From eb4b2d77c2e1c00eaea139a0dd7fbfa8c8293d1a Mon Sep 17 00:00:00 2001 From: micronaut-build Date: Wed, 10 Jan 2024 05:46:25 +0000 Subject: [PATCH 1/3] Update common files --- .github/workflows/gradle.yml | 4 ++-- .github/workflows/release.yml | 10 +++------- 2 files changed, 5 insertions(+), 9 deletions(-) diff --git a/.github/workflows/gradle.yml b/.github/workflows/gradle.yml index 59b3361d..197fe082 100644 --- a/.github/workflows/gradle.yml +++ b/.github/workflows/gradle.yml @@ -52,7 +52,7 @@ jobs: github-token: ${{ secrets.GITHUB_TOKEN }} - name: "🔧 Setup Gradle" - uses: gradle/gradle-build-action@v2.9.0 + uses: gradle/gradle-build-action@v2.11.1 - name: "❓ Optional setup step" run: | @@ -78,7 +78,7 @@ jobs: - name: "📜 Upload binary compatibility check results" if: matrix.java == '17' - uses: actions/upload-artifact@v3.0.0 + uses: actions/upload-artifact@v4.0.0 with: name: binary-compatibility-reports path: "**/build/reports/binary-compatibility-*.html" diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 63335e62..99a5c49e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -66,13 +66,13 @@ jobs: # Store the hash in a file, which is uploaded as a workflow artifact. sha256sum $ARTIFACTS | base64 -w0 > artifacts-sha256 - name: Upload build artifacts - uses: actions/upload-artifact@v3.0.0 + uses: actions/upload-artifact@v4.0.0 with: name: gradle-build-outputs path: build/repo/${{ steps.publish.outputs.group }}/*/${{ steps.publish.outputs.version }}/* retention-days: 5 - name: Upload artifacts-sha256 - uses: actions/upload-artifact@v3.0.0 + uses: actions/upload-artifact@v4.0.0 with: name: artifacts-sha256 path: artifacts-sha256 @@ -115,9 +115,7 @@ jobs: artifacts-sha256: ${{ steps.set-hash.outputs.artifacts-sha256 }} steps: - name: Download artifacts-sha256 - # Important: update actions/download-artifact to v4 only when generator_generic_slsa3.yml is also compatible. - # See https://github.com/slsa-framework/slsa-github-generator/issues/3068 - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@v3 with: name: artifacts-sha256 # The SLSA provenance generator expects the hash digest of artifacts to be passed as a job @@ -150,8 +148,6 @@ jobs: - name: Checkout repository uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Download artifacts - # Important: update actions/download-artifact to v4 only when generator_generic_slsa3.yml is also compatible. - # See https://github.com/slsa-framework/slsa-github-generator/issues/3068 uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 with: name: gradle-build-outputs From ca7e7838ef01db18cb600872248b0a2fcb626a25 Mon Sep 17 00:00:00 2001 From: Sergio del Amo Date: Wed, 10 Jan 2024 11:09:28 +0100 Subject: [PATCH 2/3] Update gradle.yml --- .github/workflows/gradle.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/gradle.yml b/.github/workflows/gradle.yml index 197fe082..69e0c3ee 100644 --- a/.github/workflows/gradle.yml +++ b/.github/workflows/gradle.yml @@ -78,7 +78,7 @@ jobs: - name: "📜 Upload binary compatibility check results" if: matrix.java == '17' - uses: actions/upload-artifact@v4.0.0 + uses: actions/upload-artifact@v3.0.0 with: name: binary-compatibility-reports path: "**/build/reports/binary-compatibility-*.html" From ca8a7ca2095205555186d4c6115bfee7b90bf550 Mon Sep 17 00:00:00 2001 From: Sergio del Amo Date: Wed, 10 Jan 2024 11:09:52 +0100 Subject: [PATCH 3/3] Update release.yml --- .github/workflows/release.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 99a5c49e..1a8f6632 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -66,13 +66,13 @@ jobs: # Store the hash in a file, which is uploaded as a workflow artifact. sha256sum $ARTIFACTS | base64 -w0 > artifacts-sha256 - name: Upload build artifacts - uses: actions/upload-artifact@v4.0.0 + uses: actions/upload-artifact@v3.0.0 with: name: gradle-build-outputs path: build/repo/${{ steps.publish.outputs.group }}/*/${{ steps.publish.outputs.version }}/* retention-days: 5 - name: Upload artifacts-sha256 - uses: actions/upload-artifact@v4.0.0 + uses: actions/upload-artifact@v3.0.0 with: name: artifacts-sha256 path: artifacts-sha256