This release should vastly reduce the number of network requests made by the wrapper-validation-action, by hardcoding the checksums of all known Gradle wrapper jars at time of release. With this improvement, a number of long-standing issues should be addressed (#164, #162, #57).
The action should now only make network requests to validate the checksums of an unknown gradle-wrapper.jar. This can happen if:
The Gradle version was published after this action was released
The gradle-wrapper.jar is truly invalid
Changelog
[NEW] Hardcode list of known checksums to avoid network requests in most cases (#161)
Huge thanks to @Marcono1234 for contributing this long-awaited improvement.
v2.0.1
This patch release fixes error reporting when failing to retrieve the checksums from services.gradle.org
[FIX] After migration from v1 to v2 silently fails (#174)
v2.0.0
What's Changed
The version of the Node.js runtime was updated to 20, and the majority of dependencies were updated to the latest versions.
From now on, the wrapper-validation-action will require a Node.js 20 runtime environment.
There are no functional changes in this release.
This release is tagged with the v2 version label.
In the scope of this release, the version of the Node.js runtime was updated to 20. The majority of dependencies were updated to the latest versions. From now on, the code for the setup-java will run on Node.js 20 instead of Node.js 16.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the all-actions group with 3 updates: actions/checkout, gradle/wrapper-validation-action and actions/setup-java.
Updates
actions/checkoutfrom 1 to 4Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
a5ac7e5Update for 4.1.6 release (#1733)24ed1a3Check platform for extension (#1732)44c2b7aREADME: Suggestuser.emailto be `41898282+github-actions[bot]@users.norepl...8459bc0Bump actions/upload-artifact from 2 to 4 (#1695)3f603f6Bump actions/setup-node from 1 to 4 (#1696)fd084cdBump github/codeql-action from 2 to 3 (#1694)9c1e94eUpdate NPM dependencies (#1703)0ad4b8fPrep Release v4.1.4 (#1704)43045aeDisableextensions.worktreeConfigwhen disablingsparse-checkout(#1692)37b0821Bump the minor-actions-dependencies group with 2 updates (#1693)Updates
gradle/wrapper-validation-actionfrom 1 to 3Release notes
Sourced from gradle/wrapper-validation-action's releases.
... (truncated)
Commits
216d1adBump to v3.3.25188e9bBump to use v3.3.1460a3caDelegate to 'gradle/actions/wrapper-validation' (#200)b5418f5Build dist6613b81Bump the npm-dependencies group with 2 updates35bb224Bump undici from 5.28.3 to 5.28.4ea90fd0Update known wrapper checksumsb231772Build outputsad66d65Update known wrapper checksums34f4d9fBump undici from 5.28.2 to 5.28.3Updates
actions/setup-javafrom 1 to 4Release notes
Sourced from actions/setup-java's releases.
... (truncated)
Commits
99b8673Patch for java version file (#610)5896cecAdded .tool-versions file support (#606)80ae3c2Update httpclient version and other dependencies (#607)9704b39Added Windows Arm64 Support for Windows Arm64 Runners (#595)7a445eeFix typo in configuration example (#572)3232623Oracle JDK 21 support (#538)c0660d8docs: add note about maven-gpg-plugin version (#570)2f7af1bmake it clear that Java 21 is supported (#566)16ef37fHTTP errors when the token is undefined (#556)a237454feat: bump actions/checkout and actions/setup-java to v4 (#533)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show