Bump gradle/actions from 5.0.2 to 6.0.0
Type: Pull Request
State: Open
Association: Unknown
Comments: 1
(3 months ago)
(3 months ago)
dependencies github_actions
Bumps gradle/actions from 5.0.2 to 6.0.0.
Release notes
Sourced from gradle/actions's releases.
v6.0.0
Summary
- Caching functionality of 'gradle-actions' has been extracted into a separate
gradle-actions-cachinglibrary, and is no longer open-source.- Existing, rudimentary, configuration-cache support has been removed, pending a fully functional implementation in
gradle-actions-caching.- Dependencies updated to address security vulnerabilities
[!IMPORTANT]
Licensing notice
The caching functionality in `gradle-actions` has been extracted into `gradle-actions-caching`, a proprietary commercial component that is not covered by the MIT License. The bundled `gradle-actions-caching` component is licensed and governed by a separate license, available at https://gradle.com/legal/terms-of-use/.
The `gradle-actions-caching` component is used only when caching is enabled and is not loaded or used when caching is disabled.
Use of the `gradle-actions-caching` component is subject to a separate license, available at https://gradle.com/legal/terms-of-use/. If you do not agree to these license terms, do not use the `gradle-actions-caching` component.
What's Changed
- Bump the npm-dependencies group in /sources with 2 updates by
@dependabot[bot] in gradle/actions#866- Update known wrapper checksums by
@github-actions[bot] in gradle/actions#868- Dependency updates by
@bigdazin gradle/actions#876- Update known wrapper checksums by
@github-actions[bot] in gradle/actions#878- Bump
@types/nodefrom 25.3.3 to 25.3.5 in /sources in the npm-dependencies group across 1 directory by@dependabot[bot] in gradle/actions#877- Bump the github-actions group across 3 directories with 3 updates by
@dependabot[bot] in gradle/actions#867- Update known wrapper checksums by
@github-actions[bot] in gradle/actions#881- Bump the npm-dependencies group in /sources with 6 updates by
@dependabot[bot] in gradle/actions#879- Bump the github-actions group across 3 directories with 5 updates by
@dependabot[bot] in gradle/actions#880- Remove configuration-cache support by
@bigdazin gradle/actions#884- Extract caching logic into a separate
gradle-actions-cachingcomponent by@bigdazin gradle/actions#885- Update gradle-actions-caching library to v0.3.0 by
@bot-githubactionin gradle/actions#899- Avoid windows shutdown bug by
@bigdazin gradle/actions#900- Dependency updates by
@bigdazin gradle/actions#905- Fix critical and high npm vulnerabilities by
@bigdazin gradle/actions#904- Fix rendering of job-disabled message by
@bigdazin gradle/actions#909Full Changelog: https://github.com/gradle/actions/compare/v5.0.2...v6.0.0
Commits
0f45282[bot] Update dist directory6c6dec0Fix rendering of job-disabled message (#909)dd0829aAdd cache-disabled example to demo workflowfd60153[bot] Update dist directory9c9963bDependency updates (#905)22c3ef2Update known wrapper checksums51a7f13Bump Gradle Wrapper from 9.4.0 to 9.4.1.2c1f556Bump github/codeql-action in the github-actions group across 1 directoryd0745b9Bump@typescript-eslint/eslint-plugin8bfa39fAdd instructions for claude- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Package Dependencies
Technical Details
| ID: | 14801087 |
| UUID: | 4126051736 |
| Node ID: | PR_kwDOBecmdc7M63_Q |
| Host: | GitHub |
| Repository: | hyperledger/fabric-chaincode-java |