henningn opened a new pull request, #7610: URL: https://github.com/apache/myfaces-tobago/pull/7610
Currently, there is a dependency-check-update job which should update the CVE-DB every night. But it seems this does not work well. Caches are immutable. So caches with the same name will not override, even if there was a CVE-DB update. So I think the cache name should be unique. And with the restore-key the latest cache will be used as a base. Before, the cache name was based on the pom.xml-hash. Now the name is generated from the runner-id and the run_attempt. Another issue might be that the .m2 directory is completely cached. But it should be the .m2/repository directory. The setup-files can be generated every time from the Maven build. The restore-key should end with "-" (says the AI...). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
