chore(deps): bump actions/setup-java from 6.0.0 to 6.0.1 in the github-actions group

[dependabot]

Bumps the github-actions group with 1 update: actions/setup-java.

Updates actions/setup-java from 6.0.0 to 6.0.1

Release notes

Sourced from actions/setup-java's releases.

v6.0.1

What's Changed

• Fix failing GitHub Actions job for temurin 17 by @​brunoborges with @​Copilot in actions/setup-java#1259
• Fix Temurin EA E2E signature verification by @​brunoborges with @​Copilot in actions/setup-java#1260
• Fix Alpine GPG verification failures and support multiple keys by @​brunoborges in actions/setup-java#1262
• Fix import-safe checks when scripts are run from a path with symlinks by @​otaconix in actions/setup-java#1265
• Avoid macOS GPG socket overflow on long runner paths by @​brunoborges with @​Copilot in actions/setup-java#1266
• Complete v6 release highlights in README by @​brunoborges in actions/setup-java#1254
• Group and slow routine Dependabot updates by @​brunoborges in actions/setup-java#1255
• chore(deps-dev): update eslint and globals by @​dependabot[bot] in actions/setup-java#1256

New Contributors

• @​otaconix made their first contribution in actions/setup-java#1265

Full Changelog: actions/setup-java@v6.0.0...v6.0.1

Commits

• de7274f Avoid macOS GPG socket overflow on long runner paths (#1266)
• 134912a Fix import-safe checks when scripts are run from a path with symlinks (#1265)
• 0781fc6 Fix alpine failures by switching default back to only warn on verification fa...
• 4889c4a Fix Temurin EA E2E signature verification (#1260)
• 8fd3240 [WIP] Fix failing GitHub Actions job for temurin 17 (#1259)
• 2732291 chore(deps-dev): update eslint and globals (#1256)
• 1a8f22b chore: streamline Dependabot updates (#1255)
• 85030b7 docs: complete v6 release highlights (#1254)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[azure-pipelines]

Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

[Copilot]

🟢 Approval recommended

No unresolved review issues were identified.

Pull request overview

Updates actions/setup-java from v6.0.0 to v6.0.1 across CI and E2E workflows.

Changes:

• Updated pinned action SHAs and version annotations.
• Updated all five E2E UI workflow jobs.

File summaries

File	Description
.github/workflows/windows.yml	Updates Windows JDK setup action.
.github/workflows/macOS.yml	Updates macOS JDK setup action.
.github/workflows/linux.yml	Updates Linux JDK setup action.
.github/workflows/e2eUI.yml	Updates JDK setup across E2E jobs.

Review details

• Files reviewed: 4/4 changed files
• Comments generated: 0
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Changyong Gong (chagong)]

Decision: MERGED

Dependabot PR Manager result

Repository: microsoft/vscode-java-dependency
Pull request: microsoft/vscode-java-dependency#1097 — chore(deps): bump actions/setup-java from 6.0.0 to 6.0.1 in the github-actions group
Update: actions/setup-java 6.0.0 -> 6.0.1 (patch, grouped GitHub Actions update).
Safety assessment: Dependabot-authored dependency commit; a maintainer subsequently merged current main into the branch. The final diff passes the GitHub Actions-only gate: four workflow YAML files change only GitHub-controlled actions/setup-java references and adjacent version comments, both references are immutable 40-character SHAs, and de7274f081f381c8f8158605e0321c36c376e2e6 resolves exactly to v6.0.1. The action remains necessary to provision Temurin JDK 21 for CI and E2E jobs; release notes show a compatible patch release.
Final state: Head bb1dc1ca120e12e329c116dfe47dcfe56a182a69; merged at 2026-09-18T07:55:48Z as squash commit d4b583674d007b4a4e21b78371095d5d73656a41; review decision APPROVED; 33/33 final-head checks passed, including 4/4 required checks; no failed or non-terminal checks.
Actions taken: Audited the original head and final diff; classified the original Windows setup-hook timeout as FLAKY_OR_TRANSIENT; reran failed jobs once and observed success without code changes; requested Copilot review and received no findings; observed maintainer branch synchronization from old head 3666a42e4ac45cab3ec84d9994a9359b5e0566a4 with applied base 9cf4580f0b1e0a008f11e847bf33365dff721b3e to merge head bb1dc1ca120e12e329c116dfe47dcfe56a182a69; restarted the audit; approved; verified final-head CI, reviews, threads, and ancestry; squash-merged successfully.
Reason: None.
Next action: None.