Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump gradle/gradle-build-action from 2.4.0 to 2.4.2 in /.github/workflows #206

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 1, 2023

Bumps gradle/gradle-build-action from 2.4.0 to 2.4.2.

Release notes

Sourced from gradle/gradle-build-action's releases.

v2.4.2

This release disables the save/restore of configuration-cache data, since this functionality has been shown to be problematic. Gradle 8.1 has made changes to this functionality which will require a more comprehensive rework of the action before we can re-enable this.

v2.4.1

This patch release updates a number of dependencies, including xmljs which was reported to have a security vulnerability (https://nvd.nist.gov/vuln/detail/CVE-2023-0842). There is no evidence that this vulnerability affected the gradle-build-action.

Full changelog: gradle/gradle-build-action@v2.4.0...v2.4.1

Commits
  • 749f47b Update README.md for changes in release
  • eb126d7 Update for Gradle 8.1 release
  • 5056fa9 Patch @​azure/logger to address CodeQL violations
  • 8a0051f Specify current Gradle version via ASDF
  • 4f87177 Build outputs
  • ff62946 Update development dependencies
  • 2eddd20 Bump xml2js, @​azure/ms-rest-js and @​azure/core-http
  • 887e0bd Fix typo (#655)
  • dac0b87 Bump @​typescript-eslint/parser from 5.56.0 to 5.57.0 (#654)
  • a8f0f0d NPM dependency updates
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [gradle/gradle-build-action](https://github.com/gradle/gradle-build-action) from 2.4.0 to 2.4.2.
- [Release notes](https://github.com/gradle/gradle-build-action/releases)
- [Commits](gradle/gradle-build-action@v2.4.0...v2.4.2)

---
updated-dependencies:
- dependency-name: gradle/gradle-build-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added github_actions Pull requests that update GitHub Actions code PR type > dependencies PR updates a dependency labels May 1, 2023
@sonarqubecloud
Copy link

sonarqubecloud bot commented May 1, 2023

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@github-actions github-actions bot added PR type > automation PR or issues related to CI and other automation stuff size/S Small size PR labels May 1, 2023
@codecov
Copy link

codecov bot commented May 1, 2023

Codecov Report

Patch and project coverage have no change.

Comparison is base (978ad6e) 43.23% compared to head (b89369c) 43.23%.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #206   +/-   ##
=======================================
  Coverage   43.23%   43.23%           
=======================================
  Files         313      313           
  Lines        4876     4876           
  Branches      538      538           
=======================================
  Hits         2108     2108           
  Misses       2704     2704           
  Partials       64       64           

☔ View full report in Codecov by Sentry.
📢 Do you have feedback about the report comment? Let us know in this issue.

@kevalpatel2106 kevalpatel2106 merged commit f98f80f into main Oct 23, 2023
@kevalpatel2106 kevalpatel2106 deleted the dependabot/github_actions/dot-github/workflows/gradle/gradle-build-action-2.4.2 branch October 23, 2023 07:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
github_actions Pull requests that update GitHub Actions code PR type > automation PR or issues related to CI and other automation stuff PR type > dependencies PR updates a dependency size/S Small size PR
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant