fix(deps): update all dependencies

renovate-bot commented

2026-09-02 01:08:21 +00:00

Member

This PR contains the following updates:

Package	Type	Update	Change
https://github.com/actions/setup-java	action	major	`v5` → `v6`
org.apache.maven.plugins:maven-surefire-plugin (source)	build	minor	`3.5.6` → `3.6.0`
org.apache.maven.plugins:maven-failsafe-plugin (source)	build	minor	`3.5.6` → `3.6.0`
org.apache.maven.plugins:maven-compiler-plugin (source)	build	minor	`3.15.0` → `3.16.0`
org.hibernate.validator:hibernate-validator (source)	compile	patch	`9.1.3.Final` → `9.1.4.Final`
org.jooq:jooq-codegen-maven (source)	build	patch	`3.21.7` → `3.21.8`
org.flywaydb:flyway-database-postgresql	build	minor	`13.4.0` → `13.7.0`
org.flywaydb:flyway-maven-plugin	build	minor	`13.4.0` → `13.7.0`
de.loosetie.logging:lt-logging-bom	import	minor	`1.0.11` → `1.1.2`
de.loosetie.utils:lt-utils-bom	import	patch	`2.0.3` → `2.0.5`
org.jooq:jooq-meta (source)	compile	patch	`3.21.7` → `3.21.8`
org.jooq:jooq-kotlin (source)	compile	patch	`3.21.7` → `3.21.8`
org.jooq:jooq-codegen (source)	compile	patch	`3.21.7` → `3.21.8`
org.jooq:jooq (source)	compile	patch	`3.21.7` → `3.21.8`
de.loosetie:lt-parent-kotlin	parent	patch	`1.0.12` → `1.0.13`

Release Notes

actions/setup-java (https://github.com/actions/setup-java)

`v6.0.1`

Compare Source

What's Changed

Fix failing GitHub Actions job for temurin 17 by @brunoborges with @Copilot in #1259
Fix Temurin EA E2E signature verification by @brunoborges with @Copilot in #1260
Fix Alpine GPG verification failures and support multiple keys by @brunoborges in #1262
Fix import-safe checks when scripts are run from a path with symlinks by @otaconix in #1265
Avoid macOS GPG socket overflow on long runner paths by @brunoborges with @Copilot in #1266
Complete v6 release highlights in README by @brunoborges in #1254
Group and slow routine Dependabot updates by @brunoborges in #1255
chore(deps-dev): update eslint and globals by @dependabot[bot] in #1256

New Contributors

@otaconix made their first contribution in #1265

Full Changelog: https://github.com/actions/setup-java/compare/v6.0.0...v6.0.1

`v6.0.0`

Compare Source

What's Changed

dist: Migrate from Zulu Discovery API to Azul Metadata API by @jameswald in #1010
feat: add .mvn/extensions.xml to Maven cache key pattern by @brunoborges with @Copilot in #1041
Migrate to ESM and upgrade dependencies by @priyagupta108 in #1078
Map Zulu x86 architecture to i686 for Azul Metadata API by @brunoborges in #1079
Rename jdkFile input to jdk-file with deprecated alias by @brunoborges in #1083
Infer distribution from asdf .tool-versions vendor prefix by @brunoborges in #1084
Add Maven compiler problem matcher for javac diagnostics by @brunoborges in #1086
feat: expose cache-primary-key output (#597) by @brunoborges in #1088
docs: clarify V6 ESM migration is not a user-facing breaking change by @brunoborges in #1090
Support multi-field Java versions like 18.0.1.1 by @brunoborges in #1092
docs: document seeding the Maven cache for plugin dependencies by @brunoborges in #1094
docs: clarify Maven cache paths and key hash inputs by @brunoborges in #1096
Support pinning java-version as "latest" by @brunoborges in #1093
chore(deps-dev): bump eslint from 10.6.0 to 10.7.0 by @dependabot[bot] in #1101
chore(deps-dev): bump eslint-plugin-n from 18.2.1 to 18.2.2 by @dependabot[bot] in #1103
chore(deps-dev): bump prettier from 3.9.4 to 3.9.5 by @dependabot[bot] in #1105
chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #1106
chore(deps-dev): bump @types/node from 26.1.0 to 26.1.1 by @dependabot[bot] in #1104
dist: Cover Tencent Kona JDK 25 by @johnshajiang in #1108
chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by @dependabot[bot] in #1102
Preserve Maven toolchains across repeated setup-java runs (#1099) by @brunoborges in #1111
dist: Support Liberica NIK (#878) by @asm0dey in #1112
Fix template injection (zizmor alert #118) in e2e-versions.yml by @brunoborges with @Copilot in #1114
Fix template injection in e2e-versions.yml (zizmor alert #122) by @brunoborges with @Copilot in #1120
Disable persisted checkout credentials in e2e workflow by @brunoborges with @Copilot in #1115
feat: Update recommended configuration for GPG signing by @wetneb in #608
Cache Maven and Gradle wrapper distributions separately from the dependency cache by @brunoborges in #1097
Consolidate cache-dependency-path e2e workflow and add maven/sbt coverage by @brunoborges in #1124
Use gpg.passphraseEnvName instead of the deprecated gpg.passphrase server by @brunoborges in #1123
Extract repeated directory-check assertions into check-dir.sh helper by @brunoborges in #1127
Consolidate duplicate jobs in e2e-versions workflow by @brunoborges in #1125
Use YAML anchors to reduce boilerplate in e2e-versions workflow by @brunoborges in #1126
Updated msft json for now by @jmjaffe37 in #1129
Document missing action inputs in README by @brunoborges in #1130
chore(deps): bump @actions/cache to 6.2.0 by @philip-gai in #1128
Add an option to disable Java problem matchers by @brunoborges in #1133
docs: update setup-java examples by @HarithaVattikuti in #1131
Clarify credential environment variable inputs by @brunoborges in #1134
chore(deps-dev): bump @typescript-eslint/eslint-plugin from 8.63.0 to 8.64.0 by @dependabot[bot] in #1135
chore(deps): bump actions/setup-python from 6 to 7 by @dependabot[bot] in #1143
chore(deps): bump fast-xml-parser from 5.9.3 to 5.10.1 by @dependabot[bot] in #1142
chore(deps-dev): bump @typescript-eslint/parser from 8.64.0 to 8.65.0 by @dependabot[bot] in #1138
chore(deps-dev): bump lint-staged from 17.0.8 to 17.2.0 by @dependabot[bot] in #1136
chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by @dependabot[bot] in #1137
chore(deps): fix npm audited vulnerabilities by @mhoffrog in #1140
Fix formatting issues in README.md by @brunoborges in #1144
Remediate npm audit findings and rebuild distributions by @brunoborges with @Copilot in #1145
Set GRAALVM_HOME for GraalVM distributions by @brunoborges with @Copilot in #1146
Add force-download option for reproducible JDK builds by @brunoborges with @Copilot in #1148
Add OpenJDK distribution by @brunoborges with @Copilot in #1147
Support Temurin JDKs with JMOD files by @brunoborges with @Copilot in #1149
Document Java package compatibility by distribution by @brunoborges in #1152
Fix caching when wrapper distributions are absent by @brunoborges in #1151
Reject invalid boolean input values by @brunoborges in #1160
Fail on mismatched Maven toolchain ID counts by @brunoborges in #1161
Consolidate JDK metadata retry handling by @brunoborges in #1162
Add direct setup orchestration tests by @brunoborges in #1163
Harden java-package validation across distributions by @brunoborges in #1165
Verify JDK downloads with vendor checksums by @brunoborges in #1167
Reduce change-time Java E2E matrix by @brunoborges in #1170
Add read-only mode for dependency caching by @brunoborges in #1169
Test Temurin 25 on hosted runners by @brunoborges in #1172
Restore dependency and wrapper caches concurrently by @brunoborges in #1174
Add dependency cache path overrides by @brunoborges in #1175
Centralize OS/architecture capability validation by @brunoborges in #1178
Optimize Temurin tool-cache fast path with lazy loading by @brunoborges in #1179
Optimize Maven configuration warm path by @brunoborges in #1182
Fix macOS e2e workflow assertions by @brunoborges in #1184
Remove legacy Adopt distributions in v6 by @brunoborges with @Copilot in #1185
chore(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #1190
Reimagine setup-java README by @brunoborges in #1192
Document deprecation of setup-java v1 through v4 by @brunoborges in #1198
Update setup-java README action from v6 to v5 by @brunoborges in #1199
Highlight major changes in setup-java v5 by @brunoborges in #1200
Highlight major changes in setup-java v6 by @brunoborges in #1203
chore(deps): bump brace-expansion from 5.0.8 to 5.0.9 by @dependabot[bot] in #1202
Add conditional JDK caching by @brunoborges in #1201
docs: fix README and advanced usage inconsistencies with actual behavior by @brunoborges in #1204
Move the extracted JDK into the tool-cache instead of copying it by @brunoborges in #1206
docs: drop benchmark numbers from the JDK caching section by @brunoborges in #1205
docs: correct the mvn-toolchain-id default in README and action.yml by @brunoborges in #1207
Cache resolved JDK releases to remove the vendor API from warm jobs by @brunoborges in #1208
Report concrete versions for floating Oracle JDK downloads by @jdubois in #1213
Import Maven signing keys into an isolated GPG home by @jdubois in #1214
Reuse the tool cache for floating versions the resolution cache identified by @brunoborges in #1219
Fix JetBrains Runtime release pagination by @jdubois in #1218
Fix JDK resolution cache platform identity by @jdubois in #1210
fix: select musl JDK artifacts on Alpine for Dragonwell, Corretto, Zulu and Liberica by @brunoborges in #1220
Fix SapMachine early-access filtering by @jdubois in #1217
Fix JetBrains GitHub token resolution by @jdubois in #1224
Include gradle.properties in Gradle cache key by @jdubois in #1225
Handle early dependency cache failures during Java setup by @jdubois in #1226
Fix js-yaml audit vulnerability by @brunoborges in #1228
Fix failing GitHub Actions job for graalvm 24-ea by @brunoborges with @Copilot in #1227
Update setup-java for Microsoft's Build of OpenJDK: now pointing task to CDN that is always up-to-date by @jmjaffe37 in #1236
chore(deps-dev): bump globals from 17.8.0 to 17.9.0 by @dependabot[bot] in #1233
chore(deps-dev): bump @types/semver from 7.7.1 to 7.8.0 by @dependabot[bot] in #1229
chore(deps-dev): bump lint-staged from 17.2.0 to 17.3.0 by @dependabot[bot] in #1231
chore(deps-dev): bump @typescript-eslint/eslint-plugin from 8.65.0 to 8.67.0 by @dependabot[bot] in #1232
Test JDK 26 installation from SDKMAN by @brunoborges in #1238
Add support for multiple Maven servers by @brunoborges in #1239
Add Maven dependency-resolution repositories by @brunoborges in #1240
Add Red Hat Build of OpenJDK support by @brunoborges in #1241
Fix Oracle macOS E2E version check by @brunoborges in #1243
ci: constrain cache e2e job modes by @philip-gai in #1244
Expose contributing guide to GitHub by @brunoborges in #1245
Set default signature verification for supported distributions by @johnoliver in #1246
chore(deps): combine open Dependabot npm updates by @brunoborges in #1252
Prepare documentation for v6 release by @brunoborges in #1253

New Contributors

@jameswald made their first contribution in #1010
@asm0dey made their first contribution in #1112
@wetneb made their first contribution in #608
@philip-gai made their first contribution in #1128

Full Changelog: https://github.com/actions/setup-java/compare/v5.7.0...v6.0.0

hibernate/hibernate-validator (org.hibernate.validator:hibernate-validator)

Hibernate Validator 9.1.4.Final released

We are pleased to announce the release of Hibernate Validator 9.1: 9.1.4.Final.

You can find the full list of 9.1.4.Final changes here.

What's new

See the website for requirements and compatibilities.
See the What's New guide for details about new features and capabilities.

Conclusion

For additional details, see:

Visit the website for details on getting in touch with us.

DenktMit-OSS/lt-logging (de.loosetie.logging:lt-logging-bom)

`v1.1.2`: Release 1.1.2

Compare Source

Bump versions

`v1.1.1`: Release 1.1.1

Compare Source

Improved exception shortening

`v1.1.0`: Release 1.1.0

Compare Source

Added log shortening for stack traces
Splitted core into base and logback to allow multiple log implementations

DenktMit-OSS/lt-parent (de.loosetie:lt-parent-kotlin)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---|---|---| | [https://github.com/actions/setup-java](https://github.com/actions/setup-java) | action | major | `v5` → `v6` | ![age](https://developer.mend.io/api/mc/badges/age/github-tags/actions%2fsetup-java/v6.0.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/actions%2fsetup-java/v5.7.0/v6.0.1?slim=true) | | [org.apache.maven.plugins:maven-surefire-plugin](https://maven.apache.org/surefire/) ([source](https://github.com/apache/maven-surefire)) | build | minor | `3.5.6` → `3.6.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.apache.maven.plugins:maven-surefire-plugin/3.6.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.apache.maven.plugins:maven-surefire-plugin/3.5.6/3.6.0?slim=true) | | [org.apache.maven.plugins:maven-failsafe-plugin](https://maven.apache.org/surefire/) ([source](https://github.com/apache/maven-surefire)) | build | minor | `3.5.6` → `3.6.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.apache.maven.plugins:maven-failsafe-plugin/3.6.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.apache.maven.plugins:maven-failsafe-plugin/3.5.6/3.6.0?slim=true) | | [org.apache.maven.plugins:maven-compiler-plugin](https://maven.apache.org/plugins/) ([source](https://github.com/apache/maven-compiler-plugin)) | build | minor | `3.15.0` → `3.16.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.apache.maven.plugins:maven-compiler-plugin/3.16.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.apache.maven.plugins:maven-compiler-plugin/3.15.0/3.16.0?slim=true) | | [org.hibernate.validator:hibernate-validator](https://hibernate.org/validator) ([source](https://github.com/hibernate/hibernate-validator)) | compile | patch | `9.1.3.Final` → `9.1.4.Final` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.hibernate.validator:hibernate-validator/9.1.4.Final?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.hibernate.validator:hibernate-validator/9.1.3.Final/9.1.4.Final?slim=true) | | [org.jooq:jooq-codegen-maven](https://www.jooq.org) ([source](https://github.com/jOOQ/jOOQ)) | build | patch | `3.21.7` → `3.21.8` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.jooq:jooq-codegen-maven/3.21.8?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.jooq:jooq-codegen-maven/3.21.7/3.21.8?slim=true) | | [org.flywaydb:flyway-database-postgresql](https://flywaydb.org) | build | minor | `13.4.0` → `13.7.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.flywaydb:flyway-database-postgresql/13.7.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.flywaydb:flyway-database-postgresql/13.4.0/13.7.0?slim=true) | | [org.flywaydb:flyway-maven-plugin](https://flywaydb.org) | build | minor | `13.4.0` → `13.7.0` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.flywaydb:flyway-maven-plugin/13.7.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.flywaydb:flyway-maven-plugin/13.4.0/13.7.0?slim=true) | | [de.loosetie.logging:lt-logging-bom](https://git.denktmit.tech/DenktMit-OSS/lt-logging) | import | minor | `1.0.11` → `1.1.2` | ![age](https://developer.mend.io/api/mc/badges/age/maven/de.loosetie.logging:lt-logging-bom/1.1.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/de.loosetie.logging:lt-logging-bom/1.0.11/1.1.2?slim=true) | | [de.loosetie.utils:lt-utils-bom](https://git.denktmit.tech/DenktMit-OSS/lt-parent) | import | patch | `2.0.3` → `2.0.5` | ![age](https://developer.mend.io/api/mc/badges/age/maven/de.loosetie.utils:lt-utils-bom/2.0.5?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/de.loosetie.utils:lt-utils-bom/2.0.3/2.0.5?slim=true) | | [org.jooq:jooq-meta](https://www.jooq.org) ([source](https://github.com/jOOQ/jOOQ)) | compile | patch | `3.21.7` → `3.21.8` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.jooq:jooq-meta/3.21.8?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.jooq:jooq-meta/3.21.7/3.21.8?slim=true) | | [org.jooq:jooq-kotlin](https://www.jooq.org) ([source](https://github.com/jOOQ/jOOQ)) | compile | patch | `3.21.7` → `3.21.8` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.jooq:jooq-kotlin/3.21.8?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.jooq:jooq-kotlin/3.21.7/3.21.8?slim=true) | | [org.jooq:jooq-codegen](https://www.jooq.org) ([source](https://github.com/jOOQ/jOOQ)) | compile | patch | `3.21.7` → `3.21.8` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.jooq:jooq-codegen/3.21.8?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.jooq:jooq-codegen/3.21.7/3.21.8?slim=true) | | [org.jooq:jooq](https://www.jooq.org) ([source](https://github.com/jOOQ/jOOQ)) | compile | patch | `3.21.7` → `3.21.8` | ![age](https://developer.mend.io/api/mc/badges/age/maven/org.jooq:jooq/3.21.8?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/org.jooq:jooq/3.21.7/3.21.8?slim=true) | | [de.loosetie:lt-parent-kotlin](https://git.denktmit.tech/DenktMit-OSS/lt-parent) | parent | patch | `1.0.12` → `1.0.13` | ![age](https://developer.mend.io/api/mc/badges/age/maven/de.loosetie:lt-parent-kotlin/1.0.13?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/maven/de.loosetie:lt-parent-kotlin/1.0.12/1.0.13?slim=true) | --- ### Release Notes <details> <summary>actions/setup-java (https://github.com/actions/setup-java)</summary> ### [`v6.0.1`](https://github.com/actions/setup-java/releases/tag/v6.0.1) [Compare Source](https://github.com/actions/setup-java/compare/v6.0.0...v6.0.1) ##### What's Changed - Fix failing GitHub Actions job for temurin 17 by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1259](https://github.com/actions/setup-java/pull/1259) - Fix Temurin EA E2E signature verification by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1260](https://github.com/actions/setup-java/pull/1260) - Fix Alpine GPG verification failures and support multiple keys by [@brunoborges](https://github.com/brunoborges) in [#1262](https://github.com/actions/setup-java/pull/1262) - Fix import-safe checks when scripts are run from a path with symlinks by [@otaconix](https://github.com/otaconix) in [#1265](https://github.com/actions/setup-java/pull/1265) - Avoid macOS GPG socket overflow on long runner paths by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1266](https://github.com/actions/setup-java/pull/1266) - Complete v6 release highlights in README by [@brunoborges](https://github.com/brunoborges) in [#1254](https://github.com/actions/setup-java/pull/1254) - Group and slow routine Dependabot updates by [@brunoborges](https://github.com/brunoborges) in [#1255](https://github.com/actions/setup-java/pull/1255) - chore(deps-dev): update eslint and globals by [@dependabot](https://github.com/dependabot)\[bot] in [#1256](https://github.com/actions/setup-java/pull/1256) ##### New Contributors - [@otaconix](https://github.com/otaconix) made their first contribution in [#1265](https://github.com/actions/setup-java/pull/1265) **Full Changelog**: <https://github.com/actions/setup-java/compare/v6.0.0...v6.0.1> ### [`v6.0.0`](https://github.com/actions/setup-java/releases/tag/v6.0.0) [Compare Source](https://github.com/actions/setup-java/compare/v5.7.0...v6.0.0) ##### What's Changed - dist: Migrate from Zulu Discovery API to Azul Metadata API by [@jameswald](https://github.com/jameswald) in [#1010](https://github.com/actions/setup-java/pull/1010) - feat: add .mvn/extensions.xml to Maven cache key pattern by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1041](https://github.com/actions/setup-java/pull/1041) - Migrate to ESM and upgrade dependencies by [@priyagupta108](https://github.com/priyagupta108) in [#1078](https://github.com/actions/setup-java/pull/1078) - Map Zulu x86 architecture to i686 for Azul Metadata API by [@brunoborges](https://github.com/brunoborges) in [#1079](https://github.com/actions/setup-java/pull/1079) - Rename jdkFile input to jdk-file with deprecated alias by [@brunoborges](https://github.com/brunoborges) in [#1083](https://github.com/actions/setup-java/pull/1083) - Infer distribution from asdf .tool-versions vendor prefix by [@brunoborges](https://github.com/brunoborges) in [#1084](https://github.com/actions/setup-java/pull/1084) - Add Maven compiler problem matcher for javac diagnostics by [@brunoborges](https://github.com/brunoborges) in [#1086](https://github.com/actions/setup-java/pull/1086) - feat: expose cache-primary-key output ([#597](https://github.com/actions/setup-java/issues/597)) by [@brunoborges](https://github.com/brunoborges) in [#1088](https://github.com/actions/setup-java/pull/1088) - docs: clarify V6 ESM migration is not a user-facing breaking change by [@brunoborges](https://github.com/brunoborges) in [#1090](https://github.com/actions/setup-java/pull/1090) - Support multi-field Java versions like `18.0.1.1` by [@brunoborges](https://github.com/brunoborges) in [#1092](https://github.com/actions/setup-java/pull/1092) - docs: document seeding the Maven cache for plugin dependencies by [@brunoborges](https://github.com/brunoborges) in [#1094](https://github.com/actions/setup-java/pull/1094) - docs: clarify Maven cache paths and key hash inputs by [@brunoborges](https://github.com/brunoborges) in [#1096](https://github.com/actions/setup-java/pull/1096) - Support pinning java-version as "latest" by [@brunoborges](https://github.com/brunoborges) in [#1093](https://github.com/actions/setup-java/pull/1093) - chore(deps-dev): bump eslint from 10.6.0 to 10.7.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1101](https://github.com/actions/setup-java/pull/1101) - chore(deps-dev): bump eslint-plugin-n from 18.2.1 to 18.2.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1103](https://github.com/actions/setup-java/pull/1103) - chore(deps-dev): bump prettier from 3.9.4 to 3.9.5 by [@dependabot](https://github.com/dependabot)\[bot] in [#1105](https://github.com/actions/setup-java/pull/1105) - chore(deps): bump actions/checkout from 6 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#1106](https://github.com/actions/setup-java/pull/1106) - chore(deps-dev): bump [@types/node](https://github.com/types/node) from 26.1.0 to 26.1.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#1104](https://github.com/actions/setup-java/pull/1104) - dist: Cover Tencent Kona JDK 25 by [@johnshajiang](https://github.com/johnshajiang) in [#1108](https://github.com/actions/setup-java/pull/1108) - chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1102](https://github.com/actions/setup-java/pull/1102) - Preserve Maven toolchains across repeated setup-java runs ([#1099](https://github.com/actions/setup-java/issues/1099)) by [@brunoborges](https://github.com/brunoborges) in [#1111](https://github.com/actions/setup-java/pull/1111) - dist: Support Liberica NIK ([#878](https://github.com/actions/setup-java/issues/878)) by [@asm0dey](https://github.com/asm0dey) in [#1112](https://github.com/actions/setup-java/pull/1112) - Fix template injection (zizmor alert [#118](https://github.com/actions/setup-java/issues/118)) in e2e-versions.yml by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1114](https://github.com/actions/setup-java/pull/1114) - Fix template injection in e2e-versions.yml (zizmor alert [#122](https://github.com/actions/setup-java/issues/122)) by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1120](https://github.com/actions/setup-java/pull/1120) - Disable persisted checkout credentials in e2e workflow by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1115](https://github.com/actions/setup-java/pull/1115) - feat: Update recommended configuration for GPG signing by [@wetneb](https://github.com/wetneb) in [#608](https://github.com/actions/setup-java/pull/608) - Cache Maven and Gradle wrapper distributions separately from the dependency cache by [@brunoborges](https://github.com/brunoborges) in [#1097](https://github.com/actions/setup-java/pull/1097) - Consolidate cache-dependency-path e2e workflow and add maven/sbt coverage by [@brunoborges](https://github.com/brunoborges) in [#1124](https://github.com/actions/setup-java/pull/1124) - Use gpg.passphraseEnvName instead of the deprecated gpg.passphrase server by [@brunoborges](https://github.com/brunoborges) in [#1123](https://github.com/actions/setup-java/pull/1123) - Extract repeated directory-check assertions into check-dir.sh helper by [@brunoborges](https://github.com/brunoborges) in [#1127](https://github.com/actions/setup-java/pull/1127) - Consolidate duplicate jobs in e2e-versions workflow by [@brunoborges](https://github.com/brunoborges) in [#1125](https://github.com/actions/setup-java/pull/1125) - Use YAML anchors to reduce boilerplate in e2e-versions workflow by [@brunoborges](https://github.com/brunoborges) in [#1126](https://github.com/actions/setup-java/pull/1126) - Updated msft json for now by [@jmjaffe37](https://github.com/jmjaffe37) in [#1129](https://github.com/actions/setup-java/pull/1129) - Document missing action inputs in README by [@brunoborges](https://github.com/brunoborges) in [#1130](https://github.com/actions/setup-java/pull/1130) - chore(deps): bump [@actions/cache](https://github.com/actions/cache) to 6.2.0 by [@philip-gai](https://github.com/philip-gai) in [#1128](https://github.com/actions/setup-java/pull/1128) - Add an option to disable Java problem matchers by [@brunoborges](https://github.com/brunoborges) in [#1133](https://github.com/actions/setup-java/pull/1133) - docs: update setup-java examples by [@HarithaVattikuti](https://github.com/HarithaVattikuti) in [#1131](https://github.com/actions/setup-java/pull/1131) - Clarify credential environment variable inputs by [@brunoborges](https://github.com/brunoborges) in [#1134](https://github.com/actions/setup-java/pull/1134) - chore(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.63.0 to 8.64.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1135](https://github.com/actions/setup-java/pull/1135) - chore(deps): bump actions/setup-python from 6 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#1143](https://github.com/actions/setup-java/pull/1143) - chore(deps): bump fast-xml-parser from 5.9.3 to 5.10.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#1142](https://github.com/actions/setup-java/pull/1142) - chore(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 8.64.0 to 8.65.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1138](https://github.com/actions/setup-java/pull/1138) - chore(deps-dev): bump lint-staged from 17.0.8 to 17.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1136](https://github.com/actions/setup-java/pull/1136) - chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#1137](https://github.com/actions/setup-java/pull/1137) - chore(deps): fix npm audited vulnerabilities by [@mhoffrog](https://github.com/mhoffrog) in [#1140](https://github.com/actions/setup-java/pull/1140) - Fix formatting issues in README.md by [@brunoborges](https://github.com/brunoborges) in [#1144](https://github.com/actions/setup-java/pull/1144) - Remediate npm audit findings and rebuild distributions by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1145](https://github.com/actions/setup-java/pull/1145) - Set GRAALVM\_HOME for GraalVM distributions by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1146](https://github.com/actions/setup-java/pull/1146) - Add force-download option for reproducible JDK builds by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1148](https://github.com/actions/setup-java/pull/1148) - Add OpenJDK distribution by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1147](https://github.com/actions/setup-java/pull/1147) - Support Temurin JDKs with JMOD files by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1149](https://github.com/actions/setup-java/pull/1149) - Document Java package compatibility by distribution by [@brunoborges](https://github.com/brunoborges) in [#1152](https://github.com/actions/setup-java/pull/1152) - Fix caching when wrapper distributions are absent by [@brunoborges](https://github.com/brunoborges) in [#1151](https://github.com/actions/setup-java/pull/1151) - Reject invalid boolean input values by [@brunoborges](https://github.com/brunoborges) in [#1160](https://github.com/actions/setup-java/pull/1160) - Fail on mismatched Maven toolchain ID counts by [@brunoborges](https://github.com/brunoborges) in [#1161](https://github.com/actions/setup-java/pull/1161) - Consolidate JDK metadata retry handling by [@brunoborges](https://github.com/brunoborges) in [#1162](https://github.com/actions/setup-java/pull/1162) - Add direct setup orchestration tests by [@brunoborges](https://github.com/brunoborges) in [#1163](https://github.com/actions/setup-java/pull/1163) - Harden java-package validation across distributions by [@brunoborges](https://github.com/brunoborges) in [#1165](https://github.com/actions/setup-java/pull/1165) - Verify JDK downloads with vendor checksums by [@brunoborges](https://github.com/brunoborges) in [#1167](https://github.com/actions/setup-java/pull/1167) - Reduce change-time Java E2E matrix by [@brunoborges](https://github.com/brunoborges) in [#1170](https://github.com/actions/setup-java/pull/1170) - Add read-only mode for dependency caching by [@brunoborges](https://github.com/brunoborges) in [#1169](https://github.com/actions/setup-java/pull/1169) - Test Temurin 25 on hosted runners by [@brunoborges](https://github.com/brunoborges) in [#1172](https://github.com/actions/setup-java/pull/1172) - Restore dependency and wrapper caches concurrently by [@brunoborges](https://github.com/brunoborges) in [#1174](https://github.com/actions/setup-java/pull/1174) - Add dependency cache path overrides by [@brunoborges](https://github.com/brunoborges) in [#1175](https://github.com/actions/setup-java/pull/1175) - Centralize OS/architecture capability validation by [@brunoborges](https://github.com/brunoborges) in [#1178](https://github.com/actions/setup-java/pull/1178) - Optimize Temurin tool-cache fast path with lazy loading by [@brunoborges](https://github.com/brunoborges) in [#1179](https://github.com/actions/setup-java/pull/1179) - Optimize Maven configuration warm path by [@brunoborges](https://github.com/brunoborges) in [#1182](https://github.com/actions/setup-java/pull/1182) - Fix macOS e2e workflow assertions by [@brunoborges](https://github.com/brunoborges) in [#1184](https://github.com/actions/setup-java/pull/1184) - Remove legacy Adopt distributions in v6 by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1185](https://github.com/actions/setup-java/pull/1185) - chore(deps): bump actions/upload-artifact from 6 to 7 by [@dependabot](https://github.com/dependabot)\[bot] in [#1190](https://github.com/actions/setup-java/pull/1190) - Reimagine setup-java README by [@brunoborges](https://github.com/brunoborges) in [#1192](https://github.com/actions/setup-java/pull/1192) - Document deprecation of setup-java v1 through v4 by [@brunoborges](https://github.com/brunoborges) in [#1198](https://github.com/actions/setup-java/pull/1198) - Update setup-java README action from v6 to v5 by [@brunoborges](https://github.com/brunoborges) in [#1199](https://github.com/actions/setup-java/pull/1199) - Highlight major changes in setup-java v5 by [@brunoborges](https://github.com/brunoborges) in [#1200](https://github.com/actions/setup-java/pull/1200) - Highlight major changes in setup-java v6 by [@brunoborges](https://github.com/brunoborges) in [#1203](https://github.com/actions/setup-java/pull/1203) - chore(deps): bump brace-expansion from 5.0.8 to 5.0.9 by [@dependabot](https://github.com/dependabot)\[bot] in [#1202](https://github.com/actions/setup-java/pull/1202) - Add conditional JDK caching by [@brunoborges](https://github.com/brunoborges) in [#1201](https://github.com/actions/setup-java/pull/1201) - docs: fix README and advanced usage inconsistencies with actual behavior by [@brunoborges](https://github.com/brunoborges) in [#1204](https://github.com/actions/setup-java/pull/1204) - Move the extracted JDK into the tool-cache instead of copying it by [@brunoborges](https://github.com/brunoborges) in [#1206](https://github.com/actions/setup-java/pull/1206) - docs: drop benchmark numbers from the JDK caching section by [@brunoborges](https://github.com/brunoborges) in [#1205](https://github.com/actions/setup-java/pull/1205) - docs: correct the mvn-toolchain-id default in README and action.yml by [@brunoborges](https://github.com/brunoborges) in [#1207](https://github.com/actions/setup-java/pull/1207) - Cache resolved JDK releases to remove the vendor API from warm jobs by [@brunoborges](https://github.com/brunoborges) in [#1208](https://github.com/actions/setup-java/pull/1208) - Report concrete versions for floating Oracle JDK downloads by [@jdubois](https://github.com/jdubois) in [#1213](https://github.com/actions/setup-java/pull/1213) - Import Maven signing keys into an isolated GPG home by [@jdubois](https://github.com/jdubois) in [#1214](https://github.com/actions/setup-java/pull/1214) - Reuse the tool cache for floating versions the resolution cache identified by [@brunoborges](https://github.com/brunoborges) in [#1219](https://github.com/actions/setup-java/pull/1219) - Fix JetBrains Runtime release pagination by [@jdubois](https://github.com/jdubois) in [#1218](https://github.com/actions/setup-java/pull/1218) - Fix JDK resolution cache platform identity by [@jdubois](https://github.com/jdubois) in [#1210](https://github.com/actions/setup-java/pull/1210) - fix: select musl JDK artifacts on Alpine for Dragonwell, Corretto, Zulu and Liberica by [@brunoborges](https://github.com/brunoborges) in [#1220](https://github.com/actions/setup-java/pull/1220) - Fix SapMachine early-access filtering by [@jdubois](https://github.com/jdubois) in [#1217](https://github.com/actions/setup-java/pull/1217) - Fix JetBrains GitHub token resolution by [@jdubois](https://github.com/jdubois) in [#1224](https://github.com/actions/setup-java/pull/1224) - Include gradle.properties in Gradle cache key by [@jdubois](https://github.com/jdubois) in [#1225](https://github.com/actions/setup-java/pull/1225) - Handle early dependency cache failures during Java setup by [@jdubois](https://github.com/jdubois) in [#1226](https://github.com/actions/setup-java/pull/1226) - Fix js-yaml audit vulnerability by [@brunoborges](https://github.com/brunoborges) in [#1228](https://github.com/actions/setup-java/pull/1228) - Fix failing GitHub Actions job for graalvm 24-ea by [@brunoborges](https://github.com/brunoborges) with [@Copilot](https://github.com/Copilot) in [#1227](https://github.com/actions/setup-java/pull/1227) - Update setup-java for Microsoft's Build of OpenJDK: now pointing task to CDN that is always up-to-date by [@jmjaffe37](https://github.com/jmjaffe37) in [#1236](https://github.com/actions/setup-java/pull/1236) - chore(deps-dev): bump globals from 17.8.0 to 17.9.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1233](https://github.com/actions/setup-java/pull/1233) - chore(deps-dev): bump [@types/semver](https://github.com/types/semver) from 7.7.1 to 7.8.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1229](https://github.com/actions/setup-java/pull/1229) - chore(deps-dev): bump lint-staged from 17.2.0 to 17.3.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1231](https://github.com/actions/setup-java/pull/1231) - chore(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.65.0 to 8.67.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#1232](https://github.com/actions/setup-java/pull/1232) - Test JDK 26 installation from SDKMAN by [@brunoborges](https://github.com/brunoborges) in [#1238](https://github.com/actions/setup-java/pull/1238) - Add support for multiple Maven servers by [@brunoborges](https://github.com/brunoborges) in [#1239](https://github.com/actions/setup-java/pull/1239) - Add Maven dependency-resolution repositories by [@brunoborges](https://github.com/brunoborges) in [#1240](https://github.com/actions/setup-java/pull/1240) - Add Red Hat Build of OpenJDK support by [@brunoborges](https://github.com/brunoborges) in [#1241](https://github.com/actions/setup-java/pull/1241) - Fix Oracle macOS E2E version check by [@brunoborges](https://github.com/brunoborges) in [#1243](https://github.com/actions/setup-java/pull/1243) - ci: constrain cache e2e job modes by [@philip-gai](https://github.com/philip-gai) in [#1244](https://github.com/actions/setup-java/pull/1244) - Expose contributing guide to GitHub by [@brunoborges](https://github.com/brunoborges) in [#1245](https://github.com/actions/setup-java/pull/1245) - Set default signature verification for supported distributions by [@johnoliver](https://github.com/johnoliver) in [#1246](https://github.com/actions/setup-java/pull/1246) - chore(deps): combine open Dependabot npm updates by [@brunoborges](https://github.com/brunoborges) in [#1252](https://github.com/actions/setup-java/pull/1252) - Prepare documentation for v6 release by [@brunoborges](https://github.com/brunoborges) in [#1253](https://github.com/actions/setup-java/pull/1253) ##### New Contributors - [@jameswald](https://github.com/jameswald) made their first contribution in [#1010](https://github.com/actions/setup-java/pull/1010) - [@asm0dey](https://github.com/asm0dey) made their first contribution in [#1112](https://github.com/actions/setup-java/pull/1112) - [@wetneb](https://github.com/wetneb) made their first contribution in [#608](https://github.com/actions/setup-java/pull/608) - [@philip-gai](https://github.com/philip-gai) made their first contribution in [#1128](https://github.com/actions/setup-java/pull/1128) **Full Changelog**: <https://github.com/actions/setup-java/compare/v5.7.0...v6.0.0> </details> <details> <summary>hibernate/hibernate-validator (org.hibernate.validator:hibernate-validator)</summary> ### [`v9.1.4.Final`](https://github.com/hibernate/hibernate-validator/releases/tag/9.1.4.Final) [Compare Source](https://github.com/hibernate/hibernate-validator/compare/9.1.3.Final...9.1.4.Final) ### Hibernate Validator 9.1.4.Final released We are pleased to announce the release of Hibernate Validator 9.1: 9.1.4.Final. You can find the full list of 9.1.4.Final changes [here](https://hibernate.atlassian.net/issues/?jql=project%20%3D%20HV%20AND%20fixVersion%20%3D%209.1.4.Final). #### What's new - See the [website](https://hibernate.org/validator/releases/9.1) for requirements and compatibilities. - See the [What's New](https://docs.hibernate.org/validator/9.1/whats-new/en-US/html_single/) guide for details about new features and capabilities. #### Conclusion For additional details, see: - the [release page](https://hibernate.org/validator/releases/9.1/) - the [Migration Guide](https://docs.hibernate.org/validator/9.1/migration-guide/) - the [Getting started](https://docs.hibernate.org/validator/9.1/reference/en-US/html_single/#validator-gettingstarted) - the [Reference Guide](https://docs.hibernate.org/validator/9.1/reference/en-US/html_single/) - the [API docs](https://docs.hibernate.org/validator/9.1/api) Visit the [website](https://hibernate.org/community/) for details on getting in touch with us. </details> <details> <summary>DenktMit-OSS/lt-logging (de.loosetie.logging:lt-logging-bom)</summary> ### [`v1.1.2`](https://git.denktmit.tech/DenktMit-OSS/lt-logging/releases/tag/v1.1.2): Release 1.1.2 [Compare Source](https://git.denktmit.tech/DenktMit-OSS/lt-logging/compare/v1.1.1...v1.1.2) - Bump versions ### [`v1.1.1`](https://git.denktmit.tech/DenktMit-OSS/lt-logging/releases/tag/v1.1.1): Release 1.1.1 [Compare Source](https://git.denktmit.tech/DenktMit-OSS/lt-logging/compare/v1.1.0...v1.1.1) Improved exception shortening ### [`v1.1.0`](https://git.denktmit.tech/DenktMit-OSS/lt-logging/releases/tag/v1.1.0): Release 1.1.0 [Compare Source](https://git.denktmit.tech/DenktMit-OSS/lt-logging/compare/v1.0.11...v1.1.0) - Added log shortening for stack traces - Splitted core into base and logback to allow multiple log implementations </details> <details> <summary>DenktMit-OSS/lt-parent (de.loosetie:lt-parent-kotlin)</summary> ### [`v1.0.13`](https://git.denktmit.tech/DenktMit-OSS/lt-parent/releases/tag/v1.0.13) - CI friendly - Version bumps </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate-bot scheduled this pull request to auto merge when all checks succeed

2026-09-02 01:08:22 +00:00

renovate-bot force-pushed renovate/all from 37cab25b3a

/ release (pull_request) Failing after 17s

Details

to f00616dc3a

/ release (pull_request) Failing after 18s

Details

2026-09-03 01:08:48 +00:00

Compare

renovate-bot force-pushed renovate/all from f00616dc3a

/ release (pull_request) Failing after 18s