Skip to content

ci: bump the github-actions-major group across 1 directory with 6 updates#78

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-major-875735b805
Open

ci: bump the github-actions-major group across 1 directory with 6 updates#78
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-major-875735b805

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Bumps the github-actions-major group with 6 updates in the / directory:

Package From To
gradle/actions 5 6
actions/upload-artifact 6 7
codecov/codecov-action 5 6
JetBrains/qodana-action 2025.3 2026.1
dependabot/fetch-metadata 2 3
jtalk/url-health-check-action 4 5

Updates gradle/actions from 5 to 6

Release notes

Sourced from gradle/actions's releases.

v6.0.0

[!IMPORTANT] The release of gradle/actions@v6 contains important changes to the license terms. More details in this blog post. TL;DR: By upgrading to v6, you accept the Terms of Use for the gradle-actions-caching component.

Summary

  • Caching functionality of 'gradle-actions' has been extracted into a separate gradle-actions-caching library, and is no longer open-source. See this blog post for more context.
  • Existing, rudimentary, configuration-cache support has been removed, pending a fully functional implementation in gradle-actions-caching.
  • Dependencies updated to address security vulnerabilities

[!IMPORTANT]

Licensing notice

The caching functionality in `gradle-actions` has been extracted into `gradle-actions-caching`, a proprietary commercial component that is not covered by the MIT License. The bundled `gradle-actions-caching` component is licensed and governed by a separate license, available at https://gradle.com/legal/terms-of-use/.

The `gradle-actions-caching` component is used only when caching is enabled and is not loaded or used when caching is disabled.

Use of the `gradle-actions-caching` component is subject to a separate license, available at https://gradle.com/legal/terms-of-use/. If you do not agree to these license terms, do not use the `gradle-actions-caching` component.

What's Changed

Full Changelog: gradle/actions@v5.0.2...v6.0.0

v5.0.2

Summary

This release contains no functional changes. It updates dependencies and known Gradle wrapper checksums.

What's Changed

... (truncated)

Commits
  • 50e97c2 Link to docs for caching providers
  • f2e6298 Restructure caching documentation for basic and enhanced providers (#934)
  • b294b1e Really fix integ-test-full
  • 83d3189 Revise license details for gradle-actions-caching
  • 1d5db06 Update license link for gradle-actions-caching component
  • 1c80961 Fix license link for Enhanced Caching component
  • 9e99920 Fix integ-test-full workflow
  • bb8aaaf Fix workflow permissions
  • f5dfb43 [bot] Update dist directory
  • ff9ae24 Add open-source 'basic' cache provider and revamp licensing documentation (#930)
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 6 to 7

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

Commits
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
  • 02a8460 Add proxy integration test
  • See full diff in compare view

Updates codecov/codecov-action from 5 to 6

Release notes

Sourced from codecov/codecov-action's releases.

v6.0.0

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

v5.5.4

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4

v5.5.3

What's Changed

Full Changelog: codecov/codecov-action@v5.5.2...v5.5.3

v5.5.2

What's Changed

New Contributors

Full Changelog: codecov/codecov-action@v5.5.1...v5.5.2

v5.5.1

What's Changed

... (truncated)

Changelog

Sourced from codecov/codecov-action's changelog.

v5.5.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

... (truncated)

Commits

Updates JetBrains/qodana-action from 2025.3 to 2026.1

Release notes

Sourced from JetBrains/qodana-action's releases.

v2026.1.0

Changelog

  • 91e26dc ✨ Add support for retrieving and using the latest nightly release tags
  • 203eab0 ✨ QD-13829 remove auto-addition of --within-docker for qodana docker executions
  • 93546d8 ✨ QD-13829 distinguish native/docker caches
  • 3492039 ✨ QD-14035 bump node version to 24
  • d22cd6b ✨ QD-14035 prioritize real merge-base computation to avoid stale pr.base.sha issue
  • e1b97b3 🐛 QD-13829 fix incorrect check for QODANA_DOCKER environment variable
  • 7cc2d8d ⬆️ Update Node.js version to 24.14.1 and add .npmrc with min-release-age=7d
  • d436fca ⬆️ Bump the dependencies group across 1 directory with 2 updates
  • 2268e0f ✨ QD-14278 allow to specify which nightly to use
  • 498e15f ⬆️ Bump the dependencies group across 1 directory with 14 updates #590
  • d7b5ec2 ⬆️ Update qodana to the v2026.1.0 (#592)

v2025.3.2

Changelog

  • 412e8b0 ⬆️ Bump qs from 6.14.0 to 6.14.1 in /gitlab
  • 58285fd ⬆️ Bump actions/upload-artifact in the dependencies group
  • c500323 ⬆️ Bump tar from 7.5.2 to 7.5.3
  • 63097d0 ⬆️ Bump tar from 7.5.3 to 7.5.4
  • d2cddc4 ⬆️ Bump lodash from 4.17.21 to 4.17.23
  • 747a46a ⬆️ Bump tar from 7.5.2 to 7.5.4 in /gitlab (#554)
  • 58fe1b8 ✨ QD-5339 Switch to space-separated arguments
  • 8c13992 🧱 QD-5339 Use space-separated arguments in the tests
  • ba6fa71 ⬆️ Bump tar from 7.5.4 to 7.5.7
  • c0354b2 ⬆️ Bump tar from 7.5.4 to 7.5.7 in /gitlab
  • ffcb814 🐛 QD-13302 QD-12803 Fix problems with Gitlab migration + enable quick-fixes for https git url + add debugging
  • a4fd82e ⬆️ Bump the dependencies group across 1 directory with 15 updates (#572)
  • 0a50b18 ⬆️ Bump @​types/node from 24.9.2 to 25.1.0 (#561)
  • 4795977 ⬆️ Bump axios from 1.12.0 to 1.13.5 in /gitlab (#566)
  • 04790b1 ⬆️ Update qodana to v2025.3.2 (#579)
  • 89eb435 🐛 QD-13302 QD-12803 change push url approach and general improvements (#581)

v2025.3.1

Changelog

  • 3b96197 ⬆️ Update qodana to v2025.3.1
  • 42dad39 ⬆️ Update Qodana Azure version to 2025.3.1
Commits
  • d7b5ec2 ⬆️ Update qodana to the v2026.1.0 (#592)
  • 498e15f ⬆️ Bump the dependencies group across 1 directory with 14 updates #590
  • 2268e0f ✨ QD-14278 allow to specify which nightly to use
  • d436fca ⬆️ Bump the dependencies group across 1 directory with 2 updates
  • 7cc2d8d ⬆️ Update Node.js version to 24.14.1 and add .npmrc with `min-rel...
  • e1b97b3 🐛 QD-13829 fix incorrect check for QODANA_DOCKER environment variable
  • d22cd6b ✨ QD-14035 prioritize real merge-base computation to avoid stale pr....
  • 3492039 ✨ QD-14035 bump node version to 24
  • 93546d8 ✨ QD-13829 distinguish native/docker caches
  • 203eab0 ✨ QD-13829 remove auto-addition of --within-docker for qodana docker...
  • Additional commits viewable in compare view

Updates dependabot/fetch-metadata from 2 to 3

Release notes

Sourced from dependabot/fetch-metadata's releases.

v3.0.0

The breaking change is requiring Node.js version v24 as the Actions runtime.

What's Changed

New Contributors

Full Changelog: dependabot/fetch-metadata@v2...v3.0.0

v2.5.0

What's Changed

... (truncated)

Commits
  • 25dd0e3 v3.1.0 (#692)
  • e073f50 Merge pull request #705 from dependabot/dependabot/npm_and_yarn/hono-4.12.14
  • 0670e16 build(deps-dev): bump hono from 4.12.12 to 4.12.14
  • 7a7fe10 Merge pull request #702 from dependabot/dependabot/npm_and_yarn/dependencies-...
  • 5168191 Updating dist build
  • 23882e1 build(deps): bump @​actions/github in the dependencies group
  • 1072469 Merge pull request #701 from dependabot/dependabot/github_actions/actions/cre...
  • 43f8a00 build(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1
  • b4d904a Merge pull request #703 from dependabot/dependabot/npm_and_yarn/globals-17.5.0
  • c8046bb build(deps-dev): bump globals from 17.4.0 to 17.5.0
  • Additional commits viewable in compare view

Updates jtalk/url-health-check-action from 4 to 5

Release notes

Sourced from jtalk/url-health-check-action's releases.

v5

What's Changed

New Contributors

Full Changelog: Jtalk/url-health-check-action@v4...v5

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates

Bumps the github-actions-major group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [gradle/actions](https://github.com/gradle/actions) | `5` | `6` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `6` | `7` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5` | `6` |
| [JetBrains/qodana-action](https://github.com/jetbrains/qodana-action) | `2025.3` | `2026.1` |
| [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) | `2` | `3` |
| [jtalk/url-health-check-action](https://github.com/jtalk/url-health-check-action) | `4` | `5` |



Updates `gradle/actions` from 5 to 6
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](gradle/actions@v5...v6)

Updates `actions/upload-artifact` from 6 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v6...v7)

Updates `codecov/codecov-action` from 5 to 6
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v5...v6)

Updates `JetBrains/qodana-action` from 2025.3 to 2026.1
- [Release notes](https://github.com/jetbrains/qodana-action/releases)
- [Commits](JetBrains/qodana-action@v2025.3...v2026.1)

Updates `dependabot/fetch-metadata` from 2 to 3
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@v2...v3)

Updates `jtalk/url-health-check-action` from 4 to 5
- [Release notes](https://github.com/jtalk/url-health-check-action/releases)
- [Commits](Jtalk/url-health-check-action@v4...v5)

---
updated-dependencies:
- dependency-name: gradle/actions
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-major
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-major
- dependency-name: codecov/codecov-action
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-major
- dependency-name: JetBrains/qodana-action
  dependency-version: '2026.1'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-major
- dependency-name: dependabot/fetch-metadata
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-major
- dependency-name: jtalk/url-health-check-action
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 27, 2026

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 27, 2026
@github-actions
Copy link
Copy Markdown
Contributor

Qodana Community for JVM

It seems all right 👌

No new problems were found according to the checks applied

💡 Qodana analysis was run in the pull request mode: only the changed files were checked

View the detailed Qodana report

To be able to view the detailed Qodana report, you can either:

To get *.log files or any other Qodana artifacts, run the action with upload-result option set to true,
so that the action will upload the files as the job artifacts:

      - name: 'Qodana Scan'
        uses: JetBrains/qodana-action@v2026.1.0
        with:
          upload-result: true
Contact Qodana team

Contact us at qodana-support@jetbrains.com

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants