Skip to content

chore(deps): bump actions/setup-java from 4.5.0 to 5.4.0 #18408

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
SelaseKay merged 3 commits into from
Jul 6, 2026
Merged

chore(deps): bump actions/setup-java from 4.5.0 to 5.4.0 #18408

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
592d318
chore(deps): bump actions/setup-java from 4.5.0 to 5.4.0
dependabot[bot] Jul 1, 2026
aa8a48d
chore(deps): update Gradle and PostgreSQL action versions in CI workf…
SelaseKay Jul 6, 2026
c8aa225
chore(ci): add permissions for read access in CI workflows for Androi…
SelaseKay Jul 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/android.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
name: e2e-android

Check warning on line 1 in .github/workflows/android.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

android.yaml:1: overly broad permissions: default permissions used due to no permissions: block

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}-android
Expand Down Expand Up @@ -30,7 +30,7 @@
default: false

jobs:
android:

Check warning on line 33 in .github/workflows/android.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

android.yaml:33: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
timeout-minutes: ${{ inputs.nightly_test_mode && 5 || 45 }}
strategy:
Expand All @@ -50,7 +50,7 @@
name: Install Node.js 20
with:
node-version: '20'
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
with:
distribution: 'temurin'
java-version: '21'
Expand Down Expand Up @@ -89,7 +89,7 @@
sudo udevadm control --reload-rules
sudo udevadm trigger --name-match=kvm
- name: Gradle cache
uses: gradle/actions/setup-gradle@v6

Check failure on line 92 in .github/workflows/android.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 92 in .github/workflows/android.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

android.yaml:92: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- name: Free Disk Space (Ubuntu)
uses: AdityaGarg8/remove-unwanted-software@90e01b21170618765a73370fcc3abbd1684a7793
with:
Expand Down Expand Up @@ -159,12 +159,12 @@
/mnt/avd/*
~/.android/adb*

agp9-compatibility:

Check warning on line 162 in .github/workflows/android.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

android.yaml:162: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
- uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
with:
distribution: 'temurin'
java-version: '21'
Expand All @@ -181,6 +181,6 @@
- name: 'Bootstrap tests package'
run: melos bootstrap --scope tests
- name: Gradle cache
uses: gradle/actions/setup-gradle@v4

Check failure on line 184 in .github/workflows/android.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 184 in .github/workflows/android.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

android.yaml:184: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- name: 'Build tests app with AGP 9'
run: bash ./.github/workflows/scripts/agp9-compatibility.sh
8 changes: 4 additions & 4 deletions .github/workflows/e2e_tests_fdc.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@
name: Install Node.js 20
with:
node-version: '20'
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
with:
distribution: 'temurin'
java-version: '21'
Expand All @@ -68,7 +68,7 @@
cache-key: "flutter-:os:-:channel:-:version:-:arch:-:hash:"
pub-cache-key: "flutter-pub-:os:-:channel:-:version:-:arch:-:hash:"
- name: Setup PostgreSQL for Linux/macOS/Windows
uses: ikalnytskyi/action-setup-postgres@v8

Check failure on line 71 in .github/workflows/e2e_tests_fdc.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 71 in .github/workflows/e2e_tests_fdc.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

e2e_tests_fdc.yaml:71: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- uses: bluefireteam/melos-action@705015c3d2bc4ab94201ac24accb2bbe070cf533
with:
run-bootstrap: false
Expand All @@ -88,7 +88,7 @@
sudo udevadm control --reload-rules
sudo udevadm trigger --name-match=kvm
- name: Gradle cache
uses: gradle/actions/setup-gradle@v6

Check failure on line 91 in .github/workflows/e2e_tests_fdc.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 91 in .github/workflows/e2e_tests_fdc.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

e2e_tests_fdc.yaml:91: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- name: Free Disk Space (Ubuntu)
uses: AdityaGarg8/remove-unwanted-software@90e01b21170618765a73370fcc3abbd1684a7793
with:
Expand Down Expand Up @@ -163,12 +163,12 @@
node-version: '20'
- name: Xcode
run: sudo xcode-select -s /Applications/Xcode_16.4.app/Contents/Developer
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
with:
distribution: 'temurin'
java-version: '21'
- name: Setup PostgreSQL for Linux/macOS/Windows
uses: ikalnytskyi/action-setup-postgres@v8

Check failure on line 171 in .github/workflows/e2e_tests_fdc.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 171 in .github/workflows/e2e_tests_fdc.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

e2e_tests_fdc.yaml:171: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03
name: Xcode Compile Cache
with:
Expand Down Expand Up @@ -281,12 +281,12 @@
name: Install Node.js 20
with:
node-version: '20'
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
with:
distribution: 'temurin'
java-version: '21'
- name: Setup PostgreSQL for Linux/macOS/Windows
uses: ikalnytskyi/action-setup-postgres@v8

Check failure on line 289 in .github/workflows/e2e_tests_fdc.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 289 in .github/workflows/e2e_tests_fdc.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

e2e_tests_fdc.yaml:289: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2
with:
channel: 'stable'
Expand Down Expand Up @@ -356,12 +356,12 @@
name: Install Node.js 20
with:
node-version: '20'
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
with:
distribution: 'temurin'
java-version: '21'
- name: Setup PostgreSQL for Linux/macOS/Windows
uses: ikalnytskyi/action-setup-postgres@v8

Check failure on line 364 in .github/workflows/e2e_tests_fdc.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 364 in .github/workflows/e2e_tests_fdc.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

e2e_tests_fdc.yaml:364: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- uses: subosito/flutter-action@1a449444c387b1966244ae4d4f8c696479add0b2
with:
channel: 'stable'
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/e2e_tests_pipeline.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@
name: Install Node.js 20
with:
node-version: '20'
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
with:
distribution: 'temurin'
java-version: '21'
Expand Down Expand Up @@ -70,7 +70,7 @@
sudo udevadm control --reload-rules
sudo udevadm trigger --name-match=kvm
- name: Gradle cache
uses: gradle/actions/setup-gradle@v6

Check failure on line 73 in .github/workflows/e2e_tests_pipeline.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 73 in .github/workflows/e2e_tests_pipeline.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

e2e_tests_pipeline.yaml:73: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- name: Free Disk Space (Ubuntu)
uses: AdityaGarg8/remove-unwanted-software@90e01b21170618765a73370fcc3abbd1684a7793
with:
Expand Down Expand Up @@ -179,7 +179,7 @@
node-version: '20'
- name: Xcode
run: sudo xcode-select -s /Applications/Xcode_16.4.app/Contents/Developer
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
with:
distribution: 'temurin'
java-version: '21'
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/ios.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@
default: false

jobs:
ios:

Check warning on line 33 in .github/workflows/ios.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

ios.yaml:33: overly broad permissions: default permissions used due to no permissions: block
runs-on: macos-15
timeout-minutes: ${{ inputs.nightly_test_mode && 5 || 60 }}
strategy:
Expand All @@ -48,7 +48,7 @@
node-version: '20'
- name: Xcode
run: sudo xcode-select -s /Applications/Xcode_16.4.app/Contents/Developer
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
with:
distribution: 'temurin'
java-version: '21'
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/macos.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@
default: false

jobs:
macos:

Check warning on line 33 in .github/workflows/macos.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

macos.yaml:33: overly broad permissions: default permissions used due to no permissions: block
runs-on: macos-15
timeout-minutes: ${{ inputs.nightly_test_mode && 5 || 45 }}
strategy:
Expand All @@ -46,7 +46,7 @@
name: Install Node.js 20
with:
node-version: '20'
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
with:
distribution: 'temurin'
java-version: '21'
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/web.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
name: e2e-web

Check warning on line 1 in .github/workflows/web.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

web.yaml:1: overly broad permissions: default permissions used due to no permissions: block

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}-web
Expand Down Expand Up @@ -30,7 +30,7 @@
default: false

jobs:
web:

Check warning on line 33 in .github/workflows/web.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

web.yaml:33: overly broad permissions: default permissions used due to no permissions: block
runs-on: macos-latest
timeout-minutes: ${{ inputs.nightly_test_mode && 5 || 15 }}
strategy:
Expand All @@ -46,7 +46,7 @@
name: Install Node.js 20
with:
node-version: '20'
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
with:
distribution: 'temurin'
java-version: '21'
Expand Down Expand Up @@ -107,7 +107,7 @@
# Must match the restore path exactly
path: ~/.cache/firebase/emulators

web-app-check:

Check warning on line 110 in .github/workflows/web.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

web.yaml:110: overly broad permissions: default permissions used due to no permissions: block
runs-on: macos-latest
timeout-minutes: 15
steps:
Expand All @@ -116,7 +116,7 @@
name: Install Node.js 20
with:
node-version: '20'
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
with:
distribution: 'temurin'
java-version: '21'
Expand Down Expand Up @@ -182,7 +182,7 @@
# Must match the restore path exactly
path: ~/.cache/firebase/emulators

web-wasm:

Check warning on line 185 in .github/workflows/web.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

web.yaml:185: overly broad permissions: default permissions used due to no permissions: block
runs-on: macos-latest
timeout-minutes: ${{ inputs.nightly_test_mode && 5 || 15 }}
strategy:
Expand All @@ -198,7 +198,7 @@
name: Install Node.js 20
with:
node-version: '20'
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
with:
distribution: 'temurin'
java-version: '21'
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/windows.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
name: e2e-windows

Check warning on line 1 in .github/workflows/windows.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

windows.yaml:1: overly broad permissions: default permissions used due to no permissions: block

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}-windows
Expand Down Expand Up @@ -35,7 +35,7 @@
timeout-minutes: ${{ inputs.nightly_test_mode && 5 || 45 }}
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
with:
distribution: 'temurin'
java-version: '21'
Expand Down Expand Up @@ -69,7 +69,7 @@
timeout-minutes: ${{ inputs.nightly_test_mode && 5 || 45 }}
steps:
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
with:
distribution: 'temurin'
java-version: '21'
Expand Down
Loading