrit commit message for reconciliation.

@github-actions

github-actions Bot commented Oct 1, 2026

Copy link
Copy Markdown

Change raised in Gerrit by GitHub2Gerrit: https://gerrit.onap.org/r/c/policy/models/+/147971

onap-github pushed a commit that referenced this pull request Oct 5, 2026
Bumps the github-actions-updates group with 3 updates: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml, lfreleng-actions/maven-build-action and lfreleng-actions/sonatype-lifecycle-scan-action.

Updates `lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml` from 2.2.2 to 2.4.0
## Release notes

Sourced from lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml's releases.

v2.4.0

✨ New Features ✨

Feat: Sweep approved fork PRs on a schedule @​ModeSevenIndustrialSolutions (#455)

Links

Submit bugs/feature requests

v2.3.0

✨ New Features ✨

Feat: Fan out bulk sweeps and skip transferred forks @​ModeSevenIndustrialSolutions (#454)

Links

Submit bugs/feature requests

## Commits

df12d7f Merge pull request #455 from modeseven-lfreleng-actions/feat/scheduled-sweep
56d3246 Feat: Sweep approved fork PRs on a schedule
2fbfa39 Test: Share the reusable workflow test harness
a483c25 Merge pull request #454 from modeseven-lfreleng-actions/feat/sweep-fan-out-id
edb2d7b Fix: Address Copilot review feedback
bced4e6 Feat: Fan bulk dispatch out to a job per PR
48bbc46 Feat: Record fork transfers so sweeps skip them
See full diff in compare view

Updates `lfreleng-actions/maven-build-action` from 0.4.2 to 0.4.3
## Release notes

Sourced from lfreleng-actions/maven-build-action's releases.

v0.4.3

🔧 Maintenance 🔧

Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.1.0 to 0.2.2 @dependabot[bot] (#142)
Chore: Bump lfreleng-actions/harden-runner-block-action from 0.11.1 to 0.12.1 @dependabot[bot] (#140)
Chore: Bump step-security/harden-runner from 2.20.1 to 2.21.0 @dependabot[bot] (#141)
Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.1.0 to 0.2.2 @dependabot[bot] (#143)
Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.10.1 to 0.10.3 @dependabot[bot] (#144)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#145)
Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.2.2 to 0.3.0 @dependabot[bot] (#146)
Chore: Bump s4u/setup-maven-action from 1.20.0 to 1.21.0 @dependabot[bot] (#147)
Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.2.2 to 0.3.0 @dependabot[bot] (#148)
Chore: Bump step-security/harden-runner from 2.21.0 to 2.21.1 @dependabot[bot] (#149)
Chore: Bump actions/setup-java from 5.7.0 to 6.0.0 @dependabot[bot] (#150)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#151)
Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.3.0 to 0.3.1 @dependabot[bot] (#152)
Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.3.0 to 0.3.1 @dependabot[bot] (#153)
Chore: Bump actions/setup-java from 6.0.0 to 6.0.1 @dependabot[bot] (#154)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#155)

Links

Submit bugs/feature requests

## Commits

7781c31 Merge pull request #155 from lfreleng-actions/pre-commit-ci-update-config
853195e Chore: pre-commit autoupdate
516893d Merge pull request #154 from lfreleng-actions/dependabot/github_actions/actio
f8ce718 Merge pull request #153 from lfreleng-actions/dependabot/github_actions/lfrel
4b35f8b Merge pull request #152 from lfreleng-actions/dependabot/github_actions/lfrel
7285454 Chore: Bump actions/setup-java from 6.0.0 to 6.0.1
ae9d152 Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml
6008d80 Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action
d6e6324 Merge pull request #151 from lfreleng-actions/pre-commit-ci-update-config
228e1dd Chore: pre-commit autoupdate
Additional commits viewable in compare view

Updates `lfreleng-actions/sonatype-lifecycle-scan-action` from 0.2.1 to 0.2.2
## Release notes

Sourced from lfreleng-actions/sonatype-lifecycle-scan-action's releases.

v0.2.2

🔧 Maintenance 🔧

Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.10.1 to 0.10.3 @dependabot[bot] (#178)
Chore: Bump actions/setup-java from 5.7.0 to 6.0.0 @dependabot[bot] (#179)
Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.1.0 to 0.2.2 @dependabot[bot] (#180)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#181)
Chore: Bump step-security/harden-runner from 2.21.0 to 2.21.1 @dependabot[bot] (#182)
Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.2.2 to 0.3.0 @dependabot[bot] (#183)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#184)
Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.3.0 to 0.3.1 @dependabot[bot] (#185)
Chore: Bump actions/setup-java from 6.0.0 to 6.0.1 @dependabot[bot] (#186)
Chore: Bump sonatype/actions/setup-iq-cli from 1.14.0 to 1.14.1 @dependabot[bot] (#187)
Chore: Bump sonatype/actions/run-iq-cli from 1.14.0 to 1.14.1 @dependabot[bot] (#188)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#189)

Links

Submit bugs/feature requests

## Commits

71c04eb Merge pull request #189 from lfreleng-actions/pre-commit-ci-update-config
f995330 Chore: pre-commit autoupdate
238e0be Merge pull request #188 from lfreleng-actions/dependabot/github_actions/sonat
00081bc Merge pull request #187 from lfreleng-actions/dependabot/github_actions/sonat
2309117 Merge pull request #186 from lfreleng-actions/dependabot/github_actions/actio
40f8eda Merge pull request #185 from lfreleng-actions/dependabot/github_actions/lfrel
1bebdab Chore: Bump sonatype/actions/run-iq-cli from 1.14.0 to 1.14.1
45110b8 Chore: Bump sonatype/actions/setup-iq-cli from 1.14.0 to 1.14.1
16c77b1 Chore: Bump actions/setup-java from 6.0.0 to 6.0.1
c663e6b Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml
Additional commits viewable in compare view

Issue-ID: CIMAN-33
Signed-off-by: dependabot[bot] <support@github.com>
Change-Id: I94e671ba0e8097f4f341e19d6ee015ad934d3a5d
GitHub-PR: #32
GitHub-Hash: 2d148bb8f5628ab8
Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>
@github-actions

github-actions Bot commented Oct 5, 2026

Copy link
Copy Markdown

Automated PR Closure

This pull request has been automatically closed by GitHub2Gerrit.

The corresponding Gerrit change has been accepted and merged ✅

The changes from this PR are now part of the main codebase in Gerrit.


This is an automated action performed by the GitHub2Gerrit tool.

@github-actions github-actions Bot closed this Oct 5, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/github_actions/github-actions-updates-bfcbcc8e2e branch October 5, 2026 09:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Development

Successfully merging this pull request may close these issues.

0 participants