fix(deps): update all dependencies

renovate-bot commented

2026-09-23 01:08:30 +00:00

Member

This PR contains the following updates:

Package	Type	Update	Change
https://github.com/actions/setup-java	action	major	`v5` → `v6`
org.jooq:jooq-codegen-maven (source)	build	patch	`3.21.8` → `3.21.9`
org.flywaydb:flyway-database-postgresql	build	minor	`13.7.0` → `13.8.0`
org.flywaydb:flyway-maven-plugin	build	minor	`13.7.0` → `13.8.0`
tools.jackson:jackson-bom	import	patch	`3.2.2` → `3.2.3`
org.jooq:jooq-meta (source)	compile	patch	`3.21.8` → `3.21.9`
org.jooq:jooq-kotlin (source)	compile	patch	`3.21.8` → `3.21.9`
org.jooq:jooq-codegen (source)	compile	patch	`3.21.8` → `3.21.9`
org.jooq:jooq (source)	compile	patch	`3.21.8` → `3.21.9`

Release Notes

actions/setup-java (https://github.com/actions/setup-java)

`v6.0.1`

Compare Source

What's Changed

Fix failing GitHub Actions job for temurin 17 by @brunoborges with @Copilot in #1259
Fix Temurin EA E2E signature verification by @brunoborges with @Copilot in #1260
Fix Alpine GPG verification failures and support multiple keys by @brunoborges in #1262
Fix import-safe checks when scripts are run from a path with symlinks by @otaconix in #1265
Avoid macOS GPG socket overflow on long runner paths by @brunoborges with @Copilot in #1266
Complete v6 release highlights in README by @brunoborges in #1254
Group and slow routine Dependabot updates by @brunoborges in #1255
chore(deps-dev): update eslint and globals by @dependabot[bot] in #1256

New Contributors

@otaconix made their first contribution in #1265

Full Changelog: https://github.com/actions/setup-java/compare/v6.0.0...v6.0.1

`v6.0.0`

Compare Source

What's Changed

dist: Migrate from Zulu Discovery API to Azul Metadata API by @jameswald in #1010
feat: add .mvn/extensions.xml to Maven cache key pattern by @brunoborges with @Copilot in #1041
Migrate to ESM and upgrade dependencies by @priyagupta108 in #1078
Map Zulu x86 architecture to i686 for Azul Metadata API by @brunoborges in #1079
Rename jdkFile input to jdk-file with deprecated alias by @brunoborges in #1083
Infer distribution from asdf .tool-versions vendor prefix by @brunoborges in #1084
Add Maven compiler problem matcher for javac diagnostics by @brunoborges in #1086
feat: expose cache-primary-key output (#597) by @brunoborges in #1088
docs: clarify V6 ESM migration is not a user-facing breaking change by @brunoborges in #1090
Support multi-field Java versions like 18.0.1.1 by @brunoborges in #1092
docs: document seeding the Maven cache for plugin dependencies by @brunoborges in #1094
docs: clarify Maven cache paths and key hash inputs by @brunoborges in #1096
Support pinning java-version as "latest" by @brunoborges in #1093
chore(deps-dev): bump eslint from 10.6.0 to 10.7.0 by @dependabot[bot] in #1101
chore(deps-dev): bump eslint-plugin-n from 18.2.1 to 18.2.2 by @dependabot[bot] in #1103
chore(deps-dev): bump prettier from 3.9.4 to 3.9.5 by @dependabot[bot] in #1105
chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #1106
chore(deps-dev): bump @types/node from 26.1.0 to 26.1.1 by @dependabot[bot] in #1104
dist: Cover Tencent Kona JDK 25 by @johnshajiang in #1108
chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by @dependabot[bot] in #1102
Preserve Maven toolchains across repeated setup-java runs (#1099) by @brunoborges in #1111
dist: Support Liberica NIK (#878) by @asm0dey in #1112
Fix template injection (zizmor alert #118) in e2e-versions.yml by @brunoborges with @Copilot in #1114
Fix template injection in e2e-versions.yml (zizmor alert #122) by @brunoborges with @Copilot in #1120
Disable persisted checkout credentials in e2e workflow by @brunoborges with @Copilot in #1115
feat: Update recommended configuration for GPG signing by @wetneb in #608
Cache Maven and Gradle wrapper distributions separately from the dependency cache by @brunoborges in #1097
Consolidate cache-dependency-path e2e workflow and add maven/sbt coverage by @brunoborges in #1124
Use gpg.passphraseEnvName instead of the deprecated gpg.passphrase server by @brunoborges in #1123
Extract repeated directory-check assertions into check-dir.sh helper by @brunoborges in #1127
Consolidate duplicate jobs in e2e-versions workflow by @brunoborges in #1125
Use YAML anchors to reduce boilerplate in e2e-versions workflow by @brunoborges in #1126
Updated msft json for now by @jmjaffe37 in #1129
Document missing action inputs in README by @brunoborges in #1130
chore(deps): bump @actions/cache to 6.2.0 by @philip-gai in #1128
Add an option to disable Java problem matchers by @brunoborges in #1133
docs: update setup-java examples by @HarithaVattikuti in #1131
Clarify credential environment variable inputs by @brunoborges in #1134
chore(deps-dev): bump @typescript-eslint/eslint-plugin from 8.63.0 to 8.64.0 by @dependabot[bot] in #1135
chore(deps): bump actions/setup-python from 6 to 7 by @dependabot[bot] in #1143
chore(deps): bump fast-xml-parser from 5.9.3 to 5.10.1 by @dependabot[bot] in #1142
chore(deps-dev): bump @typescript-eslint/parser from 8.64.0 to 8.65.0 by @dependabot[bot] in #1138
chore(deps-dev): bump lint-staged from 17.0.8 to 17.2.0 by @dependabot[bot] in #1136
chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by @dependabot[bot] in #1137
chore(deps): fix npm audited vulnerabilities by @mhoffrog in #1140
Fix formatting issues in README.md by @brunoborges in #1144
Remediate npm audit findings and rebuild distributions by @brunoborges with @Copilot in #1145
Set GRAALVM_HOME for GraalVM distributions by @brunoborges with @Copilot in #1146
Add force-download option for reproducible JDK builds by @brunoborges with @Copilot in #1148
Add OpenJDK distribution by @brunoborges with @Copilot in #1147
Support Temurin JDKs with JMOD files by @brunoborges with @Copilot in #1149
Document Java package compatibility by distribution by @brunoborges in #1152
Fix caching when wrapper distributions are absent by @brunoborges in #1151
Reject invalid boolean input values by @brunoborges in #1160
Fail on mismatched Maven toolchain ID counts by @brunoborges in #1161
Consolidate JDK metadata retry handling by @brunoborges in #1162
Add direct setup orchestration tests by @brunoborges in #1163
Harden java-package validation across distributions by @brunoborges in #1165
Verify JDK downloads with vendor checksums by @brunoborges in #1167
Reduce change-time Java E2E matrix by @brunoborges in #1170
Add read-only mode for dependency caching by @brunoborges in #1169
Test Temurin 25 on hosted runners by @brunoborges in #1172
Restore dependency and wrapper caches concurrently by @brunoborges in #1174
Add dependency cache path overrides by @brunoborges in #1175
Centralize OS/architecture capability validation by @brunoborges in #1178
Optimize Temurin tool-cache fast path with lazy loading by @brunoborges in #1179
Optimize Maven configuration warm path by @brunoborges in #1182
Fix macOS e2e workflow assertions by @brunoborges in #1184
Remove legacy Adopt distributions in v6 by @brunoborges with @Copilot in #1185
chore(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #1190
Reimagine setup-java README by @brunoborges in #1192
Document deprecation of setup-java v1 through v4 by @brunoborges in #1198
Update setup-java README action from v6 to v5 by @brunoborges in #1199
Highlight major changes in setup-java v5 by @brunoborges in #1200
Highlight major changes in setup-java v6 by @brunoborges in #1203
chore(deps): bump brace-expansion from 5.0.8 to 5.0.9 by @dependabot[bot] in #1202
Add conditional JDK caching by @brunoborges in #1201
docs: fix README and advanced usage inconsistencies with actual behavior by @brunoborges in #1204
Move the extracted JDK into the tool-cache instead of copying it by @brunoborges in #1206
docs: drop benchmark numbers from the JDK caching section by @brunoborges in #1205
docs: correct the mvn-toolchain-id default in README and action.yml by @brunoborges in #1207
Cache resolved JDK releases to remove the vendor API from warm jobs by @brunoborges in #1208
Report concrete versions for floating Oracle JDK downloads by @jdubois in #1213
Import Maven signing keys into an isolated GPG home by @jdubois in #1214
Reuse the tool cache for floating versions the resolution cache identified by @brunoborges in #1219
Fix JetBrains Runtime release pagination by @jdubois in #1218
Fix JDK resolution cache platform identity by @jdubois in #1210
fix: select musl JDK artifacts on Alpine for Dragonwell, Corretto, Zulu and Liberica by @brunoborges in #1220
Fix SapMachine early-access filtering by @jdubois in #1217
Fix JetBrains GitHub token resolution by @jdubois in #1224
Include gradle.properties in Gradle cache key by @jdubois in #1225
Handle early dependency cache failures during Java setup by @jdubois in #1226
Fix js-yaml audit vulnerability by @brunoborges in #1228
Fix failing GitHub Actions job for graalvm 24-ea by @brunoborges with @Copilot in #1227
Update setup-java for Microsoft's Build of OpenJDK: now pointing task to CDN that is always up-to-date by @jmjaffe37 in #1236
chore(deps-dev): bump globals from 17.8.0 to 17.9.0 by @dependabot[bot] in #1233
chore(deps-dev): bump @types/semver from 7.7.1 to 7.8.0 by @dependabot[bot] in #1229
chore(deps-dev): bump lint-staged from 17.2.0 to 17.3.0 by @dependabot[bot] in #1231
chore(deps-dev): bump @typescript-eslint/eslint-plugin from 8.65.0 to 8.67.0 by @dependabot[bot] in #1232
Test JDK 26 installation from SDKMAN by @brunoborges in #1238
Add support for multiple Maven servers by @brunoborges in #1239
Add Maven dependency-resolution repositories by @brunoborges in #1240
Add Red Hat Build of OpenJDK support by @brunoborges in #1241
Fix Oracle macOS E2E version check by @brunoborges in #1243
ci: constrain cache e2e job modes by @philip-gai in #1244
Expose contributing guide to GitHub by @brunoborges in #1245
Set default signature verification for supported distributions by @johnoliver in #1246
chore(deps): combine open Dependabot npm updates by @brunoborges in #1252
Prepare documentation for v6 release by @brunoborges in #1253

New Contributors

@jameswald made their first contribution in #1010
@asm0dey made their first contribution in #1112
@wetneb made their first contribution in #608
@philip-gai made their first contribution in #1128

Full Changelog: https://github.com/actions/setup-java/compare/v5.7.0...v6.0.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---|---|---| | [https://github.com/actions/setup-java](https://github.com/actions/setup-java) | action | major | `v5` → `v6` | ![age](https://developer.mend.io/api/mc/badges/age/github-tags/actions%2fsetup-java/v6.0.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/actions%2fsetup-java/v5.7.0/v6.0.1?slim=true) | | [org.jooq:jooq-codegen-maven](https://www.jooq.org) ([source](https://github.com/jOOQ/jOOQ)) | build | patch | `3.21.8` → `3.21.9` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.jooq:jooq-codegen-maven/3.21.9?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.jooq:jooq-codegen-maven/3.21.8/3.21.9?slim=true) | | [org.flywaydb:flyway-database-postgresql](https://flywaydb.org) | build | minor | `13.7.0` → `13.8.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.flywaydb:flyway-database-postgresql/13.8.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.flywaydb:flyway-database-postgresql/13.7.0/13.8.0?slim=true) | | [org.flywaydb:flyway-maven-plugin](https://flywaydb.org) | build | minor | `13.7.0` → `13.8.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.flywaydb:flyway-maven-plugin/13.8.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.flywaydb:flyway-maven-plugin/13.7.0/13.8.0?slim=true) | | [tools.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | import | patch | `3.2.2` → `3.2.3` | ![age](https://developer.mend.io/api/mc/badges/age/maven/tools.jackson:jackson-bom/3.2.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/tools.jackson:jackson-bom/3.2.2/3.2.3?slim=true) | | [org.jooq:jooq-meta](https://www.jooq.org) ([source](https://github.com/jOOQ/jOOQ)) | compile | patch | `3.21.8` → `3.21.9` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.jooq:jooq-meta/3.21.9?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.jooq:jooq-meta/3.21.8/3.21.9?slim=true) | | [org.jooq:jooq-kotlin](https://www.jooq.org) ([source](https://github.com/jOOQ/jOOQ)) | compile | patch | `3.21.8` → `3.21.9` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.jooq:jooq-kotlin/3.21.9?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.jooq:jooq-kotlin/3.21.8/3.21.9?slim=true) | | [org.jooq:jooq-codegen](https://www.jooq.org) ([source](https://github.com/jOOQ/jOOQ)) | compile | patch | `3.21.8` → `3.21.9` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.jooq:jooq-codegen/3.21.9?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.jooq:jooq-codegen/3.21.8/3.21.9?slim=true) | | [org.jooq:jooq](https://www.jooq.org) ([source](https://github.com/jOOQ/jOOQ)) | compile | patch | `3.21.8` → `3.21.9` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.jooq:jooq/3.21.9?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.jooq:jooq/3.21.8/3.21.9?slim=true) | --- ### Release Notes <details> <summary>actions/setup-java (https://github.com/actions/setup-java)</summary> ### [`v6.0.1`](https://github.com/actions/setup-java/releases/tag/v6.0.1) [Compare Source](https://github.com/actions/setup-java/compare/v6.0.0...v6.0.1) ##### What's Changed - Fix failing GitHub Actions job for temurin 17 by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1259](https://github.com/actions/setup-java/pull/1259) - Fix Temurin EA E2E signature verification by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1260](https://github.com/actions/setup-java/pull/1260) - Fix Alpine GPG verification failures and support multiple keys by [@brunoborges](https://github.com/brunoborges) in [#1262](https://github.com/actions/setup-java/pull/1262) - Fix import-safe checks when scripts are run from a path with symlinks by [@otaconix](https://github.com/otaconix) in [#1265](https://github.com/actions/setup-java/pull/1265) - Avoid macOS GPG socket overflow on long runner paths by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1266](https://github.com/actions/setup-java/pull/1266) - Complete v6 release highlights in README by [@brunoborges](https://github.com/brunoborges) in [#1254](https://github.com/actions/setup-java/pull/1254) - Group and slow routine Dependabot updates by [@brunoborges](https://github.com/brunoborges) in [#1255](https://github.com/actions/setup-java/pull/1255) - chore(deps-dev): update eslint and globals by [@dependabot](https://github.com/dependabot)\[bot] in [#1256](https://github.com/actions/setup-java/pull/1256) ##### New Contributors - [@otaconix](https://github.com/otaconix) made their first contribution in [#1265](https://github.com/actions/setup-java/pull/1265) **Full Changelog**: <https://github.com/actions/setup-java/compare/v6.0.0...v6.0.1> ### [`v6.0.0`](https://github.com/actions/setup-java/releases/tag/v6.0.0) [Compare Source](https://github.com/actions/setup-java/compare/v5.7.0...v6.0.0) ##### What's Changed - dist: Migrate from Zulu Discovery API to Azul Metadata API by [@jameswald](https://github.com/jameswald) in [#1010](https://github.com/actions/setup-java/pull/1010) - feat: add .mvn/extensions.xml to Maven cache key pattern by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1041](https://github.com/actions/setup-java/pull/1041) - Migrate to ESM and upgrade dependencies by [@priyagupta108](https://github.com/priyagupta108) in [#1078](https://github.com/actions/setup-java/pull/1078) - Map Zulu x86 architecture to i686 for Azul Metadata API by [@brunoborges](https://github.com/brunoborges) in [#1079](https://github.com/actions/setup-java/pull/1079) - Rename jdkFile input to jdk-file with deprecated alias by [@brunoborges](https://github.com/brunoborges) in [#1083](https://github.com/actions/setup-java/pull/1083) - Infer distribution from asdf .tool-versions vendor prefix by [@brunoborges](https://github.com/brunoborges) in [#1084](https://github.com/actions/setup-java/pull/1084) - Add Maven compiler problem matcher for javac diagnostics by [@brunoborges](https://github.com/brunoborges) in [#1086](https://github.com/actions/setup-java/pull/1086) - feat: expose cache-primary-key output ([#597](https://github.com/actions/setup-java/issues/597)) by [@brunoborges](https://github.com/brunoborges) in [#1088](https://github.com/actions/setup-java/pull/1088) - docs: clarify V6 ESM migration is not a user-facing breaking change by [@brunoborges](https://github.com/brunoborges) in [#1090](https://github.com/actions/setup-java/pull/1090) - Support multi-field Java versions like `18.0.1.1` by [@brunoborges](https://github.com/brunoborges) in [#1092](https://github.com/actions/setup-java/pull/1092) - docs: document seeding the Maven cache for plugin dependencies by [@brunoborges](https://github.com/brunoborges) in [#1094](https://github.com/actions/setup-java/pull/1094) - docs: clarify Maven cache paths and key hash inputs by [@brunoborges](https://github.com/brunoborges) in [#1096](https://github.com/actions/setup-java/pull/1096) - Support pinning java-version as "latest" by [@brunoborges](https://github.com/brunoborges) in [#1093](https://github.com/actions/setup-java/pull/1093) - chore(deps-dev): bump eslint from 10.6.0 to 10.7.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1101](https://github.com/actions/setup-java/pull/1101) - chore(deps-dev): bump eslint-plugin-n from 18.2.1 to 18.2.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1103](https://github.com/actions/setup-java/pull/1103) - chore(deps-dev): bump prettier from 3.9.4 to 3.9.5 by [@dependabot](https://github.com/dependabot)\[bot] in [#1105](https://github.com/actions/setup-java/pull/1105) - chore(deps): bump actions/checkout from 6 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#1106](https://github.com/actions/setup-java/pull/1106) - chore(deps-dev): bump [@types/node](https://github.com/types/node) from 26.1.0 to 26.1.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#1104](https://github.com/actions/setup-java/pull/1104) - dist: Cover Tencent Kona JDK 25 by [@johnshajiang](https://github.com/johnshajiang) in [#1108](https://github.com/actions/setup-java/pull/1108) - chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1102](https://github.com/actions/setup-java/pull/1102) - Preserve Maven toolchains across repeated setup-java runs ([#1099](https://github.com/actions/setup-java/issues/1099)) by [@brunoborges](https://github.com/brunoborges) in [#1111](https://github.com/actions/setup-java/pull/1111) - dist: Support Liberica NIK ([#878](https://github.com/actions/setup-java/issues/878)) by [@asm0dey](https://github.com/asm0dey) in [#1112](https://github.com/actions/setup-java/pull/1112) - Fix template injection (zizmor alert [#118](https://github.com/actions/setup-java/issues/118)) in e2e-versions.yml by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1114](https://github.com/actions/setup-java/pull/1114) - Fix template injection in e2e-versions.yml (zizmor alert [#122](https://github.com/actions/setup-java/issues/122)) by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1120](https://github.com/actions/setup-java/pull/1120) - Disable persisted checkout credentials in e2e workflow by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1115](https://github.com/actions/setup-java/pull/1115) - feat: Update recommended configuration for GPG signing by [@wetneb](https://github.com/wetneb) in [#608](https://github.com/actions/setup-java/pull/608) - Cache Maven and Gradle wrapper distributions separately from the dependency cache by [@brunoborges](https://github.com/brunoborges) in [#1097](https://github.com/actions/setup-java/pull/1097) - Consolidate cache-dependency-path e2e workflow and add maven/sbt coverage by [@brunoborges](https://github.com/brunoborges) in [#1124](https://github.com/actions/setup-java/pull/1124) - Use gpg.passphraseEnvName instead of the deprecated gpg.passphrase server by [@brunoborges](https://github.com/brunoborges) in [#1123](https://github.com/actions/setup-java/pull/1123) - Extract repeated directory-check assertions into check-dir.sh helper by [@brunoborges](https://github.com/brunoborges) in [#1127](https://github.com/actions/setup-java/pull/1127) - Consolidate duplicate jobs in e2e-versions workflow by [@brunoborges](https://github.com/brunoborges) in [#1125](https://github.com/actions/setup-java/pull/1125) - Use YAML anchors to reduce boilerplate in e2e-versions workflow by [@brunoborges](https://github.com/brunoborges) in [#1126](https://github.com/actions/setup-java/pull/1126) - Updated msft json for now by [@jmjaffe37](https://github.com/jmjaffe37) in [#1129](https://github.com/actions/setup-java/pull/1129) - Document missing action inputs in README by [@brunoborges](https://github.com/brunoborges) in [#1130](https://github.com/actions/setup-java/pull/1130) - chore(deps): bump [@actions/cache](https://github.com/actions/cache) to 6.2.0 by [@philip-gai](https://github.com/philip-gai) in [#1128](https://github.com/actions/setup-java/pull/1128) - Add an option to disable Java problem matchers by [@brunoborges](https://github.com/brunoborges) in [#1133](https://github.com/actions/setup-java/pull/1133) - docs: update setup-java examples by [@HarithaVattikuti](https://github.com/HarithaVattikuti) in [#1131](https://github.com/actions/setup-java/pull/1131) - Clarify credential environment variable inputs by [@brunoborges](https://github.com/brunoborges) in [#1134](https://github.com/actions/setup-java/pull/1134) - chore(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.63.0 to 8.64.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1135](https://github.com/actions/setup-java/pull/1135) - chore(deps): bump actions/setup-python from 6 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#1143](https://github.com/actions/setup-java/pull/1143) - chore(deps): bump fast-xml-parser from 5.9.3 to 5.10.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#1142](https://github.com/actions/setup-java/pull/1142) - chore(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 8.64.0 to 8.65.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1138](https://github.com/actions/setup-java/pull/1138) - chore(deps-dev): bump lint-staged from 17.0.8 to 17.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1136](https://github.com/actions/setup-java/pull/1136) - chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1137](https://github.com/actions/setup-java/pull/1137) - chore(deps): fix npm audited vulnerabilities by [@mhoffrog](https://github.com/mhoffrog) in [#1140](https://github.com/actions/setup-java/pull/1140) - Fix formatting issues in README.md by [@brunoborges](https://github.com/brunoborges) in [#1144](https://github.com/actions/setup-java/pull/1144) - Remediate npm audit findings and rebuild distributions by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1145](https://github.com/actions/setup-java/pull/1145) - Set GRAALVM\_HOME for GraalVM distributions by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1146](https://github.com/actions/setup-java/pull/1146) - Add force-download option for reproducible JDK builds by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1148](https://github.com/actions/setup-java/pull/1148) - Add OpenJDK distribution by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1147](https://github.com/actions/setup-java/pull/1147) - Support Temurin JDKs with JMOD files by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1149](https://github.com/actions/setup-java/pull/1149) - Document Java package compatibility by distribution by [@brunoborges](https://github.com/brunoborges) in [#1152](https://github.com/actions/setup-java/pull/1152) - Fix caching when wrapper distributions are absent by [@brunoborges](https://github.com/brunoborges) in [#1151](https://github.com/actions/setup-java/pull/1151) - Reject invalid boolean input values by [@brunoborges](https://github.com/brunoborges) in [#1160](https://github.com/actions/setup-java/pull/1160) - Fail on mismatched Maven toolchain ID counts by [@brunoborges](https://github.com/brunoborges) in [#1161](https://github.com/actions/setup-java/pull/1161) - Consolidate JDK metadata retry handling by [@brunoborges](https://github.com/brunoborges) in [#1162](https://github.com/actions/setup-java/pull/1162) - Add direct setup orchestration tests by [@brunoborges](https://github.com/brunoborges) in [#1163](https://github.com/actions/setup-java/pull/1163) - Harden java-package validation across distributions by [@brunoborges](https://github.com/brunoborges) in [#1165](https://github.com/actions/setup-java/pull/1165) - Verify JDK downloads with vendor checksums by [@brunoborges](https://github.com/brunoborges) in [#1167](https://github.com/actions/setup-java/pull/1167) - Reduce change-time Java E2E matrix by [@brunoborges](https://github.com/brunoborges) in [#1170](https://github.com/actions/setup-java/pull/1170) - Add read-only mode for dependency caching by [@brunoborges](https://github.com/brunoborges) in [#1169](https://github.com/actions/setup-java/pull/1169) - Test Temurin 25 on hosted runners by [@brunoborges](https://github.com/brunoborges) in [#1172](https://github.com/actions/setup-java/pull/1172) - Restore dependency and wrapper caches concurrently by [@brunoborges](https://github.com/brunoborges) in [#1174](https://github.com/actions/setup-java/pull/1174) - Add dependency cache path overrides by [@brunoborges](https://github.com/brunoborges) in [#1175](https://github.com/actions/setup-java/pull/1175) - Centralize OS/architecture capability validation by [@brunoborges](https://github.com/brunoborges) in [#1178](https://github.com/actions/setup-java/pull/1178) - Optimize Temurin tool-cache fast path with lazy loading by [@brunoborges](https://github.com/brunoborges) in [#1179](https://github.com/actions/setup-java/pull/1179) - Optimize Maven configuration warm path by [@brunoborges](https://github.com/brunoborges) in [#1182](https://github.com/actions/setup-java/pull/1182) - Fix macOS e2e workflow assertions by [@brunoborges](https://github.com/brunoborges) in [#1184](https://github.com/actions/setup-java/pull/1184) - Remove legacy Adopt distributions in v6 by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1185](https://github.com/actions/setup-java/pull/1185) - chore(deps): bump actions/upload-artifact from 6 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#1190](https://github.com/actions/setup-java/pull/1190) - Reimagine setup-java README by [@brunoborges](https://github.com/brunoborges) in [#1192](https://github.com/actions/setup-java/pull/1192) - Document deprecation of setup-java v1 through v4 by [@brunoborges](https://github.com/brunoborges) in [#1198](https://github.com/actions/setup-java/pull/1198) - Update setup-java README action from v6 to v5 by [@brunoborges](https://github.com/brunoborges) in [#1199](https://github.com/actions/setup-java/pull/1199) - Highlight major changes in setup-java v5 by [@brunoborges](https://github.com/brunoborges) in [#1200](https://github.com/actions/setup-java/pull/1200) - Highlight major changes in setup-java v6 by [@brunoborges](https://github.com/brunoborges) in [#1203](https://github.com/actions/setup-java/pull/1203) - chore(deps): bump brace-expansion from 5.0.8 to 5.0.9 by [@dependabot](https://github.com/dependabot)\[bot] in [#1202](https://github.com/actions/setup-java/pull/1202) - Add conditional JDK caching by [@brunoborges](https://github.com/brunoborges) in [#1201](https://github.com/actions/setup-java/pull/1201) - docs: fix README and advanced usage inconsistencies with actual behavior by [@brunoborges](https://github.com/brunoborges) in [#1204](https://github.com/actions/setup-java/pull/1204) - Move the extracted JDK into the tool-cache instead of copying it by [@brunoborges](https://github.com/brunoborges) in [#1206](https://github.com/actions/setup-java/pull/1206) - docs: drop benchmark numbers from the JDK caching section by [@brunoborges](https://github.com/brunoborges) in [#1205](https://github.com/actions/setup-java/pull/1205) - docs: correct the mvn-toolchain-id default in README and action.yml by [@brunoborges](https://github.com/brunoborges) in [#1207](https://github.com/actions/setup-java/pull/1207) - Cache resolved JDK releases to remove the vendor API from warm jobs by [@brunoborges](https://github.com/brunoborges) in [#1208](https://github.com/actions/setup-java/pull/1208) - Report concrete versions for floating Oracle JDK downloads by [@jdubois](https://github.com/jdubois) in [#1213](https://github.com/actions/setup-java/pull/1213) - Import Maven signing keys into an isolated GPG home by [@jdubois](https://github.com/jdubois) in [#1214](https://github.com/actions/setup-java/pull/1214) - Reuse the tool cache for floating versions the resolution cache identified by [@brunoborges](https://github.com/brunoborges) in [#1219](https://github.com/actions/setup-java/pull/1219) - Fix JetBrains Runtime release pagination by [@jdubois](https://github.com/jdubois) in [#1218](https://github.com/actions/setup-java/pull/1218) - Fix JDK resolution cache platform identity by [@jdubois](https://github.com/jdubois) in [#1210](https://github.com/actions/setup-java/pull/1210) - fix: select musl JDK artifacts on Alpine for Dragonwell, Corretto, Zulu and Liberica by [@brunoborges](https://github.com/brunoborges) in [#1220](https://github.com/actions/setup-java/pull/1220) - Fix SapMachine early-access filtering by [@jdubois](https://github.com/jdubois) in [#1217](https://github.com/actions/setup-java/pull/1217) - Fix JetBrains GitHub token resolution by [@jdubois](https://github.com/jdubois) in [#1224](https://github.com/actions/setup-java/pull/1224) - Include gradle.properties in Gradle cache key by [@jdubois](https://github.com/jdubois) in [#1225](https://github.com/actions/setup-java/pull/1225) - Handle early dependency cache failures during Java setup by [@jdubois](https://github.com/jdubois) in [#1226](https://github.com/actions/setup-java/pull/1226) - Fix js-yaml audit vulnerability by [@brunoborges](https://github.com/brunoborges) in [#1228](https://github.com/actions/setup-java/pull/1228) - Fix failing GitHub Actions job for graalvm 24-ea by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1227](https://github.com/actions/setup-java/pull/1227) - Update setup-java for Microsoft's Build of OpenJDK: now pointing task to CDN that is always up-to-date by [@jmjaffe37](https://github.com/jmjaffe37) in [#1236](https://github.com/actions/setup-java/pull/1236) - chore(deps-dev): bump globals from 17.8.0 to 17.9.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1233](https://github.com/actions/setup-java/pull/1233) - chore(deps-dev): bump [@types/semver](https://github.com/types/semver) from 7.7.1 to 7.8.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1229](https://github.com/actions/setup-java/pull/1229) - chore(deps-dev): bump lint-staged from 17.2.0 to 17.3.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1231](https://github.com/actions/setup-java/pull/1231) - chore(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.65.0 to 8.67.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1232](https://github.com/actions/setup-java/pull/1232) - Test JDK 26 installation from SDKMAN by [@brunoborges](https://github.com/brunoborges) in [#1238](https://github.com/actions/setup-java/pull/1238) - Add support for multiple Maven servers by [@brunoborges](https://github.com/brunoborges) in [#1239](https://github.com/actions/setup-java/pull/1239) - Add Maven dependency-resolution repositories by [@brunoborges](https://github.com/brunoborges) in [#1240](https://github.com/actions/setup-java/pull/1240) - Add Red Hat Build of OpenJDK support by [@brunoborges](https://github.com/brunoborges) in [#1241](https://github.com/actions/setup-java/pull/1241) - Fix Oracle macOS E2E version check by [@brunoborges](https://github.com/brunoborges) in [#1243](https://github.com/actions/setup-java/pull/1243) - ci: constrain cache e2e job modes by [@philip-gai](https://github.com/philip-gai) in [#1244](https://github.com/actions/setup-java/pull/1244) - Expose contributing guide to GitHub by [@brunoborges](https://github.com/brunoborges) in [#1245](https://github.com/actions/setup-java/pull/1245) - Set default signature verification for supported distributions by [@johnoliver](https://github.com/johnoliver) in [#1246](https://github.com/actions/setup-java/pull/1246) - chore(deps): combine open Dependabot npm updates by [@brunoborges](https://github.com/brunoborges) in [#1252](https://github.com/actions/setup-java/pull/1252) - Prepare documentation for v6 release by [@brunoborges](https://github.com/brunoborges) in [#1253](https://github.com/actions/setup-java/pull/1253) ##### New Contributors - [@jameswald](https://github.com/jameswald) made their first contribution in [#1010](https://github.com/actions/setup-java/pull/1010) - [@asm0dey](https://github.com/asm0dey) made their first contribution in [#1112](https://github.com/actions/setup-java/pull/1112) - [@wetneb](https://github.com/wetneb) made their first contribution in [#608](https://github.com/actions/setup-java/pull/608) - [@philip-gai](https://github.com/philip-gai) made their first contribution in [#1128](https://github.com/actions/setup-java/pull/1128) **Full Changelog**: <https://github.com/actions/setup-java/compare/v5.7.0...v6.0.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate-bot scheduled this pull request to auto merge when all checks succeed

2026-09-23 01:08:31 +00:00

renovate-bot force-pushed renovate/all from dec6253b10

/ release (pull_request) Successful in 3m25s

Details

to d4a11e8a17

/ release (pull_request) Successful in 3m23s

Details

2026-09-24 01:08:24 +00:00

Compare

renovate-bot force-pushed renovate/all from d4a11e8a17

/ release (pull_request) Successful in 3m23s