KEMBAR78
Revise `dependabot.yml` and pin GitHub Actions. by fniephaus · Pull Request #181 · graalvm/setup-graalvm · GitHub
Skip to content

Conversation

@fniephaus
Copy link
Member

No description provided.

@fniephaus fniephaus self-assigned this Sep 15, 2025
@oracle-contributor-agreement oracle-contributor-agreement bot added the OCA Verified All contributors have signed the Oracle Contributor Agreement. label Sep 15, 2025
@github-actions
Copy link

GraalVM Native Image Build Report

helloworld generated in 55.4s as part of the 'test-action-native-image-musl' job in run #230.

Environment

Java version 26+13 Vendor version GraalVM CE 26-dev+13.1
Graal compiler optimization level: 2, target machine: x86-64-v3
C compiler x86_64-linux-musl-gcc (linux, x86_64, 10.2.1)
Garbage collector Serial GC

Analysis Results

Category Types in % Fields in % Methods in %
Reachable 3,294 67.988% 3,757 41.286% 15,357 42.848%
Reflection 1,067 22.023% 36 0.396% 416 1.161%
JNI 58 1.197% 59 0.648% 52 0.145%
Loaded 4,845 100.000% 9,100 100.000% 35,841 100.000%

Image Details

Category Size in % Details
Code area 5.05MB 36.553% 8,851 compilation units
Image heap 7.31MB 52.908% 89,250 objects, 0.00B for 4 resources
Other data 1.46MB 10.539%
Total 13.82MB 100.000%

Resource Usage

Garbage collection 3.19s (5.770% of total time) in 184 GCs
Peak RSS 1.10GB (7.072% of 15.62GB system memory)
CPU load 3.674 (91.844% of 4 CPU cores)

Report generated by setup-graalvm.

@github-actions
Copy link

GraalVM Native Image Build Report

helloworld generated in 58.2s as part of the 'test-action-native-image-windows-msvc' job in run #230.

Environment

Java version 17.0.12+8-LTS Vendor version Oracle GraalVM 17.0.12+8.1
Graal compiler optimization level: 2, target machine: x86-64-v3, PGO: ML-inferred
C compiler cl.exe (microsoft, x64, 19.44.35215)
Garbage collector Serial GC

Analysis Results

Category Types in % Fields in % Methods in %
Reachable 1,809 59.311% 1,684 45.587% 7,635 35.791%
Reflection 618 20.262% 0 0.000% 282 1.322%
JNI 53 1.738% 30 0.812% 48 0.225%
Loaded 3,050 100.000% 3,694 100.000% 21,332 100.000%

Image Details

Category Size in % Details
Code area 2.77MB 43.918% 3,464 compilation units
Image heap 3.45MB 54.709% 48,661 objects, 108.00B for 1 resources
Other data 88.66KB 1.373%
Total 6.30MB 100.000%

Resource Usage

Garbage collection 1.73s (2.979% of total time) in 128 GCs
Peak RSS 952.36MB (5.813% of 16.00GB system memory)
CPU load 3.025 (75.636% of 4 CPU cores)

Report generated by setup-graalvm.

@github-actions
Copy link

GraalVM Native Image Build Report

helloworld.exe generated in 1m 7s as part of the 'test-action-native-image-windows' job in run #230.

Environment

Java version 26+13 Vendor version GraalVM CE 26-dev+13.1
Graal compiler optimization level: 2, target machine: x86-64-v3
C compiler cl.exe (microsoft, x64, 19.44.35215)
Garbage collector Serial GC

Analysis Results

Category Types in % Fields in % Methods in %
Reachable 3,276 68.493% 3,754 41.407% 15,346 42.987%
Reflection 1,056 22.078% 36 0.397% 416 1.165%
JNI 62 1.296% 52 0.574% 52 0.146%
Loaded 4,783 100.000% 9,066 100.000% 35,699 100.000%

Image Details

Category Size in % Details
Code area 5.26MB 40.514% 8,872 compilation units
Image heap 7.31MB 56.335% 88,989 objects, 0.00B for 4 resources
Other data 418.88KB 3.151%
Total 12.98MB 100.000%

Resource Usage

Garbage collection 3.50s (5.166% of total time) in 164 GCs
Peak RSS 1.08GB (6.779% of 16.00GB system memory)
CPU load 3.143 (78.570% of 4 CPU cores)

Report generated by setup-graalvm.

@github-actions
Copy link

GraalVM Native Image Build Report

helloworld generated in 46.2s as part of the 'test-action-extensive' job in run #230.

Environment

Java version 17.0.8+9-LTS Vendor version Oracle GraalVM 17.0.8+9.1
Graal compiler optimization level: 2, target machine: x86-64-v3, PGO: ML-inferred
C compiler gcc (linux, x86_64, 13.3.0)
Garbage collector Serial GC

Analysis Results

Category Types in % Fields in % Methods in %
Reachable 1,853 59.145% 1,737 46.369% 7,712 35.618%
Reflection 638 20.364% 0 0.000% 281 1.298%
JNI 49 1.564% 32 0.854% 48 0.222%
Loaded 3,133 100.000% 3,746 100.000% 21,652 100.000%

Image Details

Category Size in % Details
Code area 2.75MB 23.176% 3,484 compilation units
Image heap 3.46MB 29.167% 48,908 objects, 108.00B for 1 resources
Debug info 5.33MB 44.900%
Other data 335.36KB 2.757%
Total 11.88MB 100.000%

Resource Usage

Garbage collection 1.88s (4.082% of total time) in 129 GCs
Peak RSS 1.10GB (7.034% of 15.62GB system memory)
CPU load 3.569 (89.224% of 4 CPU cores)

Report generated by setup-graalvm.

@fniephaus fniephaus merged commit ba5bc86 into main Sep 15, 2025
231 checks passed
@fniephaus fniephaus deleted the fniephaus/dependabot-updates branch September 15, 2025 15:01
mergify bot added a commit to robfrank/linklift that referenced this pull request Sep 24, 2025
Bumps the github-actions group with 2 updates: [graalvm/setup-graalvm](https://github.com/graalvm/setup-graalvm) and [ruby/setup-ruby](https://github.com/ruby/setup-ruby).
Updates `graalvm/setup-graalvm` from 1.3.6 to 1.3.7
Release notes

*Sourced from [graalvm/setup-graalvm's releases](https://github.com/graalvm/setup-graalvm/releases).*

> v1.3.7
> ------
>
> What's Changed
> --------------
>
> * Bump actions/checkout from 4 to 5 by [`@​dependabot`](https://github.com/dependabot)[bot] in [graalvm/setup-graalvm#179](https://redirect.github.com/graalvm/setup-graalvm/pull/179)
> * Bump the npm-development group across 1 directory with 9 updates by [`@​dependabot`](https://github.com/dependabot)[bot] in [graalvm/setup-graalvm#180](https://redirect.github.com/graalvm/setup-graalvm/pull/180)
> * Revise `dependabot.yml` and pin GitHub Actions. by [`@​fniephaus`](https://github.com/fniephaus) in [graalvm/setup-graalvm#181](https://redirect.github.com/graalvm/setup-graalvm/pull/181)
> * Test against GraalVM 25 and update `README.md`. by [`@​fniephaus`](https://github.com/fniephaus) in [graalvm/setup-graalvm#183](https://redirect.github.com/graalvm/setup-graalvm/pull/183)
>
> **Full Changelog**: <graalvm/setup-graalvm@v1...v1.3.7>


Commits

* [`aba6a07`](graalvm/setup-graalvm@aba6a07) Bump version to `1.3.7`.
* [`f4710e5`](graalvm/setup-graalvm@f4710e5) Update `README.md` for GraalVM 25.
* [`1513e54`](graalvm/setup-graalvm@1513e54) Test against GraalVM 25 and 26 EA builds.
* [`ba5bc86`](graalvm/setup-graalvm@ba5bc86) Pin GitHub Actions.
* [`2fea119`](graalvm/setup-graalvm@2fea119) Revise `dependabot.yml`.
* [`deee6c3`](graalvm/setup-graalvm@deee6c3) Address new eslint warning.
* [`eb8ac6d`](graalvm/setup-graalvm@eb8ac6d) Bump the npm-development group across 1 directory with 9 updates
* [`7e60c93`](graalvm/setup-graalvm@7e60c93) Bump actions/checkout from 4 to 5
* See full diff in [compare view](graalvm/setup-graalvm@7a1da54...aba6a07)
  
Updates `ruby/setup-ruby` from 1.257.0 to 1.262.0
Release notes

*Sourced from [ruby/setup-ruby's releases](https://github.com/ruby/setup-ruby/releases).*

> v1.262.0
> --------
>
> **Full Changelog**: <ruby/setup-ruby@v1.261.0...v1.262.0>
>
> v1.261.0
> --------
>
> What's Changed
> --------------
>
> * Update CRuby releases on Windows by [`@​ruby-builder-bot`](https://github.com/ruby-builder-bot) in [ruby/setup-ruby#809](https://redirect.github.com/ruby/setup-ruby/pull/809)
>
> **Full Changelog**: <ruby/setup-ruby@v1.260.0...v1.261.0>
>
> v1.260.0
> --------
>
> What's Changed
> --------------
>
> * Revert "feat: upgrade to node 24" by [`@​eregon`](https://github.com/eregon) in [ruby/setup-ruby#808](https://redirect.github.com/ruby/setup-ruby/pull/808)
> * Reinstate testing against jruby 9.4 and head by [`@​chadlwilson`](https://github.com/chadlwilson) in [ruby/setup-ruby#807](https://redirect.github.com/ruby/setup-ruby/pull/807)
>
> New Contributors
> ----------------
>
> * [`@​chadlwilson`](https://github.com/chadlwilson) made their first contribution in [ruby/setup-ruby#807](https://redirect.github.com/ruby/setup-ruby/pull/807)
>
> **Full Changelog**: <ruby/setup-ruby@v1.259.0...v1.260.0>
>
> v1.259.0
> --------
>
> What's Changed
> --------------
>
> * feat: upgrade to node 24 by [`@​chenrui333`](https://github.com/chenrui333) in [ruby/setup-ruby#804](https://redirect.github.com/ruby/setup-ruby/pull/804)
>
> **Full Changelog**: <ruby/setup-ruby@v1.258.0...v1.259.0>
>
> v1.258.0
> --------
>
> What's Changed
> --------------
>
> * Add ruby-3.4.6 by [`@​ruby-builder-bot`](https://github.com/ruby-builder-bot) in [ruby/setup-ruby#802](https://redirect.github.com/ruby/setup-ruby/pull/802)
> * Add truffleruby-25.0.0,truffleruby+graalvm-25.0.0 by [`@​ruby-builder-bot`](https://github.com/ruby-builder-bot) in [ruby/setup-ruby#803](https://redirect.github.com/ruby/setup-ruby/pull/803)
>
> **Full Changelog**: <ruby/setup-ruby@v1.257.0...v1.258.0>


Commits

* [`cf7216d`](ruby/setup-ruby@cf7216d) Use new releases of ruby-builder per engine-version
* [`1c58d16`](ruby/setup-ruby@1c58d16) Update CRuby releases on Windows
* [`1dc7956`](ruby/setup-ruby@1dc7956) Test on JRuby 9.4 as well as 10.0
* [`b8714f7`](ruby/setup-ruby@b8714f7) Revert "Skip test failing on JRuby on Windows"
* [`d3e13b3`](ruby/setup-ruby@d3e13b3) Revert "feat: upgrade to node 24"
* [`4df093a`](ruby/setup-ruby@4df093a) Revert "chore: add setup-node for lint job"
* [`866b91c`](ruby/setup-ruby@866b91c) chore: add setup-node for lint job
* [`c4cd38d`](ruby/setup-ruby@c4cd38d) feat: upgrade to node 24
* [`3fee676`](ruby/setup-ruby@3fee676) Add truffleruby-25.0.0,truffleruby+graalvm-25.0.0
* [`c61fbf1`](ruby/setup-ruby@c61fbf1) Add ruby-3.4.6
* See full diff in [compare view](ruby/setup-ruby@4451173...cf7216d)
  
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore  major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore  minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore  ` will remove the ignore condition of the specified dependency and ignore conditions
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

OCA Verified All contributors have signed the Oracle Contributor Agreement.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants