mirror of
https://github.com/gradle/actions
synced 2026-06-12 07:02:44 +08:00
Daz DeBoer
9d6bacde37
## What - Bumps `@actions/cache` 6.0.0 → 6.0.1 - Bumps `@actions/artifact` 6.1.0 → 6.2.1 - Removes the Dependabot `ignore` rules for both so they're maintained automatically going forward ## Why Both deps were excluded from Dependabot's automatic updates: `*actions/cache*` was fully ignored, and `*actions/artifact*` had major/minor bumps ignored. Neither restriction is necessary. The `cache` ignore existed out of concern for keeping versions aligned with the vendored `gradle-actions-caching` library. That alignment isn't required: - The vendored bundle (`sources/vendor/gradle-actions-caching/index.js`) **inlines** its own (patched) `@actions/cache` and exposes a type-clean API (`restore`/`save`) that never leaks `@actions/cache` types across the boundary. - This repo's own direct `@actions/cache` usage is a **separate, unpatched copy** consumed via the stock string-returning API (`cache-service-basic.ts`, `provision.ts`), with no `patch-package`/`postinstall` in this repo. So there's no cross-repo sync requirement — these can be updated like any other dependency. ## Verification - `npm install --package-lock-only` regenerated the lockfile (resolves cache 6.0.1, artifact 6.2.1) - `./build` passes clean The root `dist/` directory is intentionally left for the CI workflow to update. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
49 lines
1.3 KiB
YAML
49 lines
1.3 KiB
YAML
version: 2
|
|
registries:
|
|
gradle-plugin-portal:
|
|
type: maven-repository
|
|
url: https://plugins.gradle.org/m2
|
|
username: dummy # Required by dependabot
|
|
password: dummy # Required by dependabot
|
|
|
|
updates:
|
|
- package-ecosystem: "npm"
|
|
directory: "/sources"
|
|
schedule:
|
|
interval: "weekly"
|
|
groups:
|
|
npm-dependencies:
|
|
patterns:
|
|
- "*"
|
|
- package-ecosystem: "github-actions"
|
|
# github-actions with directory: "/" only monitors .github/workflows
|
|
# https://github.com/dependabot/dependabot-core/issues/6345
|
|
directories:
|
|
- "/"
|
|
- "/.github/actions/build-dist"
|
|
- "/.github/actions/init-integ-test"
|
|
schedule:
|
|
interval: "weekly"
|
|
groups:
|
|
github-actions:
|
|
patterns:
|
|
- "*"
|
|
|
|
- package-ecosystem: "gradle"
|
|
directories:
|
|
- ".github/workflow-samples/gradle-plugin"
|
|
- ".github/workflow-samples/groovy-dsl"
|
|
- ".github/workflow-samples/java-toolchain"
|
|
- ".github/workflow-samples/kotlin-dsl"
|
|
- ".github/workflow-samples/no-wrapper"
|
|
- ".github/workflow-samples/no-wrapper-gradle-5"
|
|
- "sources/test/init-scripts"
|
|
registries:
|
|
- gradle-plugin-portal
|
|
schedule:
|
|
interval: "weekly"
|
|
groups:
|
|
gradle:
|
|
patterns:
|
|
- "*"
|