Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the react-native group with 2 updates #124

Closed

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Apr 15, 2024

Bumps the react-native group with 2 updates: gradle/wrapper-validation-action and gradle/actions.

Updates gradle/wrapper-validation-action from 2 to 3

Release notes

Sourced from gradle/wrapper-validation-action's releases.

v2.1.3

What's Changed

  • Update various NPM dependencies
  • Update wrapper checksums to include Gradle 8.7

Full Changelog: gradle/wrapper-validation-action@v2.1.2...v2.1.3

v2.1.2

What's Changed

  • Update various NPM dependencies
  • Update wrapper checksums

Full Changelog: gradle/wrapper-validation-action@v2.1.1...v2.1.2

v2.1.1

Changelog

  • [FIX] Add hardcoded checksum for Gradle 7.6.4

Full Changelog: gradle/wrapper-validation-action@v2...v2.1.1

v2.1.0

This release should vastly reduce the number of network requests made by the wrapper-validation-action, by hardcoding the checksums of all known Gradle wrapper jars at time of release. With this improvement, a number of long-standing issues should be addressed (#164, #162, #57).

The action should now only make network requests to validate the checksums of an unknown gradle-wrapper.jar. This can happen if:

  • The Gradle version was published after this action was released
  • The gradle-wrapper.jar is truly invalid

Changelog

  • [NEW] Hardcode list of known checksums to avoid network requests in most cases (#161)

Huge thanks to @​Marcono1234 for contributing this long-awaited improvement.

v2.0.1

This patch release fixes error reporting when failing to retrieve the checksums from services.gradle.org

  • [FIX] After migration from v1 to v2 silently fails (#174)
Commits

Updates gradle/actions from 3.1.0 to 3.3.0

Release notes

Sourced from gradle/actions's releases.

v3.3.0

This release includes a new action, and improvements to the existing actions.

Highlights include:

[!IMPORTANT] The caching protocol version has changed in this release, so cache entries written with previous versions of the action will not be reused. This means that jobs will effectively start with an empty cache after switching to this release.

Changelog

NEW action gradle/actions/wrapper-validation

  • [NEW] Add replacement for wrapper-validation-action (#160)

Improvements to gradle/actions/setup-gradle

  • [NEW] Cache paths have been updated for Gradle 8.6+ (#45, #163)
  • [NEW] setup-gradle action can now perform wrapper-validation automatically (#161, #162)
  • [FIX] Make cache-keys more consistent (#131).
  • [FIX] Avoid listing old build results in Job Summary on self-hosted runner (#127)
  • [FIX] Deprecation warnings are emitted when using deprecated inputs (#108)
  • [FIX] Generate correct toolchains.xml file on ARM runners (#89)

Improvements to gradle/actions/depenency-submission

  • [NEW] Action is now implemented directly in TypeScript, and does not delegate to setup-gradle (#116)
  • [NEW] Allow dependency resolution task name to be specified (#125)
  • [NEW] Dependency-graph is submitted immediately with dependency-submission action (#123)
  • [FIX] setup-gradle and dependency-submission can be used in the same Job (#36)

Full Changelog: gradle/actions@v3.2.1...v3.3.0

Actions Summary

Release includes v3.3.0 of the following, available under the v3 version tag:

[!NOTE] The gradle/actions/setup-gradle action supersedes gradle/gradle-build-action. The gradle/actions/wrapper-validation action supersedes gradle/wrapper-validation-action.

v3.2.1

The recent update to use com.develocity.gradle plugin resulted in many deprecation warnings being triggered by the init-scripts bundled with this action. This patch release updates these init-scripts to avoid these deprecation warnings.

What's Changed

  • Fix Develocity deprecation warnings in v3.2.1 (#126) by #129

... (truncated)

Commits
  • 6cec5d4 [bot] Update dist directory
  • 6d55902 Deprecate 'wrapper-validation-action'
  • 0325d99 Workflow fixes
  • d0f2f03 Update build script and contribution guide
  • 248dd90 Fix link to doc section
  • d576690 [bot] Update dist directory
  • feb10e7 Minor formatting fix
  • 5893d44 Use fixed job name for cache restore
  • fb14e0e Skip the 'download-dist' step for full integ-test
  • 0261d93 Switch back to unique cache entries with full integ-test
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Copy link
Author

dependabot bot commented on behalf of github Apr 15, 2024

The following labels could not be found: GitHub Actions, [Type] Build Tooling.

Bumps the react-native group with 2 updates: [gradle/wrapper-validation-action](https://github.com/gradle/wrapper-validation-action) and [gradle/actions](https://github.com/gradle/actions).


Updates `gradle/wrapper-validation-action` from 2 to 3
- [Release notes](https://github.com/gradle/wrapper-validation-action/releases)
- [Commits](gradle/wrapper-validation-action@v2...v3)

Updates `gradle/actions` from 3.1.0 to 3.3.0
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](gradle/actions@417ae3c...6cec5d4)

---
updated-dependencies:
- dependency-name: gradle/wrapper-validation-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: react-native
- dependency-name: gradle/actions
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: react-native
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/react-native-18ae14a979 branch from 8c8d698 to e7bddd3 Compare April 17, 2024 16:08
Copy link
Author

dependabot bot commented on behalf of github Apr 18, 2024

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot bot closed this Apr 18, 2024
@dependabot dependabot bot deleted the dependabot/github_actions/react-native-18ae14a979 branch April 18, 2024 15:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants