⬆️(deps): Update chains-project/maven-lockfile action to v5.11.1 (#1469)

renovate[bot] · LogFlames · web-flow · commit 6f63b9b97f72 · 2026-01-10T06:00:04.000Z
Co-authored-by: renovate[bot] &lt;29139614+renovate[bot]@users.noreply.github.com&gt;
Co-authored-by: LogFlames &lt;36220731+LogFlames@users.noreply.github.com&gt;
diff --git a/.github/workflows/Lockfile.yml b/.github/workflows/Lockfile.yml
@@ -31,10 +31,10 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Verify action checksums
-        uses: chains-project/maven-lockfile/.github/actions/ghasum@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile/.github/actions/ghasum@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
 
       - name: run maven-lockfile
-        uses: chains-project/maven-lockfile@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
         with:
           github-token: ${{ secrets.JRELEASER_GITHUB_TOKEN }}
           include-maven-plugins: true
diff --git a/.github/workflows/LockfilePR.yml b/.github/workflows/LockfilePR.yml
@@ -29,18 +29,18 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Verify action checksums
-        uses: chains-project/maven-lockfile/.github/actions/ghasum@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile/.github/actions/ghasum@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
 
       - name: run maven-lockfile
         if: ${{ github.event.pull_request.head.repo.full_name == github.repository }}
-        uses: chains-project/maven-lockfile@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
         with:
           github-token: ${{ secrets.JRELEASER_GITHUB_TOKEN }}
           include-maven-plugins: true
     
       - name: run maven-lockfile (fork/external)
         if: ${{ github.event.pull_request.head.repo.full_name != github.repository }}
-        uses: chains-project/maven-lockfile@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           include-maven-plugins: true
diff --git a/.github/workflows/code-qualitiy.yml b/.github/workflows/code-qualitiy.yml
@@ -34,7 +34,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Verify action checksums
-        uses: chains-project/maven-lockfile/.github/actions/ghasum@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile/.github/actions/ghasum@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
 
       - name: Set up JDK 17
         uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5.1.0
@@ -86,7 +86,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Verify action checksums
-        uses: chains-project/maven-lockfile/.github/actions/ghasum@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile/.github/actions/ghasum@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
 
       - name: Set up JDK 17
         uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5.1.0
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -63,7 +63,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Verify action checksums
-        uses: chains-project/maven-lockfile/.github/actions/ghasum@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile/.github/actions/ghasum@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
 
       - name: Set up JDK 17
         uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5.1.0
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -31,7 +31,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Verify action checksums
-        uses: chains-project/maven-lockfile/.github/actions/ghasum@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile/.github/actions/ghasum@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
 
       - name: Dependency review
         uses: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2
diff --git a/.github/workflows/doc.yml b/.github/workflows/doc.yml
@@ -30,7 +30,7 @@ jobs:
           token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Verify action checksums
-        uses: chains-project/maven-lockfile/.github/actions/ghasum@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile/.github/actions/ghasum@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
 
       - name: Generate action.yml
         run: mvn generate-resources resources:copy-resources -q
diff --git a/.github/workflows/ensure-release-notrunning.yml b/.github/workflows/ensure-release-notrunning.yml
@@ -24,7 +24,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Verify action checksums
-        uses: chains-project/maven-lockfile/.github/actions/ghasum@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile/.github/actions/ghasum@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
 
       - name: Check for running release action
         if: ${{ !startsWith(github.head_ref, 'release/') && !startsWith(github.head_ref, 'beta-release/') }}
diff --git a/.github/workflows/gha.sum b/.github/workflows/gha.sum
@@ -2,17 +2,15 @@ version 1
 
 actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb dvxPOVXwpQqe5zlrdaLXW5r2YXEqqnzbCpHTj/ZlwyI=
 actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 CBvx0gFRdW/7cfbijwjgkEBjjL/HIV5z13oXbz+6Yx0=
-actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd s/NQMxIFsmRFac7hJyF3QlZIJ3YbGpNiS5zPtPJgB1s=
 actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 rW3CGfHqpw6wyWp6TTrui6+63RSWRox4n9J+uZR7H4c=
 actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c 5G//j2nmf3RF0j3fNbUeHncIdEiv4XIMc0RbD9aceOM=
 actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 Cn0rDfuNlsG0naRPXRAUwU3fAQ9P+sxzfPvU5EcNOQ8=
 actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e hzGkcTiiDYqECET2xIRbsCTZmPfGNRIS3EA+y6skjew=
 actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f pGNYwgnMwE8lQptaxeFNnwBLuWlkpSuQLb+kTVzspLg=
-chains-project/maven-lockfile@5222660eda041ecb4000581b943a20ba6fcc84d4 URblge0/4o6WvT4VQ70TJnuIbOZIRpml+3CilSJUZQA=
+chains-project/maven-lockfile@846693ea634f9e588fde174d3a0e39198478a16e zbba38MCf8vpq4FIHVlf/NDp1xz0CTbuG+Sml2X24w0=
 github/codeql-action@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 jhRhU4XT+9kwxbzVpVaoEYrk4POgI75xb83NgyRHLFc=
 google/osv-scanner-action@375a0e8ebdc98e99b02ac4338a724f5750f21213 f2mqSqRTRl3eo4gx9rCxay5RVqMDnKc5VphUxkJWhKk=
 jreleaser/release-action@90ac653bb9c79d11179e65d81499f3f34527dcd5 as+c3Rfu/4EhsRhpHf+KRqH0iqq4hW2MiE+5V2R6PDI=
 ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a oHo5wLG0ePY4IIiiNfo0MU1uYrDKDkeV7MpBTJ39dQg=
 stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9 zll2vgWzXbJhdxzIDAA0Fhfbymux+C3NE5iBMcaAQJ0=
-stefanzweifel/git-auto-commit-action@28e16e81777b558cc906c8750092100bbb34c5e3 g4PCgPHeeaVpSPTRcoBKth4QnrZGGQXwBEoEAsAXivs=
 step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 RXkWFugtn85xH5tnDRnRGrrC7rrmCCnRlPNEheCef8k=
diff --git a/.github/workflows/ghasum.yml b/.github/workflows/ghasum.yml
@@ -30,7 +30,7 @@ jobs:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
 
       - name: Update gha.sum
-        uses: chains-project/maven-lockfile/.github/actions/ghasum@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile/.github/actions/ghasum@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
         with:
           mode: update
 
diff --git a/.github/workflows/jreleaser-beta.yml b/.github/workflows/jreleaser-beta.yml
@@ -34,7 +34,7 @@ jobs:
           token: ${{ secrets.JRELEASER_GITHUB_TOKEN }}
 
       - name: Verify action checksums
-        uses: chains-project/maven-lockfile/.github/actions/ghasum@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile/.github/actions/ghasum@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
 
       - name: Set up JDK 17
         uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5.1.0
@@ -69,7 +69,7 @@ jobs:
         shell: bash
 
       - name: run maven-lockfile (validate lockfile)
-        uses: chains-project/maven-lockfile@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
         with:
             github-token: ${{ secrets.GITHUB_TOKEN }}
             include-maven-plugins: true
diff --git a/.github/workflows/jreleaser.yml b/.github/workflows/jreleaser.yml
@@ -42,7 +42,7 @@ jobs:
           token: ${{ secrets.JRELEASER_GITHUB_TOKEN }}
 
       - name: Verify action checksums
-        uses: chains-project/maven-lockfile/.github/actions/ghasum@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile/.github/actions/ghasum@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
 
       - name: Set up JDK 17
         uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5.1.0
@@ -82,7 +82,7 @@ jobs:
         run: echo "NEXT_VERSION=$(semver next ${{ github.event.inputs.version }} $CURRENT_VERSION)" >> $GITHUB_ENV
 
       - name: run maven-lockfile (validate lockfile)
-        uses: chains-project/maven-lockfile@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
         with:
             github-token: ${{ secrets.GITHUB_TOKEN }}
             include-maven-plugins: true
diff --git a/.github/workflows/osv-scanner-pr.yml b/.github/workflows/osv-scanner-pr.yml
@@ -40,7 +40,7 @@ jobs:
         fetch-depth: 0
 
     - name: Verify action checksums
-      uses: chains-project/maven-lockfile/.github/actions/ghasum@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+      uses: chains-project/maven-lockfile/.github/actions/ghasum@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
 
     - name: "Checkout target branch"
       run: |
diff --git a/.github/workflows/osv-scanner-scheduled.yml b/.github/workflows/osv-scanner-scheduled.yml
@@ -38,7 +38,7 @@ jobs:
         persist-credentials: false
 
     - name: Verify action checksums
-      uses: chains-project/maven-lockfile/.github/actions/ghasum@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+      uses: chains-project/maven-lockfile/.github/actions/ghasum@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
 
     - name: Run scanner
       uses: google/osv-scanner-action/osv-scanner-action@375a0e8ebdc98e99b02ac4338a724f5750f21213 # v2.3.1
diff --git a/.github/workflows/regenerate-lockfile.yml b/.github/workflows/regenerate-lockfile.yml
@@ -29,9 +29,9 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Verify action checksums
-        uses: chains-project/maven-lockfile/.github/actions/ghasum@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile/.github/actions/ghasum@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
 
       - name: run maven-lockfile
-        uses: chains-project/maven-lockfile@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/smoke-tests.yml b/.github/workflows/smoke-tests.yml
@@ -41,7 +41,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Verify action checksums
-        uses: chains-project/maven-lockfile/.github/actions/ghasum@5222660eda041ecb4000581b943a20ba6fcc84d4 # 5.11.0
+        uses: chains-project/maven-lockfile/.github/actions/ghasum@846693ea634f9e588fde174d3a0e39198478a16e # 5.11.1
 
       - uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
         with:
diff --git a/lockfile.json b/lockfile.json
@@ -29741,7 +29741,7 @@
       "allowEnvironmentalValidationFailure": false,
       "includeEnvironment": true,
       "reduced": false,
-      "mavenLockfileVersion": "5.11.0",
+      "mavenLockfileVersion": "5.11.1",
       "checksumMode": "local",
       "checksumAlgorithm": "SHA-256"
     }
diff --git a/maven_plugin/lockfile.json b/maven_plugin/lockfile.json
@@ -38647,7 +38647,7 @@
       "allowEnvironmentalValidationFailure": false,
       "includeEnvironment": true,
       "reduced": false,
-      "mavenLockfileVersion": "5.11.0",
+      "mavenLockfileVersion": "5.11.1",
       "checksumMode": "local",
       "checksumAlgorithm": "SHA-256"
     }
