dependabot[bot] opened a new pull request, #15559: URL: https://github.com/apache/grails-core/pull/15559
Bumps [gradle/actions](https://github.com/gradle/actions) from 5.0.0 to 6.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gradle/actions/releases";>gradle/actions's releases</a>.</em></p> <blockquote> <h2>v6.1.0</h2> <h2>New: Basic Cache Provider</h2> <p>A new MIT-licensed <strong>Basic Caching</strong> provider is now available as an alternative to the proprietary <strong>Enhanced Caching</strong> provided by <code>gradle-actions-caching</code>. Choose Basic Caching by setting <code>cache-provider: basic</code> on <code>setup-gradle</code> or <code>dependency-submission</code> actions.</p> <ul> <li>Built on <code>@actions/cache</code> -- fully open source</li> <li>Caches <code>~/.gradle/caches</code> and <code>~/.gradle/wrapper</code> directories</li> <li>Cache key derived from build files (<code>*.gradle*</code>, <code>gradle-wrapper.properties</code>, etc.)</li> <li>Clean cache on build file changes (no restore keys, preventing stale entry accumulation)</li> </ul> <p><strong>Limitations vs Enhanced Caching:</strong> No cache cleanup, no deduplication of cached content, cached content is fixed unless build files change.</p> <h2>Revamped Licensing & Distribution Documentation</h2> <ul> <li>New <strong>DISTRIBUTION.md</strong> documents the licensing of each component (particularly Basic Caching vs Enhanced Caching)</li> <li>Simplified licensing notices in README, docs, and runtime log output</li> <li>Clear usage tiers: Enhanced Caching is free for public repos and in Free Preview for private repos</li> </ul> <h2>What's Changed</h2> <ul> <li>Use a unique cache entry for wrapper-validation test by <a href="https://github.com/bigdaz";><code>@bigdaz</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/921";>gradle/actions#921</a></li> <li>Update Dependencies by <a href="https://github.com/bigdaz";><code>@bigdaz</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/922";>gradle/actions#922</a></li> <li>Update dependencies and resolve npm vulnerabilities by <a href="https://github.com/bigdaz";><code>@bigdaz</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/933";>gradle/actions#933</a></li> <li>Add open-source 'basic' cache provider and revamp licensing documentation by <a href="https://github.com/bigdaz";><code>@bigdaz</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/930";>gradle/actions#930</a></li> <li>Restructure caching documentation for basic and enhanced providers by <a href="https://github.com/bigdaz";><code>@bigdaz</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/934";>gradle/actions#934</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/gradle/actions/compare/v6.0.1...v6.1.0";>https://github.com/gradle/actions/compare/v6.0.1...v6.1.0</a></p> <h2>v6.0.1</h2> <blockquote> <p>[!IMPORTANT] The release of <code>gradle/actions@v6</code> contains important changes to the license terms. More details in <a href="https://blog.gradle.org/github-actions-for-gradle-v6";>this blog post</a>. <strong>TL;DR</strong>: By upgrading to v6, you accept the <a href="https://gradle.com/legal/terms-of-use/";>Terms of Use</a> for the <code>gradle-actions-caching</code> component.</p> </blockquote> <h2>Summary</h2> <p>The <a href="https://blog.gradle.org/github-actions-for-gradle-v6";>license changes in v6</a> introduced a <code>gradle-actions-caching</code> license notice that is printed in logs and in each job summary.</p> <p>With this release, the license notice will be muted if build-scan terms have been accepted, or if a Develocity access key is provided.</p> <h2>What's Changed</h2> <ul> <li>Bump actions used in docs by <a href="https://github.com/Goooler";><code>@Goooler</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/792";>gradle/actions#792</a></li> <li>Add typing information for use by typesafegithub by <a href="https://github.com/bigdaz";><code>@bigdaz</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/910";>gradle/actions#910</a></li> <li>Mute license warning when terms are accepted by <a href="https://github.com/bigdaz";><code>@bigdaz</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/911";>gradle/actions#911</a></li> <li>Mention explicit license acceptance in notice by <a href="https://github.com/bigdaz";><code>@bigdaz</code></a> in <a href="https://redirect.github.com/gradle/actions/pull/912";>gradle/actions#912</a></li> <li>Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.21.1 to 2.21.2 in /sources/test/init-scripts in the gradle group across 1 directory by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/gradle/actions/pull/907";>gradle/actions#907</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/gradle/actions/compare/v6.0.0...v6.0.1";>https://github.com/gradle/actions/compare/v6.0.0...v6.0.1</a></p> <h2>v6.0.0</h2> <blockquote> <p>[!IMPORTANT]</p> </blockquote> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gradle/actions/commit/50e97c2cd7a37755bbfafc9c5b7cafaece252f6e";><code>50e97c2</code></a> Link to docs for caching providers</li> <li><a href="https://github.com/gradle/actions/commit/f2e6298504c4b1f20294637059e1d0d89422409a";><code>f2e6298</code></a> Restructure caching documentation for basic and enhanced providers (<a href="https://redirect.github.com/gradle/actions/issues/934";>#934</a>)</li> <li><a href="https://github.com/gradle/actions/commit/b294b1e2dbcf270bfe835590dedbbc7e2024618c";><code>b294b1e</code></a> Really fix integ-test-full</li> <li><a href="https://github.com/gradle/actions/commit/83d3189aae3332f1b2235b42d8804258f2348213";><code>83d3189</code></a> Revise license details for gradle-actions-caching</li> <li><a href="https://github.com/gradle/actions/commit/1d5db06d2662829845876553d61cf3df3cf997d1";><code>1d5db06</code></a> Update license link for gradle-actions-caching component</li> <li><a href="https://github.com/gradle/actions/commit/1c809615505fae9768e2610dc6dbecdc3a796443";><code>1c80961</code></a> Fix license link for Enhanced Caching component</li> <li><a href="https://github.com/gradle/actions/commit/9e99920b14b9dc5a9bf8c72e94ba47ebf5bbaee6";><code>9e99920</code></a> Fix integ-test-full workflow</li> <li><a href="https://github.com/gradle/actions/commit/bb8aaaf9d56f25afd4a90925425facf294f31fcf";><code>bb8aaaf</code></a> Fix workflow permissions</li> <li><a href="https://github.com/gradle/actions/commit/f5dfb43fc8c99c758ebf2324d102118e5faf6cb6";><code>f5dfb43</code></a> [bot] Update dist directory</li> <li><a href="https://github.com/gradle/actions/commit/ff9ae24c39252301b448088d2c7d9f0a2d8066dd";><code>ff9ae24</code></a> Add open-source 'basic' cache provider and revamp licensing documentation (<a href="https://redirect.github.com/gradle/actions/issues/930";>#930</a>)</li> <li>Additional commits viewable in <a href="https://github.com/gradle/actions/compare/v5...50e97c2cd7a37755bbfafc9c5b7cafaece252f6e";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
