chore(deps): bump actions/setup-java from 5.7.0 to 6.0.1
DE
1mo ago+2+2+0123456789-2-2-0123456789
Bumps actions/setup-java from 5.7.0 to 6.0.1.
Release notes
Sourced from actions/setup-java's releases.
v6.0.1
What's Changed
- Fix failing GitHub Actions job for temurin 17 by
@brunoborgeswith@Copilotin actions/setup-java#1259- Fix Temurin EA E2E signature verification by
@brunoborgeswith@Copilotin actions/setup-java#1260- Fix Alpine GPG verification failures and support multiple keys by
@brunoborgesin actions/setup-java#1262- Fix import-safe checks when scripts are run from a path with symlinks by
@otaconixin actions/setup-java#1265- Avoid macOS GPG socket overflow on long runner paths by
@brunoborgeswith@Copilotin actions/setup-java#1266- Complete v6 release highlights in README by
@brunoborgesin actions/setup-java#1254- Group and slow routine Dependabot updates by
@brunoborgesin actions/setup-java#1255- chore(deps-dev): update eslint and globals by
@dependabot[bot] in actions/setup-java#1256New Contributors
@otaconixmade their first contribution in actions/setup-java#1265Full Changelog: https://github.com/actions/setup-java/compare/v6.0.0...v6.0.1
v6.0.0
What's Changed
- dist: Migrate from Zulu Discovery API to Azul Metadata API by
@jameswaldin actions/setup-java#1010- feat: add .mvn/extensions.xml to Maven cache key pattern by
@brunoborgeswith@Copilotin actions/setup-java#1041- Migrate to ESM and upgrade dependencies by
@priyagupta108in actions/setup-java#1078- Map Zulu x86 architecture to i686 for Azul Metadata API by
@brunoborgesin actions/setup-java#1079- Rename jdkFile input to jdk-file with deprecated alias by
@brunoborgesin actions/setup-java#1083- Infer distribution from asdf .tool-versions vendor prefix by
@brunoborgesin actions/setup-java#1084- Add Maven compiler problem matcher for javac diagnostics by
@brunoborgesin actions/setup-java#1086- feat: expose cache-primary-key output (#597) by
@brunoborgesin actions/setup-java#1088- docs: clarify V6 ESM migration is not a user-facing breaking change by
@brunoborgesin actions/setup-java#1090- Support multi-field Java versions like
18.0.1.1by@brunoborgesin actions/setup-java#1092- docs: document seeding the Maven cache for plugin dependencies by
@brunoborgesin actions/setup-java#1094- docs: clarify Maven cache paths and key hash inputs by
@brunoborgesin actions/setup-java#1096- Support pinning java-version as "latest" by
@brunoborgesin actions/setup-java#1093- chore(deps-dev): bump eslint from 10.6.0 to 10.7.0 by
@dependabot[bot] in actions/setup-java#1101- chore(deps-dev): bump eslint-plugin-n from 18.2.1 to 18.2.2 by
@dependabot[bot] in actions/setup-java#1103- chore(deps-dev): bump prettier from 3.9.4 to 3.9.5 by
@dependabot[bot] in actions/setup-java#1105- chore(deps): bump actions/checkout from 6 to 7 by
@dependabot[bot] in actions/setup-java#1106- chore(deps-dev): bump
@types/nodefrom 26.1.0 to 26.1.1 by@dependabot[bot] in actions/setup-java#1104- dist: Cover Tencent Kona JDK 25 by
@johnshajiangin actions/setup-java#1108- chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by
@dependabot[bot] in actions/setup-java#1102- Preserve Maven toolchains across repeated setup-java runs (#1099) by
@brunoborgesin actions/setup-java#1111- dist: Support Liberica NIK (#878) by
@asm0deyin actions/setup-java#1112- Fix template injection (zizmor alert #118) in e2e-versions.yml by
@brunoborgeswith@Copilotin actions/setup-java#1114- Fix template injection in e2e-versions.yml (zizmor alert #122) by
@brunoborgeswith@Copilotin actions/setup-java#1120- Disable persisted checkout credentials in e2e workflow by
@brunoborgeswith@Copilotin actions/setup-java#1115- feat: Update recommended configuration for GPG signing by
@wetnebin actions/setup-java#608- Cache Maven and Gradle wrapper distributions separately from the dependency cache by
@brunoborgesin actions/setup-java#1097- Consolidate cache-dependency-path e2e workflow and add maven/sbt coverage by
@brunoborgesin actions/setup-java#1124- Use gpg.passphraseEnvName instead of the deprecated gpg.passphrase server by
@brunoborgesin actions/setup-java#1123- Extract repeated directory-check assertions into check-dir.sh helper by
@brunoborgesin actions/setup-java#1127- Consolidate duplicate jobs in e2e-versions workflow by
@brunoborgesin actions/setup-java#1125- Use YAML anchors to reduce boilerplate in e2e-versions workflow by
@brunoborgesin actions/setup-java#1126
... (truncated)
Commits
de7274fAvoid macOS GPG socket overflow on long runner paths (#1266)134912aFix import-safe checks when scripts are run from a path with symlinks (#1265)0781fc6Fix alpine failures by switching default back to only warn on verification fa...4889c4aFix Temurin EA E2E signature verification (#1260)8fd3240[WIP] Fix failing GitHub Actions job for temurin 17 (#1259)2732291chore(deps-dev): update eslint and globals (#1256)1a8f22bchore: streamline Dependabot updates (#1255)85030b7docs: complete v6 release highlights (#1254)dd06d9cPrepare documentation for v6 release (#1253)59b3450chore(deps): combine open Dependabot npm updates (#1252)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Summary by cubic
Bumps actions/setup-java from 5.7.0 to 6.0.1 in the Oracle CI workflow ahead of the major version change.
- v6 migrates to ESM and switches Zulu API discovery, so pin to the commit SHA is updated accordingly.
- Includes GPG signature verification, Maven toolchain, and cache key improvements.
- The
jdkFileinput was renamed tojdk-file, but the workflow only usesdistributionandjava-version, so no migration needed.