Skip to content

ci(deps): bump actions/setup-java from 5.3.0 to 5.4.0#451

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/github_actions/actions/setup-java-5.4.0
Jun 30, 2026
Merged

ci(deps): bump actions/setup-java from 5.3.0 to 5.4.0#451
github-actions[bot] merged 1 commit into
mainfrom
dependabot/github_actions/actions/setup-java-5.4.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 30, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/setup-java from 5.3.0 to 5.4.0.

Release notes

Sourced from actions/setup-java's releases.

v5.4.0

What's Changed

New Contributors

Full Changelog: actions/setup-java@v5...v5.4.0

Commits
  • 1bcf9fb dist: Address Copilot review suggestions from PR #1042 (GraalVM Community) (#...
  • fa2c650 docs: note jdkfile approach for Early Access / unreleased JDK builds (#1058)
  • 1d56e31 dist: Add GraalVM Community distribution support (#1042)
  • 1d25252 chore: Harden workflows: least-privilege permissions + zizmor integration (#1...
  • 668c1ea docs: add post-install keytool import for the JDK cacerts trust store (#1051)
  • a9a46fb docs: document self-signed certificate / internal CA handling for GitHub Ente...
  • 5431e71 docs: add JavaFX Maven project configuration instructions (#1044)
  • 4baa9b4 docs: replace non-existent HelloWorldApp references with java --version (#1043)
  • eab4b08 Bump @​types/node from 25.9.3 to 26.0.0 (#1031)
  • bf0c0e6 Bump actions/checkout from 6 to 7 (#1032)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Jun 30, 2026
@github-actions github-actions Bot added the no-release-notes Skip this pull request in release notes label Jun 30, 2026
@github-actions github-actions Bot enabled auto-merge (squash) June 30, 2026 03:26
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/actions/setup-java 1bcf9fb12cf4aa7d266a90ae39939e61372fe520 🟢 5.6
Details
CheckScoreReason
Code-Review🟢 7Found 14/19 approved changesets -- score normalized to 7
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 9security policy file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST🟢 6SAST tool is not run on all commits -- score normalized to 6

Scanned Files

  • .github/workflows/maven-dependency-check.yml

@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/setup-java-5.4.0 branch from 6db85b3 to 8fa059a Compare June 30, 2026 03:30
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5.3.0 to 5.4.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@ad2b381...1bcf9fb)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions/setup-java-5.4.0 branch from 8fa059a to bf64098 Compare June 30, 2026 03:36
@github-actions github-actions Bot merged commit 5390764 into main Jun 30, 2026
57 checks passed
@github-actions github-actions Bot deleted the dependabot/github_actions/actions/setup-java-5.4.0 branch June 30, 2026 03:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code no-release-notes Skip this pull request in release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants