Update dependencies (major) by alexandru · Pull Request #78 · funfix/database

alexandru · 2026-05-31T07:45:22Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	`v4` → `v6`
actions/setup-java	action	major	`v4` → `v5`
actions/upload-artifact	action	major	`v5` → `v7`
gradle/actions	action	major	`v5` → `v6`

Release Notes

actions/checkout (actions/checkout)

`v6.0.2`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v6.0.1`

Compare Source

Add worktree support for persist-credentials includeIf by @ericsciple in #2327

`v6.0.0`

Compare Source

Persist creds to a separate file by @ericsciple in #2286
Update README to include Node.js 24 support details and requirements by @salmanmkc in #2248

`v6`

Compare Source

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in #2356

`v5.0.1`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

`v5.0.0`

Compare Source

Update actions checkout to use node 24 by @salmanmkc in #2226

`v5`

Compare Source

Port v6 cleanup to v5 by @ericsciple in #2301

`v4.3.1`

Compare Source

Port v6 cleanup to v4 by @ericsciple in #2305

`v4.3.0`

Compare Source

docs: update README.md by @motss in #1971
Add internal repos for checking out multiple repositories by @mouismail in #1977
Documentation update - add recommended permissions to Readme by @benwells in #2043
Adjust positioning of user email note and permissions heading by @joshmgross in #2044
Update README.md by @nebuk89 in #2194
Update CODEOWNERS for actions by @TingluoHuang in #2224
Update package dependencies by @salmanmkc in #2236

`v4.2.2`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in #1941
Expand unit test coverage for isGhes by @jww3 in #1946

`v4.2.1`

Compare Source

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in #1924

`v4.2.0`

Compare Source

Add Ref and Commit outputs by @lucacome in #1180
Dependency updates by @dependabot- #1777, #1872

`v4.1.7`

Compare Source

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in #1739
Bump actions/checkout from 3 to 4 by @dependabot in #1697
Check out other refs/* by commit by @orhantoy in #1774
Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in #1776

`v4.1.6`

Compare Source

Check platform to set archive extension appropriately by @cory-miller in #1732

`v4.1.5`

Compare Source

Update NPM dependencies by @cory-miller in #1703
Bump github/codeql-action from 2 to 3 by @dependabot in #1694
Bump actions/setup-node from 1 to 4 by @dependabot in #1696
Bump actions/upload-artifact from 2 to 4 by @dependabot in #1695
README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in #1707

`v4.1.4`

Compare Source

Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in #1692
Add dependabot config by @cory-miller in #1688
Bump the minor-actions-dependencies group with 2 updates by @dependabot in #1693
Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in #1643

`v4.1.3`

Compare Source

Check git version before attempting to disable sparse-checkout by @jww3 in #1656
Add SSH user parameter by @cory-miller in #1685
Update actions/checkout version in update-main-version.yml by @jww3 in #1650

`v4.1.2`

Compare Source

Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in #1598

`v4.1.1`

Compare Source

Correct link to GitHub Docs by @peterbe in #1511
Link to release page from what's new section by @cory-miller in #1514

`v4.1.0`

Compare Source

Add support for partial checkout filters

actions/setup-java (actions/setup-java)

`v5.2.0`

Compare Source

What's Changed

Enhancement

Retry on HTTP 522 Connection timed out by @findepi in #964

Documentation Changes

Update gradle caching by @priya-kinthali in #972
Update checkout to v6 by @mahabaleshwars in #973

Dependency Updates

Upgrade @actions/cache to v5 by @salmanmkc in #968
Upgrade actions/checkout from 5 to 6 by @dependabot in #961

New Contributors

@findepi made their first contribution in #964

Full Changelog: actions/setup-java@v5...v5.2.0

`v5.1.0`

Compare Source

What's Changed

New Features

Add support for .sdkmanrc file in java-version-file parameter by @guicamest in #736
Add support for Microsoft OpenJDK 25 builds by @the-mod in #927

Bug Fixes & Improvements

Update Regex to Support All ASDF Versions for the supported distributions in tool-versions File by @aparnajyothi-y in #767
Enhance error logging for network failures to include endpoint/IP details, add retry mechanism and update workflows to use macos-15-intel by @priya-kinthali in #946
Update SapMachine URLs by @RealCLanger in #955
Add GitHub Token Support for GraalVM and Refactor Code by @mahabaleshwars in #849

Documentation changes

Update documentation to use checkout and Java v5 by @lmvysakh in #903
Clarify JAVA_HOME and PATH setup in README by @chiranjib-swain in #841

Dependency updates

Upgrade prettier from 2.8.8 to 3.6.2 and document breaking changes in v5 by @dependabot in #873
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in #912

New Contributors

@lmvysakh made their first contribution in #903
@chiranjib-swain made their first contribution in #841
@the-mod made their first contribution in #927
@priya-kinthali made their first contribution in #946
@guicamest made their first contribution in #736

Full Changelog: actions/setup-java@v5...v5.1.0

`v5.0.0`

Compare Source

What's Changed

Breaking Changes

Upgrade to node 24 by @salmanmkc in #888

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency Upgrades

Upgrade Publish Immutable Action by @HarithaVattikuti in #798
Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @dependabot[bot] in #730
Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in #833
Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in #887
Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in #896

Bug Fixes

Prevent default installation of JetBrains pre-releases by @priyagupta108 in #859
Improve Error Handling for Setup-Java Action to Help Debug Intermittent Failures by @gowridurgad in #848

New Contributors

@gowridurgad made their first contribution in #848
@salmanmkc made their first contribution in #888

Full Changelog: actions/setup-java@v4...v5.0.0

`v5`

Compare Source

`v4.8.0`

Compare Source

What's Changed

License and Audit Fixes by @HarithaVattikuti in #960
Update SapMachine URLs by @RealCLanger in #965

Full Changelog: actions/setup-java@v4...v4.8.0

`v4.7.1`

Compare Source

What's Changed

Documentation changes

Add Documentation to Recommend Using GraalVM JDK 17 Version to 17.0.12 to Align with GFTC License Terms by @aparnajyothi-y in #704
Remove duplicated GraalVM section in documentation by @Marcono1234 in #716

Dependency updates:

Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in #766
Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in #744
Upgrade ts-jest from 29.1.2 to 29.2.5 by @dependabot in #743
Upgrade @action/cache to 4.0.3 by @aparnajyothi-y in #773

Full Changelog: actions/setup-java@v4...v4.7.1

`v4.7.0`

Compare Source

What's Changed

Configure Dependabot settings by @HarithaVattikuti in #722
README Update: Added a permissions section by @benwells in #723
Upgrade cache from version 3.2.4 to 4.0.0 by @aparnajyothi-y in #724
Upgrade @actions/http-client from 2.2.1 to 2.2.3 by @dependabot in #728
Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot in #727
Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot in #729

New Contributors

@benwells made their first contribution in #723

Full Changelog: actions/setup-java@v4...v4.7.0

`v4.6.0`

Compare Source

What's Changed

Add-ons:

Add Support for JetBrains Runtime by @gmitch215 in #637

 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: ‘jetbrains’
     java-version: '21'

Bug fixes:

Fix Ubuntu-latest CI failures by @mahabaleshwars in #693

New Contributors

@gmitch215 made their first contribution in #637

Full Changelog: actions/setup-java@v4...v4.6.0

`v4.5.0`

Compare Source

What's Changed

Upgrade IA Publish by @Jcambass in #686

Bug fixes:

Improve archive extraction on windows runners without powershell core and Update micromatch dependency by @priyagupta108 in #689
Update workflows for GraalVM and Version Enhancements by @mahabaleshwars in #699
Refine isGhes logic by @jww3 in #697

New Contributors:

@priyagupta108 made their first contribution in #689
@jww3 made their first contribution in #697

Full Changelog: actions/setup-java@v4...v4.5.0

`v4.4.0`

Compare Source

What's Changed

Add-ons :

Add support for Oracle GraalVM by @fniephaus in #501

steps:
 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: 'graalvm'
     java-version: '21'

Add workflow file for publishing releases to immutable action package by @Jcambass in #684

Bug fixes :

Add architecture to cache key by @Zxilly in #664
This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
Note: This change may break previous cache keys as they will no longer be compatible with the new format.
Resolve check failures by @aparnajyothi-y in #687

New Contributors

@Jcambass made their first contribution in #684
@Zxilly made their first contribution in #664

Full Changelog: actions/setup-java@v4...v4.4.0

`v4.3.0`

Compare Source

What's Changed

Add support for SapMachine JDK/JRE by @Shegox in #614

steps:
 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: 'sapmachine'
     java-version: '21'

Bug fixes :

Fix typos on Corretto by @johnshajiang in #666
IBM Semeru Enhancement on arm64 by @mahabaleshwars in #677
Resolve Basic Validation Check Failures by @aparnajyothi-y  in #682

New Contributors :

@johnshajiang made their first contribution in #666
@Shegox made their first contribution in #614

Full Changelog: actions/setup-java@v4...v4.3.0

`v4.2.2`

Compare Source

What's Changed

  Bug fixes:

Fix macos latest check failures by @HarithaVattikuti in #634
Fix dragonwell distribution parsing issues by @Accelerator1996 in #643

Documentation changes

Update advanced documentation for java-version-file by @mahabaleshwars in #622

Dependency updates:

Bump undici from 5.28.3 to 5.28.4 and other dependency updates by @dependabot in #616

Full Changelog: actions/setup-java@v4...v4.2.2

`v4.2.1`

Compare Source

What's Changed

Patch for java version file to accept it from any path by @mahabaleshwars in #610

Full Changelog: actions/setup-java@v4...v4.2.1

`v4.2.0`

Compare Source

What's Changed

Updated actions/httpclient version to 2.2.1 and other dependencies by @HarithaVattikuti in #607
Added .tool-versions file support along with .java-version file by @mahabaleshwars in #606

New Contributors

@HarithaVattikuti made their first contribution in #607
Full Changelog: actions/setup-java@v4...v4.2.0

`v4.1.0`

Compare Source

What's Changed

Added Windows Arm64 Support for Windows Arm64 Runners by @mahabaleshwars in #595
feat: bump actions/checkout and actions/setup-java to v4 by @kbdharun in #533
Handle authorization when the token is undefined by @peter-murray in #556
Documentation update of Java 21 by @Okeanos in #566
Documentation update about maven-gpg-plugin version note by @IvanZosimov in #570
Oracle JDK 21 support by @jdubois in #538
Fix typo in configuration example by @Bananeweizen in #572

New Contributors

@kbdharun made their first contribution in #533
@peter-murray made their first contribution in #556
@jdubois made their first contribution in #538
@Bananeweizen made their first contribution in #572
@mahabaleshwars made their first contribution in #595

Full Changelog: actions/setup-java@v4...v4.1.0

actions/upload-artifact (actions/upload-artifact)

`v7.0.1`

Compare Source

What's Changed

Update the readme with direct upload details by @danwkennedy in #795
Readme: bump all the example versions to v7 by @danwkennedy in #796
Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in #797

Full Changelog: actions/upload-artifact@v7...v7.0.1

`v7.0.0`

Compare Source

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Add proxy integration test by @Link- in #754
Upgrade the module to ESM and bump dependencies by @danwkennedy in #762
Support direct file uploads by @danwkennedy in #764

New Contributors

@Link- made their first contribution in #754

Full Changelog: actions/upload-artifact@v6...v7.0.0

`v7`

Compare Source

`v6.0.0`

Compare Source

v6 - What's new

[!IMPORTANT]
actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Upload Artifact Node 24 support by @salmanmkc in #719
fix: update @actions/artifact for Node.js 24 punycode deprecation by @salmanmkc in #744
prepare release v6.0.0 for Node.js 24 support by @salmanmkc in #745

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

`v6`

Compare Source

gradle/actions (gradle/actions)

`v6.1.0`

Compare Source

New: Basic Cache Provider

A new MIT-licensed Basic Caching provider is now available as an alternative to the proprietary Enhanced Caching provided by gradle-actions-caching. Choose Basic Caching by setting cache-provider: basic on setup-gradle or dependency-submission actions.

Built on @actions/cache -- fully open source
Caches ~/.gradle/caches and ~/.gradle/wrapper directories
Cache key derived from build files (*.gradle*, gradle-wrapper.properties, etc.)
Clean cache on build file changes (no restore keys, preventing stale entry accumulation)

Limitations vs Enhanced Caching: No cache cleanup, no deduplication of cached content, cached content is fixed unless build files change.

Revamped Licensing & Distribution Documentation

New DISTRIBUTION.md documents the licensing of each component (particularly Basic Caching vs Enhanced Caching)
Simplified licensing notices in README, docs, and runtime log output
Clear usage tiers: Enhanced Caching is free for public repos and in Free Preview for private repos

What's Changed

Use a unique cache entry for wrapper-validation test by @bigdaz in #921
Update Dependencies by @bigdaz in #922
Update dependencies and resolve npm vulnerabilities by @bigdaz in #933
Add open-source 'basic' cache provider and revamp licensing documentation by @bigdaz in #930
Restructure caching documentation for basic and enhanced providers by @bigdaz in #934

Full Changelog: gradle/actions@v6.0.1...v6.1.0

`v6.0.1`

Compare Source

[!IMPORTANT]
The release of gradle/actions@v6 contains important changes to the license terms. More details in this blog post.
TL;DR: By upgrading to v6, you accept the Terms of Use for the gradle-actions-caching component.

Summary

The license changes in v6 introduced a gradle-actions-caching license notice that is printed in logs and in each job summary.

With this release, the license notice will be muted if build-scan terms have been accepted, or if a Develocity access key is provided.

What's Changed

Bump actions used in docs by @Goooler in #792
Add typing information for use by typesafegithub by @bigdaz in #910
Mute license warning when terms are accepted by @bigdaz in #911
Mention explicit license acceptance in notice by @bigdaz in #912
Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.21.1 to 2.21.2 in /sources/test/init-scripts in the gradle group across 1 directory by @dependabot[bot] in #907

Full Changelog: gradle/actions@v6.0.0...v6.0.1

`v6.0.0`

Compare Source

[!IMPORTANT]
The release of gradle/actions@v6 contains important changes to the license terms. More details in this blog post.
TL;DR: By upgrading to v6, you accept the Terms of Use for the gradle-actions-caching component.

Summary

Caching functionality of 'gradle-actions' has been extracted into a separate gradle-actions-caching library, and is no longer open-source. See this blog post for more context.
Existing, rudimentary, configuration-cache support has been removed, pending a fully functional implementation in gradle-actions-caching.
Dependencies updated to address security vulnerabilities

[!IMPORTANT]

Licensing notice

The caching functionality in `gradle-actions` has been extracted into `gradle-actions-caching`, a proprietary commercial component that is not covered by the MIT License.
The bundled `gradle-actions-caching` component is licensed and governed by a separate license, available at https://gradle.com/legal/terms-of-use/.

The `gradle-actions-caching` component is used only when caching is enabled and is not loaded or used when caching is disabled.

Use of the `gradle-actions-caching` component is subject to a separate license, available at https://gradle.com/legal/terms-of-use/.
If you do not agree to these license terms, do not use the `gradle-actions-caching` component.

What's Changed

Bump the npm-dependencies group in /sources with 2 updates by @dependabot[bot] in #866
Update known wrapper checksums by @github-actions[bot] in #868
Dependency updates by @bigdaz in #876
Update known wrapper checksums by @github-actions[bot] in #878
Bump @types/node from 25.3.3 to 25.3.5 in /sources in the npm-dependencies group across 1 directory by @dependabot[bot] in #877
Bump the github-actions group across 3 directories with 3 updates by @dependabot[bot] in #867
Update known wrapper checksums by @github-actions[bot] in #881
Bump the npm-dependencies group in /sources with 6 updates by @dependabot[bot] in #879
Bump the github-actions group across 3 directories with 5 updates by @dependabot[bot] in #880
Remove configuration-cache support by @bigdaz in #884
Extract caching logic into a separate gradle-actions-caching component by @bigdaz in #885
Update gradle-actions-caching library to v0.3.0 by @bot-githubaction in #899
Avoid windows shutdown bug by @bigdaz in #900
Dependency updates by @bigdaz in #905
Fix critical and high npm vulnerabilities by @bigdaz in #904
Fix rendering of job-disabled message by @bigdaz in #909

Full Changelog: gradle/actions@v5.0.2...v6.0.0

`v6`

Compare Source

`v5.0.2`

Compare Source

Summary

This release contains no functional changes. It updates dependencies and known Gradle wrapper checksums.

What's Changed

Update dependencies by @bigdaz in #851
Bump the github-actions group across 2 directories with 3 updates by @dependabot[bot] in #850
Update DV config by @bigdaz in #848
Convert project to ESM and update dependencies by @bigdaz in #854
Workflow fixes by @bigdaz in #856
Remove superfluous text from log message by @bigdaz in #861
Bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in #860
Bump the npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #859
Update known wrapper checksums by @github-actions[bot] in #857
Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.21.0 to 2.21.1 in /sources/test/init-scripts in the gradle group across 1 directory by @dependabot[bot] in #862
Bump the npm-dependencies group in /sources with 2 updates by @dependabot[bot] in #863
Bump github/codeql-action from 4.32.3 to 4.32.4 in the github-actions group across 1 directory by @dependabot[bot] in #864

Full Changelog: gradle/actions@v5.0.1...v5.0.2

`v5.0.1`

Compare Source

What's Changed

Bump npm code dependency versions
Bump Gradle versions used in sample builds
Bump dependencies versions in Gradle sample builds
Bump GitHub actions used for build and test
Update known wrapper checksums to include Gradle 9.2+

Full Changelog: gradle/actions@v5.0.0...v5.0.1

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

github-actions · 2026-05-31T07:52:27Z

make check-all passes successfully. No fixes needed.

Summary:

What was changed: 3 .github/workflows/ YAML files — GitHub Actions version bumps (actions/checkout@v4→v6, actions/setup-java@v4→v5, actions/upload-artifact@v5→v7, gradle/actions/setup-gradle@v5→v6).
What I checked: Ran make check-all which executed ./gradlew check (BUILD SUCCESSFUL, all Kotlin tests and ABi checks passed) and ./sbt ci-test (93/93 tests passed across Scala 2.13 and 3.3, scalafmt formatting check passed).
What I fixed: Nothing — the build, tests, and formatting all pass cleanly on this branch.
Conclusion: This is a pure CI config update with no code impact. The branch is ready for merge.

opencode session | github run

Update dependencies

d27f2a0

alexandru merged commit c6e8437 into main May 31, 2026
6 checks passed

alexandru deleted the renovate/major-all-dependencies branch May 31, 2026 07:53

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update dependencies (major)#78

Update dependencies (major)#78
alexandru merged 1 commit into
mainfrom
renovate/major-all-dependencies

alexandru commented May 31, 2026

Uh oh!

github-actions Bot commented May 31, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

alexandru commented May 31, 2026

Release Notes

What's Changed

Enhancement

Documentation Changes

Dependency Updates

New Contributors

What's Changed

New Features

Bug Fixes & Improvements

Documentation changes

Dependency updates

New Contributors

What's Changed

Breaking Changes

Dependency Upgrades

Bug Fixes

New Contributors

What's Changed

What's Changed

Documentation changes

Dependency updates:

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Bug fixes:

New Contributors:

What's Changed

New Contributors

What's Changed

Bug fixes:

Documentation changes

Dependency updates:

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

v7 What's new

Direct Uploads

ESM

What's Changed

New Contributors

v6 - What's new

Node.js 24

What's Changed

New: Basic Cache Provider

Revamped Licensing & Distribution Documentation

What's Changed

Summary

What's Changed

Summary

Licensing notice

What's Changed

Summary

What's Changed

What's Changed

Configuration

Uh oh!

github-actions Bot commented May 31, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

  Bug fixes: