From bc75555d3b0d144f427079bf8fdce08ff19b29aa Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 1 Sep 2026 17:32:28 +0000 Subject: [PATCH] chore(ci): bump the gh-actions-packages group with 6 updates Bumps the gh-actions-packages group with 6 updates: | Package | From | To | | --- | --- | --- | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.8` | `4.37.9` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.8` | `4.37.9` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.8` | `4.37.9` | | [DataDog/install-datadog-ci-github-action](https://github.com/datadog/install-datadog-ci-github-action) | `1.0.6` | `2.0.0` | | [DataDog/dd-octo-sts-action](https://github.com/datadog/dd-octo-sts-action) | `1.0.4` | `1.0.5` | | [actions/setup-java](https://github.com/actions/setup-java) | `5.7.0` | `6.0.0` | Updates `github/codeql-action/init` from 4.37.8 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...cdf488f595d80d6e07e03d4674febd5ab45fa938) Updates `github/codeql-action/analyze` from 4.37.8 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...cdf488f595d80d6e07e03d4674febd5ab45fa938) Updates `github/codeql-action/upload-sarif` from 4.37.8 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...cdf488f595d80d6e07e03d4674febd5ab45fa938) Updates `DataDog/install-datadog-ci-github-action` from 1.0.6 to 2.0.0 - [Release notes](https://github.com/datadog/install-datadog-ci-github-action/releases) - [Commits](https://github.com/datadog/install-datadog-ci-github-action/compare/501e9d922bf506902d2ecc2c830b0f4471760396...2f075bf20ac15f70e45282dffb2e790ab9fc95fc) Updates `DataDog/dd-octo-sts-action` from 1.0.4 to 1.0.5 - [Release notes](https://github.com/datadog/dd-octo-sts-action/releases) - [Commits](https://github.com/datadog/dd-octo-sts-action/compare/96a25462dbcb10ebf0bfd6e2ccc917d2ab235b9a...c85802a58e202b7e764b5441e4378c76043c8108) Updates `actions/setup-java` from 5.7.0 to 6.0.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/b6effb05e454b25005698d916606bdc6ffcbf961...dd06d9cba3e5552c54d9f8ea23572deb30010f7c) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions-packages - dependency-name: github/codeql-action/analyze dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions-packages - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions-packages - dependency-name: DataDog/install-datadog-ci-github-action dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions-packages - dependency-name: DataDog/dd-octo-sts-action dependency-version: 1.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions-packages - dependency-name: actions/setup-java dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions-packages ... Signed-off-by: dependabot[bot] --- .github/workflows/analyze-changes.yaml | 8 ++++---- .github/workflows/check-pull-request-labels.yaml | 2 +- .github/workflows/check-pull-requests.yaml | 2 +- .github/workflows/comment-on-submodule-update.yaml | 2 +- .github/workflows/create-release-branch.yaml | 2 +- .github/workflows/enforce-datadog-merge-queue.yaml | 2 +- .github/workflows/enforce-groovy-migration.yaml | 2 +- .../workflows/update-apm-sdks-benchmarks-reference.yaml | 4 ++-- .github/workflows/update-gradle-dependencies.yaml | 4 ++-- .github/workflows/update-issues-on-release.yaml | 2 +- .github/workflows/update-jmxfetch-submodule.yaml | 2 +- .github/workflows/update-smoke-test-latest-versions.yaml | 2 +- 12 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/analyze-changes.yaml b/.github/workflows/analyze-changes.yaml index bd4a21fc591..bc22576962a 100644 --- a/.github/workflows/analyze-changes.yaml +++ b/.github/workflows/analyze-changes.yaml @@ -30,7 +30,7 @@ jobs: ${{ runner.os }}-gradle- - name: Initialize CodeQL - uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8 + uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: languages: 'java' build-mode: 'manual' @@ -43,7 +43,7 @@ jobs: ./gradlew clean :dd-java-agent:shadowJar --build-cache --parallel --stacktrace --no-daemon --max-workers=4 - name: Perform CodeQL Analysis and upload results to GitHub Security tab - uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8 + uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 trivy: name: Analyze changes with Trivy @@ -104,13 +104,13 @@ jobs: TRIVY_JAVA_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-java-db,public.ecr.aws/aquasecurity/trivy-java-db - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8 + uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 if: always() with: sarif_file: 'trivy-results.sarif' - name: Install datadog-ci - uses: DataDog/install-datadog-ci-github-action@501e9d922bf506902d2ecc2c830b0f4471760396 # v1.0.6 + uses: DataDog/install-datadog-ci-github-action@2f075bf20ac15f70e45282dffb2e790ab9fc95fc # v2.0.0 with: version: v5.17.0 - name: Upload results to Datadog CI Static Analysis diff --git a/.github/workflows/check-pull-request-labels.yaml b/.github/workflows/check-pull-request-labels.yaml index 80153d87779..c3cebab61f1 100644 --- a/.github/workflows/check-pull-request-labels.yaml +++ b/.github/workflows/check-pull-request-labels.yaml @@ -18,7 +18,7 @@ jobs: steps: - name: Get GitHub Token via dd-octo-sts id: generate-token - uses: DataDog/dd-octo-sts-action@96a25462dbcb10ebf0bfd6e2ccc917d2ab235b9a # v1.0.4 + uses: DataDog/dd-octo-sts-action@c85802a58e202b7e764b5441e4378c76043c8108 # v1.0.5 with: scope: DataDog/dd-trace-java policy: self.check-pull-request-labels diff --git a/.github/workflows/check-pull-requests.yaml b/.github/workflows/check-pull-requests.yaml index 4e7f00f07c7..f985a5ad59e 100644 --- a/.github/workflows/check-pull-requests.yaml +++ b/.github/workflows/check-pull-requests.yaml @@ -19,7 +19,7 @@ jobs: steps: - name: Get GitHub Token via dd-octo-sts id: generate-token - uses: DataDog/dd-octo-sts-action@96a25462dbcb10ebf0bfd6e2ccc917d2ab235b9a # v1.0.4 + uses: DataDog/dd-octo-sts-action@c85802a58e202b7e764b5441e4378c76043c8108 # v1.0.5 with: scope: DataDog/dd-trace-java policy: self.check-pull-requests diff --git a/.github/workflows/comment-on-submodule-update.yaml b/.github/workflows/comment-on-submodule-update.yaml index 59065c94d01..a516446a403 100644 --- a/.github/workflows/comment-on-submodule-update.yaml +++ b/.github/workflows/comment-on-submodule-update.yaml @@ -19,7 +19,7 @@ jobs: steps: - name: Get GitHub Token via dd-octo-sts id: generate-token - uses: DataDog/dd-octo-sts-action@96a25462dbcb10ebf0bfd6e2ccc917d2ab235b9a # v1.0.4 + uses: DataDog/dd-octo-sts-action@c85802a58e202b7e764b5441e4378c76043c8108 # v1.0.5 with: scope: DataDog/dd-trace-java policy: self.comment-on-submodule-update diff --git a/.github/workflows/create-release-branch.yaml b/.github/workflows/create-release-branch.yaml index 5eea222d3e0..d785bc40e36 100644 --- a/.github/workflows/create-release-branch.yaml +++ b/.github/workflows/create-release-branch.yaml @@ -75,7 +75,7 @@ jobs: contents: write id-token: write # required for OIDC token federation steps: - - uses: DataDog/dd-octo-sts-action@96a25462dbcb10ebf0bfd6e2ccc917d2ab235b9a # v1.0.4 + - uses: DataDog/dd-octo-sts-action@c85802a58e202b7e764b5441e4378c76043c8108 # v1.0.5 id: octo-sts with: scope: DataDog/dd-trace-java diff --git a/.github/workflows/enforce-datadog-merge-queue.yaml b/.github/workflows/enforce-datadog-merge-queue.yaml index 6577861e271..cece9f24064 100644 --- a/.github/workflows/enforce-datadog-merge-queue.yaml +++ b/.github/workflows/enforce-datadog-merge-queue.yaml @@ -21,7 +21,7 @@ jobs: exit 1 - name: Get OIDC token if: github.event.action == 'enqueued' - uses: DataDog/dd-octo-sts-action@96a25462dbcb10ebf0bfd6e2ccc917d2ab235b9a # v1.0.4 + uses: DataDog/dd-octo-sts-action@c85802a58e202b7e764b5441e4378c76043c8108 # v1.0.5 id: octo-sts with: scope: DataDog/dd-trace-java diff --git a/.github/workflows/enforce-groovy-migration.yaml b/.github/workflows/enforce-groovy-migration.yaml index c7b6ed95cdd..66dbe2c3a50 100644 --- a/.github/workflows/enforce-groovy-migration.yaml +++ b/.github/workflows/enforce-groovy-migration.yaml @@ -21,7 +21,7 @@ jobs: steps: - name: Get GitHub Token via dd-octo-sts id: generate-token - uses: DataDog/dd-octo-sts-action@96a25462dbcb10ebf0bfd6e2ccc917d2ab235b9a # v1.0.4 + uses: DataDog/dd-octo-sts-action@c85802a58e202b7e764b5441e4378c76043c8108 # v1.0.5 with: scope: DataDog/dd-trace-java policy: self.enforce-groovy-migration diff --git a/.github/workflows/update-apm-sdks-benchmarks-reference.yaml b/.github/workflows/update-apm-sdks-benchmarks-reference.yaml index c33a7fa3c0f..443b600bfa8 100644 --- a/.github/workflows/update-apm-sdks-benchmarks-reference.yaml +++ b/.github/workflows/update-apm-sdks-benchmarks-reference.yaml @@ -15,14 +15,14 @@ jobs: steps: - name: Get token for apm-sdks-benchmarks id: benchmarks-token - uses: DataDog/dd-octo-sts-action@96a25462dbcb10ebf0bfd6e2ccc917d2ab235b9a # v1.0.4 + uses: DataDog/dd-octo-sts-action@c85802a58e202b7e764b5441e4378c76043c8108 # v1.0.5 with: scope: DataDog/apm-sdks-benchmarks policy: dd-trace-java.update-apm-sdks-benchmarks-reference.read - name: Get token for dd-trace-java id: dd-trace-java-token - uses: DataDog/dd-octo-sts-action@96a25462dbcb10ebf0bfd6e2ccc917d2ab235b9a # v1.0.4 + uses: DataDog/dd-octo-sts-action@c85802a58e202b7e764b5441e4378c76043c8108 # v1.0.5 with: scope: DataDog/dd-trace-java policy: self.update-apm-sdks-benchmarks-reference.create-pr diff --git a/.github/workflows/update-gradle-dependencies.yaml b/.github/workflows/update-gradle-dependencies.yaml index f4e7ae2e2ab..2ac2645705e 100644 --- a/.github/workflows/update-gradle-dependencies.yaml +++ b/.github/workflows/update-gradle-dependencies.yaml @@ -14,7 +14,7 @@ jobs: contents: read id-token: write # Required for OIDC token federation steps: - - uses: DataDog/dd-octo-sts-action@96a25462dbcb10ebf0bfd6e2ccc917d2ab235b9a # v1.0.4 + - uses: DataDog/dd-octo-sts-action@c85802a58e202b7e764b5441e4378c76043c8108 # v1.0.5 id: octo-sts with: scope: DataDog/dd-trace-java @@ -25,7 +25,7 @@ jobs: with: submodules: "recursive" - - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0 + - uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0 with: distribution: 'temurin' java-version: '21' diff --git a/.github/workflows/update-issues-on-release.yaml b/.github/workflows/update-issues-on-release.yaml index 8749f857231..50d9f74bb6d 100644 --- a/.github/workflows/update-issues-on-release.yaml +++ b/.github/workflows/update-issues-on-release.yaml @@ -17,7 +17,7 @@ jobs: steps: - name: Get GitHub Token via dd-octo-sts id: generate-token - uses: DataDog/dd-octo-sts-action@96a25462dbcb10ebf0bfd6e2ccc917d2ab235b9a # v1.0.4 + uses: DataDog/dd-octo-sts-action@c85802a58e202b7e764b5441e4378c76043c8108 # v1.0.5 with: scope: DataDog/dd-trace-java policy: self.update-issues-on-release diff --git a/.github/workflows/update-jmxfetch-submodule.yaml b/.github/workflows/update-jmxfetch-submodule.yaml index 89610d2c475..92ce5316fbf 100644 --- a/.github/workflows/update-jmxfetch-submodule.yaml +++ b/.github/workflows/update-jmxfetch-submodule.yaml @@ -12,7 +12,7 @@ jobs: contents: read id-token: write # Required for OIDC token federation steps: - - uses: DataDog/dd-octo-sts-action@96a25462dbcb10ebf0bfd6e2ccc917d2ab235b9a # v1.0.4 + - uses: DataDog/dd-octo-sts-action@c85802a58e202b7e764b5441e4378c76043c8108 # v1.0.5 id: octo-sts with: scope: DataDog/dd-trace-java diff --git a/.github/workflows/update-smoke-test-latest-versions.yaml b/.github/workflows/update-smoke-test-latest-versions.yaml index 51c3ff59cde..cca0e4256b9 100644 --- a/.github/workflows/update-smoke-test-latest-versions.yaml +++ b/.github/workflows/update-smoke-test-latest-versions.yaml @@ -14,7 +14,7 @@ jobs: contents: read id-token: write # Required for OIDC token federation steps: - - uses: DataDog/dd-octo-sts-action@96a25462dbcb10ebf0bfd6e2ccc917d2ab235b9a # v1.0.4 + - uses: DataDog/dd-octo-sts-action@c85802a58e202b7e764b5441e4378c76043c8108 # v1.0.5 id: octo-sts with: scope: DataDog/dd-trace-java