From 46346e5a9b0874d02c9c1c4fb61994fb7c9e2b5a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 21 Jul 2026 03:34:30 +0000 Subject: [PATCH] MESH-2092 Bump the patch-and-minor group across 1 directory with 2 updates Bumps the patch-and-minor group with 2 updates in the / directory: [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) and [actions/setup-java](https://github.com/actions/setup-java). Updates `slackapi/slack-github-action` from 3.0.4 to 3.0.5 - [Release notes](https://github.com/slackapi/slack-github-action/releases) - [Changelog](https://github.com/slackapi/slack-github-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/slackapi/slack-github-action/compare/fc46ded2fc4d7f11bfa62864526f920cf1a1167d...0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc) Updates `actions/setup-java` from 5.5.0 to 5.6.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/0f481fcb613427c0f801b606911222b5b6f3083a...03ad4de0992f5dab5e18fcb136590ce7c4a0ac95) --- updated-dependencies: - dependency-name: slackapi/slack-github-action dependency-version: 3.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-and-minor - dependency-name: actions/setup-java dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-and-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/dependabot-auto-merge.yaml | 2 +- .github/workflows/merge-develop.yml | 4 ++-- .github/workflows/pull-request.yml | 6 +++--- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/dependabot-auto-merge.yaml b/.github/workflows/dependabot-auto-merge.yaml index 9757bd4..efa4115 100644 --- a/.github/workflows/dependabot-auto-merge.yaml +++ b/.github/workflows/dependabot-auto-merge.yaml @@ -68,7 +68,7 @@ jobs: - name: Notify Slack of manual review required if: github.event.action == 'opened' && steps.metadata.outputs.update-type != 'version-update:semver-patch' && steps.metadata.outputs.update-type != 'version-update:semver-minor' - uses: slackapi/slack-github-action@fc46ded2fc4d7f11bfa62864526f920cf1a1167d # v3.0.4 + uses: slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5 with: webhook: ${{ secrets.DEPENDABOT_SLACK_WEBHOOK_URL }} webhook-type: incoming-webhook diff --git a/.github/workflows/merge-develop.yml b/.github/workflows/merge-develop.yml index d899d19..2c27b01 100644 --- a/.github/workflows/merge-develop.yml +++ b/.github/workflows/merge-develop.yml @@ -52,7 +52,7 @@ jobs: - name: setup java if: success() || failure() - uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0 + uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0 with: distribution: "corretto" java-version: "11" @@ -73,7 +73,7 @@ jobs: - name: setup java if: github.actor != 'dependabot[bot]' && (success() || failure()) - uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0 + uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0 with: distribution: "corretto" java-version: "17" diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml index 5a21a6f..b538a52 100644 --- a/.github/workflows/pull-request.yml +++ b/.github/workflows/pull-request.yml @@ -82,7 +82,7 @@ jobs: - name: setup java if: success() || failure() - uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0 + uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0 with: distribution: "corretto" java-version: "11" @@ -103,7 +103,7 @@ jobs: - name: setup java if: success() || failure() - uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0 + uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0 with: distribution: "corretto" java-version: "17" @@ -321,7 +321,7 @@ jobs: if: ${{ always() && github.repository == 'NHSDigital/mesh-sandbox' && github.actor== 'dependabot[bot]' && contains(needs.*.result, 'failure') }} steps: - name: Slack Notification - uses: slackapi/slack-github-action@fc46ded2fc4d7f11bfa62864526f920cf1a1167d # v3.0.4 + uses: slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5 with: webhook: ${{ secrets.DEPENDABOT_SLACK_WEBHOOK_URL }} webhook-type: incoming-webhook