[pxLi]

Description

Replace the deprecated AdoptOpenJDK distribution with Temurin in the Blossom vulnerability-scan job. Keep actions/setup-java@v5, Java 8, and all other workflow settings unchanged.

Validation

• YAML parsing and structural comparison passed: only the Java distribution changes.
• git diff --check passed.
• The self-hosted Blossom job was not run locally.

Deprecation References

• setup-java v5.7.0 release announcement: deprecates legacy AdoptOpenJDK distributions. The upstream migration notice recommends temurin for adopt before its removal in v6.

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge because it makes the intended Java distribution migration without changing the Blossom workflow’s execution flow or Java version.

Summary

Updates the Blossom vulnerability-scan workflow to replace the deprecated AdoptOpenJDK distribution identifier with Temurin while retaining actions/setup-java@v5 and Java 8. It also advances the workflow’s NVIDIA copyright year to 2026.

• The scan and downstream Jenkins-trigger flow remain structurally unchanged.
• No security issues or repository-rule violations were identified.

_{Reviews (1) · Last reviewed commit: "Resolve GitHub Actions deprecation warni..."}

[pxLi]

build