Skip to content

chore(ci): bump the gh-actions-packages group with 3 updates#9352

Merged
PerfectSlayer merged 1 commit intomasterfrom
dependabot/github_actions/gh-actions-packages-047a6f8ae4
Aug 12, 2025
Merged

chore(ci): bump the gh-actions-packages group with 3 updates#9352
PerfectSlayer merged 1 commit intomasterfrom
dependabot/github_actions/gh-actions-packages-047a6f8ae4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Aug 12, 2025

Bumps the gh-actions-packages group with 3 updates: actions/checkout, actions/cache and github/codeql-action.

Updates actions/checkout from 4.2.2 to 5.0.0

Release notes

Sourced from actions/checkout's releases.

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

V5.0.0

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

... (truncated)

Commits

Updates actions/cache from 4.2.3 to 4.2.4

Release notes

Sourced from actions/cache's releases.

v4.2.4

What's Changed

New Contributors

Full Changelog: actions/cache@v4...v4.2.4

Changelog

Sourced from actions/cache's changelog.

Releases

4.2.4

  • Bump @actions/cache to v4.0.5

4.2.3

  • Bump @actions/cache to v4.0.3 (obfuscates SAS token in debug logs for cache entries)

4.2.2

  • Bump @actions/cache to v4.0.2

4.2.1

  • Bump @actions/cache to v4.0.1

4.2.0

TLDR; The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

4.1.2

  • Add GitHub Enterprise Cloud instances hostname filters to inform API endpoint choices - #1474
  • Security fix: Bump braces from 3.0.2 to 3.0.3 - #1475

4.1.1

  • Restore original behavior of cache-hit output - #1467

4.1.0

  • Ensure cache-hit output is set when a cache is missed - #1404
  • Deprecate save-always input - #1452

4.0.2

  • Fixed restore fail-on-cache-miss not working.

... (truncated)

Commits
  • 0400d5f Merge pull request #1636 from actions/Link-/release-4.2.4
  • 374a27f Prepare release 4.2.4
  • 358a730 Merge pull request #1634 from actions/Link-/optimise-deps
  • 2ee706e Fix with another approach
  • 94f7b5d Fix bundle exec
  • c36116c Fix the workflow to use licensed from source
  • 320fe7d Update the licensed workflow to use the latest version
  • d81cc47 Add licensed output
  • de24398 Add licensed output
  • e7b6a9c @​protobuf-ts/plugin to dev dependencies
  • Additional commits viewable in compare view

Updates github/codeql-action from 3.29.7 to 3.29.8

Release notes

Sourced from github/codeql-action's releases.

v3.29.8

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.8 - 08 Aug 2025

  • Fix an issue where the Action would autodetect unsupported languages such as HTML. #3015

See the full CHANGELOG.md for more information.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

3.29.8 - 08 Aug 2025

  • Fix an issue where the Action would autodetect unsupported languages such as HTML. #3015

3.29.7 - 07 Aug 2025

This release rolls back 3.29.6 to address issues with language autodetection. It is identical to 3.29.5.

3.29.6 - 07 Aug 2025

  • The cleanup-level input to the analyze Action is now deprecated. The CodeQL Action has written a limited amount of intermediate results to the database since version 2.2.5, and now automatically manages cleanup. #2999
  • Update default CodeQL bundle version to 2.22.3. #3000

3.29.5 - 29 Jul 2025

  • Update default CodeQL bundle version to 2.22.2. #2986

3.29.4 - 23 Jul 2025

No user facing changes.

3.29.3 - 21 Jul 2025

No user facing changes.

3.29.2 - 30 Jun 2025

  • Experimental: When the quality-queries input for the init action is provided with an argument, separate .quality.sarif files are produced and uploaded for each language with the results of the specified queries. Do not use this in production as it is part of an internal experiment and subject to change at any time. #2935

3.29.1 - 27 Jun 2025

  • Fix bug in PR analysis where user-provided include query filter fails to exclude non-included queries. #2938
  • Update default CodeQL bundle version to 2.22.1. #2950

3.29.0 - 11 Jun 2025

  • Update default CodeQL bundle version to 2.22.0. #2925
  • Bump minimum CodeQL bundle version to 2.16.6. #2912

3.28.21 - 28 July 2025

No user facing changes.

... (truncated)

Commits
  • 76621b6 Merge pull request #3019 from github/update-v3.29.8-679a40d33
  • 29ac3ce Add release notes for 3.29.7
  • 737cfde Update changelog for v3.29.8
  • 679a40d Merge pull request #3014 from github/henrymercer/rebuild-dispatch
  • 6fe50b2 Merge pull request #3015 from github/henrymercer/language-autodetection-worka...
  • 6bc91d6 Add changelog note
  • 6b4fedc Bump Action patch version
  • 5794ffc Fix auto-detection of extractors that aren't languages
  • bd62bf4 Finish in-progress merges
  • 2afb4e6 Avoid specifying branch unnecessarily
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gh-actions-packages group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [actions/cache](https://github.com/actions/cache) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/checkout` from 4.2.2 to 5.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@11bd719...08c6903)

Updates `actions/cache` from 4.2.3 to 4.2.4
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@5a3ec84...0400d5f)

Updates `github/codeql-action` from 3.29.7 to 3.29.8
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@51f7732...76621b6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: actions/cache
  dependency-version: 4.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: github/codeql-action
  dependency-version: 3.29.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added comp: tooling Build & Tooling tag: dependencies Dependencies related changes tag: no release notes Changes to exclude from release notes labels Aug 12, 2025
@dependabot dependabot Bot requested a review from a team as a code owner August 12, 2025 00:48
@dependabot dependabot Bot requested review from PerfectSlayer and removed request for a team August 12, 2025 00:48
@dependabot dependabot Bot added tag: no release notes Changes to exclude from release notes tag: dependencies Dependencies related changes comp: tooling Build & Tooling labels Aug 12, 2025
@datadog-datadog-prod-us1
Copy link
Copy Markdown
Contributor

datadog-datadog-prod-us1 Bot commented Aug 12, 2025

Code coverage: total 57.28%, patch 100.00% (view details)

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: d912e95 | Docs | Was this helpful? Give us feedback!

@pr-commenter
Copy link
Copy Markdown

pr-commenter Bot commented Aug 12, 2025

Benchmarks

Startup

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master dependabot/github_actions/gh-actions-packages-047a6f8ae4
git_commit_date 1754940144 1754959733
git_commit_sha a3836e6 d912e95
release_version 1.53.0-SNAPSHOT~a3836e611d 1.53.0-SNAPSHOT~d912e9578d
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1754961569 1754961569
ci_job_id 1075254142 1075254142
ci_pipeline_id 73365369 73365369
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-0-0005gl2d 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-0-0005gl2d 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module Agent Agent
parent None None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 47 metrics, 12 unstable metrics.

Startup time reports for insecure-bank
gantt
    title insecure-bank - global startup overhead: candidate=1.53.0-SNAPSHOT~d912e9578d, baseline=1.53.0-SNAPSHOT~a3836e611d

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.044 s) : 0, 1043526
Total [baseline] (8.552 s) : 0, 8552285
Agent [candidate] (1.045 s) : 0, 1044520
Total [candidate] (8.564 s) : 0, 8564257
section iast
Agent [baseline] (1.189 s) : 0, 1189265
Total [baseline] (9.312 s) : 0, 9311984
Agent [candidate] (1.176 s) : 0, 1176491
Total [candidate] (9.287 s) : 0, 9286923
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.044 s -
Agent iast 1.189 s 145.739 ms (14.0%)
Total tracing 8.552 s -
Total iast 9.312 s 759.7 ms (8.9%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.045 s -
Agent iast 1.176 s 131.971 ms (12.6%)
Total tracing 8.564 s -
Total iast 9.287 s 722.666 ms (8.4%)
gantt
    title insecure-bank - break down per module: candidate=1.53.0-SNAPSHOT~d912e9578d, baseline=1.53.0-SNAPSHOT~a3836e611d

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.429 ms) : 0, 1429
crashtracking [candidate] (1.426 ms) : 0, 1426
BytebuddyAgent [baseline] (730.937 ms) : 0, 730937
BytebuddyAgent [candidate] (730.98 ms) : 0, 730980
GlobalTracer [baseline] (241.448 ms) : 0, 241448
GlobalTracer [candidate] (241.824 ms) : 0, 241824
AppSec [baseline] (29.998 ms) : 0, 29998
AppSec [candidate] (29.993 ms) : 0, 29993
Debugger [baseline] (5.99 ms) : 0, 5990
Debugger [candidate] (6.004 ms) : 0, 6004
Remote Config [baseline] (649.068 µs) : 0, 649
Remote Config [candidate] (645.944 µs) : 0, 646
Telemetry [baseline] (12.206 ms) : 0, 12206
Telemetry [candidate] (12.719 ms) : 0, 12719
section iast
crashtracking [baseline] (1.438 ms) : 0, 1438
crashtracking [candidate] (1.423 ms) : 0, 1423
BytebuddyAgent [baseline] (860.48 ms) : 0, 860480
BytebuddyAgent [candidate] (849.312 ms) : 0, 849312
GlobalTracer [baseline] (234.794 ms) : 0, 234794
GlobalTracer [candidate] (232.574 ms) : 0, 232574
IAST [baseline] (28.605 ms) : 0, 28605
IAST [candidate] (27.601 ms) : 0, 27601
AppSec [baseline] (27.317 ms) : 0, 27317
AppSec [candidate] (27.542 ms) : 0, 27542
Debugger [baseline] (6.624 ms) : 0, 6624
Debugger [candidate] (8.175 ms) : 0, 8175
Remote Config [baseline] (582.918 µs) : 0, 583
Remote Config [candidate] (593.852 µs) : 0, 594
Telemetry [baseline] (8.32 ms) : 0, 8320
Telemetry [candidate] (8.243 ms) : 0, 8243
Loading
Startup time reports for petclinic
gantt
    title petclinic - global startup overhead: candidate=1.53.0-SNAPSHOT~d912e9578d, baseline=1.53.0-SNAPSHOT~a3836e611d

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.044 s) : 0, 1043668
Total [baseline] (10.674 s) : 0, 10674043
Agent [candidate] (1.05 s) : 0, 1050446
Total [candidate] (10.685 s) : 0, 10684992
section appsec
Agent [baseline] (1.22 s) : 0, 1219525
Total [baseline] (10.714 s) : 0, 10713730
Agent [candidate] (1.221 s) : 0, 1220802
Total [candidate] (10.781 s) : 0, 10781058
section iast
Agent [baseline] (1.181 s) : 0, 1180710
Total [baseline] (10.962 s) : 0, 10962451
Agent [candidate] (1.174 s) : 0, 1174039
Total [candidate] (10.868 s) : 0, 10867777
section profiling
Agent [baseline] (1.191 s) : 0, 1190590
Total [baseline] (10.807 s) : 0, 10806926
Agent [candidate] (1.192 s) : 0, 1191664
Total [candidate] (10.91 s) : 0, 10910376
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.044 s -
Agent appsec 1.22 s 175.857 ms (16.8%)
Agent iast 1.181 s 137.042 ms (13.1%)
Agent profiling 1.191 s 146.922 ms (14.1%)
Total tracing 10.674 s -
Total appsec 10.714 s 39.687 ms (0.4%)
Total iast 10.962 s 288.407 ms (2.7%)
Total profiling 10.807 s 132.883 ms (1.2%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.05 s -
Agent appsec 1.221 s 170.356 ms (16.2%)
Agent iast 1.174 s 123.593 ms (11.8%)
Agent profiling 1.192 s 141.218 ms (13.4%)
Total tracing 10.685 s -
Total appsec 10.781 s 96.067 ms (0.9%)
Total iast 10.868 s 182.785 ms (1.7%)
Total profiling 10.91 s 225.384 ms (2.1%)
gantt
    title petclinic - break down per module: candidate=1.53.0-SNAPSHOT~d912e9578d, baseline=1.53.0-SNAPSHOT~a3836e611d

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.42 ms) : 0, 1420
crashtracking [candidate] (1.427 ms) : 0, 1427
BytebuddyAgent [baseline] (731.319 ms) : 0, 731319
BytebuddyAgent [candidate] (735.241 ms) : 0, 735241
GlobalTracer [baseline] (241.744 ms) : 0, 241744
GlobalTracer [candidate] (243.329 ms) : 0, 243329
AppSec [baseline] (30.106 ms) : 0, 30106
AppSec [candidate] (30.43 ms) : 0, 30430
Debugger [baseline] (6.039 ms) : 0, 6039
Debugger [candidate] (6.083 ms) : 0, 6083
Remote Config [baseline] (668.637 µs) : 0, 669
Remote Config [candidate] (654.283 µs) : 0, 654
Telemetry [baseline] (11.36 ms) : 0, 11360
Telemetry [candidate] (12.191 ms) : 0, 12191
section appsec
crashtracking [baseline] (1.423 ms) : 0, 1423
crashtracking [candidate] (1.441 ms) : 0, 1441
BytebuddyAgent [baseline] (753.214 ms) : 0, 753214
BytebuddyAgent [candidate] (754.116 ms) : 0, 754116
GlobalTracer [baseline] (235.002 ms) : 0, 235002
GlobalTracer [candidate] (235.404 ms) : 0, 235404
IAST [baseline] (23.579 ms) : 0, 23579
IAST [candidate] (23.469 ms) : 0, 23469
AppSec [baseline] (167.79 ms) : 0, 167790
AppSec [candidate] (168.378 ms) : 0, 168378
Debugger [baseline] (8.554 ms) : 0, 8554
Debugger [candidate] (6.472 ms) : 0, 6472
Remote Config [baseline] (617.402 µs) : 0, 617
Remote Config [candidate] (613.683 µs) : 0, 614
Telemetry [baseline] (8.328 ms) : 0, 8328
Telemetry [candidate] (9.833 ms) : 0, 9833
section iast
crashtracking [baseline] (1.427 ms) : 0, 1427
crashtracking [candidate] (1.432 ms) : 0, 1432
BytebuddyAgent [baseline] (851.744 ms) : 0, 851744
BytebuddyAgent [candidate] (847.169 ms) : 0, 847169
GlobalTracer [baseline] (233.953 ms) : 0, 233953
GlobalTracer [candidate] (232.036 ms) : 0, 232036
IAST [baseline] (30.084 ms) : 0, 30084
IAST [candidate] (29.337 ms) : 0, 29337
AppSec [baseline] (27.585 ms) : 0, 27585
AppSec [candidate] (25.928 ms) : 0, 25928
Debugger [baseline] (5.831 ms) : 0, 5831
Debugger [candidate] (8.344 ms) : 0, 8344
Remote Config [baseline] (580.076 µs) : 0, 580
Remote Config [candidate] (593.146 µs) : 0, 593
Telemetry [baseline] (8.434 ms) : 0, 8434
Telemetry [candidate] (8.272 ms) : 0, 8272
section profiling
crashtracking [baseline] (1.401 ms) : 0, 1401
crashtracking [candidate] (1.404 ms) : 0, 1404
BytebuddyAgent [baseline] (758.507 ms) : 0, 758507
BytebuddyAgent [candidate] (759.061 ms) : 0, 759061
GlobalTracer [baseline] (221.165 ms) : 0, 221165
GlobalTracer [candidate] (221.042 ms) : 0, 221042
AppSec [baseline] (29.817 ms) : 0, 29817
AppSec [candidate] (30.082 ms) : 0, 30082
Debugger [baseline] (6.28 ms) : 0, 6280
Debugger [candidate] (6.354 ms) : 0, 6354
Remote Config [baseline] (676.268 µs) : 0, 676
Remote Config [candidate] (677.169 µs) : 0, 677
Telemetry [baseline] (15.217 ms) : 0, 15217
Telemetry [candidate] (15.894 ms) : 0, 15894
ProfilingAgent [baseline] (108.142 ms) : 0, 108142
ProfilingAgent [candidate] (107.684 ms) : 0, 107684
Profiling [baseline] (108.78 ms) : 0, 108780
Profiling [candidate] (108.322 ms) : 0, 108322
Loading

Load

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master dependabot/github_actions/gh-actions-packages-047a6f8ae4
git_commit_date 1754940144 1754959733
git_commit_sha a3836e6 d912e95
release_version 1.53.0-SNAPSHOT~a3836e611d 1.53.0-SNAPSHOT~d912e9578d
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1754961245 1754961245
ci_job_id 1075254143 1075254143
ci_pipeline_id 73365369 73365369
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-1-nc27ed18 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-1-nc27ed18 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 1 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 12 unstable metrics.

scenario Δ mean http_req_duration Δ mean throughput candidate mean http_req_duration candidate mean throughput baseline mean http_req_duration baseline mean throughput
scenario:load:petclinic:no_agent:high_load better
[-1.865ms; -1.228ms] or [-4.931%; -3.246%]
unstable
[-4.005op/s; +14.405op/s] or [-3.238%; +11.647%]
36.270ms 128.875op/s 37.816ms 123.675op/s
Request duration reports for insecure-bank
gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.53.0-SNAPSHOT~d912e9578d, baseline=1.53.0-SNAPSHOT~a3836e611d
    dateFormat X
    axisFormat %s
section baseline
no_agent (4.386 ms) : 4335, 4437
.   : milestone, 4386,
iast (9.662 ms) : 9499, 9824
.   : milestone, 9662,
iast_FULL (13.635 ms) : 13365, 13906
.   : milestone, 13635,
iast_GLOBAL (9.859 ms) : 9690, 10027
.   : milestone, 9859,
profiling (8.7 ms) : 8561, 8839
.   : milestone, 8700,
tracing (7.57 ms) : 7460, 7680
.   : milestone, 7570,
section candidate
no_agent (4.409 ms) : 4359, 4459
.   : milestone, 4409,
iast (9.432 ms) : 9280, 9585
.   : milestone, 9432,
iast_FULL (14.089 ms) : 13811, 14367
.   : milestone, 14089,
iast_GLOBAL (10.141 ms) : 9965, 10317
.   : milestone, 10141,
profiling (8.853 ms) : 8714, 8991
.   : milestone, 8853,
tracing (7.659 ms) : 7545, 7774
.   : milestone, 7659,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 4.386 ms [4.335 ms, 4.437 ms] -
iast 9.662 ms [9.499 ms, 9.824 ms] 5.275 ms (120.3%)
iast_FULL 13.635 ms [13.365 ms, 13.906 ms] 9.249 ms (210.9%)
iast_GLOBAL 9.859 ms [9.69 ms, 10.027 ms] 5.472 ms (124.8%)
profiling 8.7 ms [8.561 ms, 8.839 ms] 4.313 ms (98.3%)
tracing 7.57 ms [7.46 ms, 7.68 ms] 3.184 ms (72.6%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 4.409 ms [4.359 ms, 4.459 ms] -
iast 9.432 ms [9.28 ms, 9.585 ms] 5.023 ms (113.9%)
iast_FULL 14.089 ms [13.811 ms, 14.367 ms] 9.68 ms (219.5%)
iast_GLOBAL 10.141 ms [9.965 ms, 10.317 ms] 5.732 ms (130.0%)
profiling 8.853 ms [8.714 ms, 8.991 ms] 4.444 ms (100.8%)
tracing 7.659 ms [7.545 ms, 7.774 ms] 3.25 ms (73.7%)
Request duration reports for petclinic
gantt
    title petclinic - request duration [CI 0.99] : candidate=1.53.0-SNAPSHOT~d912e9578d, baseline=1.53.0-SNAPSHOT~a3836e611d
    dateFormat X
    axisFormat %s
section baseline
no_agent (37.816 ms) : 37517, 38115
.   : milestone, 37816,
appsec (48.482 ms) : 48033, 48932
.   : milestone, 48482,
code_origins (45.148 ms) : 44765, 45531
.   : milestone, 45148,
iast (46.344 ms) : 45940, 46748
.   : milestone, 46344,
profiling (46.697 ms) : 46243, 47150
.   : milestone, 46697,
tracing (43.394 ms) : 43017, 43770
.   : milestone, 43394,
section candidate
no_agent (36.27 ms) : 35977, 36563
.   : milestone, 36270,
appsec (48.294 ms) : 47871, 48717
.   : milestone, 48294,
code_origins (45.81 ms) : 45399, 46220
.   : milestone, 45810,
iast (45.964 ms) : 45569, 46359
.   : milestone, 45964,
profiling (47.434 ms) : 47014, 47855
.   : milestone, 47434,
tracing (43.411 ms) : 43044, 43779
.   : milestone, 43411,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 37.816 ms [37.517 ms, 38.115 ms] -
appsec 48.482 ms [48.033 ms, 48.932 ms] 10.666 ms (28.2%)
code_origins 45.148 ms [44.765 ms, 45.531 ms] 7.332 ms (19.4%)
iast 46.344 ms [45.94 ms, 46.748 ms] 8.528 ms (22.6%)
profiling 46.697 ms [46.243 ms, 47.15 ms] 8.88 ms (23.5%)
tracing 43.394 ms [43.017 ms, 43.77 ms] 5.577 ms (14.7%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 36.27 ms [35.977 ms, 36.563 ms] -
appsec 48.294 ms [47.871 ms, 48.717 ms] 12.024 ms (33.2%)
code_origins 45.81 ms [45.399 ms, 46.22 ms] 9.539 ms (26.3%)
iast 45.964 ms [45.569 ms, 46.359 ms] 9.694 ms (26.7%)
profiling 47.434 ms [47.014 ms, 47.855 ms] 11.164 ms (30.8%)
tracing 43.411 ms [43.044 ms, 43.779 ms] 7.141 ms (19.7%)

Dacapo

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master dependabot/github_actions/gh-actions-packages-047a6f8ae4
git_commit_date 1754940144 1754959733
git_commit_sha a3836e6 d912e95
release_version 1.53.0-SNAPSHOT~a3836e611d 1.53.0-SNAPSHOT~d912e9578d
See matching parameters
Baseline Candidate
application biojava biojava
ci_job_date 1754961778 1754961778
ci_job_id 1075254144 1075254144
ci_pipeline_id 73365369 73365369
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-0-e3dj16tu 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-0-e3dj16tu 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics.

Execution time for biojava
gantt
    title biojava - execution time [CI 0.99] : candidate=1.53.0-SNAPSHOT~d912e9578d, baseline=1.53.0-SNAPSHOT~a3836e611d
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.117 s) : 15117000, 15117000
.   : milestone, 15117000,
appsec (14.868 s) : 14868000, 14868000
.   : milestone, 14868000,
iast (18.662 s) : 18662000, 18662000
.   : milestone, 18662000,
iast_GLOBAL (18.217 s) : 18217000, 18217000
.   : milestone, 18217000,
profiling (15.89 s) : 15890000, 15890000
.   : milestone, 15890000,
tracing (15.064 s) : 15064000, 15064000
.   : milestone, 15064000,
section candidate
no_agent (14.988 s) : 14988000, 14988000
.   : milestone, 14988000,
appsec (15.048 s) : 15048000, 15048000
.   : milestone, 15048000,
iast (18.483 s) : 18483000, 18483000
.   : milestone, 18483000,
iast_GLOBAL (17.938 s) : 17938000, 17938000
.   : milestone, 17938000,
profiling (15.69 s) : 15690000, 15690000
.   : milestone, 15690000,
tracing (14.801 s) : 14801000, 14801000
.   : milestone, 14801000,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 15.117 s [15.117 s, 15.117 s] -
appsec 14.868 s [14.868 s, 14.868 s] -249.0 ms (-1.6%)
iast 18.662 s [18.662 s, 18.662 s] 3.545 s (23.5%)
iast_GLOBAL 18.217 s [18.217 s, 18.217 s] 3.1 s (20.5%)
profiling 15.89 s [15.89 s, 15.89 s] 773.0 ms (5.1%)
tracing 15.064 s [15.064 s, 15.064 s] -53.0 ms (-0.4%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 14.988 s [14.988 s, 14.988 s] -
appsec 15.048 s [15.048 s, 15.048 s] 60.0 ms (0.4%)
iast 18.483 s [18.483 s, 18.483 s] 3.495 s (23.3%)
iast_GLOBAL 17.938 s [17.938 s, 17.938 s] 2.95 s (19.7%)
profiling 15.69 s [15.69 s, 15.69 s] 702.0 ms (4.7%)
tracing 14.801 s [14.801 s, 14.801 s] -187.0 ms (-1.2%)
Execution time for tomcat
gantt
    title tomcat - execution time [CI 0.99] : candidate=1.53.0-SNAPSHOT~d912e9578d, baseline=1.53.0-SNAPSHOT~a3836e611d
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.485 ms) : 1474, 1497
.   : milestone, 1485,
appsec (3.664 ms) : 3447, 3882
.   : milestone, 3664,
iast (2.203 ms) : 2140, 2267
.   : milestone, 2203,
iast_GLOBAL (2.249 ms) : 2186, 2312
.   : milestone, 2249,
profiling (2.082 ms) : 2030, 2135
.   : milestone, 2082,
tracing (2.025 ms) : 1976, 2074
.   : milestone, 2025,
section candidate
no_agent (1.475 ms) : 1463, 1487
.   : milestone, 1475,
appsec (3.614 ms) : 3399, 3829
.   : milestone, 3614,
iast (2.208 ms) : 2144, 2271
.   : milestone, 2208,
iast_GLOBAL (2.251 ms) : 2188, 2315
.   : milestone, 2251,
profiling (2.042 ms) : 1991, 2093
.   : milestone, 2042,
tracing (2.033 ms) : 1983, 2082
.   : milestone, 2033,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.485 ms [1.474 ms, 1.497 ms] -
appsec 3.664 ms [3.447 ms, 3.882 ms] 2.179 ms (146.7%)
iast 2.203 ms [2.14 ms, 2.267 ms] 718.054 µs (48.3%)
iast_GLOBAL 2.249 ms [2.186 ms, 2.312 ms] 763.435 µs (51.4%)
profiling 2.082 ms [2.03 ms, 2.135 ms] 596.649 µs (40.2%)
tracing 2.025 ms [1.976 ms, 2.074 ms] 539.335 µs (36.3%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.475 ms [1.463 ms, 1.487 ms] -
appsec 3.614 ms [3.399 ms, 3.829 ms] 2.139 ms (145.0%)
iast 2.208 ms [2.144 ms, 2.271 ms] 732.553 µs (49.7%)
iast_GLOBAL 2.251 ms [2.188 ms, 2.315 ms] 776.314 µs (52.6%)
profiling 2.042 ms [1.991 ms, 2.093 ms] 566.977 µs (38.4%)
tracing 2.033 ms [1.983 ms, 2.082 ms] 557.886 µs (37.8%)

@PerfectSlayer PerfectSlayer merged commit 23cacab into master Aug 12, 2025
504 of 505 checks passed
@PerfectSlayer PerfectSlayer deleted the dependabot/github_actions/gh-actions-packages-047a6f8ae4 branch August 12, 2025 06:52
@github-actions github-actions Bot added this to the 1.53.0 milestone Aug 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

comp: tooling Build & Tooling tag: dependencies Dependencies related changes tag: no release notes Changes to exclude from release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant