Skip to content

build(deps): bump actions/setup-java from 5.6.0 to 5.7.0 in the github-actions-minor group - #367

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-minor-6bc1927ba3
Open

build(deps): bump actions/setup-java from 5.6.0 to 5.7.0 in the github-actions-minor group#367
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-minor-6bc1927ba3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions-minor group with 1 update: actions/setup-java.

Updates actions/setup-java from 5.6.0 to 5.7.0

Release notes

Sourced from actions/setup-java's releases.

v5.7.0

What's Changed

Full Changelog: actions/setup-java@v5.6.0...v5.7.0

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions-minor group with 1 update: [actions/setup-java](https://github.com/actions/setup-java).


Updates `actions/setup-java` from 5.6.0 to 5.7.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@03ad4de...b6effb0)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 3, 2026
@dependabot
dependabot Bot requested a review from bomly-guy as a code owner August 3, 2026 19:01
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 3, 2026
@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bomly Diff Summary

Compared 9b8d9c36a33edccb5c081ad4948d12069971b525 to 5657d6c2482a8d26d3fb97d2a9e82fcb7bd51f1d.

Overview

Status Manifests Dependencies Findings Duration
⚠️ Warnings +0 / ~4 / -0 0 added / 4 version changed / 0 detail changes / 0 removed 0 introduced / 1 persisted / 0 resolved 1m 22s

Dependency Changes

Summary: 0 added, 1 version changed, 0 detail changes, 0 removed.

Changed Dependencies

Change Package Version Direct? Scope Licenses
changed actions:setup-java 03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 → b6effb05e454b25005698d916606bdc6ffcbf961 Yes runtime -

Vulnerabilities

✅ No vulnerability changes.

License Changes

⚠️ 1 package still carries an unresolved license issue (see Policy Findings).

Project Posture

✅ No project posture changes (--matchers +scorecard was not selected).

Policy Findings

Summary: 0 introduced, 1 persisted, 0 resolved.

Persisted Findings

Status Category Severity ID Package Fixed In Title
⚠️ persisted license WARNING UNKNOWN-yent-pf5h-il26 actions:setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 - Package license is unknown

Legend: ✅ resolved · ❌ failing · ⚠️ warning

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants