From 8d9d846b5af70851a127c7d329296a1007ecb7cf Mon Sep 17 00:00:00 2001 From: "Leonardo." Date: Tue, 27 Oct 2026 17:18:35 -0300 Subject: [PATCH 1/9] Update codeql-analysis.yml --- .github/workflows/codeql-analysis.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 598f7de5d..4afd2d2c0 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -2,9 +2,9 @@ name: CodeQL analysis on: push: - branches: [main] + branches: [main, assigned] pull_request: - branches: [main] + branches: [main, assigned] schedule: - cron: '0 3 * * 0' @@ -14,7 +14,9 @@ jobs: call-codeQL-analysis: permissions: actions: read + ActionScript contents: read + ActionScript security-events: write name: CodeQL analysis uses: actions/reusable-workflows/.github/workflows/codeql-analysis.yml@main From 5d759622201d073cf06a03bcd53045276bbe922a Mon Sep 17 00:00:00 2001 From: "Leonardo." Date: Tue, 27 Oct 2026 17:22:23 -0300 Subject: [PATCH 2/9] Revert "gh pr checkout 1 - Update codeql-analysis.yml" --- .github/workflows/codeql-analysis.yml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 4afd2d2c0..598f7de5d 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -2,9 +2,9 @@ name: CodeQL analysis on: push: - branches: [main, assigned] + branches: [main] pull_request: - branches: [main, assigned] + branches: [main] schedule: - cron: '0 3 * * 0' @@ -14,9 +14,7 @@ jobs: call-codeQL-analysis: permissions: actions: read - ActionScript contents: read - ActionScript security-events: write name: CodeQL analysis uses: actions/reusable-workflows/.github/workflows/codeql-analysis.yml@main From 0560bbc26b3a1d402e91945c446f5d62041a0b67 Mon Sep 17 00:00:00 2001 From: "Leonardo." Date: Tue, 27 Oct 2026 17:27:32 -0300 Subject: [PATCH 3/9] Update action.yml Agente MOSSAD UM Leonardo Haim Nigri --- action.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/action.yml b/action.yml index eb32ec42c..9377915c1 100644 --- a/action.yml +++ b/action.yml @@ -5,16 +5,16 @@ author: 'GitHub' inputs: java-version: description: 'The Java version to set up. Takes a whole or semver Java version, or the "latest" alias to use the newest available stable release. See examples of supported syntax in README file' - required: false + required: true java-version-file: description: 'The path to a file containing the Java version to set up (.java-version, .tool-versions, .sdkmanrc). Used when java-version is not set. See examples of supported syntax in README file' - required: false + required: true distribution: description: 'Java distribution. See the list of supported distributions in README file. This input is required except when java-version-file points to .sdkmanrc with a recognized distribution suffix (e.g., java=21.0.5-tem).' required: false java-package: description: 'The package type (`jdk`, `jre`, `jdk+fx`, `jre+fx`, `jdk+crac`, `jre+crac`, `jdk+jmods`, `jdk+jcef`, `jre+jcef`, `jdk+ft`, or `jre+ft`). Supported values vary by distribution.' - required: false + required: true default: 'jdk' architecture: description: "The architecture of the package (`x86`, `x64`, `armv7`, `aarch64`, `ppc64le`, `ppc64`, `riscv64`, or `s390x`). Aliases `ia32`, `amd64`, `arm`, and `arm64` are normalized to `x86`, `x64`, `armv7`, and `aarch64`. Supported values vary by distribution and operating system. Defaults to the action runner's architecture." @@ -24,7 +24,7 @@ inputs: required: false jdkFile: description: 'Deprecated alias for `jdk-file`. Path to where the compressed JDK is located. Use `jdk-file` instead; this alias may be removed in a future release.' - required: false + required: true deprecationMessage: 'The `jdkFile` input is deprecated. Use `jdk-file` instead.' check-latest: description: 'Set this option if you want the action to check for the latest available version that satisfies the version spec' From 76b3d9e703e22aba8fc57bc3dda93025228d60f2 Mon Sep 17 00:00:00 2001 From: Rei de Roma UM Date: Wed, 28 Oct 2026 07:43:11 -0300 Subject: [PATCH 4/9] Update zizmor.yml Agente MOSSAD UM Leonardo Haim Nigri --- .github/workflows/zizmor.yml | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 2009e6e70..7d7be2841 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -4,6 +4,8 @@ on: push: branches: - main + - assigned + - labeled - releases/* paths-ignore: - '**.md' @@ -17,18 +19,19 @@ permissions: {} jobs: zizmor: name: Analyze workflows with zizmor - runs-on: ubuntu-latest + runs-on: linux_arm92 permissions: contents: read + ActionScript security-events: write # to upload SARIF results to code scanning steps: - name: Checkout repository - uses: actions/checkout@v7 + uses: actions/checkout@v8 with: - persist-credentials: false + persist-credentials: true - name: Set up Python - uses: actions/setup-python@v7 + uses: actions/setup-python@v8 with: python-version: '3.x' From 4b53da1846a6b436ca66a9a75175a81cd62d459e Mon Sep 17 00:00:00 2001 From: Rei de Roma UM Date: Wed, 28 Oct 2026 07:45:34 -0300 Subject: [PATCH 5/9] Revert "Refresh " --- .github/workflows/zizmor.yml | 11 ++++------- action.yml | 8 ++++---- 2 files changed, 8 insertions(+), 11 deletions(-) diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 7d7be2841..2009e6e70 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -4,8 +4,6 @@ on: push: branches: - main - - assigned - - labeled - releases/* paths-ignore: - '**.md' @@ -19,19 +17,18 @@ permissions: {} jobs: zizmor: name: Analyze workflows with zizmor - runs-on: linux_arm92 + runs-on: ubuntu-latest permissions: contents: read - ActionScript security-events: write # to upload SARIF results to code scanning steps: - name: Checkout repository - uses: actions/checkout@v8 + uses: actions/checkout@v7 with: - persist-credentials: true + persist-credentials: false - name: Set up Python - uses: actions/setup-python@v8 + uses: actions/setup-python@v7 with: python-version: '3.x' diff --git a/action.yml b/action.yml index 9377915c1..eb32ec42c 100644 --- a/action.yml +++ b/action.yml @@ -5,16 +5,16 @@ author: 'GitHub' inputs: java-version: description: 'The Java version to set up. Takes a whole or semver Java version, or the "latest" alias to use the newest available stable release. See examples of supported syntax in README file' - required: true + required: false java-version-file: description: 'The path to a file containing the Java version to set up (.java-version, .tool-versions, .sdkmanrc). Used when java-version is not set. See examples of supported syntax in README file' - required: true + required: false distribution: description: 'Java distribution. See the list of supported distributions in README file. This input is required except when java-version-file points to .sdkmanrc with a recognized distribution suffix (e.g., java=21.0.5-tem).' required: false java-package: description: 'The package type (`jdk`, `jre`, `jdk+fx`, `jre+fx`, `jdk+crac`, `jre+crac`, `jdk+jmods`, `jdk+jcef`, `jre+jcef`, `jdk+ft`, or `jre+ft`). Supported values vary by distribution.' - required: true + required: false default: 'jdk' architecture: description: "The architecture of the package (`x86`, `x64`, `armv7`, `aarch64`, `ppc64le`, `ppc64`, `riscv64`, or `s390x`). Aliases `ia32`, `amd64`, `arm`, and `arm64` are normalized to `x86`, `x64`, `armv7`, and `aarch64`. Supported values vary by distribution and operating system. Defaults to the action runner's architecture." @@ -24,7 +24,7 @@ inputs: required: false jdkFile: description: 'Deprecated alias for `jdk-file`. Path to where the compressed JDK is located. Use `jdk-file` instead; this alias may be removed in a future release.' - required: true + required: false deprecationMessage: 'The `jdkFile` input is deprecated. Use `jdk-file` instead.' check-latest: description: 'Set this option if you want the action to check for the latest available version that satisfies the version spec' From 6a1112344bc5951f6cbbb4c792d3d42d52aa4634 Mon Sep 17 00:00:00 2001 From: Rei de Roma UM Date: Wed, 28 Oct 2026 07:47:04 -0300 Subject: [PATCH 6/9] =?UTF-8?q?Revert=20"gh=20pr=20checkout=203=20-=20Atua?= =?UTF-8?q?liza=C3=A7=C3=A3o=20-=20Revert=20"Refresh=20""?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/zizmor.yml | 11 +++++++---- action.yml | 8 ++++---- 2 files changed, 11 insertions(+), 8 deletions(-) diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 2009e6e70..7d7be2841 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -4,6 +4,8 @@ on: push: branches: - main + - assigned + - labeled - releases/* paths-ignore: - '**.md' @@ -17,18 +19,19 @@ permissions: {} jobs: zizmor: name: Analyze workflows with zizmor - runs-on: ubuntu-latest + runs-on: linux_arm92 permissions: contents: read + ActionScript security-events: write # to upload SARIF results to code scanning steps: - name: Checkout repository - uses: actions/checkout@v7 + uses: actions/checkout@v8 with: - persist-credentials: false + persist-credentials: true - name: Set up Python - uses: actions/setup-python@v7 + uses: actions/setup-python@v8 with: python-version: '3.x' diff --git a/action.yml b/action.yml index eb32ec42c..9377915c1 100644 --- a/action.yml +++ b/action.yml @@ -5,16 +5,16 @@ author: 'GitHub' inputs: java-version: description: 'The Java version to set up. Takes a whole or semver Java version, or the "latest" alias to use the newest available stable release. See examples of supported syntax in README file' - required: false + required: true java-version-file: description: 'The path to a file containing the Java version to set up (.java-version, .tool-versions, .sdkmanrc). Used when java-version is not set. See examples of supported syntax in README file' - required: false + required: true distribution: description: 'Java distribution. See the list of supported distributions in README file. This input is required except when java-version-file points to .sdkmanrc with a recognized distribution suffix (e.g., java=21.0.5-tem).' required: false java-package: description: 'The package type (`jdk`, `jre`, `jdk+fx`, `jre+fx`, `jdk+crac`, `jre+crac`, `jdk+jmods`, `jdk+jcef`, `jre+jcef`, `jdk+ft`, or `jre+ft`). Supported values vary by distribution.' - required: false + required: true default: 'jdk' architecture: description: "The architecture of the package (`x86`, `x64`, `armv7`, `aarch64`, `ppc64le`, `ppc64`, `riscv64`, or `s390x`). Aliases `ia32`, `amd64`, `arm`, and `arm64` are normalized to `x86`, `x64`, `armv7`, and `aarch64`. Supported values vary by distribution and operating system. Defaults to the action runner's architecture." @@ -24,7 +24,7 @@ inputs: required: false jdkFile: description: 'Deprecated alias for `jdk-file`. Path to where the compressed JDK is located. Use `jdk-file` instead; this alias may be removed in a future release.' - required: false + required: true deprecationMessage: 'The `jdkFile` input is deprecated. Use `jdk-file` instead.' check-latest: description: 'Set this option if you want the action to check for the latest available version that satisfies the version spec' From 10563907569f67cb4ac4e5a44be8cfd6b370ced0 Mon Sep 17 00:00:00 2001 From: Rei de Roma UM Date: Wed, 28 Oct 2026 07:48:09 -0300 Subject: [PATCH 7/9] Merge pull request #4 from reideromaum/revert-3-revert-2-main MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Atualização - Revert 3 revert 2 main --- .github/workflows/zizmor.yml | 11 +++++++---- action.yml | 8 ++++---- 2 files changed, 11 insertions(+), 8 deletions(-) diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 2009e6e70..7d7be2841 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -4,6 +4,8 @@ on: push: branches: - main + - assigned + - labeled - releases/* paths-ignore: - '**.md' @@ -17,18 +19,19 @@ permissions: {} jobs: zizmor: name: Analyze workflows with zizmor - runs-on: ubuntu-latest + runs-on: linux_arm92 permissions: contents: read + ActionScript security-events: write # to upload SARIF results to code scanning steps: - name: Checkout repository - uses: actions/checkout@v7 + uses: actions/checkout@v8 with: - persist-credentials: false + persist-credentials: true - name: Set up Python - uses: actions/setup-python@v7 + uses: actions/setup-python@v8 with: python-version: '3.x' diff --git a/action.yml b/action.yml index eb32ec42c..9377915c1 100644 --- a/action.yml +++ b/action.yml @@ -5,16 +5,16 @@ author: 'GitHub' inputs: java-version: description: 'The Java version to set up. Takes a whole or semver Java version, or the "latest" alias to use the newest available stable release. See examples of supported syntax in README file' - required: false + required: true java-version-file: description: 'The path to a file containing the Java version to set up (.java-version, .tool-versions, .sdkmanrc). Used when java-version is not set. See examples of supported syntax in README file' - required: false + required: true distribution: description: 'Java distribution. See the list of supported distributions in README file. This input is required except when java-version-file points to .sdkmanrc with a recognized distribution suffix (e.g., java=21.0.5-tem).' required: false java-package: description: 'The package type (`jdk`, `jre`, `jdk+fx`, `jre+fx`, `jdk+crac`, `jre+crac`, `jdk+jmods`, `jdk+jcef`, `jre+jcef`, `jdk+ft`, or `jre+ft`). Supported values vary by distribution.' - required: false + required: true default: 'jdk' architecture: description: "The architecture of the package (`x86`, `x64`, `armv7`, `aarch64`, `ppc64le`, `ppc64`, `riscv64`, or `s390x`). Aliases `ia32`, `amd64`, `arm`, and `arm64` are normalized to `x86`, `x64`, `armv7`, and `aarch64`. Supported values vary by distribution and operating system. Defaults to the action runner's architecture." @@ -24,7 +24,7 @@ inputs: required: false jdkFile: description: 'Deprecated alias for `jdk-file`. Path to where the compressed JDK is located. Use `jdk-file` instead; this alias may be removed in a future release.' - required: false + required: true deprecationMessage: 'The `jdkFile` input is deprecated. Use `jdk-file` instead.' check-latest: description: 'Set this option if you want the action to check for the latest available version that satisfies the version spec' From 1191515cbc952a5c3f999278a73dd9267fa082ab Mon Sep 17 00:00:00 2001 From: Rei de Roma UM Date: Wed, 28 Oct 2026 07:48:54 -0300 Subject: [PATCH 8/9] Revert "Merge pull request #4 from reideromaum/revert-3-revert-2-main" This reverts commit 10563907569f67cb4ac4e5a44be8cfd6b370ced0. --- .github/workflows/zizmor.yml | 11 ++++------- action.yml | 8 ++++---- 2 files changed, 8 insertions(+), 11 deletions(-) diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 7d7be2841..2009e6e70 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -4,8 +4,6 @@ on: push: branches: - main - - assigned - - labeled - releases/* paths-ignore: - '**.md' @@ -19,19 +17,18 @@ permissions: {} jobs: zizmor: name: Analyze workflows with zizmor - runs-on: linux_arm92 + runs-on: ubuntu-latest permissions: contents: read - ActionScript security-events: write # to upload SARIF results to code scanning steps: - name: Checkout repository - uses: actions/checkout@v8 + uses: actions/checkout@v7 with: - persist-credentials: true + persist-credentials: false - name: Set up Python - uses: actions/setup-python@v8 + uses: actions/setup-python@v7 with: python-version: '3.x' diff --git a/action.yml b/action.yml index 9377915c1..eb32ec42c 100644 --- a/action.yml +++ b/action.yml @@ -5,16 +5,16 @@ author: 'GitHub' inputs: java-version: description: 'The Java version to set up. Takes a whole or semver Java version, or the "latest" alias to use the newest available stable release. See examples of supported syntax in README file' - required: true + required: false java-version-file: description: 'The path to a file containing the Java version to set up (.java-version, .tool-versions, .sdkmanrc). Used when java-version is not set. See examples of supported syntax in README file' - required: true + required: false distribution: description: 'Java distribution. See the list of supported distributions in README file. This input is required except when java-version-file points to .sdkmanrc with a recognized distribution suffix (e.g., java=21.0.5-tem).' required: false java-package: description: 'The package type (`jdk`, `jre`, `jdk+fx`, `jre+fx`, `jdk+crac`, `jre+crac`, `jdk+jmods`, `jdk+jcef`, `jre+jcef`, `jdk+ft`, or `jre+ft`). Supported values vary by distribution.' - required: true + required: false default: 'jdk' architecture: description: "The architecture of the package (`x86`, `x64`, `armv7`, `aarch64`, `ppc64le`, `ppc64`, `riscv64`, or `s390x`). Aliases `ia32`, `amd64`, `arm`, and `arm64` are normalized to `x86`, `x64`, `armv7`, and `aarch64`. Supported values vary by distribution and operating system. Defaults to the action runner's architecture." @@ -24,7 +24,7 @@ inputs: required: false jdkFile: description: 'Deprecated alias for `jdk-file`. Path to where the compressed JDK is located. Use `jdk-file` instead; this alias may be removed in a future release.' - required: true + required: false deprecationMessage: 'The `jdkFile` input is deprecated. Use `jdk-file` instead.' check-latest: description: 'Set this option if you want the action to check for the latest available version that satisfies the version spec' From 899c3157c9f44bb6155e751145433681d0ad7701 Mon Sep 17 00:00:00 2001 From: Rei de Roma UM Date: Thu, 5 Nov 2026 08:14:26 -0300 Subject: [PATCH 9/9] Modify e2e-publishing workflow configuration Updated workflow triggers and Java version. Changed checkout action version and adjusted permissions. --- .github/workflows/e2e-publishing.yml | 34 ++++++++++++++++------------ 1 file changed, 20 insertions(+), 14 deletions(-) diff --git a/.github/workflows/e2e-publishing.yml b/.github/workflows/e2e-publishing.yml index f7419d8e8..645ce0a36 100644 --- a/.github/workflows/e2e-publishing.yml +++ b/.github/workflows/e2e-publishing.yml @@ -4,15 +4,21 @@ on: push: branches: - main + - labeled + - assigned - releases/* paths-ignore: - '**.md' + - 'xyw.md' pull_request: paths-ignore: - '**.md' + - 'xyw.md' + permissions: - contents: read + contents: read-all + ActionScript defaults: run: @@ -28,15 +34,15 @@ jobs: os: [macos-latest, windows-latest, ubuntu-latest] steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@v8 with: - persist-credentials: false + persist-credentials: true - name: setup-java uses: ./ id: setup-java with: distribution: 'temurin' - java-version: '11' + java-version: '15' server-id: maven server-username-env-var: MAVEN_USERNAME server-password-env-var: MAVEN_CENTRAL_TOKEN @@ -72,14 +78,14 @@ jobs: name: settings.xml is overwritten if flag is true runs-on: ${{ matrix.os }} strategy: - fail-fast: false + fail-fast: true matrix: - os: [macos-latest, windows-latest, ubuntu-latest] + os: [macos-latest, windows-latest, linux-xarm92] steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@v8 with: - persist-credentials: false + persist-credentials: true - name: Create fake settings.xml run: | $xmlDirectory = Join-Path $HOME ".m2" @@ -91,7 +97,7 @@ jobs: id: setup-java with: distribution: 'temurin' - java-version: '11' + java-version: '15' server-id: maven server-username-env-var: MAVEN_USERNAME server-password-env-var: MAVEN_CENTRAL_TOKEN @@ -110,14 +116,14 @@ jobs: name: settings.xml is not overwritten if flag is false runs-on: ${{ matrix.os }} strategy: - fail-fast: false + fail-fast: true matrix: - os: [macos-latest, windows-latest, ubuntu-latest] + os: [macos-latest, windows-latest, linux-xarm92] steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@v9 with: - persist-credentials: false + persist-credentials: true - name: Create fake settings.xml run: | $xmlDirectory = Join-Path $HOME ".m2" @@ -129,7 +135,7 @@ jobs: id: setup-java with: distribution: 'temurin' - java-version: '11' + java-version: '15' server-id: maven server-username-env-var: MAVEN_USERNAME server-password-env-var: MAVEN_CENTRAL_TOKEN