Skip to content

Commit 59c9edc

Browse files
authored
fix(deps): replace deprecated Gradle wrapper validation action (#1159)
The latest release of gradle/wrapper-validation-action is v3.5, but ADOT Java is currently using v1. This PR replaces the deprecated gradle/wrapper-validation-action with the new gradle/actions/wrapper-validation action. v4.4.2 is an official release. It's commit hash is #017a9ef. https://github.com/gradle/actions/releases/tag/v4.4.2 When uses third-party action, we should always use commit hash instead of release number, for security and integrity reason. https://docs.github.com/en/actions/reference/security/secure-use#using-third-party-actions References: - https://github.com/gradle/wrapper-validation-action - https://github.com/gradle/actions/releases/ By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
1 parent 24c2618 commit 59c9edc

9 files changed

+14
-12
lines changed

.github/workflows/codeql-analysis.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ jobs:
5050
gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
5151
gpg_password: ${{ secrets.GPG_PASSPHRASE }}
5252

53-
- uses: gradle/wrapper-validation-action@v1
53+
- uses: gradle/actions/wrapper-validation@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
5454

5555
- name: Manually build to avoid autobuild failures
5656
uses: gradle/gradle-build-action@v3

.github/workflows/docker-build-corretto-slim.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
runs-on: ubuntu-latest
2121
steps:
2222
- uses: actions/checkout@v5
23-
- uses: gradle/wrapper-validation-action@v1
23+
- uses: gradle/actions/wrapper-validation@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
2424
- name: Configure AWS Credentials
2525
uses: aws-actions/configure-aws-credentials@v4
2626
with:

.github/workflows/docker-build-smoke-tests-fake-backend.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
with:
3939
gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
4040
gpg_password: ${{ secrets.GPG_PASSPHRASE }}
41-
- uses: gradle/wrapper-validation-action@v1
41+
- uses: gradle/actions/wrapper-validation@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
4242
- name: Configure AWS Credentials
4343
uses: aws-actions/configure-aws-credentials@v4
4444
with:

.github/workflows/e2e-tests-app-with-java-agent.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ jobs:
5151
gpg_password: ${{ secrets.GPG_PASSPHRASE }}
5252

5353
- name: Validate the checksums of Gradle Wrapper
54-
uses: gradle/wrapper-validation-action@v1
54+
uses: gradle/actions/wrapper-validation@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
5555

5656
- name: Configure AWS Credentials
5757
uses: aws-actions/configure-aws-credentials@v4

.github/workflows/main-build.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939
with:
4040
path: ~/.pnpm-store
4141
key: ${{ runner.os }}-test-cache-pnpm-modules
42-
- uses: gradle/wrapper-validation-action@v1
42+
- uses: gradle/actions/wrapper-validation@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
4343
- uses: ./.github/actions/patch-dependencies
4444
with:
4545
run_tests: "true"
@@ -76,7 +76,7 @@ jobs:
7676
gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
7777
gpg_password: ${{ secrets.GPG_PASSPHRASE }}
7878

79-
- uses: gradle/wrapper-validation-action@v1
79+
- uses: gradle/actions/wrapper-validation@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
8080

8181
- name: Configure AWS Credentials
8282
uses: aws-actions/configure-aws-credentials@v4
@@ -196,7 +196,7 @@ jobs:
196196
with:
197197
java-version: 23
198198
distribution: 'temurin'
199-
- uses: gradle/wrapper-validation-action@v1
199+
- uses: gradle/actions/wrapper-validation@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
200200

201201
- name: Configure AWS Credentials
202202
uses: aws-actions/configure-aws-credentials@v4

.github/workflows/nightly-upstream-snapshot-build.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ jobs:
4646
gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
4747
gpg_password: ${{ secrets.GPG_PASSPHRASE }}
4848

49-
- uses: gradle/wrapper-validation-action@v1
49+
- uses: gradle/actions/wrapper-validation@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
5050

5151
- name: Configure AWS Credentials
5252
uses: aws-actions/configure-aws-credentials@v4
@@ -136,7 +136,7 @@ jobs:
136136
with:
137137
java-version: 23
138138
distribution: 'temurin'
139-
- uses: gradle/wrapper-validation-action@v1
139+
- uses: gradle/actions/wrapper-validation@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
140140

141141
- name: Configure AWS Credentials
142142
uses: aws-actions/configure-aws-credentials@v4

.github/workflows/pr-build.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131
path: ~/.pnpm-store
3232
key: ${{ runner.os }}-test-cache-pnpm-modules
3333

34-
- uses: gradle/wrapper-validation-action@v1
34+
- uses: gradle/actions/wrapper-validation@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
3535

3636
- uses: ./.github/actions/patch-dependencies
3737
with:
@@ -61,7 +61,7 @@ jobs:
6161
java-version: 17
6262
distribution: temurin
6363

64-
- uses: gradle/wrapper-validation-action@v1
64+
- uses: gradle/actions/wrapper-validation@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
6565

6666
# Cleanup directories before proceeding with setup
6767
- name: Clean up old installations

.github/workflows/release-build.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ jobs:
2929
with:
3030
java-version: 17
3131
distribution: 'temurin'
32-
- uses: gradle/wrapper-validation-action@v1
32+
- uses: gradle/actions/wrapper-validation@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4.4.2
3333

3434
- name: Publish patched dependencies to maven local
3535
uses: ./.github/actions/patch-dependencies

.gitignore

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,8 @@ build/
44

55
.DS_Store
66

7+
.vscode
8+
79
# Ignore Gradle GUI config
810
gradle-app.setting
911

0 commit comments

Comments
 (0)