Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 2 updates#9

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/minor-and-patch-0b86e386dd
Open

chore(deps): bump the minor-and-patch group across 1 directory with 2 updates#9
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/minor-and-patch-0b86e386dd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 5, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 2 updates in the / directory: actions/setup-java and reactivecircus/android-emulator-runner.

Updates actions/setup-java from 5.2.0 to 5.4.0

Release notes

Sourced from actions/setup-java's releases.

v5.4.0

What's Changed

New Contributors

Full Changelog: actions/setup-java@v5...v5.4.0

v5.3.0

What's Changed

... (truncated)

Commits
  • 1bcf9fb dist: Address Copilot review suggestions from PR #1042 (GraalVM Community) (#...
  • fa2c650 docs: note jdkfile approach for Early Access / unreleased JDK builds (#1058)
  • 1d56e31 dist: Add GraalVM Community distribution support (#1042)
  • 1d25252 chore: Harden workflows: least-privilege permissions + zizmor integration (#1...
  • 668c1ea docs: add post-install keytool import for the JDK cacerts trust store (#1051)
  • a9a46fb docs: document self-signed certificate / internal CA handling for GitHub Ente...
  • 5431e71 docs: add JavaFX Maven project configuration instructions (#1044)
  • 4baa9b4 docs: replace non-existent HelloWorldApp references with java --version (#1043)
  • eab4b08 Bump @​types/node from 25.9.3 to 26.0.0 (#1031)
  • bf0c0e6 Bump actions/checkout from 6 to 7 (#1032)
  • Additional commits viewable in compare view

Updates reactivecircus/android-emulator-runner from 2.37.0 to 2.38.0

Release notes

Sourced from reactivecircus/android-emulator-runner's releases.

v2.38.0

What's Changed

New Contributors

Full Changelog: ReactiveCircus/android-emulator-runner@v2.37.0...v2.38.0

Changelog

Sourced from reactivecircus/android-emulator-runner's changelog.

Change Log

Unreleased

v2.38.0

  • Update SDK build tools to 37.0.0. - #475

v2.37.0

  • Update SDK build tools to 36.0.0, update SDK command-line tools to 20.0. - #467
  • Run action on Node 24. - #466
  • Update Node and npm packages. - #466

v2.36.0

  • Remove --abi option to better support 16-KB-based system images (#456).

v2.35.0

  • Optimize config.ini updates and efficiency improvements report (#436).
  • Fix pre-emulator-launch-script (#439).
  • Allow google_apis_ps16k as a valid target (#440).

v2.34.0

  • Allow arbitrary value for api-level such as Baklava and 35-ext15. - 428
  • Add option to specify system-image-api-level to use a system image with a different API level than the platform. - 428
  • Support automotive and desktop targets: android-automotive, android-automotive-playstore, android-desktop. - 428

v2.33.0

  • Fix missing AVD directory in ubuntu-24.04 runner. - 415
  • Update SDK build tools to 35.0.0, update SDK command-line tools to 16.0. - #356
  • Stop changing owner of the SDK directory. - 406 #409
  • Upgrade to latest npm dependencies. - #401

v2.32.0

  • Add port parameter for customizing the emulator port to use. - #383

v2.31.0

  • Support setting VanillaIceCream as api-level. - #378
  • Install platforms for the specified api-level. - #384

v2.30.1

... (truncated)

Commits
  • a421e43 Merge branch 'main' into release/v2
  • cad3216 Prepare for release 2.38.0.
  • ed6254c Revert "Add minorApiLevel for compile SDK. Test with API 37.0."
  • 8acdc11 Add minorApiLevel for compile SDK. Test with API 37.0.
  • a917366 Build tools 37.0.0 (#475)
  • ae2c4d7 Add FreeOrion to the list (#470)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates

Bumps the minor-and-patch group with 2 updates in the / directory: [actions/setup-java](https://github.com/actions/setup-java) and [reactivecircus/android-emulator-runner](https://github.com/reactivecircus/android-emulator-runner).


Updates `actions/setup-java` from 5.2.0 to 5.4.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@be666c2...1bcf9fb)

Updates `reactivecircus/android-emulator-runner` from 2.37.0 to 2.38.0
- [Release notes](https://github.com/reactivecircus/android-emulator-runner/releases)
- [Changelog](https://github.com/ReactiveCircus/android-emulator-runner/blob/main/CHANGELOG.md)
- [Commits](ReactiveCircus/android-emulator-runner@e89f39f...a421e43)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: reactivecircus/android-emulator-runner
  dependency-version: 2.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 5, 2026

@dj4oC dj4oC left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependabot GitHub Actions bump: actions/setup-java 5.2.0→5.4.0 and reactivecircus/android-emulator-runner 2.37.0→2.38.0, both minor version bumps, both pinned by commit SHA with version comment. Same pair of updates already reviewed in owncloud/android-scenario-testing#20.

Findings

Nothing blocking. Minor version bumps only, compile check green, no known CVE.

Verdict

Approved — Dependabot fast-lane eligible (CI green, no open human/bot questions, no known CVE).


Generated by Claude Code

dj4oC commented Jul 9, 2026

Copy link
Copy Markdown
Contributor
  • Security: no findings
  • Stability: no findings
  • Performance: no findings
  • Test coverage: N/A — dependency manifest bump, no new code
  • TODOs found: none
  • Dependency touched: yes — confirmed in dependabot.yml (github-actions ecosystem)
  • CI status: all green
  • Stale review: no

Generated by Claude Code

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant