This is an automated email from the ASF dual-hosted git repository. ppkarwasz pushed a commit to branch feat/simplify-github-actions in repository https://gitbox.apache.org/repos/asf/logging-log4j-samples.git
commit bd1142c56152cebbf66693a9a12a900890d1ab8b Author: Piotr P. Karwasz <[email protected]> AuthorDate: Sat Jul 25 12:21:17 2026 +0200 Pin GitHub Actions to major version tags To reduce the frequency of action update PRs: - Replace pinned SHAs of `actions/*` steps with major version tags and configure Dependabot to ignore everything except major updates, with a 7-day cooldown. - Replace `graalvm/setup-graalvm` with `actions/setup-java` using the `graalvm` distribution. - Replace `gradle/actions/setup-gradle` with the `cache: gradle` option of `actions/setup-java`. This also removes the Develocity build scan injection. Assisted-By: Claude Fable 5 <[email protected]> --- .github/dependabot.yaml | 12 ++++++++---- .github/workflows/graalvm-reusable-test.yaml | 5 +++-- .github/workflows/gradle-reusable-test.yaml | 13 +++---------- 3 files changed, 14 insertions(+), 16 deletions(-) diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml index 0be13d2..a03e9c6 100644 --- a/.github/dependabot.yaml +++ b/.github/dependabot.yaml @@ -60,7 +60,11 @@ updates: directory: "/" schedule: interval: weekly - groups: - all: - patterns: - - "*" + cooldown: + default-days: 7 + # Actions are pinned to major version tags, so only major updates are relevant + ignore: + - dependency-name: "*" + update-types: + - "version-update:semver-minor" + - "version-update:semver-patch" diff --git a/.github/workflows/graalvm-reusable-test.yaml b/.github/workflows/graalvm-reusable-test.yaml index 6f0effd..f40fb58 100644 --- a/.github/workflows/graalvm-reusable-test.yaml +++ b/.github/workflows/graalvm-reusable-test.yaml @@ -50,14 +50,15 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2 + uses: actions/checkout@v6 with: repository: 'apache/logging-log4j-samples' ref: ${{ inputs.samples-ref }} - name: Setup GraalVM - uses: graalvm/setup-graalvm@60c26726de13f8b90771df4bc1641a52a3159994 # 1.5.2 + uses: actions/setup-java@v5 with: + distribution: 'graalvm' java-version: '21' - name: Build diff --git a/.github/workflows/gradle-reusable-test.yaml b/.github/workflows/gradle-reusable-test.yaml index 2377e06..58722fd 100644 --- a/.github/workflows/gradle-reusable-test.yaml +++ b/.github/workflows/gradle-reusable-test.yaml @@ -45,24 +45,17 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2 + uses: actions/checkout@v6 with: repository: 'apache/logging-log4j-samples' ref: ${{ inputs.samples-ref }} - name: Setup Java - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # 5.2.0 + uses: actions/setup-java@v5 with: distribution: 'temurin' java-version: 17 - - - name: Setup Gradle - uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # 6.1.0 - with: - develocity-access-key: ${{ secrets.DEVELOCITY_ACCESS_KEY }} - develocity-injection-enabled: true - develocity-url: https://develocity.apache.org - develocity-plugin-version: 3.18.2 + cache: gradle - name: Test log4j-samples-gradle-metadata shell: bash
