Skip to content

Update actions/setup-java to v6 - #8627

Closed
brunoborges wants to merge 1 commit into
google:masterfrom
brunoborges:upgrade-setup-java-v6
Closed

brunoborges wants to merge 1 commit into
google:masterfrom
brunoborges:upgrade-setup-java-v6

Conversation

@brunoborges

Copy link
Copy Markdown

Updates all pinned actions/setup-java references in the CI workflow from v5.6.0 to the v6.0.0 commit.

Validation: verified all active workflow references use setup-java v6 and ran git diff --check.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@google-cla

google-cla Bot commented Aug 24, 2026

Copy link
Copy Markdown

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

@cpovirk

cpovirk commented Aug 24, 2026

Copy link
Copy Markdown
Member

I'm guessing that you're sending us a PR so soon after release because of the changes to automatically verify checksums (including for Temurin, which is what we use). It's possible that you're also making any manual upgrades to the configuration that the upgrade requires, though I can't confirm without the CLA.

Dependabot should propose the basic dependency bump within a month of when our seven-day cooldown expires. I'm open to doing this earlier if you think it's worthwhile to sort through the CLA.

@cpovirk cpovirk added type=other Miscellaneous activities not covered by other type= labels package=general P2 labels Aug 24, 2026
@cpovirk

cpovirk commented Aug 24, 2026

Copy link
Copy Markdown
Member

While touching setup-java, Gemini suggests that we may be able to remove our -ntp flag, since that's nowadays added by default. Apparently that default goes back to 5.5.0.

@brunoborges

Copy link
Copy Markdown
Author

my apologies for this PR. It was only supposed to hit a set of repos with a specific dependabot configuration that would prevent getting the alert of this new release

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

P2 package=general type=other Miscellaneous activities not covered by other type= labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants