From 730db847ce7acda7d1ded9a61ab6b66358e7531d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 22 Jan 2026 02:33:16 +0000 Subject: [PATCH 1/4] Bump lodash from 4.17.21 to 4.17.23 Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- package-lock.json | 25 +++---------------------- 1 file changed, 3 insertions(+), 22 deletions(-) diff --git a/package-lock.json b/package-lock.json index dad0cc6..2eb9312 100644 --- a/package-lock.json +++ b/package-lock.json @@ -603,7 +603,6 @@ "integrity": "sha512-UlLAnTPrFdNGoFtbSXwcGFQBtQZJCNjaN6hQNP3UPvuNXT1i82N26KL3dZeIpNalWywr9IuQuncaAfUaS1g6sQ==", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "@ampproject/remapping": "^2.2.0", "@babel/code-frame": "^7.27.1", @@ -2287,7 +2286,6 @@ "resolved": "https://registry.npmjs.org/@octokit/core/-/core-5.2.0.tgz", "integrity": "sha512-1LFfa/qnMQvEOAdzlQymH0ulepxbxnCYAKJZfMci/5XJyIHWgEYnDmgnKakbTh7CH2tFQ5O60oYDvns4i9RAIg==", "license": "MIT", - "peer": true, "dependencies": { "@octokit/auth-token": "^4.0.0", "@octokit/graphql": "^7.1.0", @@ -2603,7 +2601,6 @@ "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==", "dev": true, "license": "MIT", - "peer": true, "engines": { "node": ">=12" }, @@ -3267,7 +3264,6 @@ "integrity": "sha512-W609buLVRVmeW693xKfzHeIV6nJGGz98uCPfeXI1ELMLXVeKYZ9m15fAMSaUPBHYLGFsVRcMmSCksQOrZV9BYA==", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "undici-types": "~7.16.0" } @@ -3355,7 +3351,6 @@ "integrity": "sha512-3xP4XzzDNQOIqBMWogftkwxhg5oMKApqY0BAflmLZiFYHqyhSOxv/cd/zPQLTcCXr4AkaKb25joocY0BD1WC6A==", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "@typescript-eslint/scope-manager": "8.51.0", "@typescript-eslint/types": "8.51.0", @@ -3856,7 +3851,6 @@ "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.15.0.tgz", "integrity": "sha512-NZyJarBfL7nWwIq+FDL6Zp/yHEhePMNnnJ0y3qfieCrmNvYct8uvtiV41UvlSe6apAfk0fY1FbWx+NwfmpvtTg==", "dev": true, - "peer": true, "bin": { "acorn": "bin/acorn" }, @@ -4295,7 +4289,6 @@ } ], "license": "MIT", - "peer": true, "dependencies": { "caniuse-lite": "^1.0.30001726", "electron-to-chromium": "^1.5.173", @@ -5029,7 +5022,6 @@ "integrity": "sha512-LEyamqS7W5HB3ujJyvi0HQK/dtVINZvd5mAAp9eT5S/ujByGjiZLCzPcHVzuXbpJDJF/cxwHlfceVUDZ2lnSTw==", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "@eslint-community/eslint-utils": "^4.8.0", "@eslint-community/regexpp": "^4.12.1", @@ -5106,7 +5098,6 @@ "integrity": "sha512-82GZUjRS0p/jganf6q1rEO25VSoHH0hKPCTrgillPjdI/3bgBhAE1QzHrHTizjpRvy6pGAvKjDJtk2pF9NDq8w==", "dev": true, "license": "MIT", - "peer": true, "bin": { "eslint-config-prettier": "bin/cli.js" }, @@ -5270,7 +5261,6 @@ "resolved": "https://registry.npmjs.org/eslint-plugin-import/-/eslint-plugin-import-2.32.0.tgz", "integrity": "sha512-whOE1HFo/qJDyX4SnXzP4N6zOWn79WhnCUY/iDR0mPfQZO8wcYE4JClzI2oZrhBnnMUCBCHZhO6VQyoBU95mZA==", "dev": true, - "peer": true, "dependencies": { "@rtsao/scc": "^1.1.0", "array-includes": "^3.1.9", @@ -7009,7 +6999,6 @@ "integrity": "sha512-F26gjC0yWN8uAA5m5Ss8ZQf5nDHWGlN/xWZIh8S5SRbsEKBovwZhxGd6LJlbZYxBgCYOtreSUyb8hpXyGC5O4A==", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "@jest/core": "30.2.0", "@jest/types": "30.2.0", @@ -8213,7 +8202,6 @@ "integrity": "sha512-WYDyuc/uFcGp6YtM2H0uKmUwieOuzeE/5YocFJLnLfclZ4inf3mRn8ZVy1s7Hxji7Jxm6Ss8gqpexD/GlKoGgg==", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "acorn": "^8.5.0", "eslint-visitor-keys": "^3.0.0", @@ -8303,9 +8291,9 @@ } }, "node_modules/lodash": { - "version": "4.17.21", - "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz", - "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==", + "version": "4.17.23", + "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz", + "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==", "dev": true, "license": "MIT" }, @@ -9068,7 +9056,6 @@ "integrity": "sha512-v6UNi1+3hSlVvv8fSaoUbggEM5VErKmmpGA7Pl3HF8V6uKY7rvClBOJlH6yNwQtfTueNkGVpOv/mtWL9L4bgRA==", "dev": true, "license": "MIT", - "peer": true, "bin": { "prettier": "bin/prettier.cjs" }, @@ -9306,7 +9293,6 @@ "deprecated": "This version is no longer supported. Please see https://eslint.org/version-support for other options.", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "@eslint-community/eslint-utils": "^4.2.0", "@eslint-community/regexpp": "^4.6.1", @@ -9739,7 +9725,6 @@ "integrity": "sha512-3nk8Y3a9Ea8szgKhinMlGMhGMw89mqule3KWczxhIzqudyHdCIOHw8WJlj/r329fACjKLEh13ZSk7oE22kyeIw==", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "@types/estree": "1.0.8" }, @@ -10386,7 +10371,6 @@ "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==", "dev": true, "license": "MIT", - "peer": true, "engines": { "node": ">=12" }, @@ -10681,7 +10665,6 @@ "integrity": "sha512-f0FFpIdcHgn8zcPSbf1dRevwt047YMnaiJM3u2w2RewrB+fob/zePZcrOyQoLMMO7aBIddLcQIEK5dYjkLnGrQ==", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "@cspotcode/source-map-support": "^0.8.0", "@tsconfig/node10": "^1.0.7", @@ -10891,7 +10874,6 @@ "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==", "dev": true, "license": "Apache-2.0", - "peer": true, "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" @@ -10964,7 +10946,6 @@ "integrity": "sha512-VUyWiTNQD7itdiMuJy+EuLEErLj3uwX/EpHQF8EOf33Dq3Ju6VW1GXm+swk6+1h7a49uv9fKZ+dft9jU7esdLA==", "dev": true, "hasInstallScript": true, - "peer": true, "dependencies": { "napi-postinstall": "^0.2.4" }, From e4ec133e5ab05b2f51794484cfadfcfc5fe5cfe7 Mon Sep 17 00:00:00 2001 From: Fabio Niephaus Date: Wed, 28 Jan 2026 16:39:01 +0100 Subject: [PATCH 2/4] Use `multi-ecosystem-groups` to reduce # of PRs. --- .github/dependabot.yml | 22 ++++++++++------------ 1 file changed, 10 insertions(+), 12 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index bb612fe..dd9cea0 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,19 +1,17 @@ version: 2 + +multi-ecosystem-groups: + all: + schedule: + interval: 'monthly' + updates: - package-ecosystem: 'github-actions' directory: '/' - schedule: - interval: 'monthly' - groups: - github-actions-updates: - patterns: - - '*' + patterns: ['*'] + multi-ecosystem-group: 'all' - package-ecosystem: 'npm' directory: '/' - schedule: - interval: 'monthly' - groups: - npm-updates: - patterns: - - '*' + patterns: ['*'] + multi-ecosystem-group: 'all' From bb0c1f49c0718c4c7ac6c11e81fff9646ca2ca10 Mon Sep 17 00:00:00 2001 From: Fabio Niephaus Date: Wed, 28 Jan 2026 16:50:16 +0100 Subject: [PATCH 3/4] Add fallback for last macOS Intel builds. --- dist/main.js | 18 ++++++++++++++++++ src/graalvm.ts | 16 ++++++++++++++++ 2 files changed, 34 insertions(+) diff --git a/dist/main.js b/dist/main.js index da03ac8..d092086 100644 --- a/dist/main.js +++ b/dist/main.js @@ -41272,6 +41272,20 @@ async function setUpGraalVMJDK(javaVersionOrDev, gdsToken) { coreExports.warning('This build uses the last update of Oracle GraalVM for JDK 17 under the GFTC. More details: https://github.com/marketplace/actions/github-action-for-graalvm#notes-on-oracle-graalvm-for-jdk-17'); return setUpGraalVMJDK('17.0.12', gdsToken); } + if (IS_MACOS && JDK_ARCH === 'x64') { + if (javaVersionOrDev === '25') { + coreExports.warning('This build uses Oracle GraalVM for JDK 25.0.1, the last available JDK 25 build for macOS Intel.'); + return setUpGraalVMJDK('25.0.1', gdsToken); + } + else if (javaVersionOrDev === '21') { + coreExports.warning('This build uses Oracle GraalVM for JDK 21.0.9, the last available JDK 21 build for macOS Intel.'); + return setUpGraalVMJDK('21.0.9', gdsToken); + } + else if (javaVersionOrDev === '17') { + coreExports.warning('This build uses Oracle GraalVM for JDK 17.0.17, the last available JDK 17 build for macOS Intel.'); + return setUpGraalVMJDK('17.0.17', gdsToken); + } + } if (isTokenProvided) { // Download from GDS const downloader = async () => downloadGraalVM(gdsToken, javaVersion); @@ -41344,6 +41358,10 @@ async function setUpGraalVMJDKCE(javaVersionOrDev) { if (javaVersionOrDev === VERSION_DEV) { return setUpGraalVMJDKDevBuild(); } + if (IS_MACOS && JDK_ARCH === 'x64' && javaVersionOrDev === '25') { + coreExports.warning('This build uses GraalVM CE for JDK 25.0.1, the last available JDK 25 build for macOS Intel.'); + return setUpGraalVMJDKCE('25.0.1'); + } let javaVersion = javaVersionOrDev; if (!javaVersion.includes('.')) { javaVersion = await findLatestGraalVMJDKCEJavaVersion(javaVersion); diff --git a/src/graalvm.ts b/src/graalvm.ts index 6a62382..4ba9f54 100644 --- a/src/graalvm.ts +++ b/src/graalvm.ts @@ -36,6 +36,18 @@ export async function setUpGraalVMJDK(javaVersionOrDev: string, gdsToken: string ) return setUpGraalVMJDK('17.0.12', gdsToken) } + if (c.IS_MACOS && c.JDK_ARCH === 'x64') { + if (javaVersionOrDev === '25') { + core.warning('This build uses Oracle GraalVM for JDK 25.0.1, the last available JDK 25 build for macOS Intel.') + return setUpGraalVMJDK('25.0.1', gdsToken) + } else if (javaVersionOrDev === '21') { + core.warning('This build uses Oracle GraalVM for JDK 21.0.9, the last available JDK 21 build for macOS Intel.') + return setUpGraalVMJDK('21.0.9', gdsToken) + } else if (javaVersionOrDev === '17') { + core.warning('This build uses Oracle GraalVM for JDK 17.0.17, the last available JDK 17 build for macOS Intel.') + return setUpGraalVMJDK('17.0.17', gdsToken) + } + } if (isTokenProvided) { // Download from GDS const downloader = async () => downloadGraalVM(gdsToken, javaVersion) @@ -109,6 +121,10 @@ export async function setUpGraalVMJDKCE(javaVersionOrDev: string): Promise Date: Wed, 28 Jan 2026 17:00:29 +0100 Subject: [PATCH 4/4] Reduce testing against GraalVM 20. --- .github/workflows/ci.yml | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index fff08e8..8867a9d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -43,7 +43,7 @@ jobs: PASSES_GDS_TOKEN_CHECK: ${{ !matrix.set-gds-token || secrets.GDS_TOKEN != '' }} strategy: matrix: - java-version: ['25', '21', '17', '20', 'dev'] + java-version: ['25', '21', '17', 'dev'] distribution: ['graalvm', 'graalvm-community'] os: [ ubuntu-latest, # Linux on Intel @@ -77,6 +77,9 @@ jobs: - java-version: '21.0.0' # test for GA version (see #63) distribution: 'graalvm' os: ubuntu-latest + - java-version: '20' # test for upgrade notice + distribution: 'graalvm' + os: ubuntu-latest - java-version: '17' distribution: 'graalvm' os: ubuntu-latest @@ -124,12 +127,10 @@ jobs: strategy: matrix: version: ['latest', 'dev'] - java-version: ['17', '20'] + java-version: ['17'] components: ['native-image'] os: [macos-latest, windows-latest, ubuntu-latest] exclude: - - version: 'latest' - java-version: '20' - version: 'dev' java-version: '19' include: