This is an automated email from the ASF dual-hosted git repository.
dsmiley pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/solr.git
The following commit(s) were added to refs/heads/main by this push:
new 002e89aa5d8 GitHub Action: update setup-gradle to v5.0.2 (#4234)
002e89aa5d8 is described below
commit 002e89aa5d8fc63f1d23a5aa179ba1abfbb3e96d
Author: David Smiley <[email protected]>
AuthorDate: Sat Mar 21 15:12:29 2026 -0400
GitHub Action: update setup-gradle to v5.0.2 (#4234)
Remove wrapper-validation -- redundant with setup-gradle
Addresses recent industry CI security concern.
---
.github/actions/prepare-for-build/action.yml | 2 +-
.github/workflows/docker-nightly.yml | 2 +-
.github/workflows/gradle-precommit.yml | 3 ---
.github/workflows/solrj-test.yml | 2 +-
4 files changed, 3 insertions(+), 6 deletions(-)
diff --git a/.github/actions/prepare-for-build/action.yml
b/.github/actions/prepare-for-build/action.yml
index 4000a7c0d2a..59d6a184534 100644
--- a/.github/actions/prepare-for-build/action.yml
+++ b/.github/actions/prepare-for-build/action.yml
@@ -33,7 +33,7 @@ runs:
# This includes "smart" caching of gradle dependencies.
- name: Set up Gradle
- uses: gradle/actions/setup-gradle@v4
+ uses:
gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5.0.2
with:
# increase expiry time for the temp. develocity token.
#
https://github.com/gradle/actions/blob/main/docs/setup-gradle.md#increasing-the-expiry-time-for-develocity-access-tokens
diff --git a/.github/workflows/docker-nightly.yml
b/.github/workflows/docker-nightly.yml
index f0f42d72cbd..865c744a670 100644
--- a/.github/workflows/docker-nightly.yml
+++ b/.github/workflows/docker-nightly.yml
@@ -117,7 +117,7 @@ jobs:
key: gradle-wrapper-${{
hashFiles('gradle/wrapper/gradle-wrapper.jar.sha256') }}
- name: Set up Gradle
- uses: gradle/actions/setup-gradle@v5
+ uses:
gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5.0.2
with:
develocity-token-expiry: 8
diff --git a/.github/workflows/gradle-precommit.yml
b/.github/workflows/gradle-precommit.yml
index b2375ad8c1f..ac56df84a17 100644
--- a/.github/workflows/gradle-precommit.yml
+++ b/.github/workflows/gradle-precommit.yml
@@ -20,6 +20,3 @@ jobs:
- name: Run gradle check (without tests)
run: ./gradlew check -x test -Ptask.times=true --continue
-
- - name: Validate Gradle wrapper
- uses: gradle/actions/wrapper-validation@v5
diff --git a/.github/workflows/solrj-test.yml b/.github/workflows/solrj-test.yml
index 726094bac0b..c81246b41be 100644
--- a/.github/workflows/solrj-test.yml
+++ b/.github/workflows/solrj-test.yml
@@ -21,5 +21,5 @@ jobs:
- uses: ./.github/actions/prepare-for-build
- - name: Test the SolrJ Package
+ - name: Test SolrJ module
run: ./gradlew solr:solrj:test
