You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@grails.apache.org by GitBox <gi...@apache.org> on 2026/05/29 06:56:26 UTC

[GH] (grails-core/feat/grails-code-analysis-plugin): Workflow run "CI - Groovy Joint Validation Build" is working again!

The GitHub Actions job "CI - Groovy Joint Validation Build" on grails-core.git/feat/grails-code-analysis-plugin has succeeded.
Run started by GitHub user jamesfredley (triggered by jamesfredley).

Head commit for run:
20d73d8e8a699893c8cdb6be70274feaee08bf3d / James Fredley <ja...@users.noreply.github.com>
fix(ci): pin Code Analysis workflow actions to ASF-approved SHAs

The codeanalysis.yml workflow used floating action tags (actions/checkout@v6,
actions/setup-java@v4, actions/upload-artifact@v7.0.1) and an outdated
setup-gradle pin, which the ASF org policy rejects, causing the "Code Analysis"
workflow to fail at startup. Pin every action to the same ASF-approved commit
SHAs already used by the other workflows (checkout v6.0.2, setup-java v5.2.0,
setup-gradle v6.1.0 with cache-provider: basic, upload-artifact v7.0.1).

Assisted-by: claude-code:claude-4.8-opus

Report URL: https://github.com/apache/grails-core/actions/runs/26620951254

With regards,
GitHub Actions via GitBox