AxonFramework / IdeaPlugin

An IntelliJ IDEA plugin for Axon Framework
Apache License 2.0
34 stars 21 forks source link

Bump gradle/gradle-build-action from 2.3.3 to 2.4.1 #195

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps gradle/gradle-build-action from 2.3.3 to 2.4.1.

Release notes

Sourced from gradle/gradle-build-action's releases.

v2.4.1

This patch release updates a number of dependencies, including xmljs which was reported to have a security vulnerability (https://nvd.nist.gov/vuln/detail/CVE-2023-0842). There is no evidence that this vulnerability affected the gradle-build-action.

Full changelog: https://github.com/gradle/gradle-build-action/compare/v2.4.0...v2.4.1

v2.4.0

What's new

The v.2.4.0 release contains various library updates and fixes to fully support Gradle 8.

Notable changes:

  • Update to @actions/cache: 3.1.3 should improve cache save/restore performance on Windows by using gnu tar and zstd when available.
  • Fix caching of extracted JDK toolchains for Gradle 7.6+ (e4446473950007d0d0323adeed9f992824618be9)

Full Changelog: https://github.com/gradle/gradle-build-action/compare/v2.3.3...v2.4.0

Commits
  • 5056fa9 Patch @​azure/logger to address CodeQL violations
  • 8a0051f Specify current Gradle version via ASDF
  • 4f87177 Build outputs
  • ff62946 Update development dependencies
  • 2eddd20 Bump xml2js, @​azure/ms-rest-js and @​azure/core-http
  • 887e0bd Fix typo (#655)
  • dac0b87 Bump @​typescript-eslint/parser from 5.56.0 to 5.57.0 (#654)
  • a8f0f0d NPM dependency updates
  • 951bc8a Update versions for Gradle and GE plugins
  • c0e9e48 Merge pull request #610 from gradle/dependabot/npm_and_yarn/eslint-8.35.0
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 1 year ago

Superseded by #196.