Bump actions/setup-java from 5.3.0 to 5.4.0 (#2546)

dependabot[bot] · web-flow · commit 08a1fee090ce · 2026-07-08T14:01:02.000+08:00
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5.3.0 to 5.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-java/releases">actions/setup-java's releases</a>.</em></p> <blockquote> <h2>v5.4.0</h2> <h2>What's Changed</h2> <ul> <li>Bump <code>@​typescript-eslint/parser</code> from 8.48.0 to 8.61.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1021">actions/setup-java#1021</a></li> <li>Fix codeql workflow permissions by <a href="https://github.com/jsoref"><code>@​jsoref</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/993">actions/setup-java#993</a></li> <li>fix CodeQL permissions by <a href="https://github.com/gdams"><code>@​gdams</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1025">actions/setup-java#1025</a></li> <li>fix: reject non-semver candidate versions in isVersionSatisfies by <a href="https://github.com/sproctor"><code>@​sproctor</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1009">actions/setup-java#1009</a></li> <li>Bump <code>@​actions/cache</code> to 5.1.0, handle cache write denied by <a href="https://github.com/jasongin"><code>@​jasongin</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1026">actions/setup-java#1026</a></li> <li>Add Maven Wrapper cache feature by <a href="https://github.com/mahabaleshwars"><code>@​mahabaleshwars</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1027">actions/setup-java#1027</a></li> <li>Spelling by <a href="https://github.com/jsoref"><code>@​jsoref</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/713">actions/setup-java#713</a></li> <li>add link to advanced configuration for JetBrains by <a href="https://github.com/robstoll"><code>@​robstoll</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/850">actions/setup-java#850</a></li> <li>docs(action): fix missing required or default fields by <a href="https://github.com/kranthipoturaju"><code>@​kranthipoturaju</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1007">actions/setup-java#1007</a></li> <li>feat: add microsoft openjdk 17.0.18 by <a href="https://github.com/al-kau"><code>@​al-kau</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1002">actions/setup-java#1002</a></li> <li>Update README.md - use &quot;alert syntax for Markdown&quot; for notes by <a href="https://github.com/mhoffrog"><code>@​mhoffrog</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/924">actions/setup-java#924</a></li> <li>Bump undici from 6.24.1 to 6.27.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1033">actions/setup-java#1033</a></li> <li>Update contributor guide with emoji for clarity by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1028">actions/setup-java#1028</a></li> <li>add javac problem matcher by <a href="https://github.com/Trass3r"><code>@​Trass3r</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/562">actions/setup-java#562</a></li> <li>Clarify README version syntax and migration guidance by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1038">actions/setup-java#1038</a></li> <li>Update undici artifacts to 6.27.0 (license cache + dist) by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1040">actions/setup-java#1040</a></li> <li>docs: enhance custom jdk file installation by <a href="https://github.com/stephanabel"><code>@​stephanabel</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/996">actions/setup-java#996</a></li> <li>Templates for new Java distributions by <a href="https://github.com/panticmilos"><code>@​panticmilos</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/429">actions/setup-java#429</a></li> <li>Bump actions/checkout from 6 to 7 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1032">actions/setup-java#1032</a></li> <li>Bump <code>@​types/node</code> from 25.9.3 to 26.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/setup-java/pull/1031">actions/setup-java#1031</a></li> <li>docs: replace non-existent HelloWorldApp references with java --version by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1043">actions/setup-java#1043</a></li> <li>docs: add JavaFX Maven project configuration instructions by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1044">actions/setup-java#1044</a></li> <li>docs: self-signed certificate / internal CA handling for GitHub Enterprise by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1050">actions/setup-java#1050</a></li> <li>docs: document importing an internal CA into the installed JDK (cacerts) by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1051">actions/setup-java#1051</a></li> <li>chore: Harden workflows: least-privilege permissions + zizmor integration by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1039">actions/setup-java#1039</a></li> <li>dist: Add GraalVM Community distribution support by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1042">actions/setup-java#1042</a></li> <li>docs: note jdkfile approach for Early Access / unreleased JDK builds by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1058">actions/setup-java#1058</a></li> <li>dist: Apply Copilot review suggestions from PR <a href="https://redirect.github.com/actions/setup-java/issues/1042">#1042</a> (GraalVM Community) by <a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> in <a href="https://redirect.github.com/actions/setup-java/pull/1059">actions/setup-java#1059</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/jsoref"><code>@​jsoref</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/993">actions/setup-java#993</a></li> <li><a href="https://github.com/sproctor"><code>@​sproctor</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/1009">actions/setup-java#1009</a></li> <li><a href="https://github.com/jasongin"><code>@​jasongin</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/1026">actions/setup-java#1026</a></li> <li><a href="https://github.com/robstoll"><code>@​robstoll</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/850">actions/setup-java#850</a></li> <li><a href="https://github.com/kranthipoturaju"><code>@​kranthipoturaju</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/1007">actions/setup-java#1007</a></li> <li><a href="https://github.com/al-kau"><code>@​al-kau</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/1002">actions/setup-java#1002</a></li> <li><a href="https://github.com/mhoffrog"><code>@​mhoffrog</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/924">actions/setup-java#924</a></li> <li><a href="https://github.com/brunoborges"><code>@​brunoborges</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/1028">actions/setup-java#1028</a></li> <li><a href="https://github.com/Trass3r"><code>@​Trass3r</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/562">actions/setup-java#562</a></li> <li><a href="https://github.com/stephanabel"><code>@​stephanabel</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-java/pull/996">actions/setup-java#996</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-java/compare/v5...v5.4.0">https://github.com/actions/setup-java/compare/v5...v5.4.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-java/commit/1bcf9fb12cf4aa7d266a90ae39939e61372fe520"><code>1bcf9fb</code></a> dist: Address Copilot review suggestions from PR <a href="https://redirect.github.com/actions/setup-java/issues/1042">#1042</a> (GraalVM Community) (#...</li> <li><a href="https://github.com/actions/setup-java/commit/fa2c6508d1036292a5efdf642f98d1c695974c72"><code>fa2c650</code></a> docs: note jdkfile approach for Early Access / unreleased JDK builds (<a href="https://redirect.github.com/actions/setup-java/issues/1058">#1058</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/1d56e31dbb83904d53629e4e0bd2d956e011c1c2"><code>1d56e31</code></a> dist: Add GraalVM Community distribution support (<a href="https://redirect.github.com/actions/setup-java/issues/1042">#1042</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/1d252528046b5ceb47839b03a115e0ea04f026cc"><code>1d25252</code></a> chore: Harden workflows: least-privilege permissions + zizmor integration (<a href="https://redirect.github.com/actions/setup-java/issues/1">#1</a>...</li> <li><a href="https://github.com/actions/setup-java/commit/668c1ea991737ea087e51dbf0bcf7fd41cbc20ee"><code>668c1ea</code></a> docs: add post-install keytool import for the JDK cacerts trust store (<a href="https://redirect.github.com/actions/setup-java/issues/1051">#1051</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/a9a46fbe0996878a5673db759d29dbc5f470320e"><code>a9a46fb</code></a> docs: document self-signed certificate / internal CA handling for GitHub Ente...</li> <li><a href="https://github.com/actions/setup-java/commit/5431e71f9a4e00431c1c904af57e62794b518b11"><code>5431e71</code></a> docs: add JavaFX Maven project configuration instructions (<a href="https://redirect.github.com/actions/setup-java/issues/1044">#1044</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/4baa9b45d2bff6fcbef9619dabd0cb1ca822905b"><code>4baa9b4</code></a> docs: replace non-existent HelloWorldApp references with java --version (<a href="https://redirect.github.com/actions/setup-java/issues/1043">#1043</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/eab4b0854d2abdb899d5cf9e1bbff1df86044a8e"><code>eab4b08</code></a> Bump <code>@​types/node</code> from 25.9.3 to 26.0.0 (<a href="https://redirect.github.com/actions/setup-java/issues/1031">#1031</a>)</li> <li><a href="https://github.com/actions/setup-java/commit/bf0c0e6df33849b0cba166f7c5d05fb38a219383"><code>bf0c0e6</code></a> Bump actions/checkout from 6 to 7 (<a href="https://redirect.github.com/actions/setup-java/issues/1032">#1032</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/setup-java/compare/ad2b38190b15e4d6bdf0c97fb4fca8412226d287...1bcf9fb12cf4aa7d266a90ae39939e61372fe520">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-java&package-manager=github_actions&previous-version=5.3.0&new-version=5.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -99,7 +99,7 @@ jobs:
         run: melos run test:web:firefox
       - name: '[Verify step] Test Flutter packages'
         run: melos run test:flutter
-      - uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287
+      - uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
         if: ${{ matrix.sdk == 'stable' }}
         with:
           distribution: 'adopt'
