[dependabot]

Bumps the actions-deps group with 4 updates: lfreleng-actions/github2gerrit-action, actions/setup-java, lfreleng-actions/gerrit-review-action and lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml.

Updates lfreleng-actions/github2gerrit-action from 2.4.6 to 2.4.7

Release notes

Sourced from lfreleng-actions/github2gerrit-action's releases.

v2.4.7

🐛 Bug Fixes 🐛

• Fix(rest): Send REST calls via python-gerrit-api @lf-releng-code-monkey-bot[bot] (#513)
• Fix(cli): Let config file set boolean options @lf-releng-code-monkey-bot[bot] (#514)
• Fix: Keep every trailer in metadata sync @lf-releng-code-monkey-bot[bot] (#528)

🔧 Maintenance 🔧

• Chore: Pre-commit autoupdate @pre-commit-ci[bot] (#504)
• Chore: Bump harden-runner-block-action @lf-releng-code-monkey-bot[bot] (#510)
• Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.4.3 to 0.5.0 @dependabot[bot] (#519)
• Chore: Bump lfreleng-actions/python-workflows/.github/workflows/build-test-release.yaml from 0.5.1 to 0.5.3 @dependabot[bot] (#517)
• Chore: Bump actions/setup-python from 7.0.0 to 7.1.0 @dependabot[bot] (#515)
• Chore: Bump astral-sh/setup-uv from 10.3.0 to 10.3.2 @dependabot[bot] (#516)
• Chore: Bump lfreleng-actions/security-workflows/.github/workflows/openssf-scorecard.yaml from 0.9.4 to 0.9.5 @dependabot[bot] (#518)
• Chore: Bump ruff from 0.17.1 to 0.17.2 @dependabot[bot] (#520)

🎓 Code Quality 🎓

• CI: Bump harden-runner and python-workflows pins @lf-releng-code-monkey-bot[bot] (#508)
• CI(action): Run the tool from the action's own commit @​ModeSevenIndustrialSolutions (#505)
• CI: Bump action pins for harden-runner v2.22.3 @lf-releng-code-monkey-bot[bot] (#522)
• Test: Require TLS 1.2 in Gerrit TLS test server @lf-releng-code-monkey-bot[bot] (#527)
• CI: Exercise live Gerrit transfer and REST auth @lf-releng-code-monkey-bot[bot] (#525)

Links

• Submit bugs/feature requests

Commits

• 585d32d Merge pull request #528 from lfreleng-bot-forks/code-monkey/issue-523
• 620fea5 Fix: Keep every trailer in metadata sync
• d448235 Test: Add expected-fail trailer split tests
• 51eca1f Merge pull request #525 from lfreleng-bot-forks/code-monkey/issue-524
• db0e541 CI: Exercise live Gerrit transfer and REST auth
• 142479c Test: Add expected-fail live Gerrit job tests
• 677880b Merge pull request #527 from lfreleng-bot-forks/code-monkey/issue-526
• 2345ffe Test: Require TLS 1.2 in Gerrit TLS test server
• 03c617a Merge pull request #522 from lfreleng-bot-forks/code-monkey/issue-521
• 7690ce4 CI: Bump action pins for harden-runner v2.22.3
• Additional commits viewable in compare view

Updates actions/setup-java from 6.1.0 to 6.2.0

Release notes

Sourced from actions/setup-java's releases.

v6.2.0

What's Changed

• Fix Liberica SDKMAN patch release resolution by @​brunoborges in actions/setup-java#1291
• Update Undici to 6.29.1 by @​brunoborges in actions/setup-java#1308
• chore(deps): bump the monthly-npm-updates group with 12 updates by @​dependabot[bot] in actions/setup-java#1309
• Fix Liberica Java 25 release resolution by @​brunoborges in actions/setup-java#1313
• Add repository-specific Copilot instructions by @​brunoborges in actions/setup-java#1312
• Support exact Corretto release versions by @​electrum in actions/setup-java#1310
• Support Maven mirrors in generated settings.xml by @​brunoborges in actions/setup-java#1289

New Contributors

• @​electrum made their first contribution in actions/setup-java#1310

Full Changelog: actions/setup-java@v6.1.0...v6.2.0

Commits

• 77dd5b2 Support Maven mirrors in generated settings.xml (#1289)
• 644a850 Support exact Corretto release versions (#1310)
• dade0c5 Save uncommitted changes (#1312)
• ef0b922 Fix Liberica Java 25 release resolution (#1313)
• e144521 chore(deps): bump the monthly-npm-updates group with 12 updates (#1309)
• 8cd57eb Update Undici to 6.29.1 (#1308)
• 816722a Fix Liberica SDKMAN patch release resolution (#1291)
• See full diff in compare view

Updates lfreleng-actions/gerrit-review-action from 1.2.0 to 1.3.0

Release notes

Sourced from lfreleng-actions/gerrit-review-action's releases.

v1.3.0

✨ New Features ✨

• Feat: Warn instead of failing on a closed change @lf-releng-code-monkey-bot[bot] (#176)

🔧 Maintenance 🔧

• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#167)
• Chore: Bump step-security/harden-runner from 2.21.1 to 2.22.1 @dependabot[bot] (#172)
• Chore: Bump lfreleng-actions/harden-runner-block-action from 0.12.2 to 0.13.1 @dependabot[bot] (#171)
• Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.4.1 to 0.4.3 @dependabot[bot] (#170)
• Chore: Bump release-drafter/release-drafter from 7.9.0 to 7.10.0 @dependabot[bot] (#169)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#173)
• Chore: pre-commit autoupdate @pre-commit-ci[bot] (#174)

🎓 Code Quality 🎓

• CI: Move Scorecard to security-workflows lane @​ModeSevenIndustrialSolutions (#168)

Links

• Submit bugs/feature requests

Commits

• 264fe20 Merge pull request #176 from lfreleng-bot-forks/code-monkey/issue-175
• bcd3f35 Feat: Warn instead of failing on a closed change
• db837dc Test: Add expected-fail send-review tests
• cdfcca9 Merge pull request #174 from lfreleng-actions/pre-commit-ci-update-config
• 0990d05 Chore: pre-commit autoupdate
• 9ebb057 Merge pull request #173 from lfreleng-actions/pre-commit-ci-update-config
• ed76ea3 Chore: pre-commit autoupdate
• 2373fda Merge pull request #169 from lfreleng-actions/dependabot/github_actions/relea...
• 72c7203 Merge pull request #170 from lfreleng-actions/dependabot/github_actions/lfrel...
• 9aaf2fb Merge pull request #171 from lfreleng-actions/dependabot/github_actions/lfrel...
• Additional commits viewable in compare view

Updates lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml from 0.9.6 to 0.9.7

Release notes

Sourced from lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml's releases.

v0.9.7

🎓 Code Quality 🎓

• CI: Bump all action and workflow pins to latest @lf-releng-code-monkey-bot[bot] (#179)

Links

• Submit bugs/feature requests

Commits

• 378fcc1 Merge pull request #179 from lfreleng-bot-forks/code-monkey/issue-178
• a2c895d CI: Bump all action and workflow pins to latest
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

PR: #46
Mode: squash
Topic: GH-openflowplugin-46
Change-Ids:
Id77a3eb5f3d73a4fb6d873f54b2347200e45348d
Digest: c79e1fbcedb5
GitHub-Hash: ea25d6a4d698edf6

Note: This metadata is also included in the Gerrit commit message for reconciliation.

[github-actions]

Change raised in Gerrit by GitHub2Gerrit: https://git.opendaylight.org/gerrit/c/openflowplugin/+/127703

[github-actions]

Automated PR Closure

This pull request has been automatically closed by GitHub2Gerrit.

The corresponding Gerrit change has been accepted and merged ✅

The changes from this PR are now part of the main codebase in Gerrit.

---

This is an automated action performed by the GitHub2Gerrit tool.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml