chore(deps): update all non-major dependencies

Open renovate-bot opened this issue 1 month ago • 0 comments

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	`v5.0.0` -> `v5.0.1`
actions/setup-go	action	minor	`v6.0.0` -> `v6.1.0`
actions/setup-java	action	minor	`v5.0.0` -> `v5.1.0`
github/codeql-action	action	patch	`v3.31.2` -> `v3.31.9`
step-security/harden-runner	action	minor	`v2.13.2` -> `v2.14.0`
org.apache.maven.plugins:maven-jar-plugin (source)	build	minor	`3.4.2` -> `3.5.0`
com.google.auto.value:auto-value (source)		patch	`1.11.0` -> `1.11.1`
org.mockito:mockito-core	test	minor	`5.20.0` -> `5.21.0`
org.apache.maven.plugins:maven-release-plugin (source)	build	minor	`3.1.1` -> `3.3.1`
com.google.auto.value:auto-value-annotations (source)	provided	patch	`1.11.0` -> `1.11.1`
com.google.auto.value:auto-value (source)	provided	patch	`1.11.0` -> `1.11.1`
com.google.cloud.tools:appengine-maven-plugin (source)	compile	patch	`2.8.4` -> `2.8.6`
org.apache.maven:maven-core (source)	provided	patch	`3.9.11` -> `3.9.12`
org.apache.maven:maven-plugin-api (source)	provided	patch	`3.9.11` -> `3.9.12`
org.eclipse.jetty:jetty-client (source)	test	patch	`12.1.3` -> `12.1.5`
org.eclipse.jetty:jetty-server (source)	compile	patch	`12.1.3` -> `12.1.5`

[!WARNING] Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

actions/checkout (actions/checkout)

`v5.0.1`

Compare Source

What's Changed

Port v6 cleanup to v5 by @ericsciple in #2301

Full Changelog: https://github.com/actions/checkout/compare/v5...v5.0.1

actions/setup-go (actions/setup-go)

`v6.1.0`

Compare Source

What's Changed

Enhancements

Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @nicholasngai in #665
Add support for .tool-versions file and update workflow by @priya-kinthali in #673
Add comprehensive breaking changes documentation for v6 by @mahabaleshwars in #674

Dependency updates

Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by @dependabot in #617
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in #641
Upgrade semver and @types/semver by @dependabot in #652

New Contributors

@nicholasngai made their first contribution in #665
@priya-kinthali made their first contribution in #673
@mahabaleshwars made their first contribution in #674

Full Changelog: https://github.com/actions/setup-go/compare/v6...v6.1.0

actions/setup-java (actions/setup-java)

`v5.1.0`

Compare Source

What's Changed

New Features

Add support for .sdkmanrc file in java-version-file parameter by @guicamest in #736
Add support for Microsoft OpenJDK 25 builds by @the-mod in #927

Bug Fixes & Improvements

Update Regex to Support All ASDF Versions for the supported distributions in tool-versions File by @aparnajyothi-y in #767
Enhance error logging for network failures to include endpoint/IP details, add retry mechanism and update workflows to use macos-15-intel by @priya-kinthali in #946
Update SapMachine URLs by @RealCLanger in #955
Add GitHub Token Support for GraalVM and Refactor Code by @mahabaleshwars in #849

Documentation changes

Update documentation to use checkout and Java v5 by @lmvysakh in #903
Clarify JAVA_HOME and PATH setup in README by @chiranjib-swain in #841

Dependency updates

Upgrade prettier from 2.8.8 to 3.6.2 and document breaking changes in v5 by @dependabot in #873
Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @dependabot in #912

New Contributors

@lmvysakh made their first contribution in #903
@chiranjib-swain made their first contribution in #841
@the-mod made their first contribution in #927
@priya-kinthali made their first contribution in #946
@guicamest made their first contribution in #736

Full Changelog: https://github.com/actions/setup-java/compare/v5...v5.1.0

github/codeql-action (github/codeql-action)

`v3.31.9`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.9 - 16 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.31.8`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.8 - 11 Dec 2025

Update default CodeQL bundle version to 2.23.8. #3354

See the full CHANGELOG.md for more information.

`v3.31.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.7 - 05 Dec 2025

Update default CodeQL bundle version to 2.23.7. #3343

See the full CHANGELOG.md for more information.

`v3.31.6`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.31.5`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.5 - 24 Nov 2025

Update default CodeQL bundle version to 2.23.6. #3321

See the full CHANGELOG.md for more information.

`v3.31.4`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.4 - 18 Nov 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.31.3`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.3 - 13 Nov 2025

CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
Update default CodeQL bundle version to 2.23.5. #3288

See the full CHANGELOG.md for more information.

step-security/harden-runner (step-security/harden-runner)

`v2.14.0`

Compare Source

What's Changed

Selective installation: Harden-Runner now skips installation on GitHub-hosted runners when the repository has a custom property skip_harden_runner, allowing organizations to opt out specific repos.
Avoid double install: The action no longer installs Harden-Runner if it’s already present on a GitHub-hosted runner, which could happen when a composite action also installs it.

Full Changelog: https://github.com/step-security/harden-runner/compare/v2.13.3...v2.14.0

`v2.13.3`

Compare Source

What's Changed

Fixed an issue where process events were not uploaded in certain edge cases.

Full Changelog: https://github.com/step-security/harden-runner/compare/v2.13.2...v2.13.3

mockito/mockito (org.mockito:mockito-core)

`v5.21.0`

Compare Source

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.21.0

2025-12-09 - 17 commit(s) by Giulio Longfils, Joshua Selbo, Woongi9, Zylox, dependabot[bot]
Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 (#3768)
Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 (#3767)
Bump actions/checkout from 5 to 6 (#3765)
Adds output of matchers to potential mismatch; Fixes #2468 (#3760)
Forbid mocking WeakReference with inline mock maker (#3759)
StackOverflowError when mocking WeakReference (#3758)
Bump actions/upload-artifact from 4 to 5 (#3756)
Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 (#3755)
Support primitives in GenericArrayReturnType. (#3753)
ClassNotFoundException when stubbing array of primitive type on Android (#3752)
Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 (#3744)
Bump gradle/actions from 4 to 5 (#3743)
Bump org.graalvm.buildtools.native from 0.11.0 to 0.11.1 (#3738)
Bump com.diffplug.spotless:spotless-plugin-gradle from 7.2.1 to 8.0.0 (#3735)
Bump graalvm/setup-graalvm from 1.3.7 to 1.4.0 (#3734)
Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 (#3733)
Bump errorprone from 2.41.0 to 2.42.0 (#3732)
Feat: automatically detect class to mock in mockStatic and mockConstruction (#3731)
Return completed futures for unstubbed Future/CompletionStage in ReturnsEmptyValues (#3727)
automatically detect class to mock (#2779)
Incorrect "has following stubbing(s) with different arguments" message when using Argument Matchers (#2468)

apache/maven (org.apache.maven:maven-core)

`v3.9.12`

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

[ ] If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Dec 01 '25 03:12 renovate-bot