This PR contains the following updates:
| Package | Type | Update | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|---|---|
| actions/checkout | action | patch | v3.0.0
-> v3.0.2
| | | | |
| actions/setup-java | action | minor | v3.0.0
-> v3.5.0
| | | | |
| actions/upload-artifact | action | minor | v3.0.0
-> v3.1.0
| | | | |
| gradle (source) | | minor | 7.4.2
-> 7.5.1
| | | | |
| gradle/gradle-build-action | action | minor | v2.1.5
-> v2.3.1
| | | | |
| jquery (source) | | patch | 3.6.0
-> 3.6.1
| | | | |
| stefanzweifel/git-auto-commit-action | action | minor | v4.14.0
-> v4.15.0
| | | | |
| io.gitlab.arturbosch.detekt (source) | plugin | minor | 1.19.0
-> 1.21.0
| | | | |
| org.jetbrains.kotlinx.binary-compatibility-validator | plugin | minor | 0.8.0
-> 0.11.1
| | | | |
| com.github.tschuchortdev:kotlin-compile-testing-ksp | dependencies | patch | 1.4.8
-> 1.4.9
| | | | |
| com.github.tschuchortdev:kotlin-compile-testing | dependencies | patch | 1.4.8
-> 1.4.9
| | | | |
| org.sosy-lab:java-smt | dependencies | minor | 3.12.0
-> 3.14.0
| | | | |
| org.junit.platform:junit-platform-launcher (source) | dependencies | minor | 1.8.2
-> 1.9.1
| | | | |
| org.junit.jupiter:junit-jupiter-engine (source) | dependencies | minor | 5.8.2
-> 5.9.1
| | | | |
| org.junit.jupiter:junit-jupiter (source) | dependencies | minor | 5.8.2
-> 5.9.1
| | | | |
| org.javassist:javassist (source) | dependencies | minor | 3.28.0-GA
-> 3.29.2-GA
| | | | |
| io.github.classgraph:classgraph | dependencies | patch | 4.8.143
-> 4.8.149
| | | | |
| org.assertj:assertj-core (source) | dependencies | minor | 3.22.0
-> 3.23.1
| | | | |
| io.arrow-kt:arrow-analysis-types (source) | dependencies | patch | 2.0.2-SNAPSHOT
-> 2.0.2
| | | | |
| io.arrow-kt.arrow-gradle-config-versioning | plugin | patch | 0.10.0
-> 0.10.2
| | | | |
| io.arrow-kt.arrow-gradle-config-publish | plugin | patch | 0.10.0
-> 0.10.2
| | | | |
| io.arrow-kt.arrow-gradle-config-nexus | plugin | patch | 0.10.0
-> 0.10.2
| | | | |
| io.arrow-kt.arrow-gradle-config-kotlin | plugin | patch | 0.10.0
-> 0.10.2
| | | | |
| io.arrow-kt.arrow-gradle-config-formatter | plugin | patch | 0.10.0
-> 0.10.2
| | | | |
| io.arrow-kt:arrow-optics | dependencies | minor | 1.0.1
-> 1.1.3
| | | | |
| io.arrow-kt:arrow-core | dependencies | minor | 1.0.1
-> 1.1.3
| | | | |
| io.arrow-kt:arrow-annotations | dependencies | minor | 1.0.1
-> 1.1.3
| | | | |
⚠ Dependency Lookup Warnings ⚠
Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.
Release Notes
actions/checkout
Compare Source
Compare Source
actions/setup-java
Compare Source
Add support for multiple jdks
In scope of this release we add support for multiple jdks. Customers can specify multiple versions of java through java-version
input.
steps:
- uses: actions/setup-java@v3
with:
distribution: '<distribution>'
java-version: |
8
11
15
Besides, we added such changes as:
Compare Source
In scope of this release we updated actions/cache
package as the new version contains fixes for caching error handling.
Compare Source
In scope of this release we introduce such changes as:
Compare Source
In scope of this pull request we add support for Amazon Corretto Build of OpenJDK (https://github.com/actions/setup-java/pull/312).
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Setup-java
uses: actions/setup-java@v3
with:
distribution: corretto
java-version: 11
Supported distributions
Currently, the following distributions are supported:
| Keyword | Distribution | Official site | License
|-|-|-|-|
| temurin
| Eclipse Temurin | Link | Link
| zulu
| Zulu OpenJDK | Link | Link |
| adopt
or adopt-hotspot
| Adopt OpenJDK Hotspot | Link | Link |
| adopt-openj9
| Adopt OpenJDK OpenJ9 | Link | Link |
| liberica
| Liberica JDK | Link | Link |
| microsoft
| Microsoft Build of OpenJDK | Link | Link
| corretto
| Amazon Corretto Build of OpenJDK | Link | Link
Compare Source
This release introduces dependency caching support for sbt (https://github.com/actions/setup-java/pull/302).
Caching sbt dependencies
steps:
- uses: actions/checkout@v3
- uses: actions/setup-java@v3
with:
distribution: 'temurin'
java-version: '11'
cache: 'sbt'
- name: Build with SBT
run: sbt package
Compare Source
This release introduces new output cache-hit (https://github.com/actions/setup-java/pull/275) and update of actions/cache
dependency to 2.0.2 (https://github.com/actions/setup-java/pull/317)
Add "cache-hit" output
The cache-hit
output contains boolean value indicating that an exact match was found for the key. It shows that the action uses already existing cache or not. The output is available only if cache is enabled.
Update actions/cache to 2.0.2
We updated actions/cache
package as the new version contains fixes related to GHES 3.5 (https://github.com/actions/setup-java/pull/317)
Compare Source
In scope of this release we added support for caching from GHES 3.5 and fixed download issue for files > 2GB during restore.
Updated dependencies:
- bumped
minimist
from 1.2.5
to 1.2.6
.
- updated
actions/cache
dependency to 2.0.0 version
actions/upload-artifact
Compare Source
What's Changed
gradle/gradle
This is a patch release for 7.5. We recommend using 7.5.1 instead of 7.5
Read the Release Notes
We would like to thank the following community members for their contributions to this release of Gradle:
Michael Bailey,
Josh Kasten,
Marcono1234,
mataha,
Lieven Vaneeckhaute,
kiwi-oss,
Stefan Neuhaus,
George Thomas,
Anja Papatola,
Björn Kautler,
David Burström,
Vladimir Sitnikov,
Roland Weisleder,
Konstantin Gribov,
David Op de Beeck,
aSemy,
Rene Groeschke,
Jonathan Leitschuh,
Aurimas Liutikas,
Jamie Tanna,
Xin Wang,
Atsuto Yamashita,
Taeik Lim,
Peter Gafert,
Alex Landau,
Jerry Wiltse,
Tyler Burke,
Matthew Haughton,
Filip Daca,
Simão Gomes Viana,
Vaidotas Valuckas,
Edgars Jasmans,
Tomasz Godzik,
Jeff,
Lajos Veres
Upgrade instructions
Switch your build to use Gradle 7.5.1 by updating your wrapper:
./gradlew wrapper --gradle-version=7.5.1
See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.
Reporting Problems
If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.
gradle/gradle-build-action
Compare Source
This patch release addresses some security vulnerabilities reported by the CodeQL check:
The release contains no functional changes.
Compare Source
What's new
With v2.3.0
, the gradle-build-action
can now attempt to remove any unused files from the Gradle User Home directory before storing to the GitHub Actions cache. This can prevent cases where the size of cache entry grows over time.
Gradle Home cache cleanup is disabled by default. You can enable this feature for the action as follows:
gradle-home-cache-cleanup: true
See the README for more details.
Full Changelog: https://github.com/gradle/gradle-build-action/compare/v2.2.5...v2.3.0
Compare Source
What's fixed
Fixes a bug where a corrupted cache entry caused an error in beforeSave
(#408). This meant that the entry was never purged.
By allowing @actions/globber
to follow symlinks and ignore broken symlinks, the bad files in the cache entry are ignored and the corrupted cache entry can be replaced by a good one.
Full Changelog: https://github.com/gradle/gradle-build-action/compare/v2.2.4...v2.2.5
Compare Source
What's fixed
The fix for #383 introduced a bug that caused the post-action to fail when attempting to resolve cache-read-only for scheduled jobs.
This has been fixed with an explicit (rather than implicit) check for 'event.repository != null'. (#409)
Full Changelog: https://github.com/gradle/gradle-build-action/compare/v2.2.3...v2.2.4
Compare Source
What's fixed
This release updates a number of key dependencies and fixes some cache-related issues:
- Do not set
cache-read-only=true
for scheduled workflows on default branch (#383)
- Fix reporting of caching errors that was broken in
v2.2.2
(#407)
- Abort cache download operations after 10 minutes (configurable). Previously cache download operations could hang the build. (#369)
Full Changelog: https://github.com/gradle/gradle-build-action/compare/v2.2.2...v2.2.3
Compare Source
What's fixed
This release fixes some issues that were discovered in the v2.2.1
release, and updates a number of dependencies.
- Improved support for GitHub Enterprise
- Do not attempt to use GitHub Actions cache when the feature is not available
- Write Gradle Build summary to log files when Job Summary functionality not available
- Only attempt to stop Gradle daemons when caching Gradle User Home (#341)
- Only write build-results file when GitHub Actions env vars are available (#350)
Full Changelog: https://github.com/gradle/gradle-build-action/compare/v2.2.1...v2.2.2
Compare Source
What's fixed
This release fixes some issues that were exposed by the v2.2.0
release, as well as improving the content and layout of the Job Summary.
- Don't try to generate Job Summary when functionality is not available (GitHub Enterprise): #319
- Fix warning when attempting to delete non-existent file: #308
- Fix
Entry not saved: reason unknown
message in Job Summary cache details: #309
- Report failure to publish build scan in Job Summary: #326
Full Changelog: https://github.com/gradle/gradle-build-action/compare/v2.2.0...v2.2.1
Compare Source
Summary
This release brings a new Job Summary report, as well as numerous improvements and bug fixes:
- Capture all Gradle build executions for a job and write them to the GitHub Actions Job Summary.
- Default to
cache-read-only
for non-default branches (see 0a36ca9
)
- Allow the Gradle Daemon to run across build steps in a workflow Job (see #113)
Issues resolved
https://github.com/gradle/gradle-build-action/milestone/7?closed=1
What's Changed
Full Changelog: https://github.com/gradle/gradle-build-action/compare/v2.1.7...v2.2.0
Compare Source
Fixes #293, which prevented v2.1.6
from allowing Gradle to re-use previously downloaded wrapper distributions. This slowed down build executions and could result in build flakiness when the wrapper zip failed to download.
- [FIX] Retain more items in the
wrapper
folder of Gradle User Home, avoiding re-download of wrapper distributions.
Compare Source
This release contains an fix for changed behaviour in Gradle 7.6, as well as numerous library upgrades.
Earlier versions of the gradle-build-action
were saving and restoring the downloaded Gradle wrapper zip file as part of caching the Gradle User Home. This will no longer work with Gradle 7.6, as the wrapper zip is now removed after expanding. This release of gradle-build-action
contains a fix for this change in Gradle 7.6. Using an older version of the GitHub action with Gradle 7.6 will likely result in the wrapper being downloaded on every GitHub actions invocation.
What's Changed
- [FIX] Save/restore exploded Gradle dist rather than zip
- [FIX] Update to the latest versions of
@actions/core
, @actions/cache
, @actions/github
, @actions/http-client
and @actions/tool-cache
.
Full changelog: https://github.com/gradle/gradle-build-action/compare/v2.1.5...v2.1.6
stefanzweifel/git-auto-commit-action
Compare Source
Changed
Fixed
Compare Source
detekt/detekt
We're delighted to announce the next upcoming stable release of Detekt: 1.21.0
🎉
This release is coming with 6 new rules, new API and functionalities and several stability improvements.
We want to thank you very much our Sponsors for the support in those last months. The work behind Detekt is all happening on a voluntary basis, and we're more than grateful for all the support we get from the Open Source Ecosystem.
We're also excited to announce that we're now having an Open Source Gradle Enterprise instance. When building the Detekt projects, you'll benefit from the Gradle Remote Cache that this instance is providing!
Finally, we want to take the opportunity to thank our contributors for testing, bug reporting and helping
us release this new version of Detekt. You're more than welcome to join our community on the #detekt channel on KotlinLang's Slack (you can get an invite here).
Notable Changes
- We enabled ~30 new rules by default which we believe are now stable enough. - #4875
- We added 7 new Rules to Detekt
- We added support for Markdown reports - #4858
- We now allow users and rule authors to specify a reason for every value in the config file - #4611 - Please note that this feature requires a rule to be extended to support it. If you're a rule author you can start using it right away in your rule. We're looking into using this feature in some first party rule starting from Detekt
1.22.0
.
- We now report as warnings the Strings in the config file that can be converted to be an array - #4793
- We added a dependency on ConTester to help us verify concurrency scenarios for Detekt - #4672
- For contributors: we restructured our build setup to be use Gradle composite build - #4751
Migration
We fixed a bug related to function with KDocs and how their location in the source code was calculated (see #4961 and #4887).
Because of this, some users might have to recreate their baseline as the location of such functions are not matched anymore against the baseline. You can do so by deleting your old baseline and invoking the detektBaseline
task (or the corresponding task, based on your configuration).
Changelog
- ReturnCount: Make configuration parameter more explicit - #5062
- Remove redundant null check - #5061
- Drop redundant Gradle workaround - #5057
- Update ktlint links from website to readme - #5056
- Improve extensions.doc format with admonitions - #5055
- Update docusaurus monorepo to v2.0.0-beta.22 - #5050
- Enable strict Kotlin DSL precompiled script plugins accessors generation - #5048
- MaxChainedCallsOnSameLine: don't count package references as chained calls - #5036
- Xml Report Merger now merges duplicate smells across input report files - #5033
- Add ending line and column to Location.kt - #5032
- Fix type resolution link in Contributing.md - #5027
- #5014 Fix MaxChainedCallsOnSameLine false positives - #5020
- Add endColumn/endLine to SARIF region - #5011
- Removed UnnecessaryAbstractClass if it inherits from a abstract class - #5009
- Only recommend using index accessors for Java classes that are known collections - #4994
- UnusedImports: fix false positive for unresolved imports - #4882
- Fix Signatures.kt:buildFunctionSignature - #4961
- Loading a specific resource from a module must use class from module - #5008
- Update github/codeql-action digest to
3f62b75
- #5007
- Show finding at declaration name instead of the whole declaration - #5003
- NamedArguments: don't count trailing lambda argument - #5002
- Address TextLocation for Wrapping - #4998
- Support markdown report in Gradle plugin - #4995
- Fix false-negative for CanBeNonNullable - #4993
- Give a better error message for --jvm-target - #4978
- Fix rule code samples to be valid Kotlin code - #4969
- Use plain ASCII output in standard reports - #4968
- UnnecessaryApply: fix false negative for assignment - #4948
- Support disabling config validation via tooling spec - #4937
- UnusedPrivateMember: highlight declaration name - #4928
- Provide a priority field for DetektProvider - #4923
- CastToNullableType: allow casting null keyword - #4907
- Update plugin com.gradle.common-custom-user-data-gradle-plugin to v1.7.2 - #4897
- Set strict dependency on tested Kotlin compiler version - #4822
- Simplify regular expressions - #4893
- Remove redundant character escape in RegExp - #4892
- Reformat Markdown files to comply with the spec - #4891
- UnnecessaryInnerClass: fix false negative with
this
references - #4884
- UselessCallOnNotNull: fix false positive for unresolved types - #4880
- Update MagicNumber rule to exclude .kts files - #4877
- CanBeNonNullable: fix false positives for parameterized types - #4870
- UnnecessaryInnerClass: fix false positives labeled expression to outer class - #4865
- UnnecessaryInnerClass: add test for safe qualified expressions - #4864
- Fix a confusing Regex in the Compose webpage - #4852
- Fix edit URLs for the website - #4850
- detektGenerateConfig adds the configuration of plugins - #4844
- Update dependency prism-react-renderer to v1.3.3 - #4833
- Search in all versions.properties, not just the first one #4830 - #4831
- Improve exception message - #4823
- Fix ValShouldBeVar false positive inside unknown type - #4820
- Add a recent conference talk link - #4819
- False positive for unused imports #4815 - #4818
- Revert "Display dynamic --jvm-target values when using --help flag (#4694)" - #4816
- UnnecessaryAbstractClass: report only the class name - #4808
- Fix wrong replacement suggestion for UnnecessaryFilter - #4807
- UseOrEmpty: fix false positive for indexing operator calls with type parameters - #4804
- ExplicitCollectionElementAccessMethod: fix false positive for get operators with type parameters - #4803
- Add tests for #4786 - #4801
- Add documentation link for rules in html report - #4799
- Improve rule documentaion and smell message of NamedArguments - #4796
- Improve issue description and smell message of DestructuringDeclarationWithTooManyEntries - #4795
- NestedScopeFunctions - Add rule for nested scope functions - #4788
- Partially drop redundant usage of "dry run" in Gradle plugin tests - #4776
- Allow additionalJavaSourceRootPaths to be defined on @KotlinCoreEnvironmentTest - #4771
- Report KDoc comments that refer to non-public properties of a class - #4768
- Self-inspect the detekt-gradle-plugin - #4765
- Pass args to DetektInvoker as List<String> - #4762
- Cleanup Gradle Plugin Publications - #4752
- Break a dependency between
detekt-gradle-plugin
and detekt-utils
- #4748
- Remove suspend lambda rule with CoroutineScope receiver due to not de… - #4747
VarCouldBeVal
: Add configuration flag ignoreLateinitVar
- #4745
- UnnecessaryInnerClass: fix false positive with references to function type variables - #4738
- Fix false positive on VarCouldBeVal in generic classes - #4733
- OutdatedDocumentation: fix false positive with no primary constructor - #4728
- Android Gradle: add javac intermediates to classpath - #4723
- OptionalWhenBraces: fix false negative when the single statement has comments inside - #4722
- Document pre-commit hook for staged files - #4711
- Enable rules by default for
1.21
- #4643
Dependency Updates
- Update dependency gradle to v7.5 - #5074
- Update plugin binaryCompatibilityValidator to v0.11.0 - #5069
- Update dependency org.jetbrains.kotlinx:kotlinx-coroutines-core to v1.6.3 - #4976
- Update dependency org.jetbrains.dokka to v1.7.0 - #4974
- Update plugin binaryCompatibilityValidator to v0.10.1 - #4954
- Update dependency org.jetbrains.kotlinx:kotlinx-coroutines-core to v1.6.2 - #4868
- Update dependency com.android.tools.build:gradle to v7.2.1 - #4861
- Update plugin binaryCompatibilityValidator to v0.10.0 - #4837
- Update dependency io.mockk:mockk to v1.12
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
- [ ] If you want to rebase/retry this PR, click this checkbox.
This PR has been generated by Mend Renovate. View repository job log here.