Repository navigation
ci: bump actions/setup-java from 6.0.1 to 6.1.0 - #61
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 6.0.1 to 6.1.0. - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@v6.0.1...v6.1.0) --- updated-dependencies: - dependency-name: actions/setup-java dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
🛡️ Quality Gate ✅ PASS —
|
| Metric | Base | Head | Δ |
|---|---|---|---|
| TP | 244 | 244 | 0 |
| FP | 0 | 0 | 0 |
| FN | 0 | 0 | 0 |
| Precision | 1.000 | 1.000 | +0.000 |
| Recall | 1.000 | 1.000 | +0.000 |
| F1 | 1.000 | 1.000 | +0.000 |
Scored over N=334 samples on both revisions.
Rule changes
None.
Performance (benchstat, count=10)
goos: linux
goarch: amd64
pkg: github.com/bytevet/godzilla/internal/analysis
cpu: AMD EPYC 9V74 80-Core Processor
│ /tmp/godzilla-qgate.uOJHQI/bench-base.txt │ /tmp/godzilla-qgate.uOJHQI/bench-head.txt │
│ sec/op │ sec/op vs base │
Engine_RuleScaling/rules=1-4 1.240m ± 1% 1.291m ± 2% +4.06% (p=0.002 n=10)
Engine_RuleScaling/rules=10-4 8.661m ± 3% 9.125m ± 2% +5.35% (p=0.000 n=10)
Engine_RuleScaling/rules=50-4 28.54m ± 2% 30.15m ± 3% +5.65% (p=0.000 n=10)
Engine_RuleScaling/rules=200-4 92.51m ± 3% 94.92m ± 2% ~ (p=0.011 n=10)
Engine_InertRules/inert=0-4 49.26µ ± 1% 52.15µ ± 1% +5.86% (p=0.000 n=10)
Engine_InertRules/inert=14-4 49.92µ ± 1% 51.81µ ± 3% +3.80% (p=0.000 n=10)
Engine_InertRules/inert=100-4 52.87µ ± 2% 54.53µ ± 1% +3.15% (p=0.000 n=10)
geomean 1.205m 1.257m +4.35%
│ /tmp/godzilla-qgate.uOJHQI/bench-base.txt │ /tmp/godzilla-qgate.uOJHQI/bench-head.txt │
│ B/op │ B/op vs base │
Engine_RuleScaling/rules=1-4 1.393Mi ± 0% 1.393Mi ± 0% ~ (p=0.810 n=10)
Engine_RuleScaling/rules=10-4 11.11Mi ± 0% 11.11Mi ± 0% +0.01% (p=0.000 n=10)
Engine_RuleScaling/rules=50-4 54.28Mi ± 0% 54.28Mi ± 0% +0.00% (p=0.000 n=10)
Engine_RuleScaling/rules=200-4 216.2Mi ± 0% 216.2Mi ± 0% ~ (p=0.631 n=10)
Engine_InertRules/inert=0-4 41.21Ki ± 0% 41.21Ki ± 0% ~ (p=1.000 n=10) ¹
Engine_InertRules/inert=14-4 41.57Ki ± 0% 41.57Ki ± 0% ~ (p=1.000 n=10) ¹
Engine_InertRules/inert=100-4 43.95Ki ± 0% 43.95Ki ± 0% ~ (p=1.000 n=10) ¹
geomean 1.438Mi 1.438Mi +0.00%
¹ all samples are equal
│ /tmp/godzilla-qgate.uOJHQI/bench-base.txt │ /tmp/godzilla-qgate.uOJHQI/bench-head.txt │
│ allocs/op │ allocs/op vs base │
Engine_RuleScaling/rules=1-4 3.651k ± 0% 3.651k ± 0% ~ (p=1.000 n=10) ¹
Engine_RuleScaling/rules=10-4 22.41k ± 0% 22.42k ± 0% +0.03% (p=0.001 n=10)
Engine_RuleScaling/rules=50-4 105.7k ± 0% 105.7k ± 0% +0.02% (p=0.000 n=10)
Engine_RuleScaling/rules=200-4 417.9k ± 0% 417.9k ± 0% ~ (p=0.541 n=10)
Engine_InertRules/inert=0-4 57.00 ± 0% 57.00 ± 0% ~ (p=1.000 n=10) ¹
Engine_InertRules/inert=14-4 59.00 ± 0% 59.00 ± 0% ~ (p=1.000 n=10) ¹
Engine_InertRules/inert=100-4 59.00 ± 0% 59.00 ± 0% ~ (p=1.000 n=10) ¹
geomean 2.558k 2.558k +0.01%
¹ all samples are equal
pkg: github.com/bytevet/godzilla/internal/rules
│ /tmp/godzilla-qgate.uOJHQI/bench-base.txt │ /tmp/godzilla-qgate.uOJHQI/bench-head.txt │
│ sec/op │ sec/op vs base │
MatchGlob-4 118.1n ± 1% 119.1n ± 1% +0.85% (p=0.002 n=10)
│ /tmp/godzilla-qgate.uOJHQI/bench-base.txt │ /tmp/godzilla-qgate.uOJHQI/bench-head.txt │
│ B/op │ B/op vs base │
MatchGlob-4 0.000 ± 0% 0.000 ± 0% ~ (p=1.000 n=10) ¹
¹ all samples are equal
│ /tmp/godzilla-qgate.uOJHQI/bench-base.txt │ /tmp/godzilla-qgate.uOJHQI/bench-head.txt │
│ allocs/op │ allocs/op vs base │
MatchGlob-4 0.000 ± 0% 0.000 ± 0% ~ (p=1.000 n=10) ¹
¹ all samples are equal
pkg: github.com/bytevet/godzilla/internal/scan
│ /tmp/godzilla-qgate.uOJHQI/bench-base.txt │ /tmp/godzilla-qgate.uOJHQI/bench-head.txt │
│ sec/op │ sec/op vs base │
Scan_Python-4 26.08m ± 3% 27.27m ± 1% +4.57% (p=0.000 n=10)
Scan_JS-4 516.0µ ± 1% 526.8µ ± 2% ~ (p=0.011 n=10)
Scan_Rust-4 39.49m ± 24% 37.08m ± 7% ~ (p=0.579 n=10)
Scan_Java-4 412.3m ± 5% 439.1m ± 4% +6.49% (p=0.000 n=10)
Scan_Ruby-4 63.96m ± 2% 66.02m ± 2% +3.22% (p=0.000 n=10)
Scan_GoWithDeps-4 2.429 ± 3% 2.522 ± 2% +3.83% (p=0.003 n=10)
Scan_GoBudgeted-4 2.460 ± 4% 2.593 ± 3% +5.43% (p=0.000 n=10)
Scan_GoSimple-4 115.9m ± 2% 122.3m ± 1% +5.48% (p=0.000 n=10)
geomean 99.63m 102.7m +3.06%
│ /tmp/godzilla-qgate.uOJHQI/bench-base.txt │ /tmp/godzilla-qgate.uOJHQI/bench-head.txt │
│ B/op │ B/op vs base │
Scan_Python-4 446.4Ki ± 2% 447.4Ki ± 2% ~ (p=0.912 n=10)
Scan_JS-4 384.4Ki ± 1% 385.0Ki ± 0% ~ (p=1.000 n=10)
Scan_Rust-4 541.1Ki ± 2% 544.1Ki ± 2% ~ (p=0.796 n=10)
Scan_Java-4 478.9Ki ± 8% 465.4Ki ± 6% ~ (p=0.255 n=10)
Scan_Ruby-4 405.7Ki ± 2% 400.2Ki ± 2% ~ (p=0.063 n=10)
Scan_GoWithDeps-4 1.442Gi ± 0% 1.442Gi ± 0% ~ (p=0.190 n=10)
Scan_GoBudgeted-4 1.443Gi ± 0% 1.443Gi ± 0% ~ (p=0.796 n=10)
Scan_GoSimple-4 8.533Mi ± 0% 8.548Mi ± 0% ~ (p=0.123 n=10)
geomean 4.834Mi 4.815Mi -0.38%
│ /tmp/godzilla-qgate.uOJHQI/bench-base.txt │ /tmp/godzilla-qgate.uOJHQI/bench-head.txt │
│ allocs/op │ allocs/op vs base │
Scan_Python-4 2.387k ± 0% 2.387k ± 0% ~ (p=0.839 n=10)
Scan_JS-4 1.928k ± 0% 1.929k ± 0% ~ (p=0.705 n=10)
Scan_Rust-4 2.631k ± 0% 2.631k ± 0% ~ (p=0.669 n=10)
Scan_Java-4 2.017k ± 1% 2.010k ± 1% ~ (p=0.300 n=10)
Scan_Ruby-4 2.010k ± 0% 2.006k ± 0% ~ (p=0.083 n=10)
Scan_GoWithDeps-4 18.86M ± 0% 18.86M ± 0% ~ (p=1.000 n=10)
Scan_GoBudgeted-4 18.88M ± 0% 18.88M ± 0% ~ (p=0.481 n=10)
Scan_GoSimple-4 63.47k ± 0% 63.49k ± 0% ~ (p=0.045 n=10)
geomean 32.04k 32.02k -0.06%
Gated on a regression significant at alpha=0.01 (benchstat marks anything weaker as
~) for: Engine_RuleScaling,Engine_InertRules,MatchGlob,Scan_GoWithDeps,Scan_GoSimple,Scan_GoBudgeted,Scan_Python,Scan_JS,Scan_Rust,Scan_Java,Scan_Ruby — timesec/op> 10%, memoryB/op/allocs/op> 10%. The strict alpha keeps subprocess/GC noise on the heavier scans from tripping the gate.
Both revisions were built and benchmarked back-to-back on this runner; numbers are only comparable within a single run.
Bumps actions/setup-java from 6.0.1 to 6.1.0.
Release notes
Sourced from actions/setup-java's releases.
Commits
b843ebfSupport Maven plugin repositories in generated settings.xml (#1286)2a69be2feat: support Maven server credential origins (#1282)d0e6e4dchore(deps): bump the monthly-npm-updates group with 13 updates (#1276)b24925bchore(deps): bump undici from 6.28.0 to 6.29.0 (#1274)47b3648Support Temurin JEP 322 patch versions like 26.0.2.1+1 (#1270) (#1279)74920aaPrefer Zulu 4-segment hotfix builds when resolving version ranges (#1278)a78ec39Stop GPG agent before removing signature-verification home (#1273)97c5a5eSupport Temurin on Linux RISC-V (#1269)1aa87b6Preserve compound Liberica build versions from .sdkmanrc (#1268)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)