Skip to content

Bump dependencies to fix security alerts #846

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
wu-sheng merged 2 commits into from
Nov 2, 2026
Merged

Bump dependencies to fix security alerts #846

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
130bdb0
Bump test dependencies to fix security alerts
wu-sheng Nov 2, 2026
d44e763
Bump GitHub Actions to current ASF-approved versions
wu-sheng Nov 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions .github/actions/build/action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,20 +31,20 @@ runs:
using: "composite"
steps:
- name: Check License
uses: apache/skywalking-eyes@a63f4afcc287dfb3727ecc45a4afc55a5e69c15f
uses: apache/skywalking-eyes@a196742f472feaffafea537ce5a2a4c3c53a8de4 # v0.9.0
- name: Add checkstyle-plugin
shell: bash
run: |
echo "::group::Add checkstyle plugin to the pom.xml"
sed -i "/<\/sourceDirectories>/i <sourceDirectory>scenarios\/""${{ inputs.test_case }}""<\/sourceDirectory>" test/plugin/pom.xml
echo "::endgroup::"
- name: Cache local Maven repository
uses: actions/cache@v4
uses: actions/cache@v6
with:
path: ~/.m2/repository
key: ${{ runner.os }}-maven-agent-test-${{ hashFiles('**/pom.xml') }}
restore-keys: ${{ runner.os }}-maven-agent-test-
- uses: actions/setup-java@v2
- uses: actions/setup-java@v6
with:
distribution: temurin
java-version: 17
Expand All @@ -56,12 +56,12 @@ runs:
./mvnw -q --batch-mode clean package -Dmaven.test.skip || \
./mvnw -q --batch-mode clean package -Dmaven.test.skip
echo "::endgroup::"
- uses: actions/upload-artifact@v4
- uses: actions/upload-artifact@v7
name: Upload Agent
with:
name: skywalking-agent
path: skywalking-agent
- uses: actions/setup-java@v2
- uses: actions/setup-java@v6
with:
distribution: temurin
java-version: 8
Expand Down Expand Up @@ -90,7 +90,7 @@ runs:
docker save -o test-containers/skywalking-agent-test-tomcat-1.0.0.tgz skywalking/agent-test-tomcat:1.0.0
ls -la test-containers/
echo "::endgroup::"
- uses: actions/upload-artifact@v4
- uses: actions/upload-artifact@v7
name: Upload Test Containers
with:
name: test-tools
Expand Down
8 changes: 4 additions & 4 deletions .github/actions/run/action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,11 +25,11 @@ inputs:
runs:
using: "composite"
steps:
- uses: actions/download-artifact@v4
- uses: actions/download-artifact@v8
with:
name: skywalking-agent
path: skywalking-agent
- uses: actions/download-artifact@v4
- uses: actions/download-artifact@v8
with:
name: test-tools
- name: Disable containerd image store
Expand Down Expand Up @@ -59,7 +59,7 @@ runs:
fi
docker images
- name: Cache local Maven repository
uses: actions/cache@v4
uses: actions/cache@v6
with:
path: ~/.m2/repository
key: ${{ runner.os }}-maven-agent-test-run-${{ hashFiles('**/pom.xml') }}
Expand All @@ -70,7 +70,7 @@ runs:
echo "::group::Run Plugin Test ${{ inputs.test_case }}"
bash test/plugin/run.sh --debug ${{ inputs.test_case }}
echo "::endgroup::"
- uses: actions/upload-artifact@v4
- uses: actions/upload-artifact@v7
name: Upload Agent
if: always()
with:
Expand Down
10 changes: 5 additions & 5 deletions .github/workflows/ci.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,11 +31,11 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 10
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- name: Check License Header
uses: apache/skywalking-eyes@9bd5feb86b5817aa6072b008f9866a2c3bbc8587
uses: apache/skywalking-eyes@a196742f472feaffafea537ce5a2a4c3c53a8de4 # v0.9.0
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Expand All @@ -58,16 +58,16 @@ jobs:
- if: matrix.os == 'windows'
name: Support longpaths
run: git config --system core.longpaths true
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- name: Cache local Maven repository
uses: actions/cache@v4
uses: actions/cache@v6
with:
path: ~/.m2/repository
key: ${{ runner.os }}-maven-ci-${{ hashFiles('**/pom.xml') }}
restore-keys: ${{ runner.os }}-maven-ci-
- uses: actions/setup-java@v2
- uses: actions/setup-java@v6
with:
distribution: temurin
java-version: ${{ matrix.java-version }}
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/codeql.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,21 +44,21 @@ jobs:

steps:
- name: Checkout repository
uses: actions/checkout@v2
uses: actions/checkout@v7
with:
submodules: true

- uses: actions/setup-java@v2
- uses: actions/setup-java@v6
with:
distribution: temurin
java-version: 17

- name: Initialize CodeQL
uses: github/codeql-action/init@v3
uses: github/codeql-action/init@v4
with:
languages: ${{ matrix.language }}

- run: ./mvnw -q -Dmaven.test.skip=true clean install || ./mvnw -q -Dmaven.test.skip=true clean install

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3
uses: github/codeql-action/analyze@v4
2 changes: 1 addition & 1 deletion .github/workflows/dead-link-checker.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
- run: sudo npm install -g markdown-link-check@3.10.3
- run: |
for file in $(find . -name "*.md"); do
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/e2e.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,10 +34,10 @@ jobs:
- name: Kafka
path: test/e2e/case/kafka/e2e.yaml
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- uses: actions/setup-java@v2
- uses: actions/setup-java@v6
with:
distribution: temurin
java-version: 17
Expand All @@ -59,7 +59,7 @@ jobs:
uses: apache/skywalking-infra-e2e@56ac8befeb5f910f2dc9339e65d07cd18953f90e
with:
e2e-file: ${{ matrix.case.path }}
- uses: actions/upload-artifact@v4
- uses: actions/upload-artifact@v7
if: ${{ failure() }}
name: Upload Logs
with:
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/plugins-jdk11-test.3.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- name: Disable containerd image store
Expand Down Expand Up @@ -72,10 +72,10 @@ jobs:
- jdk11-forkjoinpool-scenario
- jdk-httpclient-scenario
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- uses: actions/setup-java@v2
- uses: actions/setup-java@v6
with:
distribution: temurin
java-version: 11
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/plugins-jdk17-test.0.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- name: Disable containerd image store
Expand Down Expand Up @@ -88,10 +88,10 @@ jobs:
- undertow-2.3.x-scenario
- apm-toolkit-logback-scenario
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- uses: actions/setup-java@v2
- uses: actions/setup-java@v6
with:
distribution: 'temurin'
java-version: '17'
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/plugins-jdk17-test.1.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- name: Disable containerd image store
Expand Down Expand Up @@ -87,10 +87,10 @@ jobs:
- elasticsearch-java-9.x-scenario
- webflux-6.x-7.x-scenario
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- uses: actions/setup-java@v2
- uses: actions/setup-java@v6
with:
distribution: 'temurin'
java-version: '17'
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/plugins-jdk21-test.0.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- name: Disable containerd image store
Expand Down Expand Up @@ -74,10 +74,10 @@ jobs:
- jdk-virtual-thread-executor-scenario
- gateway-5.x-scenario
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- uses: actions/setup-java@v2
- uses: actions/setup-java@v6
with:
distribution: 'temurin'
java-version: '21'
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/plugins-jdk25-test.0.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- name: Disable containerd image store
Expand Down Expand Up @@ -76,10 +76,10 @@ jobs:
case:
- spring-6.x-scenario
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- uses: actions/setup-java@v2
- uses: actions/setup-java@v6
with:
distribution: 'temurin'
java-version: '25'
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/plugins-test.0.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- name: Disable containerd image store
Expand Down Expand Up @@ -105,10 +105,10 @@ jobs:
- fastjson-scenario
- jackson-scenario
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- uses: actions/setup-java@v2
- uses: actions/setup-java@v6
with:
distribution: temurin
java-version: 8
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/plugins-test.1.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- name: Disable containerd image store
Expand Down Expand Up @@ -100,10 +100,10 @@ jobs:
- resteasy-4.x-scenario
- netty-http-4.1.x-scenario
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- uses: actions/setup-java@v2
- uses: actions/setup-java@v6
with:
distribution: temurin
java-version: 8
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/plugins-test.2.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- name: Disable containerd image store
Expand Down Expand Up @@ -100,10 +100,10 @@ jobs:
- rocketmq-5-grpc-scenario
- elasticsearch-java-scenario
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- uses: actions/setup-java@v2
- uses: actions/setup-java@v6
with:
distribution: temurin
java-version: 8
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/plugins-test.3.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- name: Disable containerd image store
Expand Down Expand Up @@ -126,10 +126,10 @@ jobs:
- shenyu-2.4.x-sofarpc-scenario
- solon-2.x-scenario
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- uses: actions/setup-java@v2
- uses: actions/setup-java@v6
with:
distribution: temurin
java-version: 8
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/plugins-tomcat10-test.0.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- name: Disable containerd image store
Expand Down Expand Up @@ -71,10 +71,10 @@ jobs:
case:
- tomcat-10x-scenario
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v7
with:
submodules: true
- uses: actions/setup-java@v2
- uses: actions/setup-java@v6
with:
distribution: temurin
java-version: 8
Expand Down
Loading
Loading