GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — Bump the actions-minor group across 1 directory with 3 updates by dependabot[bot] · Pull Request #4261 · github/codeql-action

Conversation

dependabot Bot commented on behalf of github Oct 21, 2026

Copy link

Copy Markdown

Contributor

Bumps the actions-minor group with 3 updates in the /.github/workflows directory: actions/setup-java, ruby/setup-ruby and actions/create-github-app-token.

Updates actions/setup-java from 6.0.1 to 6.1.0

Release notes

Sourced from actions/setup-java's releases.

v6.1.0

What's Changed

Preserve compound Liberica build versions from .sdkmanrc by @brunoborges with @Copilot in actions/setup-java#1268

Support Temurin on Linux RISC-V by @yawkat in actions/setup-java#1269

Stop GPG agent before removing signature-verification home by @brunoborges with @Copilot in actions/setup-java#1273

Prefer Zulu 4-segment hotfix builds when resolving version ranges by @brunoborges in actions/setup-java#1278

Support Temurin JEP 322 patch versions like 26.0.2.1+1 by @brunoborges in actions/setup-java#1279

chore(deps): bump undici from 6.28.0 to 6.29.0 by @dependabot[bot] in actions/setup-java#1274

chore(deps): bump the monthly-npm-updates group with 13 updates by @dependabot[bot] in actions/setup-java#1276

feat: support Maven server credential origins by @YunaBraska in actions/setup-java#1282

Support Maven plugin repositories in generated settings.xml by @brunoborges in actions/setup-java#1286

New Contributors

@yawkat made their first contribution in actions/setup-java#1269

@YunaBraska made their first contribution in actions/setup-java#1282

Full Changelog: actions/setup-java@v6.0.1...v6.1.0

Commits

b843ebf Support Maven plugin repositories in generated settings.xml (#1286)
2a69be2 feat: support Maven server credential origins (#1282)
d0e6e4d chore(deps): bump the monthly-npm-updates group with 13 updates (#1276)
b24925b chore(deps): bump undici from 6.28.0 to 6.29.0 (#1274)
47b3648 Support Temurin JEP 322 patch versions like 26.0.2.1+1 (#1270) (#1279)
74920aa Prefer Zulu 4-segment hotfix builds when resolving version ranges (#1278)
a78ec39 Stop GPG agent before removing signature-verification home (#1273)
97c5a5e Support Temurin on Linux RISC-V (#1269)
1aa87b6 Preserve compound Liberica build versions from .sdkmanrc (#1268)
See full diff in compare view

Updates ruby/setup-ruby from 1.327.0 to 1.329.0

Release notes

Sourced from ruby/setup-ruby's releases.

v1.329.0

What's Changed

Add ruby-4.1.0-preview1 by @ruby-builder-bot in ruby/setup-ruby#948

Full Changelog: ruby/setup-ruby@v1.328.0...v1.329.0

v1.328.0

What's Changed

Fix windows msys1 setup by @ntkme in ruby/setup-ruby#947

Full Changelog: ruby/setup-ruby@v1.327.0...v1.328.0

Commits

651ff0d Add ruby-4.1.0-preview1
e81a8fa Fix windows msys1 setup
See full diff in compare view

Updates actions/create-github-app-token from 3.2.0 to 3.3.0

Release notes

Sourced from actions/create-github-app-token's releases.

v3.3.0

3.3.0 (2026-10-12)

Features

update permission inputs (#399) (a47236f)

Bug Fixes

deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)

deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

Changelog

Sourced from actions/create-github-app-token's changelog.

Changelog

3.3.0 (2026-10-12)

Features

update permission inputs (#399) (a47236f)

Bug Fixes

deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)

deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

3.2.0 (2026-05-12)

Features

add support for enterprise-level GitHub Apps (#263) (952a2a7)

support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

deps: bump @actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)

validate private-key input (#376) (f24bbd8)

Commits

64ab729 chore(main): release 3.3.0 (#402)
f3a828e ci: create signed dist commits in release workflow (#404)
655017f docs: clarify when owner grants access to all repositories (#378)
12461a3 fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)
a47236f feat: update permission inputs (#399)
a69c19d fix(deps): bump the production-dependencies group across 1 directory with 3 u...
d5cb7ae build(deps): bump actions/checkout from 6 to 7 (#384)
575da86 build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...
e85f677 test: omit stack traces from snapshots (#401)
9419396 build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions


          Bump the actions-minor group across 1 directory with 3 updates

ec3f865

Bumps the actions-minor group with 3 updates in the /.github/workflows directory: [actions/setup-java](https://github.com/actions/setup-java), [ruby/setup-ruby](https://github.com/ruby/setup-ruby) and [actions/create-github-app-token](https://github.com/actions/create-github-app-token).


Updates `actions/setup-java` from 6.0.1 to 6.1.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@de7274f...b843ebf)

Updates `ruby/setup-ruby` from 1.327.0 to 1.329.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@1459426...651ff0d)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@bcd2ba4...64ab729)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: ruby/setup-ruby
  dependency-version: 1.329.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot requested a review from a team as a code owner

October 21, 2026 17:56

dependabot Bot added the Rebuild Re-transpile JS & re-generate workflows label

Oct 21, 2026

github-actions Bot added size/XS Should be very easy to review and removed Rebuild Re-transpile JS & re-generate workflows labels

Oct 21, 2026


          Rebuild

fb5d868

github-actions Bot commented Oct 21, 2026

Copy link

Copy Markdown

Contributor

Pushed a commit to rebuild the Action. Please approve running the PR checks.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.


          Trigger workflows

c758339

mbg approved these changes

Oct 22, 2026

View reviewed changes

mbg added this pull request to the merge queue

Oct 22, 2026

Merged via the queue into main with commit e0b72fe

Oct 22, 2026

226 checks passed

Uh oh!

There was an error while loading. Please reload this page.

mbg deleted the dependabot/github_actions/dot-github/workflows/actions-minor-4a8da92e94 branch

October 22, 2026 10:50

This was referenced Nov 3, 2026

Merge main into releases/v4 #4286

Merged

Merge releases/v4 into releases/v3 #4291

Merged

Reviewers

mbg

mbg approved these changes

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

size/XS

Should be very easy to review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

1 participant

Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.