From 57e448c0bf1648157996ee25fd4054cbbfe094a6 Mon Sep 17 00:00:00 2001 From: Dianjin Wang Date: Tue, 16 Jun 2026 12:06:54 +0800 Subject: [PATCH] Update gradle/actions/dependency-submission to v6.1.0 v5.0.0 is no longer in the Apache infrastructure-actions allowlist (actions.yml). Bump to v6.1.0 which is already trusted. See: - https://github.com/apache/infrastructure-actions/blob/2b6ec5f38ac73c7c5970f3b4f863e8d15bf12d7d/actions.yml#L424-L438 --- .github/workflows/dependency-submission.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependency-submission.yml b/.github/workflows/dependency-submission.yml index f6d7e79b..8e836482 100644 --- a/.github/workflows/dependency-submission.yml +++ b/.github/workflows/dependency-submission.yml @@ -41,7 +41,7 @@ jobs: working-directory: ./server run: make prepare-gradle-wrapper - name: Generate and submit dependency graph - uses: gradle/actions/dependency-submission@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v5.0.0 + uses: gradle/actions/dependency-submission@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0 with: build-root-directory: server artifact-retention-days: 5 \ No newline at end of file