daz
6f6de16adf
Remove unused dependency
2025-04-09 15:29:54 -06:00
Daz DeBoer and GitHub
176e6fd709
Bump to @azure/logger 1.1.4 ( #601 )
2025-04-09 14:48:37 -06:00
Daz DeBoer and GitHub
46c9941b16
Update to latest npm build scans ( #600 )
2025-04-09 14:47:12 -06:00
daz
8d71e4ef38
Bump @babel/helpers to a non-vulnerable version
2025-04-09 11:06:15 -06:00
Daz DeBoer and GitHub
dc4f141bca
Bump the gradle group across 3 directories with 2 updates ( #588 )
...
Bumps the gradle group with 1 update in the
/.github/workflow-samples/groovy-dsl directory:
com.gradle.common-custom-user-data-gradle-plugin.
Bumps the gradle group with 1 update in the
/.github/workflow-samples/kotlin-dsl directory:
com.gradle.common-custom-user-data-gradle-plugin.
Bumps the gradle group with 2 updates in the /sources/test/init-scripts
directory: com.gradle.common-custom-user-data-gradle-plugin and
[com.fasterxml.jackson.dataformat:jackson-dataformat-smile](https://github.com/FasterXML/jackson-dataformats-binary ).
Updates `com.gradle.common-custom-user-data-gradle-plugin` from 2.1 to
2.2.1
Updates `com.gradle.common-custom-user-data-gradle-plugin` from 2.1 to
2.2.1
Updates `com.gradle.common-custom-user-data-gradle-plugin` from 2.1 to
2.2.1
Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-smile` from
2.18.2 to 2.18.3
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-binary/commit/acc383b2387984ee22f892c95bb0a6377bc6fef9 "><code>acc383b</code></a>
[maven-release-plugin] prepare release
jackson-dataformats-binary-2.18.3</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-binary/commit/5184301b79ad9a60bce9e988bf1faf58fe9c6303 "><code>5184301</code></a>
Prep for 2.18.3</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-binary/commit/a390dde5fffc5fefaf83f9c56dc9f67b827f7e46 "><code>a390dde</code></a>
Fix release notes</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-binary/commit/2576b3901c52be72de2b3b4a261b010ef2575919 "><code>2576b39</code></a>
Merge branch '2.17' into 2.18</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-binary/commit/509c39c497ef7f296a5c58c51cf4ddb127c9eb29 "><code>509c39c</code></a>
Add release notes for <a
href="https://redirect.github.com/FasterXML/jackson-dataformats-binary/issues/541 ">#541</a></li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-binary/commit/aae1b3714a81717e315cca295dcab19e856411c7 "><code>aae1b37</code></a>
SmileParser getValueAsString() issue with JsonToken.FIELD_NAME (<a
href="https://redirect.github.com/FasterXML/jackson-dataformats-binary/issues/540 ">#540</a>)</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-binary/commit/b7a257507d40a0ab8c18b7ebcb3eb5dbabf800f2 "><code>b7a2575</code></a>
Move test for <a
href="https://redirect.github.com/FasterXML/jackson-dataformats-binary/issues/75 ">#75</a>
from failing to non-failing</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-binary/commit/de5efeef12124ae338d4c97b4daecfe7751cb2fe "><code>de5efee</code></a>
Back to snapshot deps</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-binary/commit/1f278423425385f7d3eba7dfcbb35c30d3e8aaad "><code>1f27842</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li>See full diff in <a
href="https://github.com/FasterXML/jackson-dataformats-binary/compare/jackson-dataformats-binary-2.18.2...jackson-dataformats-binary-2.18.3 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
2025-04-03 07:48:08 -06:00
Daz DeBoer and GitHub
fdc7db9f7f
Bump the github-actions group across 2 directories with 2 updates ( #587 )
...
Bumps the github-actions group with 1 update in the / directory:
[gradle/actions](https://github.com/gradle/actions ).
Bumps the github-actions group with 1 update in the
/.github/actions/init-integ-test directory:
[actions/download-artifact](https://github.com/actions/download-artifact ).
Updates `gradle/actions` from 4.3.0 to 4.3.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gradle/actions/releases ">gradle/actions's
releases</a>.</em></p>
<blockquote>
<h2>v4.3.1</h2>
<p>This release fixes a couple of minor issues, as well as keeping
dependencies up to date.</p>
<h2>Fixed issues</h2>
<ul>
<li>The develocity-allow-untrusted-server parameter should be honoured
when fetching short-lived access tokens <a
href="https://redirect.github.com/gradle/actions/issues/583 ">#583</a></li>
<li>Build summary may incorrectly report build success <a
href="https://redirect.github.com/gradle/actions/issues/415 ">#415</a></li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Update develocity-injection init script to v1.1.1 by <a
href="https://github.com/bot-githubaction "><code>@bot-githubaction</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/545 ">gradle/actions#545</a></li>
<li>Bump the github-actions group across 2 directories with 3 updates by
<a href="https://github.com/dependabot "><code>@dependabot</code></a> in
<a
href="https://redirect.github.com/gradle/actions/pull/547 ">gradle/actions#547</a></li>
<li>Bump the npm-dependencies group in /sources with 2 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/548 ">gradle/actions#548</a></li>
<li>Update develocity-injection init script to v1.2 by <a
href="https://github.com/bot-githubaction "><code>@bot-githubaction</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/550 ">gradle/actions#550</a></li>
<li>Bump the github-actions group across 1 directory with 2 updates by
<a href="https://github.com/dependabot "><code>@dependabot</code></a> in
<a
href="https://redirect.github.com/gradle/actions/pull/552 ">gradle/actions#552</a></li>
<li>Bump the npm-dependencies group across 1 directory with 5 updates by
<a href="https://github.com/dependabot "><code>@dependabot</code></a> in
<a
href="https://redirect.github.com/gradle/actions/pull/558 ">gradle/actions#558</a></li>
<li>Update known wrapper checksums by <a
href="https://github.com/github-actions "><code>@github-actions</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/560 ">gradle/actions#560</a></li>
<li>Bump references to Develocity Gradle plugin from 3.19.1 to 3.19.2 by
<a
href="https://github.com/bot-githubaction "><code>@bot-githubaction</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/561 ">gradle/actions#561</a></li>
<li>Catch more build failures in job summary by <a
href="https://github.com/bigdaz "><code>@bigdaz</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/571 ">gradle/actions#571</a></li>
<li>Scope captured build failures by <a
href="https://github.com/erichaagdev "><code>@erichaagdev</code></a> in
<a
href="https://redirect.github.com/gradle/actions/pull/574 ">gradle/actions#574</a></li>
<li>Ignore SSL certificate validation when fetching Develocity
short-lived access token if
<code>develocity-allow-untrusted-server</code> is enabled by <a
href="https://github.com/remcomokveld "><code>@remcomokveld</code></a>
in <a
href="https://redirect.github.com/gradle/actions/pull/575 ">gradle/actions#575</a></li>
<li>Dependency updates by <a
href="https://github.com/bigdaz "><code>@bigdaz</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/579 ">gradle/actions#579</a></li>
<li>Bump com.google.guava:guava from 33.4.5-jre to 33.4.6-jre in
/.github/workflow-samples/kotlin-dsl in the gradle group across 1
directory by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/gradle/actions/pull/580 ">gradle/actions#580</a></li>
<li>Bump the github-actions group across 2 directories with 2 updates by
<a href="https://github.com/dependabot "><code>@dependabot</code></a> in
<a
href="https://redirect.github.com/gradle/actions/pull/582 ">gradle/actions#582</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/erichaagdev "><code>@erichaagdev</code></a>
made their first contribution in <a
href="https://redirect.github.com/gradle/actions/pull/574 ">gradle/actions#574</a></li>
<li><a
href="https://github.com/remcomokveld "><code>@remcomokveld</code></a>
made their first contribution in <a
href="https://redirect.github.com/gradle/actions/pull/575 ">gradle/actions#575</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/gradle/actions/compare/v4.3.0...v4.3.1 ">https://github.com/gradle/actions/compare/v4.3.0...v4.3.1 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/gradle/actions/commit/06832c7b30a0129d7fb559bcc6e43d26f6374244 "><code>06832c7</code></a>
Bump the github-actions group across 2 directories with 2 updates</li>
<li><a
href="https://github.com/gradle/actions/commit/b7b029e5c461bcd4187e3922253a207372ea1d04 "><code>b7b029e</code></a>
Bump com.google.guava:guava from 33.4.5-jre to 33.4.6-jre in
/.github/workflo...</li>
<li><a
href="https://github.com/gradle/actions/commit/a0bd2ca5cbf6404f68a1a02c2e2741218f894b90 "><code>a0bd2ca</code></a>
[bot] Update dist directory</li>
<li><a
href="https://github.com/gradle/actions/commit/7974541d55b5d4265df89850a40d5063d2d3036e "><code>7974541</code></a>
Dependency updates (<a
href="https://redirect.github.com/gradle/actions/issues/579 ">#579</a>)</li>
<li><a
href="https://github.com/gradle/actions/commit/a58163930329ccce0ace4389791c82734e52204b "><code>a581639</code></a>
Update DSL samples to use test suites</li>
<li><a
href="https://github.com/gradle/actions/commit/acd2925667ac1dae317b3b2de03ce2d3b5da2205 "><code>acd2925</code></a>
Update java-toolchain sample to use Kotlin DSL</li>
<li><a
href="https://github.com/gradle/actions/commit/aa88309fbde788037cd53df497543c8c40e5e2ae "><code>aa88309</code></a>
Update gradle-plugin sample to use Kotlin DSL</li>
<li><a
href="https://github.com/gradle/actions/commit/086c9e4b25c544ef148c374d34a7a844517c740b "><code>086c9e4</code></a>
Revert update to eslint-plugin-github</li>
<li><a
href="https://github.com/gradle/actions/commit/d31b81842d0028028432bad95773235ec859b85c "><code>d31b818</code></a>
Update patch file for actions/cache@v4.0.3</li>
<li><a
href="https://github.com/gradle/actions/commit/2778b4a120e9ad2ed71a81933fa2e09c33c15a72 "><code>2778b4a</code></a>
Bump the npm-dependencies group across 1 directory with 8 updates</li>
<li>Additional commits viewable in <a
href="https://github.com/gradle/actions/compare/94baf225fe0a508e581a564467443d0e2379123b...06832c7b30a0129d7fb559bcc6e43d26f6374244 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `actions/download-artifact` from 4.1.8 to 4.2.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/download-artifact/releases ">actions/download-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v4.2.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Add unit tests by <a
href="https://github.com/GhadimiR "><code>@GhadimiR</code></a> in <a
href="https://redirect.github.com/actions/download-artifact/pull/392 ">actions/download-artifact#392</a></li>
<li>Fix bug introduced in 4.2.0 by <a
href="https://github.com/GhadimiR "><code>@GhadimiR</code></a> in <a
href="https://redirect.github.com/actions/download-artifact/pull/391 ">actions/download-artifact#391</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/download-artifact/compare/v4.2.0...v4.2.1 ">https://github.com/actions/download-artifact/compare/v4.2.0...v4.2.1 </a></p>
<h2>v4.2.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update README.md by <a
href="https://github.com/lkfortuna "><code>@lkfortuna</code></a> in <a
href="https://redirect.github.com/actions/download-artifact/pull/384 ">actions/download-artifact#384</a></li>
<li>Bump artifact version, do digest check by <a
href="https://github.com/GhadimiR "><code>@GhadimiR</code></a> in <a
href="https://redirect.github.com/actions/download-artifact/pull/383 ">actions/download-artifact#383</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/lkfortuna "><code>@lkfortuna</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/download-artifact/pull/384 ">actions/download-artifact#384</a></li>
<li><a href="https://github.com/GhadimiR "><code>@GhadimiR</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/download-artifact/pull/383 ">actions/download-artifact#383</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/download-artifact/compare/v4.1.9...v4.2.0 ">https://github.com/actions/download-artifact/compare/v4.1.9...v4.2.0 </a></p>
<h2>v4.1.9</h2>
<h2>What's Changed</h2>
<ul>
<li>Add workflow file for publishing releases to immutable action
package by <a
href="https://github.com/Jcambass "><code>@Jcambass</code></a> in <a
href="https://redirect.github.com/actions/download-artifact/pull/354 ">actions/download-artifact#354</a></li>
<li>docs: small migration fix by <a
href="https://github.com/froblesmartin "><code>@froblesmartin</code></a>
in <a
href="https://redirect.github.com/actions/download-artifact/pull/370 ">actions/download-artifact#370</a></li>
<li>Update MIGRATION.md by <a
href="https://github.com/andyfeller "><code>@andyfeller</code></a> in <a
href="https://redirect.github.com/actions/download-artifact/pull/372 ">actions/download-artifact#372</a></li>
<li>Update artifact package to 2.2.2 by <a
href="https://github.com/yacaovsnc "><code>@yacaovsnc</code></a> in <a
href="https://redirect.github.com/actions/download-artifact/pull/380 ">actions/download-artifact#380</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Jcambass "><code>@Jcambass</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/download-artifact/pull/354 ">actions/download-artifact#354</a></li>
<li><a
href="https://github.com/froblesmartin "><code>@froblesmartin</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/download-artifact/pull/370 ">actions/download-artifact#370</a></li>
<li><a
href="https://github.com/andyfeller "><code>@andyfeller</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/download-artifact/pull/372 ">actions/download-artifact#372</a></li>
<li><a href="https://github.com/yacaovsnc "><code>@yacaovsnc</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/download-artifact/pull/380 ">actions/download-artifact#380</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/download-artifact/compare/v4.1.8...v4.1.9 ">https://github.com/actions/download-artifact/compare/v4.1.8...v4.1.9 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/download-artifact/commit/95815c38cf2ff2164869cbab79da8d1f422bc89e "><code>95815c3</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/download-artifact/issues/391 ">#391</a>
from GhadimiR/main</li>
<li><a
href="https://github.com/actions/download-artifact/commit/278fca438a0f334c0505181835b4796f2785949b "><code>278fca4</code></a>
Move log statements</li>
<li><a
href="https://github.com/actions/download-artifact/commit/68909842a1073010f1cf920ed7f153e2948f9c16 "><code>6890984</code></a>
Merge branch 'main' into main</li>
<li><a
href="https://github.com/actions/download-artifact/commit/f9415c0ec30f02c18e075f091cafcfe4159168d0 "><code>f9415c0</code></a>
Run unit tests in CI</li>
<li><a
href="https://github.com/actions/download-artifact/commit/76a6eb5cbca98dccb5e14c0116e53f5df13b220d "><code>76a6eb5</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/download-artifact/issues/392 ">#392</a>
from GhadimiR/add_unit_tests</li>
<li><a
href="https://github.com/actions/download-artifact/commit/a2426d7c4522072f4d5824c9508d7ea97107cb8e "><code>a2426d7</code></a>
Merge branch 'main' into add_unit_tests</li>
<li><a
href="https://github.com/actions/download-artifact/commit/3ffa694f6f7e3d53f63807f78267796f57911dd4 "><code>3ffa694</code></a>
lint</li>
<li><a
href="https://github.com/actions/download-artifact/commit/53f6aa5f93b626e252398abac720a28f6eb048ed "><code>53f6aa5</code></a>
Add extra assertion to download single artifact test</li>
<li><a
href="https://github.com/actions/download-artifact/commit/b456700053c87aa7d6b31d212292755e1e6eb923 "><code>b456700</code></a>
lint</li>
<li><a
href="https://github.com/actions/download-artifact/commit/9eab798a9885c1be58a1c4381da1109644016e98 "><code>9eab798</code></a>
Configure tsconfig</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/download-artifact/compare/fa0a91b85d4f404e444e00e005971372dc801d16...95815c38cf2ff2164869cbab79da8d1f422bc89e ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
2025-04-03 07:47:15 -06:00
daz
af84fa9a5b
Sign commits in generated PR
2025-04-03 07:35:06 -06:00
daz
bc00207b7b
Tweak warning message
2025-04-02 12:38:50 -06:00
Daz DeBoer and GitHub
777b8de880
Sign bot-generated commits
2025-04-02 12:32:16 -06:00
Daz DeBoer and GitHub
57d85d9e4d
Update release process to include tag signing
2025-04-02 12:11:44 -06:00
Daz DeBoer and GitHub
7974541d55
Dependency updates ( #579 )
2025-03-25 16:23:51 -06:00
daz
a581639303
Update DSL samples to use test suites
2025-03-25 16:14:52 -06:00
daz
acd2925667
Update java-toolchain sample to use Kotlin DSL
2025-03-25 16:14:51 -06:00
daz
aa88309fbd
Update gradle-plugin sample to use Kotlin DSL
2025-03-25 15:25:50 -06:00
daz
086c9e4b25
Revert update to eslint-plugin-github
2025-03-25 14:24:27 -06:00
daz
d31b81842d
Update patch file for actions/cache@v4.0.3
2025-03-25 14:23:37 -06:00
daz
203ed600ea
Bump tj-actions/changed-files to 46.0.3
2025-03-25 14:10:36 -06:00
Daz DeBoer and GitHub
0eda626a36
Catch more build failures in job summary ( #571 )
...
By inspecting a greater range of build operations for failure, the Job
summary will correctly reflect the build outcome in more circumstances.
Note that we now use the old 'buildFinished' mechanism for all Gradle
versions < `7.0`, instead of using the BuildService mechanism for all
Gradle versions from `6.6`. This avoids needing to deal with
inconsistent build operations present in Gradle versions `[6.6, 7.0)`.
Fixes #415
2025-02-27 22:46:42 -07:00
Daz DeBoer and GitHub
7fcd895602
Bump references to Develocity Gradle plugin from 3.19.1 to 3.19.2 ( #561 )
...
This PR bumps references to Develocity Gradle plugin from 3.19.1 to
3.19.2.
2025-02-19 07:35:11 -07:00
Daz DeBoer and GitHub
4dc278e675
Update known wrapper checksums ( #560 )
...
Automatically generated pull request to update the known wrapper
checksums.
In case of conflicts, manually run the workflow from the [Actions
tab](https://github.com/gradle/actions/actions/workflows/update-checksums-file.yml ),
the changes will then be force-pushed onto this pull request branch.
Do not manually update the pull request branch; those changes might get
overwritten.
> [!IMPORTANT]
> GitHub workflows have not been executed for this pull request yet.
Before merging, close and then directly reopen this pull request to
trigger the workflows.
2025-02-18 14:14:58 -07:00
daz
7b5af35d9a
Set author to bot for generated commits
2025-02-18 14:10:09 -07:00
Daz DeBoer and GitHub
94baf225fe
Fix space assignment deprecations in init-scripts ( #542 )
...
Fixes the Groovy syntax in 2 init-scripts to avoid deprecation warnings.
The fix to the DV injection script is temporary, and will be replaced by
a fix in the upstream reference script.
Fixes #541
2025-01-30 10:07:29 -07:00
daz
6f10c21ec5
Make it easier to produce 'prerelease' versions
2025-01-30 09:02:58 -07:00
daz
0b492c475f
Fix deprecation warnings in develocity init-script
...
This change has been made directly to the init-script, and will be superceded
by the equivalent fix in the reference script.
2025-01-30 08:51:44 -07:00
daz
79bad900c0
Fix deprecation warnings in dependency-graph init-script
2025-01-30 08:46:34 -07:00
Daz DeBoer and GitHub
986922f6a6
Update docs for dependency review ( #540 )
...
Due to an issue with dependency-review-action (https://github.com/gradle/actions/issues/482 ),
the setup described in the documentation can result in duplicate
dependencies being added to the dependency graph.
To avoid this, we now recommend using a common `dependency-submission`
workflow for both pushes to `main` and pull requests.
The `dependency-review` workflow runs on any `pull_request` but will wait
for the `dependency-submission` to complete.
This setup works for both the standard setup, and for the advanced setup for
pull requests from repository forks.
2025-01-30 08:35:10 -07:00
daz
9053a599ae
Update undici to resolve vulnerability
2025-01-28 08:27:11 -07:00
daz
dcf3ce7005
Bump to Gradle 8.12.1
2025-01-25 09:21:22 -07:00
Daz DeBoer and GitHub
9a0c3c9368
Document GRADLE_ACTIONS_SKIP_BUILD_RESULT_CAPTURE ( #529 )
...
Fixes #28
2025-01-24 11:00:39 -07:00
Daz DeBoer and GitHub
91619fae90
Attempt to use gradle wrapper for cache cleanup ( #525 )
...
The cache-cleanup operation works by executing Gradle on a dummy project
and a custom init-script. The version of Gradle used should be at least
as high as the newest version used to run a build.
Previously, if the Gradle version on PATH didn't meet this requirement,
the action would download and install the required Gradle version.
With this PR, the action will now use an existing Gradle wrapper
distribution if it meets the requirement. This avoids unnecessary
downloads of Gradle versions that are already present on the runner.
The logic is:
- Determine the newest version of Gradle that was executed during the
Job. This is the 'minimum version' for cache cleanup.
- Inspect the Gradle version on PATH and any detected wrapper scripts to
see if they meet the 'minimum version'.
- The first executable that is found to meet the requirements will be
used for cache-cleanup.
- If no executable is found that meets the requirements, attempt to
provision Gradle with the 'minimum version'.
Fixes #515
2025-01-24 10:06:51 -07:00
Daz DeBoer and GitHub
d068148857
Choose best Gradle version to use for cache cleanup ( #526 )
...
The cache-cleanup operation works by executing Gradle on a dummy project
and a custom init-script. The init-script requires at least Gradle 8.11
to work.
Ideally, the version of Gradle used for cleanup should be no older than
the newest one that wrote entries to Gradle User Home. If an older
Gradle version is used for cache-cleanup, it will not remove entries
written specifically for newer versions.
With this change, we now attempt to ensure that cache-cleanup is run
with the best Gradle version available. We inspect the Gradle version on
PATH to see if it is new enough, otherwise we will provision a Gradle
version equal to the newest one that ran in the Job.
The logic is:
- Determine the newest version of Gradle that was executed during the
Job. This is the 'minimum version' for cache cleanup.
- Inspect the Gradle version on PATH (if any) to see if it is equal to
or newer than the 'minimum version'.
- If the version Gradle on PATH is new enough, use that version for
cache-cleanup.
- If not, attempt to provision Gradle with the 'minimum version'.
Fixes #436
2025-01-24 06:16:52 -07:00
daz
c6e631b4a7
Attempt to provision best gradle version for cache-cleanup
2025-01-23 17:37:15 -07:00
daz
edf9e3c8c7
Improve comparison of Gradle versions
2025-01-23 17:36:14 -07:00
daz
ec4681f7f5
Test provision of rc and milestone versions
2025-01-23 12:09:21 -07:00
daz
24aa9155d9
Fix minor typo in log message
2025-01-23 12:08:44 -07:00
daz
74f9fa840c
Make it easier to run NPM tests locally
2025-01-23 12:07:37 -07:00
Daz DeBoer and GitHub
3bfa1140fc
Update to CCUDGP 2.1 ( #524 )
...
This change primarily impacts test projects and documentation. The only
material impact is that CCUD 2.1 will now be auto-applied when
publishing Build Scans automatically with `build-scan-publish: true`.
(Develocity injection does not hard-code any CCUD version)
2025-01-21 21:34:02 -07:00
daz
245c8a24de
Save dependency-graph file as workflow artifact
...
Diagnosing unexpected dependencies in the GitHub Dependency Graph can
be difficult. In order to aid with diagnosis, the `dependency-submission`
action will now save each dependency-graph file as a workflow artifact.
If this is undesirable, the prior behaviour can be restored by explicitly setting
`dependency-graph: generate-and-submit`.
Fixes #519
2025-01-21 14:34:49 -07:00
daz
74628b9f13
Fix npm for update-dist
2025-01-21 09:55:18 -07:00
daz
e4f356955f
Avoid capturing build-results for cache cleanup
...
The Gradle build used to perform cache-cleanup will run in the context of init-scripts
provided by the action, including those that collect build-results.
In some circumstances this can lead to unexpected results, such as saving configuration-cache
entries for cache cleanup executions.
With this change, build results will not be captured for cache-cleanup builds.
2025-01-21 09:45:13 -07:00
Daz DeBoer and GitHub
ec1d1bfd5f
Avoid env-var interpolation in toolchains.xml ( #518 )
...
Fixes #511
2025-01-21 09:44:44 -07:00
Daz DeBoer and GitHub
52d4223bcd
Add npm build scans ( #517 )
2025-01-21 07:37:50 -07:00
daz
faf1d7ca7a
Copy the raw JDK path into toolchains.xml
...
Previously we were relying on Gradle to substitute JDK environment variables
in toolchains.xml. With this change, the actual path to the JDK is encoded instead.
This should avoid issues where Gradle is not able to successfully resolve the
envioronment variable.
2025-01-20 10:20:43 -07:00
daz
392620bad1
Tidy up generation of toolchains.xml
2025-01-20 10:20:43 -07:00
daz
e6f332ecb1
Publish build scans for CI builds
2025-01-20 09:56:42 -07:00
daz
c9dc8a7709
Publish build scans for local builds
2025-01-19 15:09:35 -07:00
daz
b1155b846e
Include Develocity Agent as dev dependency
2025-01-19 14:59:23 -07:00
Daz DeBoer and GitHub
0bdd871935
Pin version in ci-combine-bot-prs.yml
2024-12-17 18:26:12 -07:00
daz
34d6b69184
Use latest DV plugin version in docs
2024-12-17 18:13:21 -07:00
Daz DeBoer and GitHub
21ecf4fc5b
Use latest dependency-graph plugin ( #489 )
2024-12-17 18:10:51 -07:00
Daz DeBoer and GitHub
5c7e362ae3
Remove deprecation warning from init-script ( #491 )
2024-12-17 17:59:42 -07:00
Daz DeBoer and GitHub
59d7e81070
Attempt to limit failures in wrapper-validation tests ( #490 )
...
- Reduce requests involved in checksums.retryTest
- Reduce requests involved in validate test
- Fetch checksum values in batches
2024-12-17 17:58:41 -07:00
daz
e0281833fa
Fix unit test to deal with new Gradle releases
2024-12-13 08:56:11 -07:00
Daz DeBoer and GitHub
b8d9a58677
Document wrapper-validation with Git LFS
2024-12-12 12:04:12 -07:00
Daz DeBoer and GitHub
f25f0d469f
Dependency updates ( #480 )
2024-12-11 12:32:44 -07:00
daz
69215f1c52
Restrict permissions for combine-prs job
2024-12-11 12:31:33 -07:00
Daz DeBoer and GitHub
df34468a37
Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.18.1 to 2.18.2 in /sources/test/init-scripts in the gradle group across 1 directory ( #478 )
...
Bumps the gradle group with 1 update in the /sources/test/init-scripts
directory:
[com.fasterxml.jackson.dataformat:jackson-dataformat-smile](https://github.com/FasterXML/jackson-dataformats-binary ).
Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-smile` from
2.18.1 to 2.18.2
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-binary/commit/147bc6024b6ab10fe8b07e573d28cefc044797dd "><code>147bc60</code></a>
[maven-release-plugin] prepare release
jackson-dataformats-binary-2.18.2</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-binary/commit/92648ab980539a865b9ebafd34b4524cb56bddb3 "><code>92648ab</code></a>
Prep for 2.18.2</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-binary/commit/d31d69576790951b26bc4b9fca631e169f22633f "><code>d31d695</code></a>
Merge branch '2.17' into 2.18</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-binary/commit/a7232c691abad70fa2afced23942c63028c55d73 "><code>a7232c6</code></a>
Back to snapshot dep</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-binary/commit/b362d85402ea516de5b41d504c7f29c294c60f81 "><code>b362d85</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-binary/commit/d817f53ab6b30cbdc4a45df77e9e37d7318fcb45 "><code>d817f53</code></a>
[maven-release-plugin] prepare release
jackson-dataformats-binary-2.17.3</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-binary/commit/d88c088671708417911ff422b1fae5aa6e88e241 "><code>d88c088</code></a>
Prep for 2.17.3</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-binary/commit/fa5abd6573616c8718043b9a9956a15c1d2d47da "><code>fa5abd6</code></a>
Back to snapshot dep</li>
<li><a
href="https://github.com/FasterXML/jackson-dataformats-binary/commit/d048e2fd91763f840221b15bf4affca2af9d61fc "><code>d048e2f</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li>See full diff in <a
href="https://github.com/FasterXML/jackson-dataformats-binary/compare/jackson-dataformats-binary-2.18.1...jackson-dataformats-binary-2.18.2 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
2024-12-11 12:23:14 -07:00
Daz DeBoer and GitHub
f984dd99ad
Update develocity-injection init script to v1.1 ( #471 )
...
Updates the develocity-injection init script to the latest reference
script content
from https://github.com/gradle/develocity-ci-injection .
2024-12-11 12:22:42 -07:00
daz
aef30aae52
Tidy up patch file
2024-12-11 12:16:54 -07:00
Daz DeBoer and GitHub
4c8d89b23d
Update @actions/cache4.0.0 and patch ( #479 )
...
I have updated the version of actions/cache to 4.0.0 and updated the
patch file.
2024-12-11 11:10:21 -07:00
daz
088ea2ca03
Update NPM dependencies
2024-12-11 11:06:56 -07:00
Daz DeBoer and GitHub
ef2fae3749
Bump the github-actions group across 1 directory with 2 updates ( #474 )
...
Bumps the github-actions group with 2 updates in the / directory:
[tj-actions/changed-files](https://github.com/tj-actions/changed-files )
and [github/codeql-action](https://github.com/github/codeql-action ).
Updates `tj-actions/changed-files` from 45.0.4 to 45.0.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tj-actions/changed-files/releases ">tj-actions/changed-files's
releases</a>.</em></p>
<blockquote>
<h2>v45.0.5</h2>
<h2>What's Changed</h2>
<ul>
<li>Upgraded to v45.0.4 by <a
href="https://github.com/tj-actions-bot "><code>@tj-actions-bot</code></a>
in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2344 ">tj-actions/changed-files#2344</a></li>
<li>chore(deps): lock file maintenance by <a
href="https://github.com/renovate "><code>@renovate</code></a> in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2345 ">tj-actions/changed-files#2345</a></li>
<li>chore(deps): update dependency <code>@vercel/ncc</code> to v0.38.3
by <a href="https://github.com/renovate "><code>@renovate</code></a> in
<a
href="https://redirect.github.com/tj-actions/changed-files/pull/2348 ">tj-actions/changed-files#2348</a></li>
<li>chore(deps): lock file maintenance by <a
href="https://github.com/renovate "><code>@renovate</code></a> in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2349 ">tj-actions/changed-files#2349</a></li>
<li>chore(deps): update dependency <code>@types/node</code> to v22.9.1
by <a href="https://github.com/renovate "><code>@renovate</code></a> in
<a
href="https://redirect.github.com/tj-actions/changed-files/pull/2352 ">tj-actions/changed-files#2352</a></li>
<li>chore(deps): bump yaml from 2.6.0 to 2.6.1 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2353 ">tj-actions/changed-files#2353</a></li>
<li>chore(deps-dev): bump eslint-plugin-github from 5.0.2 to 5.1.1 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2356 ">tj-actions/changed-files#2356</a></li>
<li>chore(deps): update dependency typescript to v5.7.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a> in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2357 ">tj-actions/changed-files#2357</a></li>
<li>chore(deps): update dependency <code>@types/node</code> to v22.9.2
by <a href="https://github.com/renovate "><code>@renovate</code></a> in
<a
href="https://redirect.github.com/tj-actions/changed-files/pull/2358 ">tj-actions/changed-files#2358</a></li>
<li>chore(deps): update dependency <code>@types/node</code> to v22.9.3
by <a href="https://github.com/renovate "><code>@renovate</code></a> in
<a
href="https://redirect.github.com/tj-actions/changed-files/pull/2359 ">tj-actions/changed-files#2359</a></li>
<li>chore(deps): lock file maintenance by <a
href="https://github.com/renovate "><code>@renovate</code></a> in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2360 ">tj-actions/changed-files#2360</a></li>
<li>chore(deps): update dependency <code>@types/node</code> to v22.9.4
by <a href="https://github.com/renovate "><code>@renovate</code></a> in
<a
href="https://redirect.github.com/tj-actions/changed-files/pull/2361 ">tj-actions/changed-files#2361</a></li>
<li>chore(deps): update dependency <code>@types/node</code> to v22.10.0
by <a href="https://github.com/renovate "><code>@renovate</code></a> in
<a
href="https://redirect.github.com/tj-actions/changed-files/pull/2364 ">tj-actions/changed-files#2364</a></li>
<li>chore(deps): update dependency prettier to v3.4.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a> in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2365 ">tj-actions/changed-files#2365</a></li>
<li>chore(deps): update dependency prettier to v3.4.1 by <a
href="https://github.com/renovate "><code>@renovate</code></a> in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2366 ">tj-actions/changed-files#2366</a></li>
<li>chore(deps): update dependency eslint-plugin-github to v5.1.3 by <a
href="https://github.com/renovate "><code>@renovate</code></a> in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2367 ">tj-actions/changed-files#2367</a></li>
<li>chore(deps): update dependency <code>@types/node</code> to v22.10.1
by <a href="https://github.com/renovate "><code>@renovate</code></a> in
<a
href="https://redirect.github.com/tj-actions/changed-files/pull/2368 ">tj-actions/changed-files#2368</a></li>
<li>chore(deps): lock file maintenance by <a
href="https://github.com/renovate "><code>@renovate</code></a> in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2369 ">tj-actions/changed-files#2369</a></li>
<li>chore(deps): update dependency prettier to v3.4.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a> in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2370 ">tj-actions/changed-files#2370</a></li>
<li>chore(deps): update dependency eslint-plugin-github to v5.1.4 by <a
href="https://github.com/renovate "><code>@renovate</code></a> in <a
href="https://redirect.github.com/tj-actions/changed-files/pull/2372 ">tj-actions/changed-files#2372</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/tj-actions/changed-files/compare/v45...v45.0.5 ">https://github.com/tj-actions/changed-files/compare/v45...v45.0.5 </a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tj-actions/changed-files/blob/main/HISTORY.md ">tj-actions/changed-files's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h1><a
href="https://github.com/tj-actions/changed-files/compare/v45.0.4...v45.0.5 ">45.0.5</a>
- (2024-12-05)</h1>
<h2><!-- raw HTML omitted -->⚙️ Miscellaneous Tasks</h2>
<ul>
<li><strong>deps:</strong> Update dependency eslint-plugin-github to
v5.1.4 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2372 ">#2372</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/bab30c2299617f6615ec02a68b9a40d10bd21366 ">bab30c2</a>)
- (renovate[bot])</li>
<li><strong>deps:</strong> Update dependency prettier to v3.4.2 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2370 ">#2370</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/657a3f914f8c3dc9d8e541c1c2173057072d94f1 ">657a3f9</a>)
- (renovate[bot])</li>
<li><strong>deps:</strong> Lock file maintenance (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2369 ">#2369</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/05f0aba931687dcad284e6c7f2e049c258a53fb8 ">05f0aba</a>)
- (renovate[bot])</li>
<li><strong>deps:</strong> Update dependency <code>@types/node</code>
to v22.10.1 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2368 ">#2368</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/462396174fbac0a68f4d62d4ea0324c3131306d7 ">4623961</a>)
- (renovate[bot])</li>
<li><strong>deps:</strong> Update dependency eslint-plugin-github to
v5.1.3 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2367 ">#2367</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/c19a7eb771f8275e97686d1d3b6fde437cbd3f48 ">c19a7eb</a>)
- (renovate[bot])</li>
<li><strong>deps:</strong> Update dependency prettier to v3.4.1 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2366 ">#2366</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/c288441a7db228e42459f617d2bf40ff43c7910e ">c288441</a>)
- (renovate[bot])</li>
<li><strong>deps:</strong> Update dependency prettier to v3.4.0 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2365 ">#2365</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/1d6ea46cac7c9444bb7b289e182ab98202814f4b ">1d6ea46</a>)
- (renovate[bot])</li>
<li><strong>deps:</strong> Update dependency <code>@types/node</code>
to v22.10.0 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2364 ">#2364</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/02b41f5ff932638fcb01221b9bc834903f709655 ">02b41f5</a>)
- (renovate[bot])</li>
<li><strong>deps:</strong> Update dependency <code>@types/node</code>
to v22.9.4 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2361 ">#2361</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/b4a4dcabcec490d086e2414b1b21f7178c00fc00 ">b4a4dca</a>)
- (renovate[bot])</li>
<li><strong>deps:</strong> Lock file maintenance (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2360 ">#2360</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/602aacf9499eb8db19a40262c7944f1088fbeadb ">602aacf</a>)
- (renovate[bot])</li>
<li><strong>deps:</strong> Update dependency <code>@types/node</code>
to v22.9.3 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2359 ">#2359</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/51290e039a95e68c589f26d5637f33b1871a0960 ">51290e0</a>)
- (renovate[bot])</li>
<li><strong>deps:</strong> Update dependency <code>@types/node</code>
to v22.9.2 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2358 ">#2358</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/b4badd8cce12c3199b6144a04b89867a1f06297a ">b4badd8</a>)
- (renovate[bot])</li>
<li><strong>deps:</strong> Update dependency typescript to v5.7.2 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2357 ">#2357</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/652b4c06e87025945b42121c5a0101eb31424cd8 ">652b4c0</a>)
- (renovate[bot])</li>
<li><strong>deps-dev:</strong> Bump eslint-plugin-github from 5.0.2 to
5.1.1 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2356 ">#2356</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/0b7a421316ae1bd7640e6d8114ff4e20152e58fe ">0b7a421</a>)
- (dependabot[bot])</li>
<li><strong>deps:</strong> Bump yaml from 2.6.0 to 2.6.1 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2353 ">#2353</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/b26581aca1189461ba1d1a7c68188cbf63cbdc83 ">b26581a</a>)
- (dependabot[bot])</li>
<li><strong>deps:</strong> Update dependency <code>@types/node</code>
to v22.9.1 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2352 ">#2352</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/43e6b45c5d419917a64765e0fed88ef29ff64b12 ">43e6b45</a>)
- (renovate[bot])</li>
<li><strong>deps:</strong> Lock file maintenance (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2349 ">#2349</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/fe1bc0e3d35d94ed03a43d070f62cce13ce558ff ">fe1bc0e</a>)
- (renovate[bot])</li>
<li><strong>deps:</strong> Update dependency <code>@vercel/ncc</code>
to v0.38.3 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2348 ">#2348</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/d7917c65840095434eee6dc39762aea768244029 ">d7917c6</a>)
- (renovate[bot])</li>
<li><strong>deps:</strong> Lock file maintenance (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2345 ">#2345</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/3f646a35495417b5549f98c7f7b78b41cbfaf43d ">3f646a3</a>)
- (renovate[bot])</li>
</ul>
<h2><!-- raw HTML omitted -->⬆️ Upgrades</h2>
<ul>
<li>Upgraded to v45.0.4 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2344 ">#2344</a>)</li>
</ul>
<p>Co-authored-by: jackton1 <a
href="mailto:17484350+jackton1@users.noreply.github.com ">17484350+jackton1@users.noreply.github.com </a>
(<a
href="https://github.com/tj-actions/changed-files/commit/6809677b7a5911221b35d87417198c8a289e34ec ">6809677</a>)
- (tj-actions[bot])</p>
<h1><a
href="https://github.com/tj-actions/changed-files/compare/v45.0.3...v45.0.4 ">45.0.4</a>
- (2024-11-05)</h1>
<h2><!-- raw HTML omitted -->🚀 Features</h2>
<ul>
<li>Prevent ignore files warning (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2318 ">#2318</a>)
(<a
href="https://github.com/tj-actions/changed-files/commit/1f772e919bcbf025d221836bc4b8e3b72e2ef117 ">1f772e9</a>)
- (Tonye Jack)</li>
</ul>
<h2><!-- raw HTML omitted -->🐛 Bug Fixes</h2>
<ul>
<li><strong>deps:</strong> Update dependency <code>@actions/core</code>
to v1.11.1 (<a
href="https://github.com/tj-actions/changed-files/commit/4d0aab94b6284beb85e6cc3dd23ec0ee523dcca6 ">4d0aab9</a>)
- (renovate[bot])</li>
</ul>
<h2><!-- raw HTML omitted -->➕ Add</h2>
<ul>
<li>Added missing changes and modified dist assets.
(<a
href="https://github.com/tj-actions/changed-files/commit/9d7201ded6d75401ce2b888a4f643a921bfb8604 ">9d7201d</a>)
- (GitHub Action)</li>
<li>Added missing changes and modified dist assets.
(<a
href="https://github.com/tj-actions/changed-files/commit/0104c75ccc49741ff97b817da4cd36887e0c13cd ">0104c75</a>)
- (GitHub Action)</li>
</ul>
<h2><!-- raw HTML omitted -->📝 Other</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tj-actions/changed-files/commit/bab30c2299617f6615ec02a68b9a40d10bd21366 "><code>bab30c2</code></a>
chore(deps): update dependency eslint-plugin-github to v5.1.4 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2372 ">#2372</a>)</li>
<li><a
href="https://github.com/tj-actions/changed-files/commit/657a3f914f8c3dc9d8e541c1c2173057072d94f1 "><code>657a3f9</code></a>
chore(deps): update dependency prettier to v3.4.2 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2370 ">#2370</a>)</li>
<li><a
href="https://github.com/tj-actions/changed-files/commit/05f0aba931687dcad284e6c7f2e049c258a53fb8 "><code>05f0aba</code></a>
chore(deps): lock file maintenance (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2369 ">#2369</a>)</li>
<li><a
href="https://github.com/tj-actions/changed-files/commit/462396174fbac0a68f4d62d4ea0324c3131306d7 "><code>4623961</code></a>
chore(deps): update dependency <code>@types/node</code> to v22.10.1 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2368 ">#2368</a>)</li>
<li><a
href="https://github.com/tj-actions/changed-files/commit/c19a7eb771f8275e97686d1d3b6fde437cbd3f48 "><code>c19a7eb</code></a>
chore(deps): update dependency eslint-plugin-github to v5.1.3 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2367 ">#2367</a>)</li>
<li><a
href="https://github.com/tj-actions/changed-files/commit/c288441a7db228e42459f617d2bf40ff43c7910e "><code>c288441</code></a>
chore(deps): update dependency prettier to v3.4.1 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2366 ">#2366</a>)</li>
<li><a
href="https://github.com/tj-actions/changed-files/commit/1d6ea46cac7c9444bb7b289e182ab98202814f4b "><code>1d6ea46</code></a>
chore(deps): update dependency prettier to v3.4.0 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2365 ">#2365</a>)</li>
<li><a
href="https://github.com/tj-actions/changed-files/commit/02b41f5ff932638fcb01221b9bc834903f709655 "><code>02b41f5</code></a>
chore(deps): update dependency <code>@types/node</code> to v22.10.0 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2364 ">#2364</a>)</li>
<li><a
href="https://github.com/tj-actions/changed-files/commit/b4a4dcabcec490d086e2414b1b21f7178c00fc00 "><code>b4a4dca</code></a>
chore(deps): update dependency <code>@types/node</code> to v22.9.4 (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2361 ">#2361</a>)</li>
<li><a
href="https://github.com/tj-actions/changed-files/commit/602aacf9499eb8db19a40262c7944f1088fbeadb "><code>602aacf</code></a>
chore(deps): lock file maintenance (<a
href="https://redirect.github.com/tj-actions/changed-files/issues/2360 ">#2360</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/tj-actions/changed-files/compare/4edd678ac3f81e2dc578756871e4d00c19191daf...bab30c2299617f6615ec02a68b9a40d10bd21366 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `github/codeql-action` from 3.27.4 to 3.27.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases ">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.27.7</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases ">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>3.27.7 - 10 Dec 2024</h2>
<ul>
<li>We are rolling out a change in December 2024 that will extract the
CodeQL bundle directly to the toolcache to improve performance. <a
href="https://redirect.github.com/github/codeql-action/pull/2631 ">#2631</a></li>
<li>Update default CodeQL bundle version to 2.20.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2636 ">#2636</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.27.7/CHANGELOG.md ">CHANGELOG.md</a>
for more information.</p>
<h2>v3.27.6</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases ">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>3.27.6 - 03 Dec 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2626 ">#2626</a></li>
</ul>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.27.6/CHANGELOG.md ">CHANGELOG.md</a>
for more information.</p>
<h2>v3.27.5</h2>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases ">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>3.27.5 - 19 Nov 2024</h2>
<p>No user facing changes.</p>
<p>See the full <a
href="https://github.com/github/codeql-action/blob/v3.27.5/CHANGELOG.md ">CHANGELOG.md</a>
for more information.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md ">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a
href="https://github.com/github/codeql-action/releases ">releases
page</a> for the relevant changes to the CodeQL CLI and language
packs.</p>
<p>Note that the only difference between <code>v2</code> and
<code>v3</code> of the CodeQL Action is the node version they support,
with <code>v3</code> running on node 20 while we continue to release
<code>v2</code> to support running on node 16. For example
<code>3.22.11</code> was the first <code>v3</code> release and is
functionally identical to <code>2.22.11</code>. This approach ensures an
easy way to track exactly which features are included in different
versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.27.7 - 10 Dec 2024</h2>
<ul>
<li>We are rolling out a change in December 2024 that will extract the
CodeQL bundle directly to the toolcache to improve performance. <a
href="https://redirect.github.com/github/codeql-action/pull/2631 ">#2631</a></li>
<li>Update default CodeQL bundle version to 2.20.0. <a
href="https://redirect.github.com/github/codeql-action/pull/2636 ">#2636</a></li>
</ul>
<h2>3.27.6 - 03 Dec 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.19.4. <a
href="https://redirect.github.com/github/codeql-action/pull/2626 ">#2626</a></li>
</ul>
<h2>3.27.5 - 19 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.4 - 14 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.3 - 12 Nov 2024</h2>
<p>No user facing changes.</p>
<h2>3.27.2 - 12 Nov 2024</h2>
<ul>
<li>Fixed an issue where setting up the CodeQL tools would sometimes
fail with the message "Invalid value 'undefined' for header
'authorization'". <a
href="https://redirect.github.com/github/codeql-action/pull/2590 ">#2590</a></li>
</ul>
<h2>3.27.1 - 08 Nov 2024</h2>
<ul>
<li>The CodeQL Action now downloads bundles compressed using Zstandard
on GitHub Enterprise Server when using Linux or macOS runners. This
speeds up the installation of the CodeQL tools. This feature is already
available to GitHub.com users. <a
href="https://redirect.github.com/github/codeql-action/pull/2573 ">#2573</a></li>
<li>Update default CodeQL bundle version to 2.19.3. <a
href="https://redirect.github.com/github/codeql-action/pull/2576 ">#2576</a></li>
</ul>
<h2>3.27.0 - 22 Oct 2024</h2>
<ul>
<li>Bump the minimum CodeQL bundle version to 2.14.6. <a
href="https://redirect.github.com/github/codeql-action/pull/2549 ">#2549</a></li>
<li>Fix an issue where the <code>upload-sarif</code> Action would fail
with "upload-sarif post-action step failed: Input required and not
supplied: token" when called in a composite Action that had a
different set of inputs to the ones expected by the
<code>upload-sarif</code> Action. <a
href="https://redirect.github.com/github/codeql-action/pull/2557 ">#2557</a></li>
<li>Update default CodeQL bundle version to 2.19.2. <a
href="https://redirect.github.com/github/codeql-action/pull/2552 ">#2552</a></li>
</ul>
<h2>3.26.13 - 14 Oct 2024</h2>
<p>No user facing changes.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/babb554ede22fd5605947329c4d04d8e7a0b8155 "><code>babb554</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2640 ">#2640</a>
from github/update-v3.27.7-89757925c</li>
<li><a
href="https://github.com/github/codeql-action/commit/0a5a1c0d75117cdbf0e9d273bb13d9eba4438910 "><code>0a5a1c0</code></a>
Update changelog for v3.27.7</li>
<li><a
href="https://github.com/github/codeql-action/commit/89757925c7adddb19b7a2f28e3e1b27da88b7304 "><code>8975792</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2637 ">#2637</a>
from github/dependabot/npm_and_yarn/npm-3bf4e64efa</li>
<li><a
href="https://github.com/github/codeql-action/commit/d853bec339070c57d11b4f3c47aba37fab1f4e3e "><code>d853bec</code></a>
Update checked-in dependencies</li>
<li><a
href="https://github.com/github/codeql-action/commit/aab34601c1e19ad5f508a80e7b75a338dbce32fe "><code>aab3460</code></a>
Bump the npm group with 4 updates</li>
<li><a
href="https://github.com/github/codeql-action/commit/0d3e640d0cc595f3b9972975ddea4f1f79e6e818 "><code>0d3e640</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2636 ">#2636</a>
from github/update-bundle/codeql-bundle-v2.20.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/b13515409a663711186d96f8487042766764915d "><code>b135154</code></a>
Merge branch 'main' into update-bundle/codeql-bundle-v2.20.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/3d090058513728223efe693bdfe48b7d315ac558 "><code>3d09005</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/8ba120503347278e8aed1f7dbd7aaac06ccb4a6a "><code>8ba1205</code></a>
Update default bundle to codeql-bundle-v2.20.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/6f9e628e6f9a18c785dd746325ba455111df1b67 "><code>6f9e628</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/2634 ">#2634</a>
from github/angelapwen/stop-using-artifact-flag</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/ea9e4e37992a54ee68a9622e985e60c8e8f12d9f...babb554ede22fd5605947329c4d04d8e7a0b8155 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
2024-12-11 10:51:13 -07:00
daz
97d952f5cd
Update tests for changed init-script logging
2024-12-11 10:49:42 -07:00
Daz DeBoer and GitHub
06e95bfb12
Merge branch 'main' into dependabot/github_actions/github-actions-e9dd73a904
2024-12-11 10:17:04 -07:00
Daz DeBoer and GitHub
6089ee95bf
Update to Gradle 8.11.1 ( #477 )
2024-12-11 10:16:28 -07:00
Daz DeBoer and GitHub
b80eee1bc3
Remove schedule for combine-prs until it's working properley
2024-12-11 10:05:44 -07:00
daz
51109c9e9e
Update to Gradle 8.11.1
2024-12-11 10:04:45 -07:00
e9e94d8112
Update known wrapper checksums ( #462 )
...
Automatically generated pull request to update the known wrapper
checksums.
In case of conflicts, manually run the workflow from the [Actions
tab](https://github.com/gradle/actions/actions/workflows/update-checksums-file.yml ),
the changes will then be force-pushed onto this pull request branch.
Do not manually update the pull request branch; those changes might get
overwritten.
> [!IMPORTANT]
> GitHub workflows have not been executed for this pull request yet.
Before merging, close and then directly reopen this pull request to
trigger the workflows.
Co-authored-by: bigdaz <179734+bigdaz@users.noreply.github.com >
2024-12-11 09:51:41 -07:00
daz
686515ed83
Fix combine PRs workflow
2024-12-11 09:47:11 -07:00
Daz DeBoer and GitHub
fc2804f7b6
Add workflow to combine wrapperbot PRs ( #476 )
2024-12-11 09:08:25 -07:00
daz
ce25fde741
Add workflow to combine wrapperbot PRs
2024-12-11 09:07:09 -07:00
Daz DeBoer and GitHub
35af9b8791
Simplify Dependabot config using 'directories'
2024-12-11 07:50:05 -07:00
Daz DeBoer and GitHub
375738a38b
Add link to GitHub docs
2024-12-10 10:50:29 -07:00
daz
e55599fc4d
Adapt build-result-capture script for GE plugin 3.17+
...
The build-result-capture.init.gradle script was making some assumptions about
extensions and plugin application that do not apply with the newest GE plugin.
Fixes #449
2024-11-17 07:26:28 -07:00
Daz DeBoer and GitHub
a09a3104fe
Develocity injection fixes ( #448 )
2024-11-16 13:52:38 -07:00
daz
333e9d9750
Do not ignore input parameters when build-scan-publish is enabled
...
Fixes #447
2024-11-15 14:35:41 -07:00
daz
2aa49bf6a9
Set the correct env var for develocity-ccud-plugin-version
...
Fixes #446
2024-11-15 14:31:56 -07:00
daz
9ab6ee6757
Bump to version 2.0.2 of CCUDGP
2024-11-15 14:10:13 -07:00
Daz DeBoer and GitHub
fb5165dcd4
Add note about cache-encryption-key being required
2024-11-14 21:09:29 -07:00
daz
0e27ea7e6c
Improve local development script
...
- Avoid running `npm install` on every execution
- Add a separate `install` task that runs `npm clean-install`
2024-11-14 17:00:58 -07:00
daz
f4845d289c
Use npm clean-install
2024-11-14 16:36:23 -07:00
Daz DeBoer and GitHub
83709b49fe
Fix checksum test by reducing network calls ( #444 )
...
This test was originally starting with an empty set of checksums,
leading to the download of a checksum for every released and snapshot
version. This resulted in in sporadic test failures.
We now start with a known set of checksums and ensure that those that
are missing are downloaded. This involved some refactoring and
improvement in the way snapshot checksums are processed.
2024-11-14 15:44:07 -07:00
5f21a9bb99
Bump Gradle from 8.10.2 to 8.11 ( #443 )
...
Co-authored-by: bot-githubaction <bot-githubaction@gradle.com >
2024-11-14 13:48:42 -07:00
Daz DeBoer and GitHub
52ee405746
Run CodeQL on all commits
2024-11-14 13:44:22 -07:00
Daz DeBoer and GitHub
7f20d0bf71
Pin versions for GitHub Actions ( #442 )
2024-11-14 13:24:19 -07:00
daz
b6bc8c2f17
Pin gradle/actions versions
2024-11-14 13:05:02 -07:00
daz
b12c3a65f2
Pin version of 3rd party actions
2024-11-14 12:35:29 -07:00
daz
d191577859
Pin actions/setup-node@v4
2024-11-14 12:23:02 -07:00
daz
e726a12472
Pin actions/setup-java@v4
2024-11-14 12:21:03 -07:00
daz
d30cc9ecf2
Pin actions/checkout@v4
2024-11-14 12:19:48 -07:00
daz
d0efa7b0e7
Avoid duplicate actions/setup-java
2024-11-14 12:12:54 -07:00
daz
8422a6a674
Avoid running workflow on forks
2024-11-14 11:44:20 -07:00
daz
19ff74e0a6
Revert "Disable uploading OSSF scorecard to GitHub Security"
...
This reverts commit 1e2142185e
2024-11-14 11:31:03 -07:00
Daz DeBoer and GitHub
1e2142185e
Disable uploading OSSF scorecard to GitHub Security
2024-11-13 19:11:45 -07:00
Daz DeBoer and GitHub
07e0f1c008
Limit token permissions in GitHub workflows ( #440 )
...
See
https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#token-permissions
2024-11-13 19:01:45 -07:00
daz
af45dcfe3c
Add wrapper-validation workflow
...
Although we run `setup-gradle` with all/most wrapper files, this global
workflow will ensure that all wrapper files in the repo are valid.
(This should help with the OSSF scorecard)
2024-11-13 18:46:57 -07:00
daz
d8b3a9fb11
Rename OSSF scorecard workflow
2024-11-13 18:46:51 -07:00
daz
48353a25ca
Do not fail wrapper-validation on filename with illegal characters
2024-11-12 11:28:09 -07:00
daz
f22ac61fd1
Use Gradle 8.11 as the minimum version for cache-cleanup
...
The cache-cleanup API has changed, so the init-script that worked with
Gradle 8.9 no longer works with 8.11.
We now provision and use Gradle 8.11 for cache cleanup.
This provides a band-aid fix for #417 but that issue will still impact
any build configured to run with Gradle > 8.11
2024-11-11 20:54:29 -07:00
daz
4ec844e551
npm audit fix
2024-11-11 20:54:29 -07:00
daz