From 0e55a81a62e2d6b38d456d36acb9a8ee41621c59 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 29 Sep 2026 03:01:30 +0000 Subject: [PATCH] Update github actions --- .github/workflows/auto-update-semconv.yml | 4 ++-- .github/workflows/build-common.yml | 2 +- .github/workflows/codeql.yml | 8 ++++---- .github/workflows/fossa.yml | 2 +- .github/workflows/gradle-wrapper-validation.yml | 2 +- .github/workflows/issue-management-stale-action.yml | 2 +- .github/workflows/ossf-scorecard.yml | 4 ++-- .github/workflows/release.yml | 4 ++-- .github/workflows/zizmor.yml | 2 +- 9 files changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/auto-update-semconv.yml b/.github/workflows/auto-update-semconv.yml index 03bc8fe1..8fa30269 100644 --- a/.github/workflows/auto-update-semconv.yml +++ b/.github/workflows/auto-update-semconv.yml @@ -79,7 +79,7 @@ jobs: distribution: temurin java-version: 25 - - uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 + - uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0 with: cache-read-only: true @@ -129,7 +129,7 @@ jobs: - check-versions - update-semconv if: always() - uses: open-telemetry/shared-workflows/.github/workflows/workflow-failure-issue.yml@ad1959372f2919fcf2556d3a3d12ed5265c54209 # v0.16.0 + uses: open-telemetry/shared-workflows/.github/workflows/workflow-failure-issue.yml@6839dcd6ea227c18b59d11da34499746634728ad # v0.17.0 with: success: >- ${{ diff --git a/.github/workflows/build-common.yml b/.github/workflows/build-common.yml index acb88fd6..412467e9 100644 --- a/.github/workflows/build-common.yml +++ b/.github/workflows/build-common.yml @@ -65,7 +65,7 @@ jobs: distribution: temurin java-version: 25 - - uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 + - uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0 with: cache-read-only: >- ${{ diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 9d3f0eda..e424bf35 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -44,12 +44,12 @@ jobs: # zizmor: ignore[cache-poisoning] This workflow analyzes release branches # but does not build or publish release artifacts. if: matrix.language == 'java' - uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 + uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0 with: cache-read-only: true - name: Initialize CodeQL - uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: languages: ${{ matrix.language }} # using "linked" helps to keep up with the latest Kotlin support @@ -66,7 +66,7 @@ jobs: DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }} - name: Perform CodeQL analysis - uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: category: "/language:${{matrix.language}}" @@ -76,6 +76,6 @@ jobs: needs: - analyze if: always() && github.event_name == 'schedule' - uses: open-telemetry/shared-workflows/.github/workflows/workflow-failure-issue.yml@ad1959372f2919fcf2556d3a3d12ed5265c54209 # v0.16.0 + uses: open-telemetry/shared-workflows/.github/workflows/workflow-failure-issue.yml@6839dcd6ea227c18b59d11da34499746634728ad # v0.17.0 with: success: ${{ needs.analyze.result == 'success' }} diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml index 2e0b3f41..4b99eb38 100644 --- a/.github/workflows/fossa.yml +++ b/.github/workflows/fossa.yml @@ -27,6 +27,6 @@ jobs: needs: - fossa if: always() - uses: open-telemetry/shared-workflows/.github/workflows/workflow-failure-issue.yml@ad1959372f2919fcf2556d3a3d12ed5265c54209 # v0.16.0 + uses: open-telemetry/shared-workflows/.github/workflows/workflow-failure-issue.yml@6839dcd6ea227c18b59d11da34499746634728ad # v0.17.0 with: success: ${{ needs.fossa.result == 'success' }} diff --git a/.github/workflows/gradle-wrapper-validation.yml b/.github/workflows/gradle-wrapper-validation.yml index 560a75e8..c4515645 100644 --- a/.github/workflows/gradle-wrapper-validation.yml +++ b/.github/workflows/gradle-wrapper-validation.yml @@ -16,4 +16,4 @@ jobs: persist-credentials: false # this needs to be in its own workflow in order to make OSSF scorecard happy - - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 + - uses: gradle/actions/wrapper-validation@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0 diff --git a/.github/workflows/issue-management-stale-action.yml b/.github/workflows/issue-management-stale-action.yml index 09f7104a..7a987282 100644 --- a/.github/workflows/issue-management-stale-action.yml +++ b/.github/workflows/issue-management-stale-action.yml @@ -72,6 +72,6 @@ jobs: needs: - stale if: always() - uses: open-telemetry/shared-workflows/.github/workflows/workflow-failure-issue.yml@ad1959372f2919fcf2556d3a3d12ed5265c54209 # v0.16.0 + uses: open-telemetry/shared-workflows/.github/workflows/workflow-failure-issue.yml@6839dcd6ea227c18b59d11da34499746634728ad # v0.17.0 with: success: ${{ needs.stale.result == 'success' }} diff --git a/.github/workflows/ossf-scorecard.yml b/.github/workflows/ossf-scorecard.yml index 0460bddb..269cbd29 100644 --- a/.github/workflows/ossf-scorecard.yml +++ b/.github/workflows/ossf-scorecard.yml @@ -16,7 +16,7 @@ jobs: contents: read # for actions/checkout id-token: write # for Scorecard to publish results security-events: write # for the SARIF upload to code scanning - uses: open-telemetry/shared-workflows/.github/workflows/scorecard.yml@ad1959372f2919fcf2556d3a3d12ed5265c54209 # v0.16.0 + uses: open-telemetry/shared-workflows/.github/workflows/scorecard.yml@6839dcd6ea227c18b59d11da34499746634728ad # v0.17.0 workflow-notification: permissions: @@ -24,6 +24,6 @@ jobs: needs: - analysis if: always() - uses: open-telemetry/shared-workflows/.github/workflows/workflow-failure-issue.yml@ad1959372f2919fcf2556d3a3d12ed5265c54209 # v0.16.0 + uses: open-telemetry/shared-workflows/.github/workflows/workflow-failure-issue.yml@6839dcd6ea227c18b59d11da34499746634728ad # v0.17.0 with: success: ${{ needs.analysis.result == 'success' }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1c29dcda..2489846a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -39,7 +39,7 @@ jobs: distribution: temurin java-version: 25 - - uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 + - uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0 with: cache-read-only: true @@ -191,7 +191,7 @@ jobs: java-version: 25 - name: Setup Gradle - uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 + uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0 with: cache-read-only: true diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 22af419b..51158669 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -17,4 +17,4 @@ jobs: permissions: contents: read # for actions/checkout security-events: write # for zizmor to upload SARIF results - uses: open-telemetry/shared-workflows/.github/workflows/zizmor.yml@ad1959372f2919fcf2556d3a3d12ed5265c54209 # v0.16.0 + uses: open-telemetry/shared-workflows/.github/workflows/zizmor.yml@6839dcd6ea227c18b59d11da34499746634728ad # v0.17.0