[deps]: Update gradle/actions action to v4 #951
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
bitwarden-bot
changed the title
|
Internal tracking: |
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #951 +/- ##
=======================================
Coverage 58.45% 58.45%
=======================================
Files 194 194
Lines 13358 13358
=======================================
Hits 7808 7808
Misses 5550 5550 ☔ View full report in Codecov by Sentry. |
renovate
bot
changed the title
vgrassia
approved these changes
Aug 13, 2024
Merged
Hinton
added a commit
that referenced
this pull request
Aug 15, 2024
## 🎟️ Tracking <!-- Paste the link to the Jira or GitHub issue or otherwise describe / point to where this change is coming from. --> ## 📔 Objective <!-- Describe what the purpose of this PR is, for example what bug you're fixing or new feature you're adding. --> Build android is broken after the breaking changes introduced in #951. This PR follows the recommended changes and splits setup gradle into two steps. ## ⏰ Reminders before review - Contributor guidelines followed - All formatters and local linters executed and passed - Written new unit and / or integration tests where applicable - Protected functional changes with optionality (feature flags) - Used internationalization (i18n) for all UI strings - CI builds passed - Communicated to DevOps any deployment requirements - Updated any necessary documentation (Confluence, contributing docs) or informed the documentation team ## 🦮 Reviewer guidelines <!-- Suggested interactions but feel free to use (or not) as you desire! --> - 👍 (`:+1:`) or similar for great changes - 📝 (`:memo:`) or ℹ️ (`:information_source:`) for notes or general info - ❓ (`:question:`) for questions - 🤔 (`:thinking:`) or 💭 (`:thought_balloon:`) for more open inquiry that's not quite a confirmed issue and could potentially benefit from discussion - 🎨 (`:art:`) for suggestions / improvements - ❌ (`:x:`) or⚠️ (`:warning:`) for more significant problems or concerns needing attention - 🌱 (`:seedling:`) or ♻️ (`:recycle:`) for future improvements or indications of technical debt - ⛏ (`:pick:`) for minor or nitpick changes
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v3.1.0->v4.0.0v3.3.2->v4.0.0Release Notes
gradle/actions (gradle/actions)
v4.0.0Compare Source
Final release of
v4.0.0of thesetup-gradle,dependency-submissionandwrapper-validationactions provided undergradle/actions.This release is available under the
v4tag.Major changes from the
v3releaseThe
argumentsparameter has been removedUsing the action to execute Gradle via the
argumentsparameter was deprecated inv3and this parameter has been removed.See here for more details.
Cache cleanup enabled by default
After a number of fixes and improvements, this release enables cache-cleanup by default for all Jobs using the
setup-gradleanddependency-submissionactions.Improvements and bugfixes related cache cleanup:
This feature should help to minimize the size of entries written to the GitHub Actions cache, speeding up builds and reducing cache usage.
Wrapper validation enabled by default
In
v3, thesetup-gradleaction was enhanced to support Gradle wrapper validation, removing the need to use a separate workflowfile with the
gradle/actions/wrapper-validationaction.With this release, wrapper validation has been significantly improved, and is now enabled by default (#12):
allow-snapshot-wrappersmakes it possible to validate snapshot wrapper jars usingsetup-gradle.wrapper-validationfor new Gradle versions: By only fetching wrapper checksums for Gradle versions that were not known when this action was released, this release reduces the likelihood that a network failure could cause failure in wrapper validation (#171)wrapper-validationfinds no wrapper jars (#284)Wrapper validation is important for supply-chain integrity. Enabling this feature by default will increase the coverage of wrapper
validation on projects using GitHub Actions.
New input parameters for Dependency Graph generation
Some dependency-graph inputs that could previously only be configured via environment variables now have dedicated action inputs:
dependency-graph-report-dir: sets the location where dependency-graph reports will be generateddependency-graph-exclude-projectsanddependency-graph-include-projects: select which Gradle projects will contribute to the generated dependency graph.dependency-graph-exclude-configurationsanddependency-graph-include-configurations: select which Gradle configurations will contribute to the generated dependency graph.Other improvements
read-onlyordisabled(#255)setup-gradlerequests a specific Gradle version, the action will no longer download and install that version if it is already available on thePATHof the runner (#270)setup-gradleanddependency-submissionactions now attempt to use theD:drive for Gradle User Home if it is available (#290)Deprecations and breaking changes
gradle-home-cache-cleanupinput parameter has been deprecated and replaced bycache-cleanupdependency-graph: clearparameter has been removed without replacementv3have been removed:Changelog
Full Changelog: gradle/actions@v3.5.0...v4.0.0
v3.5.0Compare Source
This release contains a major upgrade to
gradle-home-cache-cleanupas well as improvements to dependency-submission.What's Changed
Full Changelog: gradle/actions@v3.4.2...v3.5.0
v3.4.2Compare Source
This patch release fixes a race condition that resulted in the
DEVELOCITY_ACCESS_KEYvariable not being set in the environment.What's Changed
Full Changelog: gradle/actions@v3.4.1...v3.4.2
v3.4.1Compare Source
This patch release fixes a bug introduced in v3.4.0, that prevents build scan publication to Develocity.
The bug results in the removal of the
DEVELOCITY_ACCESS_KEYvariable being removed, so that Gradle cannot authenticate with the Develocity server.What's Changed
Full Changelog: gradle/actions@v3.4.0...v3.4.1
v3.4.0Compare Source
This release improves the integration with Gradle Develocity®, as well as updating a number of key dependencies.
develocity-access-keyinput parameter allows the action to generate a short-lived access token for subsequentcommunication with Develocity. This reduces the risk of the full (long-lived) access key being compromised,
either accidentally or by a malicious action.
enabled by setting environment variables.
wrapper-validationwith Gradle 8.8 wrappers.What's Changed
New Contributors
Full Changelog: gradle/actions@v3.3.2...v3.4.0
v3.3.2Compare Source
This patch release fixes a bug in both
dependency-submissionandsetup-gradle(#196 introduced in v3.3.1), which resulted in"No dependency-graph files found to submit" when using the
download-and-submitfunction.A number of other minor issues have also been addressed:
What's Changed
Full Changelog: gradle/actions@v3.3.1...v3.3.2
v3.3.1Compare Source
This patch release fixes a bug in setting the report dir for
dependency-submission, and updates the plugin versionsapplied in Develocity injection.
What's Changed
DEPENDENCY_GRAPH_REPORT_DIRvariable for dependency-submission (#188)Full Changelog: gradle/actions@v3.3.0...v3.3.1
v3.3.0Compare Source
This release includes a new action, and improvements to the existing actions.
Highlights include:
Changelog
NEW action
gradle/actions/wrapper-validationwrapper-validation-action(#160)Improvements to
gradle/actions/setup-gradlesetup-gradleaction can now perform wrapper-validation automatically (#161, #162)toolchains.xmlfile on ARM runners (#89)Improvements to
gradle/actions/depenency-submissionsetup-gradle(#116)dependency-submissionaction (#123)setup-gradleanddependency-submissioncan be used in the same Job (#36)Full Changelog: gradle/actions@v3.2.1...v3.3.0
Actions Summary
Release includes
v3.3.0of the following, available under thev3version tag:v3.2.1Compare Source
The recent update to use
com.develocity.gradleplugin resulted in many deprecation warnings being triggered by the init-scripts bundled with this action. This patch release updates these init-scripts to avoid these deprecation warnings.What's Changed
Full Changelog: gradle/actions@v3.2.0...v3.2.1
v3.2.0Compare Source
Changelog
General improvements
Improvements to Dependency Submission
Improvements to Develocity injection
com.develocity.gradleplugin version3.17by defaultNote
Release includes
v3.2.0ofgradle/actions/setup-gradleandgradle/actions/dependency-submission.Available under the
v3version tag.The
gradle/actions/setup-gradleaction supersedesgradle/gradle-build-action.The
gradle/[email protected]version will be released in parallel, and will delegate to this release ofgradle/actions/setup-gradle.Full Changelog: gradle/actions@v3.1.0...v3.2.0
Configuration
📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.