mirrors/guava
0
0 Fork 0
mirror of https://github.com/google/guava.git synced 2026-10-28 16:47:30 +08:00
Code Activity
7,580 Commits 53 Branches 124 Tags
master
Commit Graph
213 Commits
Author SHA1 Message Date
cpovirk 99dfa90a13 Rework Dependabot config for Maven and Maven Wrapper. 
The config from https://github.com/google/guava/commit/c05d28807a6f0fbcb0379349884632c07180a4bd is not working how I'd hoped: We're getting PRs to [bump deps like `org.codehaus.mojo:animal-sniffer-maven-plugin`](https://github.com/google/guava/pull/8725), not only PRs for Maven and Maven Wrapper. It's possible that we should just give in and accept those, too, but I was hoping to defer that.

I'm not confident that this new config will work, either!

RELNOTES=n/a
PiperOrigin-RevId: 995193422
 2026-10-07 10:24:03 -07:00
dependabot[bot] 994a2fe5be Bump gradle/actions/setup-gradle 
Bumps the github-actions group with 1 update: [gradle/actions/setup-gradle](https://github.com/gradle/actions).

Updates `gradle/actions/setup-gradle` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](https://github.com/gradle/actions/compare/9c971963bec38e04b3d30dcc455b5382be2fdbfb...3f5f9adaf7d9fecd50b5935e54106014257a94e6)

Fixes https://github.com/google/guava/pull/8727

RELNOTES=n/a
PiperOrigin-RevId: 995135938
 2026-10-07 08:48:44 -07:00
cpovirk c05d28807a Request [automated updates to Maven and Maven Wrapper](https://github.com/dependabot/dependabot-core/pull/14812). 
We still won't be able to approve these and have them automatically imported. But at least we'll get PRs that I can import manually, as I do currently for GitHub Actions.

RELNOTES=n/a
PiperOrigin-RevId: 995053987
 2026-10-07 05:57:46 -07:00
cpovirk 3dab0e8773 Bump toolchain, Javadoc-generated links, and handwritten links to Java 27. 
I rechecked links that looked worth rechecking.

RELNOTES=n/a
PiperOrigin-RevId: 994789692
 2026-10-06 19:51:23 -07:00
dependabot[bot] 5dc4cd1ad4 Bump the github-actions group with 2 updates 
Bumps the github-actions group with 2 updates: [actions/setup-java](https://github.com/actions/setup-java) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).

Updates `actions/setup-java` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/dd06d9cba3e5552c54d9f8ea23572deb30010f7c...de7274f081f381c8f8158605e0321c36c376e2e6)

Updates `github/codeql-action/upload-sarif` from 4.37.8 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)

Fixes https://github.com/google/guava/pull/8705

RELNOTES=n/a
PiperOrigin-RevId: 991768158
 2026-10-01 10:41:16 -07:00
dependabot[bot] b274e74ff2 Bump the github-actions group with 3 updates 
Bumps the github-actions group with 3 updates: [actions/setup-java](https://github.com/actions/setup-java), [gradle/actions/setup-gradle](https://github.com/gradle/actions) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).

Updates `actions/setup-java` from 5.6.0 to 6.0.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/03ad4de0992f5dab5e18fcb136590ce7c4a0ac95...dd06d9cba3e5552c54d9f8ea23572deb30010f7c)

Updates `gradle/actions/setup-gradle` from 6.2.0 to 6.3.0
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](https://github.com/gradle/actions/compare/3f131e8634966bd73d06cc69884922b02e6faf92...9c971963bec38e04b3d30dcc455b5382be2fdbfb)

Updates `github/codeql-action/upload-sarif` from 4.37.3 to 4.37.8
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28)

Fixes https://github.com/google/guava/pull/8653

RELNOTES=n/a
PiperOrigin-RevId: 974544358
 2026-09-01 09:40:33 -07:00
cpovirk 3121e272c4 Stop passing [-ntp](https://maven.apache.org/docs/3.6.1/release-notes.html#user-visible-changes) now that it [is the default for GitHub Actions](https://github.com/actions/setup-java/pull/1053). 
The default changed [in time for `actions/setup-java` release 5.5.0](https://github.com/actions/setup-java/commit/6c4d4a5025dca6ad7cc86c839fadbcb66762ed3b). We are [on 5.6.0](https://github.com/google/guava/blob/ad1aebcf6df97a3e7b1965e8b58746228f150233/.github/workflows/ci.yml#L44).

I [noticed this yesterday](https://github.com/google/guava/pull/8627#issuecomment-5400043165).

RELNOTES=n/a
PiperOrigin-RevId: 970673459
 2026-08-25 11:16:55 -07:00
dependabot[bot] 0adf237b74 Bump the github-actions group with 3 updates 
Bumps the github-actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [ossf/scorecard-action](https://github.com/ossf/scorecard-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).

Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1)

Updates `ossf/scorecard-action` from 2.4.3 to 2.4.4
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/4eaacf0543bb3f2c246792bd56e8cdeffafb205a...2d1146689b8cda280b9bc96326124645441f03bc)

Updates `github/codeql-action/upload-sarif` from 4.37.0 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81)

Fixes https://github.com/google/guava/pull/8584

RELNOTES=n/a
PiperOrigin-RevId: 958416989
 2026-08-03 09:30:43 -07:00
cpovirk 5694ba06e5 Set persist-credentials: false on checkout actions. 
See https://docs.zizmor.sh/audits/#artipacked.

Compare https://github.com/jspecify/jspecify/pull/861

RELNOTES=n/a
PiperOrigin-RevId: 956568861
 2026-07-30 09:28:53 -07:00
dependabot[bot] 9917ba909a Bump the github-actions group with 2 updates 
Bumps the github-actions group with 2 updates: [actions/setup-java](https://github.com/actions/setup-java) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).

Updates `actions/setup-java` from 5.4.0 to 5.6.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/1bcf9fb12cf4aa7d266a90ae39939e61372fe520...03ad4de0992f5dab5e18fcb136590ce7c4a0ac95)

Updates `github/codeql-action/upload-sarif` from 4.36.2 to 4.37.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...99df26d4f13ea111d4ec1a7dddef6063f76b97e9)

Fixes https://github.com/google/guava/pull/8568

RELNOTES=n/a
PiperOrigin-RevId: 951658725
 2026-07-21 13:13:43 -07:00
orbisai0security af79c172d7 Set a cooldown period for Dependabot upgrades. 
(automated security fix generated by OrbisAI Security)

Fixes https://github.com/google/guava/pull/8565

RELNOTES=n/a
PiperOrigin-RevId: 951598053
 2026-07-21 11:20:53 -07:00
cpovirk 61c5f6462c Use cancel-in-progress instead of styfle/cancel-workflow-action. 
Advantages:
- We don't need to grant write permissions to a third-party action (or even use it at all).
  - Not that I have any reason to think it's likely to be a problem, but strange things happen sometimes.
- One less action means one less thing for us to merge Dependabot updates for.
- The new approach can easily allow CI for merged trunk commits to continue even after other trunk commits are merged, while still stopping PR CI when new changes are pushed.
  - This is especially nice because cancellations (at least those from `styfle/cancel-workflow-action`, maybe in general) show up as _failures_. It's nice to be able to pick out _real_ failures (e.g., those fixed by https://github.com/google/guava/commit/8ee72dc2b4f14a0d10ba434a2453262899a1ca0b and https://github.com/google/guava/commit/74eccf28ffb753b3a83f0d47bde0f67abf012c3c) without sorting through cancellations.
- All else being equal, it's nice to have smaller, simpler configuration.

Assuming that this approach holds up, I'll replicate it to our other projects.

RELNOTES=n/a
PiperOrigin-RevId: 943495905
 2026-07-06 14:26:18 -07:00
cpovirk 74eccf28ff Split Gradle integration tests into another action, and update them for Gradle 9.6.1. 
I [broke](https://github.com/google/guava/actions/runs/28799690208/job/85399383399?pr=8539) them with the Gradle upgrade of https://github.com/google/guava/commit/5312fedc7b82bb1a83111145ea192d06fd04aa27. The first error is:

`Gradle requires JVM 17 or later to run. Your build is currently configured to use JVM 11.`

The separate Gradle action should be simpler than further conditional logic in the existing actions, and it gives us more chance for parallelism. It may also be progress toward https://github.com/google/guava/pull/7775.

(I have added the new action to [our branch-protection rules](https://github.com/google/guava/settings/branch_protection_rules/35904722).)

RELNOTES=n/a
PiperOrigin-RevId: 943404496
 2026-07-06 11:36:24 -07:00
dependabot[bot] a97d860d6a Bump the github-actions group with 4 updates 
Bumps the github-actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-java](https://github.com/actions/setup-java), [gradle/actions/setup-gradle](https://github.com/gradle/actions) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).

Updates `actions/checkout` from 6.0.3 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)

Updates `actions/setup-java` from 5.2.0 to 5.4.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/be666c2fcd27ec809703dec50e508c2fdc7f6654...1bcf9fb12cf4aa7d266a90ae39939e61372fe520)

Updates `gradle/actions/setup-gradle` from 6.1.0 to 6.2.0
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](https://github.com/gradle/actions/compare/50e97c2cd7a37755bbfafc9c5b7cafaece252f6e...3f131e8634966bd73d06cc69884922b02e6faf92)

Updates `github/codeql-action/upload-sarif` from 4.36.1 to 4.36.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/87557b9c84dde89fdd9b10e88954ac2f4248e463...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)

Fixes https://github.com/google/guava/pull/8536

RELNOTES=n/a
PiperOrigin-RevId: 941138054
 2026-07-01 09:26:57 -07:00
dependabot[bot] bb11d96c29 Bump the github-actions group with 2 updates 
Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [github/codeql-action](https://github.com/github/codeql-action).

Updates `actions/checkout` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10)

Updates `github/codeql-action` from 4.35.3 to 4.36.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/e46ed2cbd01164d986452f91f178727624ae40d7...87557b9c84dde89fdd9b10e88954ac2f4248e463)

Fixes https://github.com/google/guava/pull/8461

RELNOTES=n/a
PiperOrigin-RevId: 926125613
 2026-06-03 10:32:08 -07:00
cpovirk e38048a7f6 Test with JDK 25 instead of JDK 21 in GitHub. 
We're already testing with 25 (and (regularly but not with CI) with head versions of the JDK) internally, so arguably it would be nice to keep testing with 21 externally for further coverage. But it's also nice to show publicly that we're testing under new versions, and we can always hope that it's marginally faster that way.

I considered removing more versions, but:

- It makes sense to keep Java 8, since that's our baseline.
- We have some integration tests that run under Java 11, possibly to support old versions of Gradle? I'd have to look into that.
- Java 17 is still the baseline for some major Java libraries, [such as Spring](https://github.com/spring-projects/spring-framework/wiki/Spring-Framework-Versions#jdk-version-range).

My motivation for doing this now is that I was just encouraging use of Java 25 features in https://github.com/google/guava/issues/8412.

Maybe we should bump these versions on a more regular schedule in the future.

RELNOTES=n/a
PiperOrigin-RevId: 912590939
 2026-05-08 10:35:42 -07:00
dependabot[bot] 4342259251 Bump the github-actions group with 3 updates 
Bumps the github-actions group with 3 updates: [gradle/actions](https://github.com/gradle/actions), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [github/codeql-action](https://github.com/github/codeql-action).

Updates `gradle/actions` from 6.0.1 to 6.1.0
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](https://github.com/gradle/actions/compare/39e147cb9de83bb9910b8ef8bd7fff0ee20fcd6f...50e97c2cd7a37755bbfafc9c5b7cafaece252f6e)

Updates `actions/upload-artifact` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)

Updates `github/codeql-action` from 4.35.1 to 4.35.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/c10b8064de6f491fea524254123dbe5e09572f13...e46ed2cbd01164d986452f91f178727624ae40d7)

Fixes https://github.com/google/guava/pull/8399

RELNOTES=n/a
PiperOrigin-RevId: 908855633
 2026-05-01 12:50:31 -07:00
cpovirk 6bc7ae679c Use Java 26 for javac and javadoc (and Javadoc links). 
As usual, Guava continues to be usable from Java 8; this CL changes only the build tools that we use to produce it.

Compare https://github.com/google/guava/commit/57528113f64c5e7544fd3153301cde1831f4d673 (and https://github.com/google/guava/commit/acf5bb5ca9b1fb291ce923a9444a9156c6794070).

RELNOTES=n/a
PiperOrigin-RevId: 897101009
 2026-04-09 07:25:26 -07:00
dependabot[bot] 4c35c707f4 Bump the github-actions group with 3 updates 
Bumps the github-actions group with 3 updates: [styfle/cancel-workflow-action](https://github.com/styfle/cancel-workflow-action), [gradle/actions](https://github.com/gradle/actions) and [github/codeql-action](https://github.com/github/codeql-action).

Updates `styfle/cancel-workflow-action` from 0.13.0 to 0.13.1
- [Release notes](https://github.com/styfle/cancel-workflow-action/releases)
- [Commits](https://github.com/styfle/cancel-workflow-action/compare/3155a141048f8f89c06b4cdae32e7853e97536bc...d07a454dad7609a92316b57b23c9ccfd4f59af66)

Updates `gradle/actions` from 5.0.2 to 6.0.1
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](https://github.com/gradle/actions/compare/0723195856401067f7a2779048b490ace7a47d7c...39e147cb9de83bb9910b8ef8bd7fff0ee20fcd6f)

Updates `github/codeql-action` from 4.32.4 to 4.35.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/89a39a4e59826350b863aa6b6252a07ad50cf83e...c10b8064de6f491fea524254123dbe5e09572f13)

Fixes https://github.com/google/guava/pull/8306

RELNOTES=n/a
PiperOrigin-RevId: 893130387
 2026-04-01 15:02:44 -07:00
dependabot[bot] d1ff30de04 Bump the github-actions group with 3 updates 
Bumps the github-actions group with 3 updates: [gradle/actions](https://github.com/gradle/actions), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [github/codeql-action](https://github.com/github/codeql-action).

Updates `gradle/actions` from 5.0.1 to 5.0.2
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](https://github.com/gradle/actions/compare/f29f5a9d7b09a7c6b29859002d29d24e1674c884...0723195856401067f7a2779048b490ace7a47d7c)

Updates `actions/upload-artifact` from 6.0.0 to 7.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/b7c566a772e6b6bfb58ed0dc250532a479d7789f...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f)

Updates `github/codeql-action` from 4.32.0 to 4.32.4
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b20883b0cd1f46c72ae0ba6d1090936928f9fa30...89a39a4e59826350b863aa6b6252a07ad50cf83e)

Fixes https://github.com/google/guava/pull/8232

RELNOTES=n/a
PiperOrigin-RevId: 878095022
 2026-03-03 13:19:27 -08:00
dependabot[bot] 8551cd9acd Bump the github-actions group with 5 updates 
Bumps the github-actions group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [styfle/cancel-workflow-action](https://github.com/styfle/cancel-workflow-action) | `0.12.1` | `0.13.0` |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.1` | `6.0.2` |
| [actions/setup-java](https://github.com/actions/setup-java) | `5.1.0` | `5.2.0` |
| [gradle/actions](https://github.com/gradle/actions) | `5.0.0` | `5.0.1` |
| [github/codeql-action](https://github.com/github/codeql-action) | `4.31.9` | `4.32.0` |

Updates `styfle/cancel-workflow-action` from 0.12.1 to 0.13.0
- [Release notes](https://github.com/styfle/cancel-workflow-action/releases)
- [Commits](https://github.com/styfle/cancel-workflow-action/compare/85880fa0301c86cca9da44039ee3bb12d3bedbfa...3155a141048f8f89c06b4cdae32e7853e97536bc)

Updates `actions/checkout` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/8e8c483db84b4bee98b60c0593521ed34d9990e8...de0fac2e4500dabe0009e67214ff5f5447ce83dd)

Updates `actions/setup-java` from 5.1.0 to 5.2.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/f2beeb24e141e01a676f977032f5a29d81c9e27e...be666c2fcd27ec809703dec50e508c2fdc7f6654)

Updates `gradle/actions` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](https://github.com/gradle/actions/compare/4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2...f29f5a9d7b09a7c6b29859002d29d24e1674c884)

Updates `github/codeql-action` from 4.31.9 to 4.32.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/5d4e8d1aca955e8d8589aabd499c5cae939e33c7...b20883b0cd1f46c72ae0ba6d1090936928f9fa30)

Fixes https://github.com/google/guava/pull/8191

RELNOTES=n/a
PiperOrigin-RevId: 864366283
 2026-02-02 08:23:28 -08:00
cpovirk 0bf8704626 Silence noisy logging of downloads ("transfers") in more places. 
We already do this [for our Install action](https://github.com/google/guava/blob/91cf3984b5da7c26c9d43eb34ae0d95adee7379f/.github/workflows/ci.yml#L54), but we see the noise [when publishing snapshots](https://github.com/google/guava/actions/runs/20937533296/job/60165108186#step:4:33) and [when running Gradle integration tests](https://github.com/google/guava/actions/runs/20937533814/job/60163657802#step:9:36).

Also, switch our approach to doing so from using manual logger configuration to using [the `-ntp` flag](https://maven.apache.org/docs/3.6.1/release-notes.html#user-visible-changes).

RELNOTES=n/a
PiperOrigin-RevId: 855744786
 2026-01-13 08:54:23 -08:00
cpovirk cf92c28d8c Enable Dependabot for the newly defined docs workflow under gh-pages. 
We will be able to actually merge PR directly there, since the source of truth for `gh-pages` is GitHub! But of course this will be confusing, since it's different from how changes to Guava `master` work and since both of those differ from how our other projects work... :)

Some history:
- https://github.com/google/guava/commit/6d0a979155caba6a996f34d5428adef11ae995fa
- https://github.com/google/guava/commit/fb02c3434a7dd62760d0bb3ad2249cf381b56ad3
- https://github.com/google/guava/issues/7597#issuecomment-2840049761

RELNOTES=n/a
PiperOrigin-RevId: 852813933
 2026-01-06 09:34:37 -08:00
cpovirk fb02c3434a Delete docs workflow configuration in the master branch. 
It turns out that the configuration has to [exist in the `gh-pages` branch instead](https://github.com/google/guava/commit/6d0a979155caba6a996f34d5428adef11ae995fa).

(This is a rollback of https://github.com/google/guava/commit/3a8737936c8dbec8d44690d6036532e807e53fc0.)

PiperOrigin-RevId: 852333862
 2026-01-05 09:32:39 -08:00
cpovirk 3a8737936c Create GitHub Actions workflow for deploying docs. 
This allows+requires us to [replace each release's Javadoc directory with a Javadoc archive file](https://github.com/google/guava/commit/407e30a02f2c2004764f072178e503c00248eea0).

As noted in that commit, this saves a ton of time when switching branches: I'm now seeing ~3s instead of ~30s to switch to `gh-pages` and ~2s instead of ~7s to switch back to `master`. (It probably slows down downloading the entire repo's history, though, since the repo history now contains all the original files *plus* the archives that contain them all. I can fix that if I ever rewrite the whole history of `gh-pages`.)

I'd raised this possibility back in https://github.com/google/guava/issues/7597#issuecomment-2840049761.

To make this take effect, I'll need to update https://github.com/google/guava/settings/pages to use a Source of "GitHub Actions" instead of "Deploy from a branch." This matches what we already do for JSpecify.

I notice that it may be a little weird for our `master` branch to have a GitHub Actions setup that pushes to our `gh-pages` branch, which then has a GitHub Actions setup that deploys that branch. I suspect that it at least makes sense to have two separate actions, since we sometimes push to the `gh-pages` branch outside the context of a push to `main`—notably, when we perform a release.

(One thing that we could consider is the idea of merging `gh-pages` into `master`, presumably under a `docs` directory. But I think that's been possible forever, and we haven't done it. That's probably for the best, since it would make a shallow clone of `master` slow because of all the Javadoc.)

RELNOTES=n/a
PiperOrigin-RevId: 851409347
 2026-01-02 12:03:31 -08:00
dependabot[bot] 1a143d3e9c Bump the github-actions group with 4 updates 
Bumps the github-actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-java](https://github.com/actions/setup-java), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [github/codeql-action](https://github.com/github/codeql-action).

Updates `actions/checkout` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/1af3b93b6815bc44a9784bd300feb67ff0d1eeb3...8e8c483db84b4bee98b60c0593521ed34d9990e8)

Updates `actions/setup-java` from 5.0.0 to 5.1.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/dded0888837ed1f317902acf8a20df0ad188d165...f2beeb24e141e01a676f977032f5a29d81c9e27e)

Updates `actions/upload-artifact` from 5.0.0 to 6.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/330a01c490aca151604b8cf639adc76d48f6c5d4...b7c566a772e6b6bfb58ed0dc250532a479d7789f)

Updates `github/codeql-action` from 4.31.6 to 4.31.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/fe4161a26a8629af62121b670040955b330f9af2...5d4e8d1aca955e8d8589aabd499c5cae939e33c7)

Fixes https://github.com/google/guava/pull/8142

RELNOTES=n/a
PiperOrigin-RevId: 851045846
 2026-01-01 09:31:38 -08:00
dependabot[bot] a86332829a Bump the github-actions group with 2 updates 
Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [github/codeql-action](https://github.com/github/codeql-action).

Updates `actions/checkout` from 5.0.0 to 6.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/08c6903cd8c0fde910a37f88322edcfb5dd907a8...1af3b93b6815bc44a9784bd300feb67ff0d1eeb3)

Updates `github/codeql-action` from 4.31.2 to 4.31.6
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/0499de31b99561a6d14a36a5f662c2a54f91beee...fe4161a26a8629af62121b670040955b330f9af2)

Fixes #8098

RELNOTES=n/a
PiperOrigin-RevId: 838862593
 2025-12-01 11:32:55 -08:00
dependabot[bot] e416f493d7 Bump the github-actions group with 2 updates 
Bumps the github-actions group with 2 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/upload-artifact` from 4.6.2 to 5.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/ea165f8d65b6e75b540449e92b4886f43607fa02...330a01c490aca151604b8cf639adc76d48f6c5d4)

Updates `github/codeql-action` from 3.30.5 to 4.31.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/3599b3baa15b485a2e49ef411a7a4bb2452e7f93...0499de31b99561a6d14a36a5f662c2a54f91beee)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: 4.31.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-02 07:47:29 -08:00
dependabot[bot] 4a78cfc512 Bump the github-actions group with 3 updates 
And fix the version comment on `upload-sarif`, which Dependabot missed updating in https://github.com/google/guava/pull/7962 / https://github.com/google/guava/pull/7968, apparently because of https://github.com/dependabot/dependabot-core/issues/13197.

Bumps the github-actions group with 3 updates: [gradle/actions](https://github.com/gradle/actions), [ossf/scorecard-action](https://github.com/ossf/scorecard-action) and [github/codeql-action](https://github.com/github/codeql-action).

Updates `gradle/actions` from 4.4.2 to 5.0.0
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](https://github.com/gradle/actions/compare/017a9effdb900e5b5b2fddfb590a105619dca3c3...4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2)

Updates `ossf/scorecard-action` from 2.4.2 to 2.4.3
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/05b42c624433fc40578a4040d5cf5e36ddca8cde...4eaacf0543bb3f2c246792bd56e8cdeffafb205a)

Updates `github/codeql-action` from 3.30.0 to 3.30.5
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d...3599b3baa15b485a2e49ef411a7a4bb2452e7f93)

Fixes #8038

RELNOTES=n/a
PiperOrigin-RevId: 813818150
 2025-10-01 10:49:56 -07:00
cpovirk a49016f5ec Fix bad merge from https://github.com/google/guava/commit/57528113f64c5e7544fd3153301cde1831f4d673. 
RELNOTES=n/a
PiperOrigin-RevId: 813247917
 2025-09-30 07:02:01 -07:00
cpovirk 57528113f6 Use Java 25 for javac and javadoc. 
As usual, Guava continues to be usable from Java 8; this CL changes only the build tools that we use to produce it.

Compare https://github.com/google/guava/commit/e4f311803c79f1a9b24467ead01371453c34e398.

RELNOTES=n/a
PiperOrigin-RevId: 812751582
 2025-09-29 05:58:59 -07:00
cpovirk 0edab3dd4a Move configuration out of sonatype-oss-release to enable it by default (except for maven-gpg-plugin), and update related configuration as necessary. 
...as contemplated in cl/788538710 and elsewhere.

(Background: We carried much or all of the `sonatype-oss-release` configuration over from the old `oss-parent` in changes like cl/492304151.)

This (I hope) accomplished two classes of goals:

- By enabling\[*\] `central-publishing-maven-plugin` by default, we enable it even for _snapshot_ deployment. Advantages:
   - It lets the plugin automatically disable `maven-deploy-plugin`. (Compare cl/805973207 for Truth.) And _that_ allows us to remove the configuration of https://central.sonatype.com/repository/maven-snapshots, which isn't needed by `central-publishing-maven-plugin` but which has been required by `maven-deploy-plugin`, which has no default. (Compare cl/805870501 for Truth.)
   - It causes us to begin deploying snapshots through the new Central system.
      - To make that work, we need to [set `server-id` to `central`, not `sonatype-central-staging`](https://github.com/google/auto/issues/1965#issuecomment-3299992670), since `central-publishing-maven-plugin` uses a different ID than we had `maven-deploy-plugin` set up to use. (Compare cl/807814773 for Truth.) Since `central` is also what is used for non-snapshot releases, we could view this is a baby step toward performing non-snapshot releases on GitHub CI someday.
- It ensures that non-release builds _also_ run some plugins and/or use the versions of those plugins that we have requested. (For _some_ projects, we've already been running these plugins, or we've at least kept versions consistent because we use `dependencyManagement` or other explicit versions.) Advantages and fallout:
   - We now get coverage for Javadoc during CI. (We've wanted this before. We went so far as to implement it for Truth in cl/509829752, and I've wanted it multiple times for Compile-Testing: cl/494805776, cl/802247571.) This change led to errors for Compile-Testing (again!) under JDK 8, so I fixed those by making the `--add-exports` configuration conditional.
   - We need to make a change to some of our CI configurations: Our snapshot-publishing builds request Javadoc and sources explicitly at the command line (with `mvn source:jar javadoc:jar deploy`). With this CL's changes, Maven would try to build Javadoc and sources twice—once for the command-line request and once for the new configuration we have. The fix for that is to stop making the explicit request. (Compare cl/807772725 for Truth, somewhat cl/572327204 for Guava, and maybe sorta kinda cl/536746714 for jimfs.)
   - We address the following warning, which https://github.com/google/guava/pull/7961 had proposed to address another way but for which I'd merely added a TODO in cl/804600714:
      ```
      [WARNING] Some problems were encountered while building the effective model for com.google.guava:guava-tests:jar:999.0.0-HEAD-jre-SNAPSHOT
      [WARNING] 'build.plugins.plugin.version' for org.sonatype.central:central-publishing-maven-plugin is missing. @ line 103, column 15
      [WARNING]
      [WARNING] It is highly recommended to fix these problems because they threaten the stability of your build.
      [WARNING]
      [WARNING] For this reason, future Maven versions might no longer support building such malformed projects.
      ```

\[*\] "Enabling" may or may not be the right word. The `central-publishing-maven-plugin` plugin still doesn't _run_ unless someone actually runs `mvn deploy`. The only difference in output that that plugin change causes for a typical build is this, which I assume is related to its usage of [`<extensions>true</extensions>`](https://maven.apache.org/guides/mini/guide-using-extensions.html):

```
[INFO] Inspecting build with total of 6 modules
[INFO] Installing Central Publishing features
```

I left `maven-gpg-plugin` alone because we don't want to request that users enter their signing keys during snapshot deployment, let alone during normal builds. Another option would be to move it out of the profile but to disable it by default, with the profile becoming responsible for undoing the disablement. (Or we could stop using a profile entirely in favor of passing a flag to set a property to do the same.) That would theoretically be nice because it helps with the "same version number" goal discussed above. But given that I never recall having run `maven-gpg-plugin` outside a release setting, I doubt that that matters in practice.

(If we're lucky, this CL's changes to Auto specifically might be enough to deal with https://github.com/google/auto/issues/1965.)

Plus: I removed some redundant declarations of `<groupId>org.apache.maven.plugins</groupId>`, which is the default for plugins. (We had been including it inconsistently.) Compare cl/793718324.

Finally: In Guava, I removed a "Guava Documentation Site" entry. This was added back in cl/29254221, but I can't immediately figure out why, and I see no other references to its `guava-site` in either the main or `gh-pages` branch of our repo, nor anywhere internal to Google. I'm hoping that it's at least become unnecessary in the past decade-plus. (The changes in this CL at least have no effect on the _jars_ that we produce as output.)

Bonus Maven curiosity: I noticed that we have been getting a Javadoc warning:

```
[WARNING] Javadoc 1.4+ doesn't support the -1.1 switch anymore. Ignore this option.
```

This appears to be [a known issue](https://lists.apache.org/thread/k15x84xvj0tv9gngy2426cpm83d85l61).

RELNOTES=n/a
PiperOrigin-RevId: 807859217
 2025-09-16 14:54:22 -07:00
dependabot[bot] 9547910cc2 Bump the github-actions group with 4 updates 
Bumps the github-actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-java](https://github.com/actions/setup-java), [gradle/actions](https://github.com/gradle/actions) and [github/codeql-action](https://github.com/github/codeql-action).

Updates `actions/checkout` from 4.2.2 to 5.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/11bd71901bbe5b1630ceea73d27597364c9af683...08c6903cd8c0fde910a37f88322edcfb5dd907a8)

Updates `actions/setup-java` from 4.7.1 to 5.0.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/c5195efecf7bdfc987ee8bae7a71cb8b11521c00...dded0888837ed1f317902acf8a20df0ad188d165)

Updates `gradle/actions` from 4.4.1 to 4.4.2
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](https://github.com/gradle/actions/compare/ac638b010cf58a27ee6c972d7336334ccaf61c96...017a9effdb900e5b5b2fddfb590a105619dca3c3)

Updates `github/codeql-action` from 3.29.7 to 3.30.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/51f77329afa6477de8c49fc9c7046c15b9a4e79d...2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d)

Fixes #7962

RELNOTES=n/a
PiperOrigin-RevId: 802656972
 2025-09-03 12:19:31 -07:00
dependabot[bot] 995f5d428d Bump github/codeql-action in the github-actions group 
Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.29.2 to 3.29.5
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/181d5eefc20863364f96762470ba6f862bdef56b...51f77329afa6477de8c49fc9c7046c15b9a4e79d)

Fixes #7912

RELNOTES=n/a
PiperOrigin-RevId: 790769420
 2025-08-04 09:02:17 -07:00
cpovirk be68861388 Use setup-gradle, which contains a built-in replacement for the wrapper validation that has been flaking lately. 
Compare https://github.com/jspecify/jspecify/pull/742

RELNOTES=n/a
PiperOrigin-RevId: 786280522
 2025-07-23 08:00:47 -07:00
dependabot[bot] 990557ca12 Bump github/codeql-action in the github-actions group 
Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.28.18 to 3.29.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/ff0a06e83cb2de871e5a09832bc6a81e7276941f...181d5eefc20863364f96762470ba6f862bdef56b)

Fixes #7852

RELNOTES=n/a
PiperOrigin-RevId: 778068825
 2025-07-01 09:15:41 -07:00
dependabot[bot] a449c9acc6 Bump the github-actions group with 2 updates 
Bumps the github-actions group with 2 updates: [ossf/scorecard-action](https://github.com/ossf/scorecard-action) and [github/codeql-action](https://github.com/github/codeql-action).

Updates `ossf/scorecard-action` from 2.4.1 to 2.4.2
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/f49aabe0b5af0936a0987cfb85d86b75731b0186...05b42c624433fc40578a4040d5cf5e36ddca8cde)

Updates `github/codeql-action` from 3.28.16 to 3.28.18
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/28deaeda66b76a05916b6923827895f2b14ab387...ff0a06e83cb2de871e5a09832bc6a81e7276941f)

Fixes #7822

RELNOTES=n/a
PiperOrigin-RevId: 766643801
 2025-06-03 06:54:52 -07:00
dependabot[bot] 41c7d2ddbf Bump the github-actions group with 2 updates 
Bumps the github-actions group with 2 updates: [actions/setup-java](https://github.com/actions/setup-java) and [github/codeql-action](https://github.com/github/codeql-action).

Updates `actions/setup-java` from 4.7.0 to 4.7.1
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/3a4f6e1af504cf6a31855fa899c6aa5355ba6c12...c5195efecf7bdfc987ee8bae7a71cb8b11521c00)

Updates `github/codeql-action` from 3.28.13 to 3.28.16
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1b549b9259bda1cb5ddde3b41741a82a2d15a841...28deaeda66b76a05916b6923827895f2b14ab387)

Fixes #7793

RELNOTES=n/a
PiperOrigin-RevId: 753682651
 2025-05-01 12:27:29 -07:00
cpovirk e4f311803c Use Java 24 for javac and javadoc. 
As usual, Guava continues to be usable from Java 8; this CL changes only the build tools that we use to produce it.

RELNOTES=n/a
PiperOrigin-RevId: 744082109
 2025-04-04 15:08:33 -07:00
dependabot[bot] e24ae357d3 Bump github/codeql-action in the github-actions group 
Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.28.12 to 3.28.13
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/5f8171a638ada777af81d42b55959a643bb29017...1b549b9259bda1cb5ddde3b41741a82a2d15a841)

Fixes #7754

RELNOTES=n/a
PiperOrigin-RevId: 742743995
 2025-04-01 10:08:56 -07:00
Éamonn McManus 2aaa4548ec Manually apply a Dependabot patch to Guava. 
Closes https://github.com/google/guava/pull/7736.

RELNOTES=n/a
PiperOrigin-RevId: 739964938
 2025-03-24 09:24:15 -07:00
cpovirk 10e0510159 Standardize Dependabot configs on "Maven weekly, GitHub Actions monthly." 
This includes:
- setting up Dependabot _at all_ for a few projects
- dropping GitHub Actions from weekly to monthly for the rest

My feeling on the latter is that GitHub Actions upgrades never feel urgent: Even when GitHub stopped supporting old versions of `actions/cache`, they gave plenty of warning. I'd also note that I don't think we've had trouble much (if ever?) with upgrades to GitHub Actions, so there's even less reason to fear batching of updates than usual. Given that, we might as well try to batch together as many updates as we can so as to marginally reduce toil. (And if an upgrade it ever truly urgent for security reasons, I expect that Dependabot would push us to it promptly, anyway, perhaps even for projects without a Dependabot config at all.)

RELNOTES=n/a
PiperOrigin-RevId: 739294702
 2025-03-21 14:15:53 -07:00
dependabot[bot] 88467fd075 Bump github/codeql-action in the github-actions group 
Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.28.10 to 3.28.11
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d...6bb031afdd8eb862ea3fc1848194185e076637e5)

Fixes #7717

RELNOTES=n/a
PiperOrigin-RevId: 735451213
 2025-03-10 11:30:50 -07:00
dependabot[bot] 223156d086 Bump the github-actions group with 3 updates 
Bumps the github-actions group with 3 updates: [ossf/scorecard-action](https://github.com/ossf/scorecard-action), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [github/codeql-action](https://github.com/github/codeql-action).

Updates `ossf/scorecard-action` from 2.4.0 to 2.4.1
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/62b2cac7ed8198b15735ed49ab1e5cf35480ba46...f49aabe0b5af0936a0987cfb85d86b75731b0186)

Updates `actions/upload-artifact` from 4.6.0 to 4.6.1
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08...4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1)

Updates `github/codeql-action` from 3.28.9 to 3.28.10
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0...b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d)

Fixes #7700

RELNOTES=n/a
PiperOrigin-RevId: 730489574
 2025-02-24 09:51:48 -08:00
dependabot[bot] 5b19523fd4 Bump github/codeql-action in the github-actions group 
Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.28.8 to 3.28.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/dd746615b3b9d728a6a37ca2045b68ca76d4841a...9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0)

Fixes #7652

RELNOTES=n/a
PiperOrigin-RevId: 725311401
 2025-02-10 12:41:58 -08:00
dependabot[bot] 6baae9fa3e Bump the github-actions group with 2 updates 
Bumps the github-actions group with 2 updates: [actions/setup-java](https://github.com/actions/setup-java) and [github/codeql-action](https://github.com/github/codeql-action).

Updates `actions/setup-java` from 4.6.0 to 4.7.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/7a6d8a8234af8eb26422e24e3006232cccaa061b...3a4f6e1af504cf6a31855fa899c6aa5355ba6c12)

Updates `github/codeql-action` from 3.28.5 to 3.28.8
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4...dd746615b3b9d728a6a37ca2045b68ca76d4841a)

Fixes #7640

RELNOTES=n/a
PiperOrigin-RevId: 722739671
 2025-02-03 11:49:18 -08:00
dependabot[bot] ff278054a9 Bump github/codeql-action in the github-actions group 
Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).

Updates `github/codeql-action` from 3.28.1 to 3.28.5
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/b6a472f63d85b9c78a3ac5e89422239fc15e9b3c...f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4)

Fixes #7634

RELNOTES=n/a
PiperOrigin-RevId: 720192921
 2025-01-27 09:12:11 -08:00
dependabot[bot] 30aee2eede Bump the github-actions group with 2 updates 
Bumps the github-actions group with 2 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact) and [github/codeql-action](https://github.com/github/codeql-action).

Updates `actions/upload-artifact` from 4.5.0 to 4.6.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/6f51ac03b9356f520e9adb1b1b7802705f340c2b...65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08)

Updates `github/codeql-action` from 3.28.0 to 3.28.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/48ab28a6f5dbc2a99bf1e0131198dd8f1df78169...b6a472f63d85b9c78a3ac5e89422239fc15e9b3c)

Fixes #7615

RELNOTES=n/a
PiperOrigin-RevId: 715425154
 2025-01-14 10:06:35 -08:00
cpovirk 0180d0924b Restore Sonatype configuration that I'd accidentally removed in cl/711746683. 
This will presumably fix our broken snapshots.

RELNOTES=n/a
PiperOrigin-RevId: 713657548
 2025-01-09 07:02:34 -08:00
dependabot[bot] c8b804109f Bump the github-actions group with 3 updates 
Bumps the github-actions group with 3 updates: [actions/setup-java](https://github.com/actions/setup-java), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [github/codeql-action](https://github.com/github/codeql-action).

Updates `actions/setup-java` from 4.5.0 to 4.6.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/8df1039502a15bceb9433410b1a100fbe190c53b...7a6d8a8234af8eb26422e24e3006232cccaa061b)

Updates `actions/upload-artifact` from 4.4.3 to 4.5.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882...6f51ac03b9356f520e9adb1b1b7802705f340c2b)

Updates `github/codeql-action` from 3.27.9 to 3.28.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/df409f7d9260372bd5f19e5b04e83cb3c43714ae...48ab28a6f5dbc2a99bf1e0131198dd8f1df78169)

Fixes #7574

RELNOTES=n/a
PiperOrigin-RevId: 712539491
 2025-01-06 08:36:50 -08:00