From e94c31cbe37154d937a9432cedf18c2b207944e3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 30 May 2025 13:01:25 +0000 Subject: [PATCH] Bump the actions-deps group with 2 updates Bumps the actions-deps group with 2 updates: [advanced-security/maven-dependency-submission-action](https://github.com/advanced-security/maven-dependency-submission-action) and [ruby/setup-ruby](https://github.com/ruby/setup-ruby). Updates `advanced-security/maven-dependency-submission-action` from 4.1.2 to 5.0.0 - [Release notes](https://github.com/advanced-security/maven-dependency-submission-action/releases) - [Commits](https://github.com/advanced-security/maven-dependency-submission-action/compare/aeab9f885293af501bae8bdfe88c589528ea5e25...b275d12641ac2d2108b2cbb7598b154ad2f2cee8) Updates `ruby/setup-ruby` from 1.238.0 to 1.244.0 - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb) - [Commits](https://github.com/ruby/setup-ruby/compare/e34163cd15f4bb403dcd72d98e295997e6a55798...13e7a03dc3ac6c3798f4570bfead2aed4d96abfb) --- updated-dependencies: - dependency-name: advanced-security/maven-dependency-submission-action dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: ruby/setup-ruby dependency-version: 1.244.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps ... Signed-off-by: dependabot[bot] --- .github/workflows/maven.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index ad3cc35f8..35246d665 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -39,7 +39,7 @@ jobs: # Uploads the full dependency graph to GitHub to improve the quality of Dependabot alerts this repository can receive - name: Update dependency graph - uses: advanced-security/maven-dependency-submission-action@aeab9f885293af501bae8bdfe88c589528ea5e25 # v4.1.2 + uses: advanced-security/maven-dependency-submission-action@b275d12641ac2d2108b2cbb7598b154ad2f2cee8 # v5.0.0 if: github.head_ref == 'refs/heads/master' && matrix.java_version == '8' && startsWith(matrix.jruby_version, '9.4') appraisals: @@ -112,7 +112,7 @@ jobs: cache: maven - name: Setup JRuby - uses: ruby/setup-ruby@e34163cd15f4bb403dcd72d98e295997e6a55798 # v1.238.0 + uses: ruby/setup-ruby@13e7a03dc3ac6c3798f4570bfead2aed4d96abfb # v1.244.0 with: ruby-version: jruby-${{ matrix.jruby_version }} bundler-cache: 'false' # Need to install later so we can vary from Gemfile.lock as required for JRuby version compatibility