Skip to content

Sync: actions/setup-java@97c5a5e - #19

Open
forklebot[bot] wants to merge 24 commits into
mainfrom
sync/97c5a5e
Open

forklebot[bot] wants to merge 24 commits into
mainfrom
sync/97c5a5e

Conversation

@forklebot

@forklebot forklebot Bot commented Sep 27, 2026

Copy link
Copy Markdown

Sync Upstream Changes

This pull request applies all changes from the upstream repository actions/setup-java up to and including commit 97c5a5e.

This ensures that rmd-actions/setup-java is up to date with the latest changes from upstream.


🤖 This pull request was managed through automation. Please do not modify or close this PR manually.

dependabot Bot and others added 24 commits August 17, 2026 14:47
Bumps [globals](https://github.com/sindresorhus/globals) from 17.8.0 to 17.9.0.
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.8.0...v17.9.0)

---
updated-dependencies:
- dependency-name: globals
  dependency-version: 17.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <[email protected]>
Bumps [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) from 7.7.1 to 7.8.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver)

---
updated-dependencies:
- dependency-name: "@types/semver"
  dependency-version: 7.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [lint-staged](https://github.com/lint-staged/lint-staged) from 17.2.0 to 17.3.0.
- [Release notes](https://github.com/lint-staged/lint-staged/releases)
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)
- [Commits](lint-staged/lint-staged@v17.2.0...v17.3.0)

---
updated-dependencies:
- dependency-name: lint-staged
  dependency-version: 17.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 8.65.0 to 8.67.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.67.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.66.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Add Maven dependency repositories

Co-authored-by: Copilot App <[email protected]>

Copilot-Session: 8897ad63-2d05-4a6d-8ccd-c1155348b59e

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <[email protected]>

---------

Co-authored-by: Copilot Autofix powered by AI <[email protected]>
Copilot-Session: 8897ad63-2d05-4a6d-8ccd-c1155348b59e
* Add Red Hat Build of OpenJDK support

Co-authored-by: Copilot App <[email protected]>

* Fix Red Hat tests on Windows

Co-authored-by: Copilot <[email protected]>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <[email protected]>

* Update compiled Red Hat distribution

Co-authored-by: Copilot <[email protected]>

---------

Co-authored-by: Copilot App <[email protected]>
Co-authored-by: Copilot Autofix powered by AI <[email protected]>
Co-authored-by: Copilot App <[email protected]>

Copilot-Session: d4f1997e-98a5-4dec-b5fc-2f0fcf1abd27
* ci: constrain cache e2e job modes

* ci: constrain cache benchmark job modes
Co-authored-by: Copilot App <[email protected]>

Copilot-Session: 684fec44-989a-4d0e-a42b-79efbda28933
…ns#1246)

* Default signature verification for supported distributions

* Delegate signature defaults to installers
* Combine Dependabot npm updates

Co-authored-by: Copilot App <[email protected]>

* Rebuild action bundles

Co-authored-by: Copilot App <[email protected]>

Copilot-Session: a5d254ad-e29c-4477-ae66-cba6e36d7e03

* Update Licensed cache for XML dependencies

Co-authored-by: Copilot App <[email protected]>

Copilot-Session: a5d254ad-e29c-4477-ae66-cba6e36d7e03

---------

Co-authored-by: Copilot App <[email protected]>
Copilot-Session: a5d254ad-e29c-4477-ae66-cba6e36d7e03
Update public examples and release messaging to make v6 the recommended stable version, include late-cycle v6 features, and increase the JetBrains test timeout to avoid cold-run flakes.

Co-authored-by: Copilot App <[email protected]>

Copilot-Session: 24e3d384-3bda-4ca3-b1fc-f49e340c174f
Co-authored-by: Copilot App <[email protected]>

Copilot-Session: bb8de955-60c9-4a56-a7a2-d0be5d32dbc4
Co-authored-by: Copilot App <[email protected]>

Copilot-Session: 916e0cf3-84f7-43fa-9822-3dac5cf8c5e6
* chore(deps-dev): bump the monthly-npm-updates group with 3 updates

Bumps the monthly-npm-updates group with 3 updates: [eslint](https://github.com/eslint/eslint), [globals](https://github.com/sindresorhus/globals) and [typescript](https://github.com/microsoft/TypeScript).


Updates `eslint` from 10.8.0 to 10.8.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.8.0...v10.8.1)

Updates `globals` from 17.9.0 to 17.11.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.9.0...v17.11.0)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v6.0.3...v7.0.2)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.8.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: monthly-npm-updates
- dependency-name: globals
  dependency-version: 17.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: monthly-npm-updates
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: monthly-npm-updates
...

Signed-off-by: dependabot[bot] <[email protected]>

* fix(deps): keep TypeScript on supported version

TypeScript 7 is outside the peer dependency ranges supported by typescript-eslint and ts-jest, causing npm ci to fail before dist can be rebuilt.

Co-authored-by: Copilot App <[email protected]>

Copilot-Session: f1ca1f37-990b-4feb-9e3d-708cfdccbb6e

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <[email protected]>
Copilot-Session: f1ca1f37-990b-4feb-9e3d-708cfdccbb6e
* Initial plan

* Install GnuPG in Alpine E2E job

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
* Configure Temurin EA E2E signature verification

Co-authored-by: brunoborges <[email protected]>

* Disable signature verification for Temurin EA E2E

Co-authored-by: brunoborges <[email protected]>

* Fix Temurin EA signature verification scope

Co-authored-by: Copilot App <[email protected]>

Copilot-Session: 7ac2d888-2383-49c7-9178-da5455a10034

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: brunoborges <[email protected]>
Co-authored-by: Bruno Borges <[email protected]>
Copilot-Session: 7ac2d888-2383-49c7-9178-da5455a10034
…ation failures. To prevent build failures due to missing GPG or rotated vendor keys. (actions#1262)

Also allow multiple GPG keys to be provided.

Co-authored-by: John <[email protected]>
…actions#1265)

* Fix import-safe checks when scripts are run from a path with symlinks

In v6, setup-java was made "import-safe" to facilitate testing. This
prevents setup-java & cleanup-java from doing anything when their
sources get imported.

This works fine in the general case, but actually invoking the script
(`node setup-java/index.js`) when the path to the script contains
symlinks led to the script incorrectly believing it was imported, and
refuse to actually run.

To fix this, we pass `process.argv[1]` through `fs.realpathSync`, which
resolves symlinks in the path.

Fixes actions#1264

* Preserve import safety when resolving symlink entrypoints

Share entrypoint detection between setup and cleanup, handle non-file entrypoints safely, and normalize both paths for preserved symlinks. Add real-process regression coverage and rebuild action bundles.

Co-authored-by: Copilot App <[email protected]>
Copilot-Session: 831c32f2-a275-45bd-a92b-c387372a1554

* Update js-yaml to fix merge-source denial of service

Bump the transitive development dependency from 3.15.1 to 3.15.2 to address GHSA-2883-xcg3-v3hh without changing dependency ranges or CI checks.

Co-authored-by: Copilot App <[email protected]>
Copilot-Session: 831c32f2-a275-45bd-a92b-c387372a1554

---------

Co-authored-by: Bruno Borges <[email protected]>
Co-authored-by: Copilot App <[email protected]>
Copilot-Session: 831c32f2-a275-45bd-a92b-c387372a1554
* Initial plan

* Fix signature verification GPG homes on long runner paths

* Keep macOS GPG verification homes within socket limits

Use /tmp for signature verification on macOS while preserving runner temp behavior elsewhere. Cover long and canonical OS temp paths and regenerate action bundles.

Co-authored-by: Copilot App <[email protected]>
Copilot-Session: 32d31c8d-ddbc-4e57-a5c3-f70588fef3f3

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: Bruno Borges <[email protected]>
Co-authored-by: Copilot App <[email protected]>
Copilot-Session: 32d31c8d-ddbc-4e57-a5c3-f70588fef3f3
* Initial plan

* Preserve compound Liberica build versions from release metadata

Co-authored-by: brunoborges <[email protected]>

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: brunoborges <[email protected]>
* Document Temurin RISC-V compatibility

Co-Authored-By: multicode <[email protected]>

* Expose RISC-V as a canonical architecture

Co-Authored-By: multicode <[email protected]>

* Support Temurin on Linux RISC-V

Co-Authored-By: multicode <[email protected]>

* Address RISC-V review feedback

Co-Authored-By: multicode <[email protected]>

* Fix casing for RISC-V architecture in tests

Co-authored-by: Copilot Autofix powered by AI <[email protected]>

* Update __tests__/java-platform-contract.test.ts

---------

Co-authored-by: multicode <[email protected]>
Co-authored-by: Copilot Autofix powered by AI <[email protected]>
@wiz-scan-rmd-actions

Copy link
Copy Markdown

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities -
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings 11 Medium 4 Low
Software Management Finding Software Management Findings -
Total 11 Medium 4 Low

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants