From a07a4be83131ab3b50327d9863efbbac1da3fabd Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 16 Sep 2026 02:33:12 +0000
Subject: [PATCH] build(deps): Bump the actions-deps group with 3 updates

Bumps the actions-deps group with 3 updates: [actions/setup-java](https://github.com/actions/setup-java), [lfit/gerrit-review-action](https://github.com/lfit/gerrit-review-action) and [lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml](https://github.com/lfreleng-actions/security-workflows).


Updates `actions/setup-java` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/dd06d9cba3e5552c54d9f8ea23572deb30010f7c...de7274f081f381c8f8158605e0321c36c376e2e6)

Updates `lfit/gerrit-review-action` from 1.1.2 to 1.1.3
- [Release notes](https://github.com/lfit/gerrit-review-action/releases)
- [Commits](https://github.com/lfit/gerrit-review-action/compare/v1.1.2...1e3eae766b3de755a2e87aa216cedebbaf9c8292)

Updates `lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml` from 0.6.0 to 0.7.0
- [Release notes](https://github.com/lfreleng-actions/security-workflows/releases)
- [Commits](https://github.com/lfreleng-actions/security-workflows/compare/747b06dea0c140106b53c374587b9abbe417b591...bdcf7d8d599788e3eb70e2d761c9f6abd49c06e5)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: lfit/gerrit-review-action
  dependency-version: 1.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/clm-scan.yaml           | 2 +-
 .github/workflows/gerrit-maven-merge.yaml | 4 ++--
 .github/workflows/gerrit-sonar.yaml       | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/clm-scan.yaml b/.github/workflows/clm-scan.yaml
index 5f17e27ff0..0e4b9e486b 100644
--- a/.github/workflows/clm-scan.yaml
+++ b/.github/workflows/clm-scan.yaml
@@ -33,7 +33,7 @@ jobs:
 
       - name: Setup Java
         # yamllint disable-line rule:line-length
-        uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0
+        uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1
         with:
           distribution: "temurin"
           java-version: "21"
diff --git a/.github/workflows/gerrit-maven-merge.yaml b/.github/workflows/gerrit-maven-merge.yaml
index a54b9f139d..146dbc7196 100644
--- a/.github/workflows/gerrit-maven-merge.yaml
+++ b/.github/workflows/gerrit-maven-merge.yaml
@@ -81,7 +81,7 @@ jobs:
         # needs: chain below is unaffected.
         if: github.event_name != 'schedule'
         # yamllint disable-line rule:line-length
-        uses: lfit/gerrit-review-action@a1c036a59b94c8ab89de26d378f6a28cc7378b13 # v1.1.2
+        uses: lfit/gerrit-review-action@1e3eae766b3de755a2e87aa216cedebbaf9c8292 # v1.1.3
         with:
           host: ${{ vars.GERRIT_SERVER }}
           username: ${{ vars.GERRIT_SSH_USER }}
@@ -134,7 +134,7 @@ jobs:
         uses: im-open/workflow-conclusion@8eac7f17381a6917bc04fec3e2c92e70ebc37526 # v3.0.0
       - name: Set vote
         # yamllint disable-line rule:line-length
-        uses: lfit/gerrit-review-action@a1c036a59b94c8ab89de26d378f6a28cc7378b13 # v1.1.2
+        uses: lfit/gerrit-review-action@1e3eae766b3de755a2e87aa216cedebbaf9c8292 # v1.1.3
         with:
           host: ${{ vars.GERRIT_SERVER }}
           username: ${{ vars.GERRIT_SSH_USER }}
diff --git a/.github/workflows/gerrit-sonar.yaml b/.github/workflows/gerrit-sonar.yaml
index 7b18b10f92..6963594c67 100644
--- a/.github/workflows/gerrit-sonar.yaml
+++ b/.github/workflows/gerrit-sonar.yaml
@@ -60,7 +60,7 @@ jobs:
     permissions:
       contents: read
     # yamllint disable-line rule:line-length
-    uses: lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml@747b06dea0c140106b53c374587b9abbe417b591 # v0.6.0
+    uses: lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml@bdcf7d8d599788e3eb70e2d761c9f6abd49c06e5 # v0.7.0
     with:
       # Gerrit dispatches carry a refspec and check out the change;
       # the weekly schedule leaves it empty and takes the branch.