From 66f390546227b7940044591dab6ba5a08c5b4a46 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 03:56:54 +0000
Subject: [PATCH] build(deps): bump the actions group with 3 updates

Bumps the actions group with 3 updates: [gradle/actions](https://github.com/gradle/actions), [android-actions/setup-android](https://github.com/android-actions/setup-android) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `gradle/actions` from 6 to 6.2.0
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](https://github.com/gradle/actions/compare/v6...v6.2.0)

Updates `android-actions/setup-android` from 3 to 4
- [Release notes](https://github.com/android-actions/setup-android/releases)
- [Commits](https://github.com/android-actions/setup-android/compare/v3...v4)

Updates `actions/download-artifact` from 7 to 8
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8)

---
updated-dependencies:
- dependency-name: gradle/actions
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: android-actions/setup-android
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yml      |  6 +++---
 .github/workflows/release.yml | 10 +++++-----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 953c1da..e29196d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -50,7 +50,7 @@ jobs:
           key: ${{ matrix.os }}-iroh4k-${{ hashFiles('iroh4k/src/rust/Cargo.lock') }}
           restore-keys: ${{ matrix.os }}-iroh4k-
 
-      - uses: gradle/actions/setup-gradle@v6
+      - uses: gradle/actions/setup-gradle@v6.2.0
 
       # Run the two test tasks in separate invocations. Sharing one invocation has been observed
       # to let a Rust rebuild swap the JNI shared library out from under a running test JVM,
@@ -115,7 +115,7 @@ jobs:
       - name: Install cargo-ndk
         run: command -v cargo-ndk || cargo install cargo-ndk --locked
 
-      - uses: gradle/actions/setup-gradle@v6
+      - uses: gradle/actions/setup-gradle@v6.2.0
 
       # The runner image exports ANDROID_NDK_HOME, which is where `rustJni` looks first; on a
       # machine without it the plugin falls back to ndk.dir/sdk.dir in local.properties.
@@ -238,7 +238,7 @@ jobs:
           key: ${{ matrix.os }}-${{ matrix.target }}-${{ hashFiles('iroh4k/src/rust/Cargo.lock') }}
           restore-keys: ${{ matrix.os }}-${{ matrix.target }}-
 
-      - uses: gradle/actions/setup-gradle@v6
+      - uses: gradle/actions/setup-gradle@v6.2.0
 
       - name: Assemble
         run: ./gradlew :iroh4k:assemble -Ptargets=${{ matrix.target }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 742c370..c8b2f81 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -123,7 +123,7 @@ jobs:
         shell: bash
         run: command -v cargo-ndk || cargo install cargo-ndk --locked
 
-      - uses: gradle/actions/setup-gradle@v6
+      - uses: gradle/actions/setup-gradle@v6.2.0
         if: matrix.android
 
       - name: Build Android JNI libraries
@@ -156,11 +156,11 @@ jobs:
       - name: Install Rust
         run: rustup show
 
-      - uses: gradle/actions/setup-gradle@v6
+      - uses: gradle/actions/setup-gradle@v6.2.0
 
       # The AAR needs an Android SDK to configure and package, and the publisher cannot move off
       # macOS to find one.
-      - uses: android-actions/setup-android@v3
+      - uses: android-actions/setup-android@v4
 
       - name: Resolve the version
         id: version
@@ -181,13 +181,13 @@ jobs:
         if: steps.version.outputs.release == 'true'
         run: scripts/check-release-version.sh "${{ steps.version.outputs.version }}"
 
-      - uses: actions/download-artifact@v7
+      - uses: actions/download-artifact@v8
         with:
           pattern: rust-*
           merge-multiple: true
           path: rust-artifacts
 
-      - uses: actions/download-artifact@v7
+      - uses: actions/download-artifact@v8
         with:
           name: android-jnilibs
           path: iroh4k/src/androidMain/jniLibs