chore(deps): bump actions/setup-java from 5.4.0 to 5.7.0 - #447
chore(deps): bump actions/setup-java from 5.4.0 to 5.7.0#447dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5.4.0 to 5.7.0. - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@1bcf9fb...b6effb0) --- updated-dependencies: - dependency-name: actions/setup-java dependency-version: 5.7.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
|
![devin-ai-integration[bot]](https://avatars.githubusercontent.com/in/811515?s=60&v=4){kind=small}
|
|
||
| - name: set up JDK 17 | ||
| uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0 | ||
| uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0 |
There was a problem hiding this comment.
🟡 Android CI build may break because the requested Java flavor is retired in the new tool version
The Android job still asks for the retired "adopt" Java flavor (distribution: 'adopt' at .github/workflows/native_build.yaml:22) while upgrading to a version that deprecates it, so the Android compile job can start warning or failing outright.
Impact: The Android compile check in CI may stop working, blocking pull requests.
Deprecated Adopt distribution in setup-java v5.7.0
The release notes for the bumped version explicitly include "Deprecate legacy Adopt distributions in v5" (actions/setup-java#1186). The pinned SHA b6effb05e454b25005698d916606bdc6ffcbf961 is that commit. The workflow at .github/workflows/native_build.yaml:19-22 continues to pass distribution: 'adopt', which AdoptOpenJDK no longer publishes (superseded by Eclipse Temurin). Switching to temurin keeps the same JDK 17 build with a maintained distribution.
Prompt for agents
The Android job in .github/workflows/native_build.yaml sets up JDK 17 with distribution: 'adopt'. The setup-java bump to v5.7.0 deprecates legacy Adopt distributions, so this input may emit deprecation warnings now and stop resolving in a future release. Consider migrating the distribution to 'temurin' (the successor to AdoptOpenJDK) while keeping java-version '17', and verify the Gradle assembleDebug step still passes.
Was this helpful? React with 👍 or 👎 to provide feedback.
Bumps actions/setup-java from 5.4.0 to 5.7.0.
Release notes
Sourced from actions/setup-java's releases.
Commits
b6effb0Deprecate legacy Adopt distributions in v5 (#1186)e498d2aBackport #1151: Fix missing wrapper cache distributions (#1153)6a3384dFix npm audit failures on releases/v5 (#1154)03ad4deBackport #1097/#1098: cache Maven and Gradle wrapper distributions separately...d229d2eBackport #1111: Preserve Maven toolchains across repeated setup-java runs (#1...bbf0f69dist: Cover Tencent Kona JDK 25 (#1110)513edc4feat: expose cache-primary-key output (#597) [v5 backport] (#1089)62df799Add Maven compiler problem matcher for javac diagnostics (#1087)176156achore: bump version to 5.6.0 for v5 release linebf7b8debuild: rebuild dist for backported changes (#1079, #1083, #1084)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)