From 98b76474aaec5d5fe4feab1a450e8f2b9d2dda72 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 1 Sep 2026 17:54:30 +0000 Subject: [PATCH 1/2] chore(deps): bump the github-actions-dependencies group with 6 updates Bumps the github-actions-dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [apache/infrastructure-actions/allowlist-check](https://github.com/apache/infrastructure-actions) | `4e9c961f587f72b170874b6f5cd4ac15f7f26eb8` | `ce952724eb5210790bd5d466d70d5d60ac3e6c21` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.3` | `4.37.9` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.3` | `4.37.9` | | [actions/setup-java](https://github.com/actions/setup-java) | `5.6.0` | `6.0.0` | | [j178/prek-action](https://github.com/j178/prek-action) | `2.0.6` | `3.0.0` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.3` | `4.37.9` | Updates `apache/infrastructure-actions/allowlist-check` from 4e9c961f587f72b170874b6f5cd4ac15f7f26eb8 to ce952724eb5210790bd5d466d70d5d60ac3e6c21 - [Commits](https://github.com/apache/infrastructure-actions/compare/4e9c961f587f72b170874b6f5cd4ac15f7f26eb8...ce952724eb5210790bd5d466d70d5d60ac3e6c21) Updates `github/codeql-action/init` from 4.37.3 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...cdf488f595d80d6e07e03d4674febd5ab45fa938) Updates `github/codeql-action/analyze` from 4.37.3 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...cdf488f595d80d6e07e03d4674febd5ab45fa938) Updates `actions/setup-java` from 5.6.0 to 6.0.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/03ad4de0992f5dab5e18fcb136590ce7c4a0ac95...dd06d9cba3e5552c54d9f8ea23572deb30010f7c) Updates `j178/prek-action` from 2.0.6 to 3.0.0 - [Release notes](https://github.com/j178/prek-action/releases) - [Commits](https://github.com/j178/prek-action/compare/5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16...4e14d07f9231acabce116ccfca13b13dd9755ece) Updates `github/codeql-action/upload-sarif` from 4.37.3 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...cdf488f595d80d6e07e03d4674febd5ab45fa938) --- updated-dependencies: - dependency-name: apache/infrastructure-actions/allowlist-check dependency-version: ce952724eb5210790bd5d466d70d5d60ac3e6c21 dependency-type: direct:production dependency-group: github-actions-dependencies - dependency-name: github/codeql-action/init dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: github/codeql-action/analyze dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: actions/setup-java dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-dependencies - dependency-name: j178/prek-action dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-dependencies - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/asf-allowlist-check.yml | 2 +- .github/workflows/codeql.yml | 4 ++-- .github/workflows/maven.yml | 4 ++-- .github/workflows/pre-commit-manual.yml | 2 +- .github/workflows/pre-commit.yml | 2 +- .github/workflows/scorecards.yml | 2 +- 6 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/asf-allowlist-check.yml b/.github/workflows/asf-allowlist-check.yml index 07a47698f5..1cb3076ec8 100644 --- a/.github/workflows/asf-allowlist-check.yml +++ b/.github/workflows/asf-allowlist-check.yml @@ -31,4 +31,4 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: apache/infrastructure-actions/allowlist-check@4e9c961f587f72b170874b6f5cd4ac15f7f26eb8 # main + - uses: apache/infrastructure-actions/allowlist-check@ce952724eb5210790bd5d466d70d5d60ac3e6c21 # main diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 6065578488..900d9ab154 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -75,7 +75,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 + uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -101,6 +101,6 @@ jobs: # ./location_of_script_within_repo/buildscript.sh - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 + uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 6ab643cb1e..51b064277c 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -39,7 +39,7 @@ jobs: persist-credentials: false - name: Set up JDK - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0 with: java-version: 25 distribution: temurin @@ -89,7 +89,7 @@ jobs: persist-credentials: false - name: Set up JDK - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0 with: java-version: ${{ matrix.jdk }} distribution: ${{ matrix.dist }} diff --git a/.github/workflows/pre-commit-manual.yml b/.github/workflows/pre-commit-manual.yml index 7ac7531884..3c4e9e3266 100644 --- a/.github/workflows/pre-commit-manual.yml +++ b/.github/workflows/pre-commit-manual.yml @@ -33,7 +33,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: j178/prek-action@5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16 # v2.0.6 + - uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece # v3.0.0 with: install-only: true - name: Run manual pre-commit hooks diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index 89eb221cc5..b8d9e7420f 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -33,6 +33,6 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: j178/prek-action@5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16 # v2.0.6 + - uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece # v3.0.0 with: extra-args: --all-files diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 2b26d9858c..3d3506719b 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -75,6 +75,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # tag=v2 + uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # tag=v2 with: sarif_file: results.sarif From e052b847a09ca132761c64106b6d89d69f6b518d Mon Sep 17 00:00:00 2001 From: lprimak Date: Tue, 1 Sep 2026 14:21:27 -0500 Subject: [PATCH 2/2] chore: rename openj9 to Semeru --- .github/workflows/maven.yml | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 51b064277c..7140e4bde7 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -60,24 +60,21 @@ jobs: matrix: os: [ 'ubuntu-latest', 'windows-latest', 'macOS-latest' ] jdk: [ 11, 17, 21, 25 ] - dist: [ 'temurin', 'adopt-openj9', 'zulu' ] + dist: [ 'temurin', 'semeru', 'zulu' ] exclude: # was already built - os: 'ubuntu-latest' jdk: 25 dist: 'temurin' - # exclude temurin on MacOS. zulu (also hotspot) and OpenJ9 are sufficient. + # exclude temurin on MacOS. zulu (also hotspot) and Semeru are sufficient. - os: 'macOS-latest' dist: 'temurin' # no Temurin 21 - dist: 'temurin' jdk: 21 - # no OpenJ9 21 - - dist: adopt-openj9 + # no Semeru 21 + - dist: 'semeru' jdk: 21 - # no OpenJ9 25 - - dist: adopt-openj9 - jdk: 25 fail-fast: false runs-on: ${{ matrix.os }}