Bump the github-action-dependencies group across 1 directory with 5 updates by dependabot[bot] · Pull Request #559 · statisticsnorway/vardef

dependabot · 2026-07-01T12:34:17Z

Bumps the github-action-dependencies group with 5 updates in the / directory:

Package	From	To
release-drafter/release-drafter/autolabeler	`7.4.0`	`7.5.1`
nais/deploy/actions/deploy	`5fdd91aaf69bb0d6dd5e5118cdacb639f487b93b`	`2d18f050f07b6a007864c6a57070ed915d571beb`
actions/setup-java	`5.3.0`	`5.4.0`
nais/docker-build-push	`05dbb6091b30bd84279c6d64a45ef8782fd410a5`	`f8bc7437f7549c2b08197152d781b98f8727a08a`
release-drafter/release-drafter	`7.4.0`	`7.5.1`

Updates release-drafter/release-drafter/autolabeler from 7.4.0 to 7.5.1

Release notes

Sourced from release-drafter/release-drafter/autolabeler's releases.

v7.5.1

What's Changed

Bug Fixes

fix: use PR changed files as the source of truth for path filtering (#1640) @cchanche

Full Changelog: release-drafter/release-drafter@v7.5.0...v7.5.1

v7.5.0

What's Changed

New

feat: align increments to semver lib from 0.0.0 (#1636) @cchanche

Bug Fixes

fix: require actual matches for category mode only (#1639) @cchanche

Dependency Updates

build(deps): bump undici from 6.24.1 to 6.27.0 (#1637) @dependabot[bot]

Full Changelog: release-drafter/release-drafter@v7.4.0...v7.5.0

Commits

4d75298 chore: release v7.5.1
87be2bf fix: use PR changed files as the source of truth for path filtering (#1640)
73b95fa chore: release v7.5.0
46fd415 Fix/align increments to semver lib from 0.0.0 (#1636)
ee02572 chore: upgrade various deps
cd91445 build(deps): bump undici from 6.24.1 to 6.27.0 (#1637)
33c969b fix: require actual matches for category mode only (#1639)
5d6d314 ci: support label 'dependencies' for dependabot
See full diff in compare view

Updates nais/deploy/actions/deploy from 5fdd91aaf69bb0d6dd5e5118cdacb639f487b93b to 2d18f050f07b6a007864c6a57070ed915d571beb

Commits

2d18f05 test(hookd): assert empty request team is rejected
de86ced fix(deployd): reject resources outside the team namespace
See full diff in compare view

Updates actions/setup-java from 5.3.0 to 5.4.0

Release notes

Sourced from actions/setup-java's releases.

v5.4.0

What's Changed

Bump @typescript-eslint/parser from 8.48.0 to 8.61.1 by @dependabot[bot] in actions/setup-java#1021

Fix codeql workflow permissions by @jsoref in actions/setup-java#993

fix CodeQL permissions by @gdams in actions/setup-java#1025

fix: reject non-semver candidate versions in isVersionSatisfies by @sproctor in actions/setup-java#1009

Bump @actions/cache to 5.1.0, handle cache write denied by @jasongin in actions/setup-java#1026

Add Maven Wrapper cache feature by @mahabaleshwars in actions/setup-java#1027

Spelling by @jsoref in actions/setup-java#713

add link to advanced configuration for JetBrains by @robstoll in actions/setup-java#850

docs(action): fix missing required or default fields by @kranthipoturaju in actions/setup-java#1007

feat: add microsoft openjdk 17.0.18 by @al-kau in actions/setup-java#1002

Update README.md - use "alert syntax for Markdown" for notes by @mhoffrog in actions/setup-java#924

Bump undici from 6.24.1 to 6.27.0 by @dependabot[bot] in actions/setup-java#1033

Update contributor guide with emoji for clarity by @brunoborges in actions/setup-java#1028

add javac problem matcher by @Trass3r in actions/setup-java#562

Clarify README version syntax and migration guidance by @brunoborges with @Copilot in actions/setup-java#1038

Update undici artifacts to 6.27.0 (license cache + dist) by @brunoborges in actions/setup-java#1040

docs: enhance custom jdk file installation by @stephanabel in actions/setup-java#996

Templates for new Java distributions by @panticmilos in actions/setup-java#429

Bump actions/checkout from 6 to 7 by @dependabot[bot] in actions/setup-java#1032

Bump @types/node from 25.9.3 to 26.0.0 by @dependabot[bot] in actions/setup-java#1031

docs: replace non-existent HelloWorldApp references with java --version by @brunoborges with @Copilot in actions/setup-java#1043

docs: add JavaFX Maven project configuration instructions by @brunoborges with @Copilot in actions/setup-java#1044

docs: self-signed certificate / internal CA handling for GitHub Enterprise by @brunoborges in actions/setup-java#1050

docs: document importing an internal CA into the installed JDK (cacerts) by @brunoborges in actions/setup-java#1051

chore: Harden workflows: least-privilege permissions + zizmor integration by @brunoborges in actions/setup-java#1039

dist: Add GraalVM Community distribution support by @brunoborges with @Copilot in actions/setup-java#1042

docs: note jdkfile approach for Early Access / unreleased JDK builds by @brunoborges in actions/setup-java#1058

dist: Apply Copilot review suggestions from PR #1042 (GraalVM Community) by @brunoborges in actions/setup-java#1059

New Contributors

@jsoref made their first contribution in actions/setup-java#993

@sproctor made their first contribution in actions/setup-java#1009

@jasongin made their first contribution in actions/setup-java#1026

@robstoll made their first contribution in actions/setup-java#850

@kranthipoturaju made their first contribution in actions/setup-java#1007

@al-kau made their first contribution in actions/setup-java#1002

@mhoffrog made their first contribution in actions/setup-java#924

@brunoborges made their first contribution in actions/setup-java#1028

@Trass3r made their first contribution in actions/setup-java#562

@stephanabel made their first contribution in actions/setup-java#996

Full Changelog: actions/setup-java@v5...v5.4.0

Commits

1bcf9fb dist: Address Copilot review suggestions from PR #1042 (GraalVM Community) (#...
fa2c650 docs: note jdkfile approach for Early Access / unreleased JDK builds (#1058)
1d56e31 dist: Add GraalVM Community distribution support (#1042)
1d25252 chore: Harden workflows: least-privilege permissions + zizmor integration (#1...
668c1ea docs: add post-install keytool import for the JDK cacerts trust store (#1051)
a9a46fb docs: document self-signed certificate / internal CA handling for GitHub Ente...
5431e71 docs: add JavaFX Maven project configuration instructions (#1044)
4baa9b4 docs: replace non-existent HelloWorldApp references with java --version (#1043)
eab4b08 Bump @types/node from 25.9.3 to 26.0.0 (#1031)
bf0c0e6 Bump actions/checkout from 6 to 7 (#1032)
Additional commits viewable in compare view

Updates nais/docker-build-push from 05dbb6091b30bd84279c6d64a45ef8782fd410a5 to f8bc7437f7549c2b08197152d781b98f8727a08a

Commits

f8bc743 Merge pull request #79 from nais/feature/add-additional-sboms-support
c0b1793 build(deps): update nais/attest-sign action to a new commit hash
d2960a9 feat(action): add support for additional CycloneDX SBOM files
See full diff in compare view

Updates release-drafter/release-drafter from 7.4.0 to 7.5.1

Release notes

Sourced from release-drafter/release-drafter's releases.

v7.5.1

What's Changed

Bug Fixes

fix: use PR changed files as the source of truth for path filtering (#1640) @cchanche

Full Changelog: release-drafter/release-drafter@v7.5.0...v7.5.1

v7.5.0

What's Changed

New

feat: align increments to semver lib from 0.0.0 (#1636) @cchanche

Bug Fixes

fix: require actual matches for category mode only (#1639) @cchanche

Dependency Updates

build(deps): bump undici from 6.24.1 to 6.27.0 (#1637) @dependabot[bot]

Full Changelog: release-drafter/release-drafter@v7.4.0...v7.5.0

Commits

4d75298 chore: release v7.5.1
87be2bf fix: use PR changed files as the source of truth for path filtering (#1640)
73b95fa chore: release v7.5.0
46fd415 Fix/align increments to semver lib from 0.0.0 (#1636)
ee02572 chore: upgrade various deps
cd91445 build(deps): bump undici from 6.24.1 to 6.27.0 (#1637)
33c969b fix: require actual matches for category mode only (#1639)
5d6d314 ci: support label 'dependencies' for dependabot
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…pdates Bumps the github-action-dependencies group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [release-drafter/release-drafter/autolabeler](https://github.com/release-drafter/release-drafter) | `7.4.0` | `7.5.1` | | [nais/deploy/actions/deploy](https://github.com/nais/deploy) | `5fdd91aaf69bb0d6dd5e5118cdacb639f487b93b` | `2d18f050f07b6a007864c6a57070ed915d571beb` | | [actions/setup-java](https://github.com/actions/setup-java) | `5.3.0` | `5.4.0` | | [nais/docker-build-push](https://github.com/nais/docker-build-push) | `05dbb6091b30bd84279c6d64a45ef8782fd410a5` | `f8bc7437f7549c2b08197152d781b98f8727a08a` | | [release-drafter/release-drafter](https://github.com/release-drafter/release-drafter) | `7.4.0` | `7.5.1` | Updates `release-drafter/release-drafter/autolabeler` from 7.4.0 to 7.5.1 - [Release notes](https://github.com/release-drafter/release-drafter/releases) - [Commits](release-drafter/release-drafter@ed4bc48...4d75298) Updates `nais/deploy/actions/deploy` from 5fdd91aaf69bb0d6dd5e5118cdacb639f487b93b to 2d18f050f07b6a007864c6a57070ed915d571beb - [Release notes](https://github.com/nais/deploy/releases) - [Commits](nais/deploy@5fdd91a...2d18f05) Updates `actions/setup-java` from 5.3.0 to 5.4.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@ad2b381...1bcf9fb) Updates `nais/docker-build-push` from 05dbb6091b30bd84279c6d64a45ef8782fd410a5 to f8bc7437f7549c2b08197152d781b98f8727a08a - [Release notes](https://github.com/nais/docker-build-push/releases) - [Commits](nais/docker-build-push@05dbb60...f8bc743) Updates `release-drafter/release-drafter` from 7.4.0 to 7.5.1 - [Release notes](https://github.com/release-drafter/release-drafter/releases) - [Commits](release-drafter/release-drafter@ed4bc48...4d75298) --- updated-dependencies: - dependency-name: release-drafter/release-drafter/autolabeler dependency-version: 7.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-action-dependencies - dependency-name: nais/deploy/actions/deploy dependency-version: 2d18f050f07b6a007864c6a57070ed915d571beb dependency-type: direct:production dependency-group: github-action-dependencies - dependency-name: actions/setup-java dependency-version: 5.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-action-dependencies - dependency-name: nais/docker-build-push dependency-version: f8bc7437f7549c2b08197152d781b98f8727a08a dependency-type: direct:production dependency-group: github-action-dependencies - dependency-name: release-drafter/release-drafter dependency-version: 7.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-action-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Jul 1, 2026

dependabot Bot requested a review from a team as a code owner July 1, 2026 12:34

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Jul 1, 2026

github-actions Bot added the ci Continuous Integration label Jul 1, 2026

tilen1976 approved these changes Jul 9, 2026

View reviewed changes

tilen1976 merged commit 87bc408 into main Jul 9, 2026
4 checks passed

tilen1976 deleted the dependabot/github_actions/github-action-dependencies-7b452d75db branch July 9, 2026 06:07

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the github-action-dependencies group across 1 directory with 5 updates#559

Bump the github-action-dependencies group across 1 directory with 5 updates#559
tilen1976 merged 1 commit into
mainfrom
dependabot/github_actions/github-action-dependencies-7b452d75db

dependabot Bot commented on behalf of github Jul 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 1, 2026

v7.5.1

What's Changed

Bug Fixes

v7.5.0

What's Changed

New

Bug Fixes

Dependency Updates

v5.4.0

What's Changed

New Contributors

v7.5.1

What's Changed

Bug Fixes

v7.5.0

What's Changed

New

Bug Fixes

Dependency Updates

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant