Skip to content

chore: bump actions/setup-java from 6.0.1 to 6.1.0 #957

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
thomson-t merged 1 commit into from
Oct 23, 2026
Merged

chore: bump actions/setup-java from 6.0.1 to 6.1.0 #957

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/build-kits.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@
outputs:
matrix: ${{ steps.set.outputs.matrix }}
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

Check warning on line 17 in .github/workflows/build-kits.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

artipacked 

build-kits.yml:17: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
with:
sparse-checkout: kits/matrix.json
sparse-checkout-cone-mode: false
Expand All @@ -27,7 +27,7 @@
name: Publish core SDK to Maven Local
runs-on: ubuntu-latest
steps:
- name: Checkout

Check warning on line 30 in .github/workflows/build-kits.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

artipacked 

build-kits.yml:30: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

- name: Set SDK version
Expand All @@ -36,7 +36,7 @@
echo "ORG_GRADLE_PROJECT_version=$(head -n 1 VERSION)" >> "$GITHUB_ENV"

- name: Install JDK 17
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6
uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6
with:
distribution: zulu
java-version: "17"
Expand Down Expand Up @@ -68,7 +68,7 @@
matrix:
kit: ${{ fromJson(needs.load-matrix.outputs.matrix) }}
steps:
- name: Checkout

Check warning on line 71 in .github/workflows/build-kits.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

artipacked 

build-kits.yml:71: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

- name: Set SDK version
Expand All @@ -77,7 +77,7 @@
echo "ORG_GRADLE_PROJECT_version=$(head -n 1 VERSION)" >> "$GITHUB_ENV"

- name: Install JDK 17
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6
uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6
with:
distribution: zulu
java-version: "17"
Expand Down
12 changes: 6 additions & 6 deletions .github/workflows/daily.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,7 @@
GIT_COMMITTER_NAME: mparticle-automation
GIT_COMMITTER_EMAIL: developers@mparticle.com
steps:
- name: "Clone branch"

Check warning on line 47 in .github/workflows/daily.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

artipacked 

daily.yml:47: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
token: ${{ secrets.MP_SEMANTIC_RELEASE_BOT }}
Expand Down Expand Up @@ -135,7 +135,7 @@
# repository: mparticle/mparticle-android-sdk
# ref: regression/${{ github.run_number }}
# - name: "Install JDK 17"
# uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6
# uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6
# with:
# distribution: "zulu"
# java-version: "17"
Expand Down Expand Up @@ -168,7 +168,7 @@
# repository: mparticle/mparticle-android-sdk
# ref: regression/${{ github.run_number }}
# - name: "Install JDK 17"
# uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6
# uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6
# with:
# distribution: "zulu"
# java-version: "17"
Expand All @@ -191,13 +191,13 @@
runs-on: ubuntu-latest
needs: create-regression-branch
steps:
- name: "Checkout future release branch"

Check warning on line 194 in .github/workflows/daily.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

artipacked 

daily.yml:194: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
repository: mparticle/mparticle-android-sdk
ref: regression/${{ github.run_number }}
- name: "Install JDK 17"
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6
uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6
with:
distribution: "zulu"
java-version: "17"
Expand All @@ -208,7 +208,7 @@
uses: asadmansr/android-test-report-action@384cd31388782f4106dc4a1b37eea2ff02e0aad7 #v1.2.0
if: always()
- name: "Archive Unit Test Results"
uses: actions/upload-artifact@v7

Check failure on line 211 in .github/workflows/daily.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

unpinned-uses 

daily.yml:211: unpinned action reference: action is not pinned to a hash (required by blanket policy)
if: always()
with:
name: "unit-tests-results"
Expand All @@ -220,14 +220,14 @@
runs-on: macos-latest
needs: create-regression-branch
steps:
- name: "Checkout Branch"

Check warning on line 223 in .github/workflows/daily.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

artipacked 

daily.yml:223: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
ref: regression/${{ github.run_number }}
- run: echo "ORG_GRADLE_PROJECT_VERSION=$(head -n 1 VERSION)" >> $GITHUB_ENV
- run: echo "ORG_GRADLE_PROJECT_version=$(head -n 1 VERSION)" >> $GITHUB_ENV
- name: "Install JDK 17"
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6
uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6
with:
distribution: "zulu"
java-version: "17"
Expand All @@ -247,13 +247,13 @@
- name: "Run Isolated Kit Lint (ga4-kit)"
run: ./gradlew -Pmparticle.kit.mparticleFromMavenLocalOnly=true -p kits/ga4/ga4-23 lint
- name: "Archive Test Results"
uses: actions/upload-artifact@v7

Check failure on line 250 in .github/workflows/daily.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

unpinned-uses 

daily.yml:250: unpinned action reference: action is not pinned to a hash (required by blanket policy)
if: always()
with:
name: "core-lint-results"
path: ./**/build/reports/**
- name: "Archive Test Kit Results"
uses: actions/upload-artifact@v7

Check failure on line 256 in .github/workflows/daily.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

unpinned-uses 

daily.yml:256: unpinned action reference: action is not pinned to a hash (required by blanket policy)
if: always()
with:
name: "kit-lint-results"
Expand All @@ -265,14 +265,14 @@
runs-on: macos-latest
needs: create-regression-branch
steps:
- name: "Checkout Branch"

Check warning on line 268 in .github/workflows/daily.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

artipacked 

daily.yml:268: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
ref: regression/${{ github.run_number }}
- run: echo "ORG_GRADLE_PROJECT_VERSION=$(head -n 1 VERSION)" >> $GITHUB_ENV
- run: echo "ORG_GRADLE_PROJECT_version=$(head -n 1 VERSION)" >> $GITHUB_ENV
- name: "Install JDK 17"
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6
uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6
with:
distribution: "zulu"
java-version: "17"
Expand All @@ -292,13 +292,13 @@
- name: "Run Isolated Kit Kotlin Lint (ga4-kit)"
run: ./gradlew -Pmparticle.kit.mparticleFromMavenLocalOnly=true -p kits/ga4/ga4-23 ktlintCheck
- name: "Archive Test Results"
uses: actions/upload-artifact@v7

Check failure on line 295 in .github/workflows/daily.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

unpinned-uses 

daily.yml:295: unpinned action reference: action is not pinned to a hash (required by blanket policy)
if: always()
with:
name: "core-ktlint-results"
path: ./**/build/reports/**
- name: "Archive Test Kit Results"
uses: actions/upload-artifact@v7

Check failure on line 301 in .github/workflows/daily.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

unpinned-uses 

daily.yml:301: unpinned action reference: action is not pinned to a hash (required by blanket policy)
if: always()
with:
name: "kit-ktlint-results"
Expand All @@ -314,7 +314,7 @@
GIT_COMMITTER_NAME: mparticle-automation
GIT_COMMITTER_EMAIL: developers@mparticle.com
steps:
- name: "Checkout future release branch"

Check warning on line 317 in .github/workflows/daily.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

artipacked 

daily.yml:317: credential persistence through GitHub Actions artifacts: does not set persist-credentials: false
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
repository: mparticle/mparticle-android-sdk
Expand All @@ -322,7 +322,7 @@
- run: echo "ORG_GRADLE_PROJECT_VERSION=$(head -n 1 VERSION)" >> $GITHUB_ENV
- run: echo "ORG_GRADLE_PROJECT_version=$(head -n 1 VERSION)" >> $GITHUB_ENV
- name: "Install JDK 17"
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6
uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6
with:
distribution: "zulu"
java-version: "17"
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/instrumented-tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@
- name: "Checkout Branch"
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: "Install JDK 17"
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6
uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6
with:
distribution: "zulu"
java-version: "17"
Expand Down Expand Up @@ -64,7 +64,7 @@
for pkg in com.mparticle.kittests com.mparticle.kits.test com.mparticle.legacyTest com.mparticle.test; do if adb shell pm list packages | grep -q "$pkg"; then adb uninstall "$pkg"; fi; done
./gradlew ${{ inputs.gradle_command }}
- name: "Archive ${{ inputs.display_name }} Results"
uses: actions/upload-artifact@v7

Check failure on line 67 in .github/workflows/instrumented-tests.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

unpinned-uses 

instrumented-tests.yml:67: unpinned action reference: action is not pinned to a hash (required by blanket policy)
if: always()
with:
name: ${{ inputs.artifact_name }}
Expand Down
12 changes: 6 additions & 6 deletions .github/workflows/pull-request.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@
contents: read
pull-requests: read
checks: write
id-token: write

Check failure on line 18 in .github/workflows/pull-request.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

excessive-permissions 

pull-request.yml:18: overly broad permissions: id-token: write is overly broad at the workflow level

jobs:
# Code quality checks
Expand Down Expand Up @@ -86,7 +86,7 @@
- name: "Checkout Branch"
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: "Install JDK 17"
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6
uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6
with:
distribution: "zulu"
java-version: "17"
Expand All @@ -112,7 +112,7 @@
uses: asadmansr/android-test-report-action@384cd31388782f4106dc4a1b37eea2ff02e0aad7 #v1.2.0
if: always()
- name: "Archive Unit Test Results"
uses: actions/upload-artifact@v7

Check failure on line 115 in .github/workflows/pull-request.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

unpinned-uses 

pull-request.yml:115: unpinned action reference: action is not pinned to a hash (required by blanket policy)
if: always()
with:
name: "unit-tests-results"
Expand All @@ -128,7 +128,7 @@
- run: echo "ORG_GRADLE_PROJECT_VERSION=$(head -n 1 VERSION)" >> $GITHUB_ENV
- run: echo "ORG_GRADLE_PROJECT_version=$(head -n 1 VERSION)" >> $GITHUB_ENV
- name: "Install JDK 17"
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6
uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6
with:
distribution: "zulu"
java-version: "17"
Expand All @@ -141,7 +141,7 @@
- name: "Run Android Kit Lint"
run: ./gradlew -c settings-kits.gradle -Pmparticle.kit.mparticleFromMavenLocalOnly=true lint
- name: "Archive Lint Test Results"
uses: actions/upload-artifact@v7

Check failure on line 144 in .github/workflows/pull-request.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

unpinned-uses 

pull-request.yml:144: unpinned action reference: action is not pinned to a hash (required by blanket policy)
if: always()
with:
name: "lint-results"
Expand All @@ -157,7 +157,7 @@
- run: echo "ORG_GRADLE_PROJECT_VERSION=$(head -n 1 VERSION)" >> $GITHUB_ENV
- run: echo "ORG_GRADLE_PROJECT_version=$(head -n 1 VERSION)" >> $GITHUB_ENV
- name: "Install JDK 17"
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6
uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6
with:
distribution: "zulu"
java-version: "17"
Expand Down Expand Up @@ -196,7 +196,7 @@
- run: echo "ORG_GRADLE_PROJECT_VERSION=$(head -n 1 VERSION)" >> $GITHUB_ENV
- run: echo "ORG_GRADLE_PROJECT_version=$(head -n 1 VERSION)" >> $GITHUB_ENV
- name: "Install JDK 17"
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6
uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6
with:
distribution: "zulu"
java-version: "17"
Expand Down Expand Up @@ -238,7 +238,7 @@
with:
persist-credentials: false
- name: "Install JDK 17"
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6
uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6
with:
distribution: "zulu"
java-version: "17"
Expand Down Expand Up @@ -459,7 +459,7 @@
"}" >> base/settings.gradle
fi
- name: "Install JDK 17"
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6
uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6
with:
distribution: "zulu"
java-version: "17"
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release-draft.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@
fetch-depth: 0

- name: Install JDK 17
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6
uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6
with:
distribution: "zulu"
java-version: "17"
Expand Down Expand Up @@ -108,25 +108,25 @@

- name: Save bumped version to file
run: |
echo "${{ steps.compose-version.outputs.new-version }}" > VERSION

Check notice on line 111 in .github/workflows/release-draft.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

template-injection 

release-draft.yml:111: code injection via template expansion: may expand into attacker-controllable code

- name: Publish core to Maven local (smoke test)
run: ./gradlew publishMavenPublicationToMavenLocal -PVERSION=${{ steps.compose-version.outputs.new-version }} --no-build-cache

Check notice on line 114 in .github/workflows/release-draft.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

template-injection 

release-draft.yml:114: code injection via template expansion: may expand into attacker-controllable code

- name: Publish aggregate kits to Maven local (smoke test)
run: ./gradlew publishMavenPublicationToMavenLocal -PVERSION=${{ steps.compose-version.outputs.new-version }} -c settings-kits.gradle --no-build-cache

Check notice on line 117 in .github/workflows/release-draft.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

template-injection 

release-draft.yml:117: code injection via template expansion: may expand into attacker-controllable code

- name: Publish isolated kit to Maven local (urbanairship-20 smoke test)
run: ./gradlew -Pmparticle.kit.mparticleFromMavenLocalOnly=true -p kits/urbanairship/urbanairship-20 -PVERSION=${{ steps.compose-version.outputs.new-version }} publishMavenPublicationToMavenLocal --no-build-cache

Check notice on line 120 in .github/workflows/release-draft.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

template-injection 

release-draft.yml:120: code injection via template expansion: may expand into attacker-controllable code

- name: Publish isolated kit to Maven local (braze-43 smoke test)
run: ./gradlew -Pmparticle.kit.mparticleFromMavenLocalOnly=true -p kits/braze/braze-43 -PVERSION=${{ steps.compose-version.outputs.new-version }} publishMavenPublicationToMavenLocal --no-build-cache

Check notice on line 123 in .github/workflows/release-draft.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

template-injection 

release-draft.yml:123: code injection via template expansion: may expand into attacker-controllable code

- name: Publish isolated kit to Maven local (ga-23 smoke test)
run: ./gradlew -Pmparticle.kit.mparticleFromMavenLocalOnly=true -p kits/ga/ga-23 -PVERSION=${{ steps.compose-version.outputs.new-version }} publishMavenPublicationToMavenLocal --no-build-cache

Check notice on line 126 in .github/workflows/release-draft.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

template-injection 

release-draft.yml:126: code injection via template expansion: may expand into attacker-controllable code

- name: Publish isolated kit to Maven local (ga4-23 smoke test)
run: ./gradlew -Pmparticle.kit.mparticleFromMavenLocalOnly=true -p kits/ga4/ga4-23 -PVERSION=${{ steps.compose-version.outputs.new-version }} publishMavenPublicationToMavenLocal --no-build-cache

Check notice on line 129 in .github/workflows/release-draft.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

template-injection 

release-draft.yml:129: code injection via template expansion: may expand into attacker-controllable code

- name: Generate changelog entry
id: changelog
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release-publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@
changelog_file: CHANGELOG.md

- name: Install JDK 17
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6
uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6
with:
distribution: "zulu"
java-version: "17"
Expand All @@ -63,13 +63,13 @@
uses: gradle/actions/setup-gradle@3f5f9adaf7d9fecd50b5935e54106014257a94e6 # v6.4.0

- name: Publish core to Maven local (required before kits can compile)
run: ./gradlew publishMavenPublicationToMavenLocal -PVERSION=${{ needs.setup-and-version.outputs.final_version }} --no-build-cache

Check notice on line 66 in .github/workflows/release-publish.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

template-injection 

release-publish.yml:66: code injection via template expansion: may expand into attacker-controllable code

- name: Validate aggregate kit publications in Maven local
run: ./gradlew publishMavenPublicationToMavenLocal -PVERSION=${{ needs.setup-and-version.outputs.final_version }} -c settings-kits.gradle --no-build-cache

Check notice on line 69 in .github/workflows/release-publish.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

template-injection 

release-publish.yml:69: code injection via template expansion: may expand into attacker-controllable code

- name: Validate isolated kit publication (urbanairship-20)
run: ./gradlew -Pmparticle.kit.mparticleFromMavenLocalOnly=true -p kits/urbanairship/urbanairship-20 -PVERSION=${{ needs.setup-and-version.outputs.final_version }} publishMavenPublicationToMavenLocal --no-build-cache

Check notice on line 72 in .github/workflows/release-publish.yml

View workflow job for this annotation

GitHub Actions / Scan GitHub Actions workflows

template-injection 

release-publish.yml:72: code injection via template expansion: may expand into attacker-controllable code

- name: Validate isolated kit publication (braze-43)
run: ./gradlew -Pmparticle.kit.mparticleFromMavenLocalOnly=true -p kits/braze/braze-43 -PVERSION=${{ needs.setup-and-version.outputs.final_version }} publishMavenPublicationToMavenLocal --no-build-cache
Expand Down
Loading