Bump the github-actions group across 1 directory with 3 updates - #50446
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
|
Azure Pipelines: Successfully started running 1 pipeline(s). 35 pipeline(s) were filtered out due to trigger conditions. There may be pipelines that require an authorized user to comment /azp run to run. |
Copilot started reviewing on behalf of
Microsoft Azure (Azure)
September 14, 2026 19:40
View session
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
The generated workflow locks and shared action lock contain inconsistent action-version metadata and must be regenerated together.
Get a fresh assessment by requesting another Copilot review.
Pull request overview
This PR updates pinned GitHub Actions used by repository workflows.
Changes:
- Bumps
actions/checkoutto v7.0.1. - Bumps
github/gh-aw-actions/setupto v0.88.6. - Bumps
actions/setup-javato v6.0.0. - Requires regenerating both generated locks and
.github/aw/actions-lock.jsontogether to keep metadata consistent.
File summaries
| File | Description |
|---|---|
.github/workflows/verify-links.yml |
Updates checkout action. |
.github/workflows/spring-docker-tests.yml |
Updates checkout and Java setup actions. |
.github/workflows/post-apiview.yml |
Updates checkout action. |
.github/workflows/management-autopr-review.lock.yml |
Updates gh-aw setup, but generated metadata retains older versions. |
.github/workflows/issue-triage.lock.yml |
Updates gh-aw setup, but generated metadata retains older versions. |
.github/workflows/copilot-setup-steps.yml |
Updates checkout action. |
.github/workflows/check-spelling.yml |
Updates checkout action. |
.github/workflows/actionlint.yml |
Updates checkout action. |
Review details
- Files reviewed: 8/8 changed files
- Comments generated: 2
- Review effort level: Lite
💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.
| - name: Setup Scripts | ||
| id: setup | ||
| uses: github/gh-aw-actions/setup@423b3dc04bbf1b1797194a4a75aa5cf5d0d4f5b3 # v0.87.1 | ||
| uses: github/gh-aw-actions/setup@d462c12b8f1f616b55fed699787b0280c594e592 # v0.88.6 |
| - name: Setup Scripts | ||
| id: setup | ||
| uses: github/gh-aw-actions/setup@6aab9e5b5c91c615506061f09bedd81a23babe3c # v0.86.2 | ||
| uses: github/gh-aw-actions/setup@d462c12b8f1f616b55fed699787b0280c594e592 # v0.88.6 |
Bumps the github-actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [github/gh-aw-actions/setup](https://github.com/github/gh-aw-actions) and [actions/setup-java](https://github.com/actions/setup-java). Updates `actions/checkout` from 4.4.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4.4.0...3d3c42e) Updates `github/gh-aw-actions/setup` from 0.87.1 to 0.88.8 - [Release notes](https://github.com/github/gh-aw-actions/releases) - [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md) - [Commits](github/gh-aw-actions@423b3dc...5e50858) Updates `actions/setup-java` from 5.7.0 to 6.0.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@b6effb0...dd06d9c) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/gh-aw-actions/setup dependency-version: 0.88.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/github_actions/github-actions-a7ca15c448
branch
from
September 15, 2026 06:03
4354d00 to
0e08bee
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 3 updates in the / directory: actions/checkout, github/gh-aw-actions/setup and actions/setup-java.
Updates
actions/checkoutfrom 4.4.0 to 7.0.1Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
3d3c42eprep v7.0.1 release (#2531)2880268escape values passed to --unset (#2530)12cd223trim only ascii whitespace for branch (#2521)62661c4skip running unsafe pr check if input is default (#2518)e8d4307Bump the minor-actions-dependencies group with 2 updates (#2499)631c942eslint 9 (#2474)4f1f4aeBump actions/upload-artifact from 4 to 7 (#2476)ba09753Bump actions/checkout from 6 to 7 (#2488)b9e0990Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)e8cb398Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)Updates
github/gh-aw-actions/setupfrom 0.87.1 to 0.88.8Release notes
Sourced from github/gh-aw-actions/setup's releases.
Commits
5e50858chore: sync actions from gh-aw@v0.88.7 (#232)d462c12chore: sync actions from gh-aw@v0.88.5 (#231)be41addchore: sync actions from gh-aw@v0.88.4 (#230)49459c7chore: sync actions from gh-aw@v0.88.3 (#229)9271a18chore: sync actions from gh-aw@v0.88.2 (#227)afc709fchore: sync actions from gh-aw@v0.88.0 (#224)bc8c008chore: sync actions from gh-aw@v0.87.10 (#222)49dc896chore: sync actions from gh-aw@v0.87.9 (#220)1aa033cchore: sync actions from gh-aw@v0.87.6 (#219)2a78d04chore: sync actions from gh-aw@v0.87.5 (#218)Updates
actions/setup-javafrom 5.7.0 to 6.0.0Release notes
Sourced from actions/setup-java's releases.
... (truncated)
Commits
dd06d9cPrepare documentation for v6 release (#1253)59b3450chore(deps): combine open Dependabot npm updates (#1252)b96213dSet default signature verification for supported distributions (#1246)1dbac3cdocs: expose contributing guide to GitHub (#1245)11741d6ci: constrain cache e2e job modes (#1244)ff99aa1Fix Oracle macOS E2E version (#1243)416c6d1Add Red Hat Build of OpenJDK support (#1241)5f75b27Add Maven dependency-resolution repositories (#1240)a42a52cAdd multiple Maven server credentials (#1239)fb4abd7test: cover JDK 26 from SDKMAN (#1238)