You are viewing a plain text version of this content. The canonical link for it is here.
Posted to geb-notifications@groovy.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/09/22 21:41:09 UTC
[PR] Bump the github-actions group with 2 updates [groovy-geb]
dependabot[bot] opened a new pull request, #334:
URL: https://github.com/apache/groovy-geb/pull/334
Bumps the github-actions group with 2 updates: [gradle/actions/setup-gradle](https://github.com/gradle/actions) and [gradle/actions/wrapper-validation](https://github.com/gradle/actions).
Updates `gradle/actions/setup-gradle` from 5.0.2 to 6.3.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/gradle/actions/releases">gradle/actions/setup-gradle's releases</a>.</em></p>
<blockquote>
<h2>v6.3.0</h2>
<h2>Highlights</h2>
<h3>Enhanced Caching: Windows fixes and a cache-protocol bump</h3>
<p>This release updates <code>gradle-actions-caching</code> to <strong>v1.0.0</strong> (up from v0.7.0), which fixes two significant caching defects, both most visible on Windows:</p>
<ul>
<li>
<p><strong>Cache entries failed to store at all on Windows.</strong>. Every entry failed
with <code>Path Validation Error: Path(s) specified in the action for caching do(es) not exist</code>, even though the Gradle User Home was fully intact. Nothing was stored, so
every downstream job ran against an empty Gradle User Home. The cause was a nested,
unpatched copy of <code>@actions/glob</code> combined with a silently swallowed <code>require()</code> in
the bundle, which left Windows path separators unnormalized.</p>
</li>
<li>
<p><strong>Cache cleanup deleted instrumented jars that were in use.</strong> A bug in key
hashing for paths shorter than 64 characters made cleanup judge freshly created
<code>caches/jars-9</code> entries as unused and remove them, so the <code>instrumented-jars</code> entry
was never saved and every job re-instrumented its classpaths.</p>
<p>Also included: cache entry names are now consistent between the save and restore
reports — restore previously fell back to showing the raw glob pattern (e.g.
<code>/home/runner/.gradle/caches/modules-*/files-*/*/*/*/*/</code>) instead of <code>dependencies</code>.</p>
</li>
</ul>
<blockquote>
<p>[!IMPORTANT]
<strong>Existing cache entries are invalidated by this release.</strong> The cache protocol
version was bumped to <code>v2</code>, so the first run after upgrading will be a cache miss
and will repopulate the cache. No configuration changes are required.</p>
</blockquote>
<h3>Basic caching warns instead of failing silently</h3>
<p>The basic (open-source) caching provider now emits a warning and reports
<code>(Entry not saved: save failed)</code> in the Job Summary when a cache save fails, rather
than reporting success (<a href="https://redirect.github.com/gradle/actions/issues/1028">#1028</a>).</p>
<h3>Dependency submission works with Isolated Projects</h3>
<p><code>dependency-submission</code> now disables Isolated Projects via a promoted property, so
dependency graph generation works on builds that enable it (<a href="https://redirect.github.com/gradle/actions/issues/1025">#1025</a>). Thanks to <a href="https://github.com/reinsch82"><code>@reinsch82</code></a> for the contribution.</p>
<h3>Updated defaults</h3>
<ul>
<li>Injected Develocity Gradle plugin: <strong>4.4.2 → 4.5.0</strong></li>
<li>36 new known-good wrapper checksums added for <code>wrapper-validation</code></li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Render configuration-cache status in the caching Job Summary by <a href="https://github.com/bigdaz"><code>@bigdaz</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/989">gradle/actions#989</a></li>
<li>Update gradle-actions-caching library to v0.8.0 by <a href="https://github.com/bot-githubaction"><code>@bot-githubaction</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/993">gradle/actions#993</a></li>
<li>Support experimental project-entry caching (configuration-cache + build-logic) by <a href="https://github.com/bigdaz"><code>@bigdaz</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/994">gradle/actions#994</a></li>
<li>Update gradle-actions-caching library to v0.9.0 by <a href="https://github.com/bot-githubaction"><code>@bot-githubaction</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/996">gradle/actions#996</a></li>
<li>Disable Isolated Projects via promoted property in dependency-submission by <a href="https://github.com/reinsch82"><code>@reinsch82</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/1025">gradle/actions#1025</a></li>
<li>Add Windows coverage for caching via a new smoke-test suite by <a href="https://github.com/bigdaz"><code>@bigdaz</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/1027">gradle/actions#1027</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/gradle/actions/commit/9c971963bec38e04b3d30dcc455b5382be2fdbfb"><code>9c97196</code></a> Bump the github-actions group across 2 directories with 9 updates (<a href="https://redirect.github.com/gradle/actions/issues/1024">#1024</a>)</li>
<li><a href="https://github.com/gradle/actions/commit/760e4a476b57fc6216ff816bbd682e14f43f66ee"><code>760e4a4</code></a> Bump the npm-dependencies group across 1 directory with 2 updates (<a href="https://redirect.github.com/gradle/actions/issues/1037">#1037</a>)</li>
<li><a href="https://github.com/gradle/actions/commit/73e4c4222be7ce7f3685c9277a9e698ea3a28534"><code>73e4c42</code></a> Update gradle-actions-caching library to v1.0.0 (<a href="https://redirect.github.com/gradle/actions/issues/1029">#1029</a>)</li>
<li><a href="https://github.com/gradle/actions/commit/a9d14388b4a819d9b607d85c115000e421e46eec"><code>a9d1438</code></a> Add dependabot ignore rules for TypeScript 7.x and <code>@types/node</code> 25.x/26.x</li>
<li><a href="https://github.com/gradle/actions/commit/68f37005d75fc0fdb3e66cc267d1f007b3de27d1"><code>68f3700</code></a> [bot] Update dist directory</li>
<li><a href="https://github.com/gradle/actions/commit/5971332a8f9f37459fbe710cc8b2ec8f125cdf54"><code>5971332</code></a> Bump Gradle Wrapper to 9.6.1, wrapper checksums, and Develocity plugin to 4.5...</li>
<li><a href="https://github.com/gradle/actions/commit/b5bc804016a397046a67d7f83089c374ff4af6a7"><code>b5bc804</code></a> [bot] Update dist directory</li>
<li><a href="https://github.com/gradle/actions/commit/dcbab4e9198b2315584afbb3d582bdaa2a7aee42"><code>dcbab4e</code></a> Bump npm-dependencies group with TypeScript 6.0.3, <code>@types/node</code> 24.x, and secu...</li>
<li><a href="https://github.com/gradle/actions/commit/ca8d95717f747a46ed048a911f0e8a348829aef1"><code>ca8d957</code></a> Move non-smoke restore-gradle-home tests back to the integ-test suite (<a href="https://redirect.github.com/gradle/actions/issues/1032">#1032</a>)</li>
<li><a href="https://github.com/gradle/actions/commit/4318659b28d9d152a98ad848b621397f3e386420"><code>4318659</code></a> [bot] Update dist directory</li>
<li>Additional commits viewable in <a href="https://github.com/gradle/actions/compare/0723195856401067f7a2779048b490ace7a47d7c...9c971963bec38e04b3d30dcc455b5382be2fdbfb">compare view</a></li>
</ul>
</details>
<br />
Updates `gradle/actions/wrapper-validation` from 5.0.2 to 6.3.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/gradle/actions/releases">gradle/actions/wrapper-validation's releases</a>.</em></p>
<blockquote>
<h2>v6.3.0</h2>
<h2>Highlights</h2>
<h3>Enhanced Caching: Windows fixes and a cache-protocol bump</h3>
<p>This release updates <code>gradle-actions-caching</code> to <strong>v1.0.0</strong> (up from v0.7.0), which fixes two significant caching defects, both most visible on Windows:</p>
<ul>
<li>
<p><strong>Cache entries failed to store at all on Windows.</strong>. Every entry failed
with <code>Path Validation Error: Path(s) specified in the action for caching do(es) not exist</code>, even though the Gradle User Home was fully intact. Nothing was stored, so
every downstream job ran against an empty Gradle User Home. The cause was a nested,
unpatched copy of <code>@actions/glob</code> combined with a silently swallowed <code>require()</code> in
the bundle, which left Windows path separators unnormalized.</p>
</li>
<li>
<p><strong>Cache cleanup deleted instrumented jars that were in use.</strong> A bug in key
hashing for paths shorter than 64 characters made cleanup judge freshly created
<code>caches/jars-9</code> entries as unused and remove them, so the <code>instrumented-jars</code> entry
was never saved and every job re-instrumented its classpaths.</p>
<p>Also included: cache entry names are now consistent between the save and restore
reports — restore previously fell back to showing the raw glob pattern (e.g.
<code>/home/runner/.gradle/caches/modules-*/files-*/*/*/*/*/</code>) instead of <code>dependencies</code>.</p>
</li>
</ul>
<blockquote>
<p>[!IMPORTANT]
<strong>Existing cache entries are invalidated by this release.</strong> The cache protocol
version was bumped to <code>v2</code>, so the first run after upgrading will be a cache miss
and will repopulate the cache. No configuration changes are required.</p>
</blockquote>
<h3>Basic caching warns instead of failing silently</h3>
<p>The basic (open-source) caching provider now emits a warning and reports
<code>(Entry not saved: save failed)</code> in the Job Summary when a cache save fails, rather
than reporting success (<a href="https://redirect.github.com/gradle/actions/issues/1028">#1028</a>).</p>
<h3>Dependency submission works with Isolated Projects</h3>
<p><code>dependency-submission</code> now disables Isolated Projects via a promoted property, so
dependency graph generation works on builds that enable it (<a href="https://redirect.github.com/gradle/actions/issues/1025">#1025</a>). Thanks to <a href="https://github.com/reinsch82"><code>@reinsch82</code></a> for the contribution.</p>
<h3>Updated defaults</h3>
<ul>
<li>Injected Develocity Gradle plugin: <strong>4.4.2 → 4.5.0</strong></li>
<li>36 new known-good wrapper checksums added for <code>wrapper-validation</code></li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Render configuration-cache status in the caching Job Summary by <a href="https://github.com/bigdaz"><code>@bigdaz</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/989">gradle/actions#989</a></li>
<li>Update gradle-actions-caching library to v0.8.0 by <a href="https://github.com/bot-githubaction"><code>@bot-githubaction</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/993">gradle/actions#993</a></li>
<li>Support experimental project-entry caching (configuration-cache + build-logic) by <a href="https://github.com/bigdaz"><code>@bigdaz</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/994">gradle/actions#994</a></li>
<li>Update gradle-actions-caching library to v0.9.0 by <a href="https://github.com/bot-githubaction"><code>@bot-githubaction</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/996">gradle/actions#996</a></li>
<li>Disable Isolated Projects via promoted property in dependency-submission by <a href="https://github.com/reinsch82"><code>@reinsch82</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/1025">gradle/actions#1025</a></li>
<li>Add Windows coverage for caching via a new smoke-test suite by <a href="https://github.com/bigdaz"><code>@bigdaz</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/1027">gradle/actions#1027</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/gradle/actions/commit/9c971963bec38e04b3d30dcc455b5382be2fdbfb"><code>9c97196</code></a> Bump the github-actions group across 2 directories with 9 updates (<a href="https://redirect.github.com/gradle/actions/issues/1024">#1024</a>)</li>
<li><a href="https://github.com/gradle/actions/commit/760e4a476b57fc6216ff816bbd682e14f43f66ee"><code>760e4a4</code></a> Bump the npm-dependencies group across 1 directory with 2 updates (<a href="https://redirect.github.com/gradle/actions/issues/1037">#1037</a>)</li>
<li><a href="https://github.com/gradle/actions/commit/73e4c4222be7ce7f3685c9277a9e698ea3a28534"><code>73e4c42</code></a> Update gradle-actions-caching library to v1.0.0 (<a href="https://redirect.github.com/gradle/actions/issues/1029">#1029</a>)</li>
<li><a href="https://github.com/gradle/actions/commit/a9d14388b4a819d9b607d85c115000e421e46eec"><code>a9d1438</code></a> Add dependabot ignore rules for TypeScript 7.x and <code>@types/node</code> 25.x/26.x</li>
<li><a href="https://github.com/gradle/actions/commit/68f37005d75fc0fdb3e66cc267d1f007b3de27d1"><code>68f3700</code></a> [bot] Update dist directory</li>
<li><a href="https://github.com/gradle/actions/commit/5971332a8f9f37459fbe710cc8b2ec8f125cdf54"><code>5971332</code></a> Bump Gradle Wrapper to 9.6.1, wrapper checksums, and Develocity plugin to 4.5...</li>
<li><a href="https://github.com/gradle/actions/commit/b5bc804016a397046a67d7f83089c374ff4af6a7"><code>b5bc804</code></a> [bot] Update dist directory</li>
<li><a href="https://github.com/gradle/actions/commit/dcbab4e9198b2315584afbb3d582bdaa2a7aee42"><code>dcbab4e</code></a> Bump npm-dependencies group with TypeScript 6.0.3, <code>@types/node</code> 24.x, and secu...</li>
<li><a href="https://github.com/gradle/actions/commit/ca8d95717f747a46ed048a911f0e8a348829aef1"><code>ca8d957</code></a> Move non-smoke restore-gradle-home tests back to the integ-test suite (<a href="https://redirect.github.com/gradle/actions/issues/1032">#1032</a>)</li>
<li><a href="https://github.com/gradle/actions/commit/4318659b28d9d152a98ad848b621397f3e386420"><code>4318659</code></a> [bot] Update dist directory</li>
<li>Additional commits viewable in <a href="https://github.com/gradle/actions/compare/0723195856401067f7a2779048b490ace7a47d7c...9c971963bec38e04b3d30dcc455b5382be2fdbfb">compare view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: geb-notifications-unsubscribe@groovy.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump the github-actions group with 2 updates [groovy-geb]
Posted by "jonnybot0 (via GitHub)" <gi...@apache.org>.
jonnybot0 closed pull request #334: Bump the github-actions group with 2 updates
URL: https://github.com/apache/groovy-geb/pull/334
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: geb-notifications-unsubscribe@groovy.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump the github-actions group with 2 updates [groovy-geb]
Posted by "dependabot[bot] (via GitHub)" <gi...@apache.org>.
dependabot[bot] commented on PR #334:
URL: https://github.com/apache/groovy-geb/pull/334#issuecomment-5797839525
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.
To ignore these dependencies, configure [ignore rules](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#ignore) in dependabot.yml
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: geb-notifications-unsubscribe@groovy.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump the github-actions group with 2 updates [groovy-geb]
Posted by "jonnybot0 (via GitHub)" <gi...@apache.org>.
jonnybot0 commented on PR #334:
URL: https://github.com/apache/groovy-geb/pull/334#issuecomment-5797838786
Superseded by https://github.com/apache/groovy-geb/pull/335
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: geb-notifications-unsubscribe@groovy.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org