From 792189eafe6ad411a1afc8cb8409a0714d1ca525 Mon Sep 17 00:00:00 2001
From: Thomas Sapelza <thomas.sapelza@aboutbits.it>
Date: Thu, 12 Nov 2026 09:16:02 +0100
Subject: [PATCH 1/2] add a weekly workflow that submits the Gradle dependency
 graph

Assisted-by: Claude:claude-opus-5-5
---
 .github/workflows/dependency-submission.yml | 28 +++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 .github/workflows/dependency-submission.yml

diff --git a/.github/workflows/dependency-submission.yml b/.github/workflows/dependency-submission.yml
new file mode 100644
index 0000000..bc45682
--- /dev/null
+++ b/.github/workflows/dependency-submission.yml
@@ -0,0 +1,28 @@
+name: Dependency Submission
+
+on:
+  schedule:
+    # Mondays at 05:17 UTC. Dependencies change less than once a week, and GitHub checks new advisories against the
+    # last submitted dependency graph without a new run. Run it manually after a dependency update.
+    - cron: '17 5 * * 1'
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: write
+
+jobs:
+  dependency-submission:
+    name: Dependency Submission
+    runs-on: ubuntu-26.04
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+      - uses: aboutbits/github-actions-java/dependency-submission-with-gradle@v4
+        with:
+          project-type: quarkus

From 6a44203835629721b05325b78ff7a8fc1ccf67c6 Mon Sep 17 00:00:00 2001
From: Thomas Sapelza <thomas.sapelza@aboutbits.it>
Date: Thu, 12 Nov 2026 09:44:04 +0100
Subject: [PATCH 2/2] set the Java version explicitly in the dependency
 submission workflow

Assisted-by: Claude:claude-opus-5-5
---
 .github/workflows/dependency-submission.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/dependency-submission.yml b/.github/workflows/dependency-submission.yml
index bc45682..05957b1 100644
--- a/.github/workflows/dependency-submission.yml
+++ b/.github/workflows/dependency-submission.yml
@@ -25,4 +25,5 @@ jobs:
           persist-credentials: false
       - uses: aboutbits/github-actions-java/dependency-submission-with-gradle@v4
         with:
+          java-version: 25
           project-type: quarkus