sigstore / sigstore-java

java clients for sigstore
Apache License 2.0
36 stars 20 forks source link

Update gradle/actions action to v3.4.1 #741

Closed renovate[bot] closed 1 month ago

renovate[bot] commented 1 month ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change
gradle/actions action minor v3.3.2 -> v3.4.1

Release Notes

gradle/actions (gradle/actions) ### [`v3.4.1`](https://togithub.com/gradle/actions/releases/tag/v3.4.1) [Compare Source](https://togithub.com/gradle/actions/compare/v3.4.0...v3.4.1) This patch release fixes a bug introduced in v3.4.0, that prevents build scan publication to Develocity. The bug results in the removal of the `DEVELOCITY_ACCESS_KEY` variable being removed, so that Gradle cannot authenticate with the Develocity server. ##### What's Changed - Don't clear access key when access token cannot be obtained by [@​cdsap](https://togithub.com/cdsap) in [https://github.com/gradle/actions/pull/258](https://togithub.com/gradle/actions/pull/258) - Simplify requesting short-lived Develocity access tokens by [@​bigdaz](https://togithub.com/bigdaz) in [https://github.com/gradle/actions/pull/259](https://togithub.com/gradle/actions/pull/259) **Full Changelog**: https://github.com/gradle/actions/compare/v3.4.0...v3.4.1 ### [`v3.4.0`](https://togithub.com/gradle/actions/releases/tag/v3.4.0) [Compare Source](https://togithub.com/gradle/actions/compare/v3.3.2...v3.4.0) This release improves the integration with Gradle Develocity®, as well as updating a number of key dependencies. - The new `develocity-access-key` input parameter allows the action to generate a short-lived access token for subsequent communication with Develocity. This reduces the risk of the full (long-lived) access key being compromised, either accidentally or by a malicious action. - New input parameters are available to configure Develocity injection. Previously Develocity injection could only be enabled by setting environment variables. - Checksums for Gradle 8.8 are now included, so that no network request is required for `wrapper-validation` with Gradle 8.8 wrappers. ##### What's Changed - Add support for short-lived tokens by [@​alextu](https://togithub.com/alextu) in [https://github.com/gradle/actions/pull/224](https://togithub.com/gradle/actions/pull/224) - Update known wrapper checksums by [@​github-actions](https://togithub.com/github-actions) in [https://github.com/gradle/actions/pull/240](https://togithub.com/gradle/actions/pull/240) - Update to Gradle 8.8 by [@​bigdaz](https://togithub.com/bigdaz) in [https://github.com/gradle/actions/pull/251](https://togithub.com/gradle/actions/pull/251) - Adding Develocity input actions by [@​cdsap](https://togithub.com/cdsap) in [https://github.com/gradle/actions/pull/244](https://togithub.com/gradle/actions/pull/244) - Fail on invalid boolean for Develocity inputs by [@​bigdaz](https://togithub.com/bigdaz) in [https://github.com/gradle/actions/pull/252](https://togithub.com/gradle/actions/pull/252) ##### New Contributors - [@​serieznyi](https://togithub.com/serieznyi) made their first contribution in [https://github.com/gradle/actions/pull/216](https://togithub.com/gradle/actions/pull/216) - [@​lokalpage-safe](https://togithub.com/lokalpage-safe) made their first contribution in [https://github.com/gradle/actions/pull/205](https://togithub.com/gradle/actions/pull/205) - [@​alextu](https://togithub.com/alextu) made their first contribution in [https://github.com/gradle/actions/pull/224](https://togithub.com/gradle/actions/pull/224) - [@​bot-githubaction](https://togithub.com/bot-githubaction) made their first contribution in [https://github.com/gradle/actions/pull/227](https://togithub.com/gradle/actions/pull/227) - [@​antonmos](https://togithub.com/antonmos) made their first contribution in [https://github.com/gradle/actions/pull/234](https://togithub.com/gradle/actions/pull/234) - [@​cdsap](https://togithub.com/cdsap) made their first contribution in [https://github.com/gradle/actions/pull/244](https://togithub.com/gradle/actions/pull/244) **Full Changelog**: https://github.com/gradle/actions/compare/v3.3.2...v3.4.0

Configuration

📅 Schedule: Branch creation - "every 3 weeks on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.