Update gradle/actions action to v4 #171
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
added
ci
renovate
bot
force-pushed
the
renovate/gradle-actions-4.x
branch
from
8dd6140
to
b36aca3
Compare
renovate
bot
force-pushed
the
renovate/gradle-actions-4.x
branch
from
b36aca3
to
d0a8501
Compare
renovate
bot
force-pushed
the
renovate/gradle-actions-4.x
branch
from
d0a8501
to
05da5e7
Compare
Maxr1998
approved these changes
Sep 27, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v3.3.2->v4.1.0Release Notes
gradle/actions (gradle/actions)
v4.1.0Compare Source
This release brings some minor improvements:
develocity-token-expiryparameter had no effect (#381)Full Changelog: gradle/actions@v4.0.1...v4.1.0
v4.0.1Compare Source
This patch release updates a number of dependencies, and fixes a bug that caused Gradle version '8.1' to be confused with '8.10'.
What's Changed
Full Changelog: gradle/actions@v4.0.0...v4.0.1
v4.0.0Compare Source
Final release of
v4.0.0of thesetup-gradle,dependency-submissionandwrapper-validationactions provided undergradle/actions.This release is available under the
v4tag.Major changes from the
v3releaseThe
argumentsparameter has been removedUsing the action to execute Gradle via the
argumentsparameter was deprecated inv3and this parameter has been removed.See here for more details.
Cache cleanup enabled by default
After a number of fixes and improvements, this release enables cache-cleanup by default for all Jobs using the
setup-gradleanddependency-submissionactions.Improvements and bugfixes related cache cleanup:
This feature should help to minimize the size of entries written to the GitHub Actions cache, speeding up builds and reducing cache usage.
Wrapper validation enabled by default
In
v3, thesetup-gradleaction was enhanced to support Gradle wrapper validation, removing the need to use a separate workflowfile with the
gradle/actions/wrapper-validationaction.With this release, wrapper validation has been significantly improved, and is now enabled by default (#12):
allow-snapshot-wrappersmakes it possible to validate snapshot wrapper jars usingsetup-gradle.wrapper-validationfor new Gradle versions: By only fetching wrapper checksums for Gradle versions that were not known when this action was released, this release reduces the likelihood that a network failure could cause failure in wrapper validation (#171)wrapper-validationfinds no wrapper jars (#284)Wrapper validation is important for supply-chain integrity. Enabling this feature by default will increase the coverage of wrapper
validation on projects using GitHub Actions.
New input parameters for Dependency Graph generation
Some dependency-graph inputs that could previously only be configured via environment variables now have dedicated action inputs:
dependency-graph-report-dir: sets the location where dependency-graph reports will be generateddependency-graph-exclude-projectsanddependency-graph-include-projects: select which Gradle projects will contribute to the generated dependency graph.dependency-graph-exclude-configurationsanddependency-graph-include-configurations: select which Gradle configurations will contribute to the generated dependency graph.Other improvements
read-onlyordisabled(#255)setup-gradlerequests a specific Gradle version, the action will no longer download and install that version if it is already available on thePATHof the runner (#270)setup-gradleanddependency-submissionactions now attempt to use theD:drive for Gradle User Home if it is available (#290)Deprecations and breaking changes
gradle-home-cache-cleanupinput parameter has been deprecated and replaced bycache-cleanupdependency-graph: clearparameter has been removed without replacementv3have been removed:Changelog
Full Changelog: gradle/actions@v3.5.0...v4.0.0
v3.5.0Compare Source
This release contains a major upgrade to
gradle-home-cache-cleanupas well as improvements to dependency-submission.What's Changed
Full Changelog: gradle/actions@v3.4.2...v3.5.0
v3.4.2Compare Source
This patch release fixes a race condition that resulted in the
DEVELOCITY_ACCESS_KEYvariable not being set in the environment.What's Changed
Full Changelog: gradle/actions@v3.4.1...v3.4.2
v3.4.1Compare Source
This patch release fixes a bug introduced in v3.4.0, that prevents build scan publication to Develocity.
The bug results in the removal of the
DEVELOCITY_ACCESS_KEYvariable being removed, so that Gradle cannot authenticate with the Develocity server.What's Changed
Full Changelog: gradle/actions@v3.4.0...v3.4.1
v3.4.0Compare Source
This release improves the integration with Gradle Develocity®, as well as updating a number of key dependencies.
develocity-access-keyinput parameter allows the action to generate a short-lived access token for subsequentcommunication with Develocity. This reduces the risk of the full (long-lived) access key being compromised,
either accidentally or by a malicious action.
enabled by setting environment variables.
wrapper-validationwith Gradle 8.8 wrappers.What's Changed
New Contributors
Full Changelog: gradle/actions@v3.3.2...v3.4.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.