Skip to content

Pin bernardladenthin/actions at v1.0.2 - #567

Merged
bernardladenthin merged 1 commit into
mainfrom
chore/actions-v1.0.2
Oct 25, 2026
Merged

bernardladenthin merged 1 commit into
mainfrom
chore/actions-v1.0.2

Conversation

@bernardladenthin

@bernardladenthin bernardladenthin commented Oct 25, 2026 •

Copy link
Copy Markdown
Owner

Summary

  • Pins bernardladenthin/actions at v1.0.2 (40191d24afef2c99260bfacb27f269b95563e4bc), up from v1.0.1 (df774809). All 57 references in .github/ move; nothing else changes.
  • v1.0.2 carries a documentation change only: the license collector's python3 -c guard must use single-quoted Python string literals, because exec-maven-plugin drops a double quote out of an argument on Windows (measured with 3.6.4: print("x") reaches Python as print(x), a SyntaxError). This repository does not use that construct (checked by parsing every POM here for an <argument>/<commandlineArgs> containing a double quote: no hits), so nothing changes here. The pin moves so all four repositories stay on the same tag.

Test plan

  • Every reference moved, none left behind: 0 occurrences of the old SHA, 57 of the new one, all in *.yml under .github/.
  • The tag exists and is annotated, pointing at 40191d2 on main of the actions repository.
  • CI on this branch is the real check — the bump only changes which commit of the shared actions is resolved.
  • CHANGELOG updated

Related issues / PRs

bernardladenthin/actions#3 is the change v1.0.2 contains.

🤖 Generated with Claude Code

https://claude.ai/code/session_01E2h8gXyyE5UeimkL9vQv9G

Summary by CodeRabbit

  • Chores
    • Updated the automation used for security scans, dependency reporting, Java tests, and publishing.
  • Documentation
    • Updated the unreleased changelog to reflect the current automation version.
  • Release Notes
    • No user-facing product changes are included in this update.

The release carries a documentation change only: the license collector's
python3 -c guard must use single-quoted Python string literals, because
exec-maven-plugin drops a double quote out of an argument on Windows
(measured with 3.6.4: print("x") reaches Python as print(x), a SyntaxError).
This repository does not use that construct, so nothing changes here; the pin moves so all four repositories stay on the same tag.

All 57 references move from df774809fbe99a5adc7b1243d053692cd840fe05 (v1.0.1)
to 40191d24afef2c99260bfacb27f269b95563e4bc (v1.0.2). No other change.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E2h8gXyyE5UeimkL9vQv9G
@coderabbitai

coderabbitai Bot commented Oct 25, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review.

Recent review info
Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 4c45cdb8-05d2-4f66-9fc8-e2a22a6b913c
Commits

Reviewing files that changed from the base of the PR and between 081457f and fe4a3f5.

Files selected for processing: 7
  • .github/workflows/codeql.yml
  • .github/workflows/dependency-submission.yml
  • .github/workflows/java-tests.yml
  • .github/workflows/osv-scanner.yml
  • .github/workflows/publish.yml
  • .github/workflows/reuse.yml
  • CHANGELOG.md

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 6 remain after this review.

Walkthrough

The workflows update pinned bernardladenthin/actions references from v1.0.1 to v1.0.2. The changelog records the version update and describes the action release as documentation-only.

Changes: Action version update

Layer / File(s) Summary
Reusable workflow pins and changelog
.github/workflows/codeql.yml, .github/workflows/dependency-submission.yml, .github/workflows/osv-scanner.yml, .github/workflows/reuse.yml, CHANGELOG.md
Reusable workflow references now use v1.0.2. The changelog records the update and notes the action release's documentation-only change.
CI, build, and diagnostic action pins
.github/workflows/java-tests.yml, .github/workflows/publish.yml
Java test and publish workflows now use v1.0.2 action revisions for checks, host information, crash logs, and bytecode verification.
Release validation and publication action pins
.github/workflows/publish.yml
Release checks, publication finalization, uploads, and attestations now use v1.0.2 action revisions.

Priority: Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Suggested labels: github_actions, dependencies

Suggested reviewers: claude

Merge Risk: Minimal · up to fe4a3

The pin update is limited to the intended action revision and is ready to merge after normal CI validation.

Architecture risk: Low · up to fe4a3

The change affects 1 system.

Changed systems: CHANGELOG.md

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

  • observed — CHANGELOG.md (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

  • observed — Modified behavior in CHANGELOG.md: Adds a changelog entry recording the bernardladenthin/actions v1.0.2 pin and its documentation-only change; it notes that the affected construct is not used in this repository.
  • observed — Modified behavior in .github/workflows/codeql.yml: The analyze job’s reusable workflow reference changed from v1.0.1 at commit df774809fbe99a5adc7b1243d053692cd840fe05 to v1.0.2 at commit 40191d24afef2c99260bfacb27f269b95563e4bc.
  • observed — Modified behavior in .github/workflows/dependency-submission.yml: The submit job’s reusable workflow reference changed from v1.0.1 to v1.0.2, using a different pinned commit.
  • observed — Modified behavior in .github/workflows/java-tests.yml: The Display CPU Info step now uses the v1.0.2 host-information action instead of v1.0.1.
Pre-merge checks: Passed 5
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title "Pin bernardladenthin/actions at v1.0.2" matches the main change. The raw summary shows the workflow files moving from v1.0.1 (commit df774809...) to v1.0.2 (commit 40191d24...), and the PR …
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Title check

Explanation

The title "Pin bernardladenthin/actions at v1.0.2" matches the main change. The raw summary shows the workflow files moving from v1.0.1 (commit df774809...) to v1.0.2 (commit 40191d24...), and the PR objectives confirm that all references in .github/ are updated to the new pin. The title is specific and concise. It does not mention the CHANGELOG note, but that note is secondary.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (7 skipped: 7 unsupported.)

Finishing Touches: 💡 1
🛠️ Fix failing CI checks: 💡
  • Commit to this branch
  • Create a new PR
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@sonarqubecloud

Copy link
Copy Markdown

@bernardladenthin
bernardladenthin merged commit fcb2ba2 into main Oct 25, 2026
12 of 18 checks passed
@bernardladenthin
bernardladenthin deleted the chore/actions-v1.0.2 branch October 25, 2026 20:42

This branch had an error being deployed

1 failed deployment
startgate — fe4a3f5b Deployed Oct 25, 2026 by bernardladenthin via Start gate (abort window) #1361
maven-central — fe4a3f5b Deployed Oct 25, 2026 by bernardladenthin via Verify GPG signing key (no secrets printed) #1361
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant