This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-java](https://github.com/actions/setup-java) | action | major | `v5` → `v6` |
---
### Release Notes
<details>
<summary>actions/setup-java (actions/setup-java)</summary>
### [`v6.0.0`](https://github.com/actions/setup-java/releases/tag/v6.0.0)
[Compare Source](https://github.com/actions/setup-java/compare/v6.0.0...v6.0.0)
#### What's Changed
- dist: Migrate from Zulu Discovery API to Azul Metadata API by [@​jameswald](https://github.com/jameswald) in [#​1010](https://github.com/actions/setup-java/pull/1010)
- feat: add .mvn/extensions.xml to Maven cache key pattern by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1041](https://github.com/actions/setup-java/pull/1041)
- Migrate to ESM and upgrade dependencies by [@​priyagupta108](https://github.com/priyagupta108) in [#​1078](https://github.com/actions/setup-java/pull/1078)
- Map Zulu x86 architecture to i686 for Azul Metadata API by [@​brunoborges](https://github.com/brunoborges) in [#​1079](https://github.com/actions/setup-java/pull/1079)
- Rename jdkFile input to jdk-file with deprecated alias by [@​brunoborges](https://github.com/brunoborges) in [#​1083](https://github.com/actions/setup-java/pull/1083)
- Infer distribution from asdf .tool-versions vendor prefix by [@​brunoborges](https://github.com/brunoborges) in [#​1084](https://github.com/actions/setup-java/pull/1084)
- Add Maven compiler problem matcher for javac diagnostics by [@​brunoborges](https://github.com/brunoborges) in [#​1086](https://github.com/actions/setup-java/pull/1086)
- feat: expose cache-primary-key output ([#​597](https://github.com/actions/setup-java/issues/597)) by [@​brunoborges](https://github.com/brunoborges) in [#​1088](https://github.com/actions/setup-java/pull/1088)
- docs: clarify V6 ESM migration is not a user-facing breaking change by [@​brunoborges](https://github.com/brunoborges) in [#​1090](https://github.com/actions/setup-java/pull/1090)
- Support multi-field Java versions like `18.0.1.1` by [@​brunoborges](https://github.com/brunoborges) in [#​1092](https://github.com/actions/setup-java/pull/1092)
- docs: document seeding the Maven cache for plugin dependencies by [@​brunoborges](https://github.com/brunoborges) in [#​1094](https://github.com/actions/setup-java/pull/1094)
- docs: clarify Maven cache paths and key hash inputs by [@​brunoborges](https://github.com/brunoborges) in [#​1096](https://github.com/actions/setup-java/pull/1096)
- Support pinning java-version as "latest" by [@​brunoborges](https://github.com/brunoborges) in [#​1093](https://github.com/actions/setup-java/pull/1093)
- chore(deps-dev): bump eslint from 10.6.0 to 10.7.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1101](https://github.com/actions/setup-java/pull/1101)
- chore(deps-dev): bump eslint-plugin-n from 18.2.1 to 18.2.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1103](https://github.com/actions/setup-java/pull/1103)
- chore(deps-dev): bump prettier from 3.9.4 to 3.9.5 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1105](https://github.com/actions/setup-java/pull/1105)
- chore(deps): bump actions/checkout from 6 to 7 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1106](https://github.com/actions/setup-java/pull/1106)
- chore(deps-dev): bump [@​types/node](https://github.com/types/node) from 26.1.0 to 26.1.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1104](https://github.com/actions/setup-java/pull/1104)
- dist: Cover Tencent Kona JDK 25 by [@​johnshajiang](https://github.com/johnshajiang) in [#​1108](https://github.com/actions/setup-java/pull/1108)
- chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1102](https://github.com/actions/setup-java/pull/1102)
- Preserve Maven toolchains across repeated setup-java runs ([#​1099](https://github.com/actions/setup-java/issues/1099)) by [@​brunoborges](https://github.com/brunoborges) in [#​1111](https://github.com/actions/setup-java/pull/1111)
- dist: Support Liberica NIK ([#​878](https://github.com/actions/setup-java/issues/878)) by [@​asm0dey](https://github.com/asm0dey) in [#​1112](https://github.com/actions/setup-java/pull/1112)
- Fix template injection (zizmor alert [#​118](https://github.com/actions/setup-java/issues/118)) in e2e-versions.yml by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1114](https://github.com/actions/setup-java/pull/1114)
- Fix template injection in e2e-versions.yml (zizmor alert [#​122](https://github.com/actions/setup-java/issues/122)) by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1120](https://github.com/actions/setup-java/pull/1120)
- Disable persisted checkout credentials in e2e workflow by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1115](https://github.com/actions/setup-java/pull/1115)
- feat: Update recommended configuration for GPG signing by [@​wetneb](https://github.com/wetneb) in [#​608](https://github.com/actions/setup-java/pull/608)
- Cache Maven and Gradle wrapper distributions separately from the dependency cache by [@​brunoborges](https://github.com/brunoborges) in [#​1097](https://github.com/actions/setup-java/pull/1097)
- Consolidate cache-dependency-path e2e workflow and add maven/sbt coverage by [@​brunoborges](https://github.com/brunoborges) in [#​1124](https://github.com/actions/setup-java/pull/1124)
- Use gpg.passphraseEnvName instead of the deprecated gpg.passphrase server by [@​brunoborges](https://github.com/brunoborges) in [#​1123](https://github.com/actions/setup-java/pull/1123)
- Extract repeated directory-check assertions into check-dir.sh helper by [@​brunoborges](https://github.com/brunoborges) in [#​1127](https://github.com/actions/setup-java/pull/1127)
- Consolidate duplicate jobs in e2e-versions workflow by [@​brunoborges](https://github.com/brunoborges) in [#​1125](https://github.com/actions/setup-java/pull/1125)
- Use YAML anchors to reduce boilerplate in e2e-versions workflow by [@​brunoborges](https://github.com/brunoborges) in [#​1126](https://github.com/actions/setup-java/pull/1126)
- Updated msft json for now by [@​jmjaffe37](https://github.com/jmjaffe37) in [#​1129](https://github.com/actions/setup-java/pull/1129)
- Document missing action inputs in README by [@​brunoborges](https://github.com/brunoborges) in [#​1130](https://github.com/actions/setup-java/pull/1130)
- chore(deps): bump [@​actions/cache](https://github.com/actions/cache) to 6.2.0 by [@​philip-gai](https://github.com/philip-gai) in [#​1128](https://github.com/actions/setup-java/pull/1128)
- Add an option to disable Java problem matchers by [@​brunoborges](https://github.com/brunoborges) in [#​1133](https://github.com/actions/setup-java/pull/1133)
- docs: update setup-java examples by [@​HarithaVattikuti](https://github.com/HarithaVattikuti) in [#​1131](https://github.com/actions/setup-java/pull/1131)
- Clarify credential environment variable inputs by [@​brunoborges](https://github.com/brunoborges) in [#​1134](https://github.com/actions/setup-java/pull/1134)
- chore(deps-dev): bump [@​typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.63.0 to 8.64.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1135](https://github.com/actions/setup-java/pull/1135)
- chore(deps): bump actions/setup-python from 6 to 7 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1143](https://github.com/actions/setup-java/pull/1143)
- chore(deps): bump fast-xml-parser from 5.9.3 to 5.10.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1142](https://github.com/actions/setup-java/pull/1142)
- chore(deps-dev): bump [@​typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 8.64.0 to 8.65.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1138](https://github.com/actions/setup-java/pull/1138)
- chore(deps-dev): bump lint-staged from 17.0.8 to 17.2.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1136](https://github.com/actions/setup-java/pull/1136)
- chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1137](https://github.com/actions/setup-java/pull/1137)
- chore(deps): fix npm audited vulnerabilities by [@​mhoffrog](https://github.com/mhoffrog) in [#​1140](https://github.com/actions/setup-java/pull/1140)
- Fix formatting issues in README.md by [@​brunoborges](https://github.com/brunoborges) in [#​1144](https://github.com/actions/setup-java/pull/1144)
- Remediate npm audit findings and rebuild distributions by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1145](https://github.com/actions/setup-java/pull/1145)
- Set GRAALVM\_HOME for GraalVM distributions by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1146](https://github.com/actions/setup-java/pull/1146)
- Add force-download option for reproducible JDK builds by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1148](https://github.com/actions/setup-java/pull/1148)
- Add OpenJDK distribution by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1147](https://github.com/actions/setup-java/pull/1147)
- Support Temurin JDKs with JMOD files by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1149](https://github.com/actions/setup-java/pull/1149)
- Document Java package compatibility by distribution by [@​brunoborges](https://github.com/brunoborges) in [#​1152](https://github.com/actions/setup-java/pull/1152)
- Fix caching when wrapper distributions are absent by [@​brunoborges](https://github.com/brunoborges) in [#​1151](https://github.com/actions/setup-java/pull/1151)
- Reject invalid boolean input values by [@​brunoborges](https://github.com/brunoborges) in [#​1160](https://github.com/actions/setup-java/pull/1160)
- Fail on mismatched Maven toolchain ID counts by [@​brunoborges](https://github.com/brunoborges) in [#​1161](https://github.com/actions/setup-java/pull/1161)
- Consolidate JDK metadata retry handling by [@​brunoborges](https://github.com/brunoborges) in [#​1162](https://github.com/actions/setup-java/pull/1162)
- Add direct setup orchestration tests by [@​brunoborges](https://github.com/brunoborges) in [#​1163](https://github.com/actions/setup-java/pull/1163)
- Harden java-package validation across distributions by [@​brunoborges](https://github.com/brunoborges) in [#​1165](https://github.com/actions/setup-java/pull/1165)
- Verify JDK downloads with vendor checksums by [@​brunoborges](https://github.com/brunoborges) in [#​1167](https://github.com/actions/setup-java/pull/1167)
- Reduce change-time Java E2E matrix by [@​brunoborges](https://github.com/brunoborges) in [#​1170](https://github.com/actions/setup-java/pull/1170)
- Add read-only mode for dependency caching by [@​brunoborges](https://github.com/brunoborges) in [#​1169](https://github.com/actions/setup-java/pull/1169)
- Test Temurin 25 on hosted runners by [@​brunoborges](https://github.com/brunoborges) in [#​1172](https://github.com/actions/setup-java/pull/1172)
- Restore dependency and wrapper caches concurrently by [@​brunoborges](https://github.com/brunoborges) in [#​1174](https://github.com/actions/setup-java/pull/1174)
- Add dependency cache path overrides by [@​brunoborges](https://github.com/brunoborges) in [#​1175](https://github.com/actions/setup-java/pull/1175)
- Centralize OS/architecture capability validation by [@​brunoborges](https://github.com/brunoborges) in [#​1178](https://github.com/actions/setup-java/pull/1178)
- Optimize Temurin tool-cache fast path with lazy loading by [@​brunoborges](https://github.com/brunoborges) in [#​1179](https://github.com/actions/setup-java/pull/1179)
- Optimize Maven configuration warm path by [@​brunoborges](https://github.com/brunoborges) in [#​1182](https://github.com/actions/setup-java/pull/1182)
- Fix macOS e2e workflow assertions by [@​brunoborges](https://github.com/brunoborges) in [#​1184](https://github.com/actions/setup-java/pull/1184)
- Remove legacy Adopt distributions in v6 by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1185](https://github.com/actions/setup-java/pull/1185)
- chore(deps): bump actions/upload-artifact from 6 to 7 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1190](https://github.com/actions/setup-java/pull/1190)
- Reimagine setup-java README by [@​brunoborges](https://github.com/brunoborges) in [#​1192](https://github.com/actions/setup-java/pull/1192)
- Document deprecation of setup-java v1 through v4 by [@​brunoborges](https://github.com/brunoborges) in [#​1198](https://github.com/actions/setup-java/pull/1198)
- Update setup-java README action from v6 to v5 by [@​brunoborges](https://github.com/brunoborges) in [#​1199](https://github.com/actions/setup-java/pull/1199)
- Highlight major changes in setup-java v5 by [@​brunoborges](https://github.com/brunoborges) in [#​1200](https://github.com/actions/setup-java/pull/1200)
- Highlight major changes in setup-java v6 by [@​brunoborges](https://github.com/brunoborges) in [#​1203](https://github.com/actions/setup-java/pull/1203)
- chore(deps): bump brace-expansion from 5.0.8 to 5.0.9 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1202](https://github.com/actions/setup-java/pull/1202)
- Add conditional JDK caching by [@​brunoborges](https://github.com/brunoborges) in [#​1201](https://github.com/actions/setup-java/pull/1201)
- docs: fix README and advanced usage inconsistencies with actual behavior by [@​brunoborges](https://github.com/brunoborges) in [#​1204](https://github.com/actions/setup-java/pull/1204)
- Move the extracted JDK into the tool-cache instead of copying it by [@​brunoborges](https://github.com/brunoborges) in [#​1206](https://github.com/actions/setup-java/pull/1206)
- docs: drop benchmark numbers from the JDK caching section by [@​brunoborges](https://github.com/brunoborges) in [#​1205](https://github.com/actions/setup-java/pull/1205)
- docs: correct the mvn-toolchain-id default in README and action.yml by [@​brunoborges](https://github.com/brunoborges) in [#​1207](https://github.com/actions/setup-java/pull/1207)
- Cache resolved JDK releases to remove the vendor API from warm jobs by [@​brunoborges](https://github.com/brunoborges) in [#​1208](https://github.com/actions/setup-java/pull/1208)
- Report concrete versions for floating Oracle JDK downloads by [@​jdubois](https://github.com/jdubois) in [#​1213](https://github.com/actions/setup-java/pull/1213)
- Import Maven signing keys into an isolated GPG home by [@​jdubois](https://github.com/jdubois) in [#​1214](https://github.com/actions/setup-java/pull/1214)
- Reuse the tool cache for floating versions the resolution cache identified by [@​brunoborges](https://github.com/brunoborges) in [#​1219](https://github.com/actions/setup-java/pull/1219)
- Fix JetBrains Runtime release pagination by [@​jdubois](https://github.com/jdubois) in [#​1218](https://github.com/actions/setup-java/pull/1218)
- Fix JDK resolution cache platform identity by [@​jdubois](https://github.com/jdubois) in [#​1210](https://github.com/actions/setup-java/pull/1210)
- fix: select musl JDK artifacts on Alpine for Dragonwell, Corretto, Zulu and Liberica by [@​brunoborges](https://github.com/brunoborges) in [#​1220](https://github.com/actions/setup-java/pull/1220)
- Fix SapMachine early-access filtering by [@​jdubois](https://github.com/jdubois) in [#​1217](https://github.com/actions/setup-java/pull/1217)
- Fix JetBrains GitHub token resolution by [@​jdubois](https://github.com/jdubois) in [#​1224](https://github.com/actions/setup-java/pull/1224)
- Include gradle.properties in Gradle cache key by [@​jdubois](https://github.com/jdubois) in [#​1225](https://github.com/actions/setup-java/pull/1225)
- Handle early dependency cache failures during Java setup by [@​jdubois](https://github.com/jdubois) in [#​1226](https://github.com/actions/setup-java/pull/1226)
- Fix js-yaml audit vulnerability by [@​brunoborges](https://github.com/brunoborges) in [#​1228](https://github.com/actions/setup-java/pull/1228)
- Fix failing GitHub Actions job for graalvm 24-ea by [@​brunoborges](https://github.com/brunoborges) with [@​Copilot](https://github.com/Copilot) in [#​1227](https://github.com/actions/setup-java/pull/1227)
- Update setup-java for Microsoft's Build of OpenJDK: now pointing task to CDN that is always up-to-date by [@​jmjaffe37](https://github.com/jmjaffe37) in [#​1236](https://github.com/actions/setup-java/pull/1236)
- chore(deps-dev): bump globals from 17.8.0 to 17.9.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1233](https://github.com/actions/setup-java/pull/1233)
- chore(deps-dev): bump [@​types/semver](https://github.com/types/semver) from 7.7.1 to 7.8.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1229](https://github.com/actions/setup-java/pull/1229)
- chore(deps-dev): bump lint-staged from 17.2.0 to 17.3.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1231](https://github.com/actions/setup-java/pull/1231)
- chore(deps-dev): bump [@​typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 8.65.0 to 8.67.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​1232](https://github.com/actions/setup-java/pull/1232)
- Test JDK 26 installation from SDKMAN by [@​brunoborges](https://github.com/brunoborges) in [#​1238](https://github.com/actions/setup-java/pull/1238)
- Add support for multiple Maven servers by [@​brunoborges](https://github.com/brunoborges) in [#​1239](https://github.com/actions/setup-java/pull/1239)
- Add Maven dependency-resolution repositories by [@​brunoborges](https://github.com/brunoborges) in [#​1240](https://github.com/actions/setup-java/pull/1240)
- Add Red Hat Build of OpenJDK support by [@​brunoborges](https://github.com/brunoborges) in [#​1241](https://github.com/actions/setup-java/pull/1241)
- Fix Oracle macOS E2E version check by [@​brunoborges](https://github.com/brunoborges) in [#​1243](https://github.com/actions/setup-java/pull/1243)
- ci: constrain cache e2e job modes by [@​philip-gai](https://github.com/philip-gai) in [#​1244](https://github.com/actions/setup-java/pull/1244)
- Expose contributing guide to GitHub by [@​brunoborges](https://github.com/brunoborges) in [#​1245](https://github.com/actions/setup-java/pull/1245)
- Set default signature verification for supported distributions by [@​johnoliver](https://github.com/johnoliver) in [#​1246](https://github.com/actions/setup-java/pull/1246)
- chore(deps): combine open Dependabot npm updates by [@​brunoborges](https://github.com/brunoborges) in [#​1252](https://github.com/actions/setup-java/pull/1252)
- Prepare documentation for v6 release by [@​brunoborges](https://github.com/brunoborges) in [#​1253](https://github.com/actions/setup-java/pull/1253)
#### New Contributors
- [@​jameswald](https://github.com/jameswald) made their first contribution in [#​1010](https://github.com/actions/setup-java/pull/1010)
- [@​asm0dey](https://github.com/asm0dey) made their first contribution in [#​1112](https://github.com/actions/setup-java/pull/1112)
- [@​wetneb](https://github.com/wetneb) made their first contribution in [#​608](https://github.com/actions/setup-java/pull/608)
- [@​philip-gai](https://github.com/philip-gai) made their first contribution in [#​1128](https://github.com/actions/setup-java/pull/1128)
**Full Changelog**: <https://github.com/actions/setup-java/compare/v5.7.0...v6.0.0>
### [`v6`](https://github.com/actions/setup-java/compare/v5.7.0...v6.0.0)
[Compare Source](https://github.com/actions/setup-java/compare/v5.7.0...v6.0.0)
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- "every weekday,every weekend"
- Automerge
- "every weekend"
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzkuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI3OS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJib3QiLCJyZW5vdmF0ZSJdfQ==-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
v5→v6Release Notes
actions/setup-java (actions/setup-java)
v6.0.0Compare Source
What's Changed
18.0.1.1by @brunoborges in #1092New Contributors
Full Changelog: https://github.com/actions/setup-java/compare/v5.7.0...v6.0.0
v6Compare Source
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.