actions/gradle
1
0
Fork 0
mirror of https://github.com/gradle/actions.git synced 2026-07-26 22:24:30 +02:00
Code Issues Packages Projects Releases Wiki Activity
1,667 Commits 17 Branches 119 Tags
06e95bfb12a5f93ff83da549ad5ea02668311eea
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Daz DeBoerandGitHub 06e95bfb12 Merge branch 'main' into dependabot/github_actions/github-actions-e9dd73a904 2024-12-11 10:17:04 -07:00
Daz DeBoerandGitHub 6089ee95bf Update to Gradle 8.11.1 (#477) 2024-12-11 10:16:28 -07:00
Daz DeBoerandGitHub b80eee1bc3 Remove schedule for combine-prs until it's working properley 2024-12-11 10:05:44 -07:00
daz 51109c9e9e Update to Gradle 8.11.1 2024-12-11 10:04:45 -07:00
Daz DeBoerGitHubbigdaz
 		e9e94d8112 Update known wrapper checksums (#462) 
Automatically generated pull request to update the known wrapper
checksums.

In case of conflicts, manually run the workflow from the [Actions
tab](https://github.com/gradle/actions/actions/workflows/update-checksums-file.yml),
the changes will then be force-pushed onto this pull request branch.
Do not manually update the pull request branch; those changes might get
overwritten.

> [!IMPORTANT]  
> GitHub workflows have not been executed for this pull request yet.
Before merging, close and then directly reopen this pull request to
trigger the workflows.

Co-authored-by: bigdaz <179734+bigdaz@users.noreply.github.com>
 2024-12-11 09:51:41 -07:00
daz 686515ed83 Fix combine PRs workflow 2024-12-11 09:47:11 -07:00
Daz DeBoerandGitHub fc2804f7b6 Add workflow to combine wrapperbot PRs (#476) 2024-12-11 09:08:25 -07:00
daz ce25fde741 Add workflow to combine wrapperbot PRs 2024-12-11 09:07:09 -07:00
Daz DeBoerandGitHub 35af9b8791 Simplify Dependabot config using 'directories' 2024-12-11 07:50:05 -07:00
Daz DeBoerandGitHub 375738a38b Add link to GitHub docs 2024-12-10 10:50:29 -07:00
daz e55599fc4d Adapt build-result-capture script for GE plugin 3.17+ 
The build-result-capture.init.gradle script was making some assumptions about
extensions and plugin application that do not apply with the newest GE plugin.

Fixes #449
 2024-11-17 07:26:28 -07:00
Daz DeBoerandGitHub a09a3104fe Develocity injection fixes (#448) 2024-11-16 13:52:38 -07:00
daz 333e9d9750 Do not ignore input parameters when build-scan-publish is enabled 
Fixes #447
 2024-11-15 14:35:41 -07:00
daz 2aa49bf6a9 Set the correct env var for develocity-ccud-plugin-version 
Fixes #446
 2024-11-15 14:31:56 -07:00
daz 9ab6ee6757 Bump to version 2.0.2 of CCUDGP 2024-11-15 14:10:13 -07:00
Daz DeBoerandGitHub fb5165dcd4 Add note about cache-encryption-key being required 2024-11-14 21:09:29 -07:00
daz 0e27ea7e6c Improve local development script 
- Avoid running `npm install` on every execution
- Add a separate `install` task that runs `npm clean-install`
 2024-11-14 17:00:58 -07:00
daz f4845d289c Use npm clean-install 2024-11-14 16:36:23 -07:00
Daz DeBoerandGitHub 83709b49fe Fix checksum test by reducing network calls (#444) 
This test was originally starting with an empty set of checksums,
leading to the download of a checksum for every released and snapshot
version. This resulted in in sporadic test failures.

We now start with a known set of checksums and ensure that those that
are missing are downloaded. This involved some refactoring and
improvement in the way snapshot checksums are processed.
 2024-11-14 15:44:07 -07:00
Daz DeBoerGitHubbot-githubaction
 		5f21a9bb99 Bump Gradle from 8.10.2 to 8.11 (#443) 
Co-authored-by: bot-githubaction <bot-githubaction@gradle.com>
 2024-11-14 13:48:42 -07:00
Daz DeBoerandGitHub 52ee405746 Run CodeQL on all commits 2024-11-14 13:44:22 -07:00
Daz DeBoerandGitHub 7f20d0bf71 Pin versions for GitHub Actions (#442) 2024-11-14 13:24:19 -07:00
daz b6bc8c2f17 Pin gradle/actions versions 2024-11-14 13:05:02 -07:00
daz b12c3a65f2 Pin version of 3rd party actions 2024-11-14 12:35:29 -07:00
daz d191577859 Pin actions/setup-node@v4 2024-11-14 12:23:02 -07:00
daz e726a12472 Pin actions/setup-java@v4 2024-11-14 12:21:03 -07:00
daz d30cc9ecf2 Pin actions/checkout@v4 2024-11-14 12:19:48 -07:00
daz d0efa7b0e7 Avoid duplicate actions/setup-java 2024-11-14 12:12:54 -07:00
daz 8422a6a674 Avoid running workflow on forks 2024-11-14 11:44:20 -07:00
daz 19ff74e0a6 Revert "Disable uploading OSSF scorecard to GitHub Security" 
This reverts commit 1e2142185e.
 2024-11-14 11:31:03 -07:00
Daz DeBoerandGitHub 1e2142185e Disable uploading OSSF scorecard to GitHub Security 2024-11-13 19:11:45 -07:00
Daz DeBoerandGitHub 07e0f1c008 Limit token permissions in GitHub workflows (#440) 
See
https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#token-permissions
 2024-11-13 19:01:45 -07:00
daz af45dcfe3c Add wrapper-validation workflow 
Although we run `setup-gradle` with all/most wrapper files, this global
workflow will ensure that all wrapper files in the repo are valid.
(This should help with the OSSF scorecard)
 2024-11-13 18:46:57 -07:00
daz d8b3a9fb11 Rename OSSF scorecard workflow 2024-11-13 18:46:51 -07:00
daz 48353a25ca Do not fail wrapper-validation on filename with illegal characters 2024-11-12 11:28:09 -07:00
daz f22ac61fd1 Use Gradle 8.11 as the minimum version for cache-cleanup 
The cache-cleanup API has changed, so the init-script that worked with
Gradle 8.9 no longer works with 8.11.
We now provision and use Gradle 8.11 for cache cleanup.

This provides a band-aid fix for #417 but that issue will still impact
any build configured to run with Gradle > 8.11
 2024-11-11 20:54:29 -07:00
daz 4ec844e551 npm audit fix 2024-11-11 20:54:29 -07:00
Daz DeBoerandGitHub 4ca2d5d749 Dependency updates (#429) 2024-11-11 12:49:55 -07:00
daz f31476bde2 Update test for real-world data 
This test assumed that at least one 'snapshot' wrapper checksum was unique,
and not contained in the set of wrapper checksums for released distributions.
This is no longer the case, so the assumption has been modified.
 2024-11-11 12:18:11 -07:00
daz 93415e6645 Update patch for actions/cache 3.3.0 2024-11-11 12:18:11 -07:00
Daz DeBoerandGitHub 872d6b954c Dependency updates (#411) 2024-10-06 20:36:28 -06:00
daz 61e4a25782 Control version of Gradle in PATH for unit tests 2024-10-07 12:24:47 +10:00
daz d32c4bdc08 Update wrapper to Gradle 8.10.2 2024-10-07 11:24:35 +10:00
Daz DeBoerandGitHub cf8c435260 Correctly handle multiline patterns for extracted entries (#393) 2024-09-14 16:00:48 -06:00
daz 340f8b64e0 Improve cache logging 2024-09-13 11:17:22 -06:00
Daz DeBoerandGitHub e5c1381176 Include cache save/restore times in Job Summary (#389) 
Fixes #370
 2024-09-13 10:45:46 -06:00
Daz DeBoerandGitHub a122cf5aa7 Document develocity-token-expiry parameter 
Fixes #367
 2024-09-12 18:32:17 -06:00
Daz DeBoerandGitHub 7e0f050645 Ensure minimum Gradle version for cache-cleanup (#364) 
Instead of always installing and using the latest Gradle version for
cache cleanup, we now require at least Gradle 8.9.

This avoids downloading and installing Gradle if the version on PATH is
sufficient to perform cache cleanup.
 2024-08-31 11:11:24 -06:00
daz 9291ac6ca5 Add example of job summary with cache-read-only 2024-08-29 09:54:55 -06:00
Daz DeBoerandGitHub 16bf8bc8fe Rework docs for Develocity support 
Fixes #339
 2024-08-26 14:52:14 -06:00
Daz DeBoerandGitHub 4b7cc6e174 Differentiate Gradle 8.1 from 8.10 when checking version (#358) 
Fixes #359
 2024-08-26 14:47:28 -06:00
daz 0873530e60 Increase Gradle version coverage for init-scripts 
As well as testing latest of each major version, also test early release of 6.x and 7.x
 2024-08-26 13:57:09 -06:00
Daz DeBoerandGitHub d32a10b3ae Dependency updates (#356) 
- Update to DV plugin 3.18
- Update to Gradle 8.10
- Update to address vulnerability in `unzip-stream`
 2024-08-26 13:12:08 -06:00
daz e598a32529 Quote version 8.10 in integ test 2024-08-26 12:47:06 -06:00
daz a8a2fd2323 Update to Gradle 8.10 2024-08-26 11:07:48 -06:00
daz b51fcf4d6c Only allow 1 integ-test at a time 2024-08-12 10:33:22 -06:00
daz 82758ea0fa Emphasise notice in wrapper-validation docs 2024-08-12 10:03:35 -06:00
daz e482045599 Tweak log message 2024-08-08 13:34:53 -06:00
Daz DeBoerandGitHub d724da5563 Update RELEASING.md for v4 2024-08-07 11:41:14 -06:00
daz 64869b1757 Attempt to reduce contention in integ-test-full 2024-08-07 09:04:49 -06:00
Daz DeBoerandGitHub 0b404a7148 Reduce Dependabot checks to weekly 2024-08-07 07:58:19 -06:00
daz a5a9e731f3 Bump the npm-dependencies group in /sources with 11 updates 
Bumps the npm-dependencies group in /sources with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/artifact](https://github.com/actions/toolkit/tree/HEAD/packages/artifact) | `2.1.4` | `2.1.9` |
| [@octokit/rest](https://github.com/octokit/rest.js) | `20.1.0` | `21.0.1` |
| [@octokit/webhooks-types](https://github.com/octokit/webhooks) | `7.5.0` | `7.5.1` |
| [semver](https://github.com/npm/node-semver) | `7.6.0` | `7.6.3` |
| [typed-rest-client](https://github.com/Microsoft/typed-rest-client) | `1.8.11` | `2.0.2` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `7.5.0` | `7.11.0` |
| [eslint-plugin-github](https://github.com/github/eslint-plugin-github) | `4.10.2` | `5.0.1` |
| [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) | `27.9.0` | `28.7.0` |
| [prettier](https://github.com/prettier/prettier) | `3.2.5` | `3.3.3` |
| [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.1.2` | `29.2.4` |
| [typescript](https://github.com/Microsoft/TypeScript) | `5.4.3` | `5.5.4` |

Updates `@actions/artifact` from 2.1.4 to 2.1.9
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/artifact/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/artifact)

Updates `@octokit/rest` from 20.1.0 to 21.0.1
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v20.1.0...v21.0.1)

Updates `@octokit/webhooks-types` from 7.5.0 to 7.5.1
- [Release notes](https://github.com/octokit/webhooks/releases)
- [Commits](https://github.com/octokit/webhooks/compare/v7.5.0...v7.5.1)

Updates `semver` from 7.6.0 to 7.6.3
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.6.0...v7.6.3)

Updates `typed-rest-client` from 1.8.11 to 2.0.2
- [Release notes](https://github.com/Microsoft/typed-rest-client/releases)
- [Commits](https://github.com/Microsoft/typed-rest-client/compare/v1.8.11...v2.0.2)

Updates `@typescript-eslint/parser` from 7.5.0 to 7.11.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)

Updates `eslint-plugin-github` from 4.10.2 to 5.0.1
- [Release notes](https://github.com/github/eslint-plugin-github/releases)
- [Commits](https://github.com/github/eslint-plugin-github/compare/v4.10.2...v5.0.1)

Updates `eslint-plugin-jest` from 27.9.0 to 28.7.0
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v27.9.0...v28.7.0)

Updates `prettier` from 3.2.5 to 3.3.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.2.5...3.3.3)

Updates `ts-jest` from 29.1.2 to 29.2.4
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.1.2...v29.2.4)

Updates `typescript` from 5.4.3 to 5.5.4
- [Release notes](https://github.com/Microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](https://github.com/Microsoft/TypeScript/compare/v5.4.3...v5.5.4)

---
updated-dependencies:
- dependency-name: "@actions/artifact"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@octokit/rest"
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@octokit/webhooks-types"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: semver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: typed-rest-client
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: eslint-plugin-github
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: ts-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-06 08:51:50 -06:00
daz add58192d1 Improve parameter description for 'cache-cleanup' 2024-08-05 10:54:56 -06:00
Daz DeBoerandGitHub 9edf610422 Update RELEASING.md for v4 2024-08-04 15:14:38 -06:00
daz b1833c4c90 Account for invalid wrapper jar 2024-08-03 16:51:41 -06:00
daz 895252588e Update docs for v4 release 2024-08-03 16:39:51 -06:00
daz af1da67850 Prevent concurrent jobs in integ-test-full 2024-08-03 15:54:44 -06:00
daz f8ba43cf0a Better names for suite workflows 2024-08-03 15:10:49 -06:00
daz bcd07e6643 Refactor integ-tests into suites 
- Extract 2 suites to make it possible to reduce concurrency
- Add separate workflow for integ-test and integ-test-full
 2024-08-03 14:56:37 -06:00
daz d74ee73e9f Refactor integ-tests 
- Include test name in all job names
- Remove cache key delegation as it is unused
 2024-08-03 14:56:37 -06:00
Daz DeBoerandGitHub 07190022f8 Improve error messages for min-wrapper-count (#321) 2024-08-02 15:56:14 -06:00
daz ac3aebda93 Improve error messages for min-wrapper-count 
- Specific message when no wrappers are found
- Better message when wrapper count is less than configured

Fixes #284
 2024-08-02 15:51:41 -06:00
daz d473db0899 Add tests for wrapper-validation with insufficient wrappers 
- Test min-wrapper-count greater than wrappers
- Test caswrapper-validation with insufficient wrappers
 2024-08-02 15:50:28 -06:00
Daz DeBoerandGitHub 06905c7a0f Enable wrapper-validation by default in setup-gradle (#318) 2024-08-01 11:04:20 -06:00
daz 73f1290de7 Improve docs linked for wrapper-validation failure 2024-08-01 10:59:51 -06:00
daz b6395da67c Cache validated checksums for later executions 
The most common case for validation will be that the wrapper jars are unchanged
from a previous workflow run. In this case, we cache the validated wrapper
checksums to minimise the work required on a subsequent run.

Fixes #172
 2024-08-01 10:52:36 -06:00
daz ce4c3a6c5e Move wrapper-validation into common setup code 2024-08-01 10:52:36 -06:00
daz b644be617f Enable wrapper validation by default 
- Add 'allow-snapshot-wrappers' input parameter
- Default 'validate-wrappers' to 'true'

Fixes #12
 2024-08-01 10:51:02 -06:00
daz 7179909719 Verify wrappers for distribution-snapshots 
By slurping the checksum URLs from https://services.gradle.org/distributions-snapshots/
we can include these unpublished wrapper checksums in validation.

Fixes #281
 2024-07-31 21:26:55 -06:00
daz c01aea0cb4 Introduce cheerio for fast HTML querying 2024-07-31 21:26:55 -06:00
daz fe594a580d Group cache-cleanup log messages for clarity 2024-07-31 21:25:22 -06:00
daz 53f2a5657b Add newline to args message 2024-07-31 13:22:03 -06:00
daz 1a11891cfe Add error to job summary 2024-07-22 09:30:39 -06:00
daz fae6382622 Fail the build when arguments parameter is used 2024-07-22 09:30:39 -06:00
Daz DeBoerandGitHub 81b4ac7741 Fix typo 2024-07-22 07:21:54 -06:00
daz c9872874b0 Segregate cache key for quick and full integtest 2024-07-21 14:38:05 -06:00
daz 7bb45b1dbd Finish enabling cache-cleanup by default 
- Add deprecation warning for `gradle-home-cache-cleanup`
- Change default for `dependency-submission` to `cache-cleanup: on-success`
- Update documentation for changed default
 2024-07-21 14:19:54 -06:00
Daz DeBoerandGitHub 2289da045c Introduce dependency graph params (#304) 
Fixes #193
 2024-07-19 19:40:42 -06:00
daz e6688f31b8 Include RUNNER_ARCH in cache key 
Previously, including RUNNER_OS was enough to prevent leaking incompatible
content between Gradle User Homes. With the introduction of macos-14,
we now need to differentiate between different runner architectures as well.

Fixes #138
 2024-07-19 19:24:50 -06:00
Daz DeBoerandGitHub 46308b920a Document dependency verification requirements 
Fixes #256
 2024-07-19 19:24:12 -06:00
daz 7387edbbb3 Add more input parameters for dependency-graph generation 
- dependency-graph-include-projects
- dependency-graph-exclude-projects
- dependency-graph include-configurations
- dependency-graph-exclude-configurations
 2024-07-19 17:22:07 -06:00
daz 9e459adb11 Add 'dependency-graph-report-dir' input parameter 2024-07-19 17:21:10 -06:00
Daz DeBoerandGitHub 8e4868ab4a Prepare for v4 release (#303) 
Resolves #297
Resolves #26
 2024-07-19 17:13:42 -06:00
daz 5acdee61f0 Make cache-cleanup compatible with cache-write-only 2024-07-19 16:16:59 -06:00
daz 32f9239e2c Remove the undocumented 'dependency-graph: clear' option 2024-07-19 16:16:13 -06:00
daz 12cb23c359 Enable cache-cleanup 'on-success' by default 
Fixes #26
 2024-07-19 15:28:39 -06:00
daz 238a3da6f4 Remove tests for deprecated features 2024-07-19 15:15:03 -06:00
daz 2041ce6ab1 Fail on delegation from legacy actions 2024-07-19 15:12:40 -06:00
daz ded8009fcf Remove deprecated input parameters 2024-07-19 15:12:40 -06:00
Daz DeBoerandGitHub 4b56f19bda Use pre-installed Gradle when available (#301) 
Fixes #270
 2024-07-19 14:13:59 -06:00