Daz DeBoer
f464d5c9e5
Improve docs for dependency-graph
2023-07-10 10:23:31 -06:00
daz
cef72ff9e4
Use latest github-dependency-graph-gradle-plugin
2023-07-10 07:16:49 -06:00
Daz DeBoer
7a67f395d2
Add basic support for GitHub Dependency Graph ( #782 )
2023-07-08 04:57:02 +02:00
daz
bc190ca89a
Build outputs
2023-07-07 20:43:20 -06:00
daz
f01b48d89d
Do not attempt dependency graph on unsupported Gradle versions
2023-07-07 20:42:49 -06:00
daz
1e71bceb3f
Supply plugin portal URL directly
...
The 'gradlePluginPortal()' convenience isn't supported in older Gradle versions.
2023-07-07 20:42:49 -06:00
Daz DeBoer
9a4d99b236
Add initial docs for dependency-graph support
2023-07-07 20:42:49 -06:00
daz
33f9bc031c
Added action to clear deps for a correlator
2023-07-07 20:42:49 -06:00
daz
437bff62b6
Add basic test coverage for dependency graph
...
- Test workflow with dependency graph enabled
- Gradle test for init-script functionality
2023-07-07 20:42:49 -06:00
daz
c0186c5832
Replace spaces with underscore in job correlator
2023-07-07 20:42:49 -06:00
daz
ee7ca6ac9b
Remove defunct generate actions
2023-07-07 20:42:48 -06:00
daz
063cc1c708
Allow flexible use of dependency-graph support
...
Adds a 'dependency-graph' parameter that has 4 options:
1. 'disabled': no dependency graph files generated (the default)
2. 'generate': dependency graph files will be generated and saved as artifacts.
3. 'generate-and-submit': dependency graph files will be generated, saved as artifacts,
and submitted to the Dependency Submission API on job completion.
4. 'download-and-submit': any previously uploaded dependency graph artifacts will be downloaded
and submitted to the Dependency Submission API.
2023-07-07 20:42:48 -06:00
daz
820b228f28
Switch back to using published plugin
2023-07-07 20:42:48 -06:00
daz
d0ffeaa089
Reduce log level for debug message
2023-07-07 20:42:48 -06:00
daz
4c9c435d2f
Configure Gradle User Home for dependency-graph
...
Instead of requiring an action step to generate the graph, configure Gradle User Home
so that subsequent Gradle invocations can generate a graph. Any generated graph files
are uploaded as artifacts on job completion.
- Construct job.correlator from workflow/job/matrix
- Export job.correlator as an environment var
- Upload artifacts at job completion in post-action step
- Specify the location of dependency graph report
- Only apply dependency graph init script when explicitly enabled
2023-07-07 20:42:48 -06:00
daz
a6ad1901be
Copy dependency graph init script to Gradle Home
...
- Temporarily use a hard-coded plugin for convenience
2023-07-07 20:42:48 -06:00
daz
d7761f188f
Update prettier to v3.0.0
2023-07-08 04:40:54 +02:00
Daz DeBoer
92c37aaab7
Update dependencies ( #779 )
2023-07-08 04:12:58 +02:00
daz
1a6aca96f3
Build outputs
2023-07-07 19:56:01 -06:00
dependabot[bot]
90c9cfa90d
Bump tough-cookie and @azure/ms-rest-js
...
Removes [tough-cookie](https://github.com/salesforce/tough-cookie ). It's no longer used after updating ancestor dependency [@azure/ms-rest-js](https://github.com/Azure/ms-rest-js ). These dependencies need to be updated together.
Removes `tough-cookie`
Updates `@azure/ms-rest-js` from 2.6.6 to 2.7.0
- [Changelog](https://github.com/Azure/ms-rest-js/blob/master/Changelog.md )
- [Commits](https://github.com/Azure/ms-rest-js/commits )
---
updated-dependencies:
- dependency-name: tough-cookie
dependency-type: indirect
- dependency-name: "@azure/ms-rest-js"
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-07-07 19:56:01 -06:00
daz
35af09efd8
Update NPM dependencies
2023-07-07 19:56:00 -06:00
daz
00309f16a9
Use gradle-build-action@v2.5.1
2023-07-07 19:56:00 -06:00
daz
3273b6ada1
Update to Gradle 8.2
...
- Update all wrappers
- Update .tool-versions
- Update version to run unit tests
- Test init scripts on 8.0 and 8.X
2023-07-07 19:55:23 -06:00
Daz DeBoer
f807993b34
Configure grouped PRs for dependabot
2023-07-07 15:27:44 -06:00
daz
bde650d6f1
Update copyright notice
2023-06-30 08:57:49 -06:00
Daz DeBoer
40b6781dcd
Merge pull request #757 from gradle/dd/issue-756
...
Sanitize workflow name when generating cache key
2023-06-29 18:32:22 +02:00
daz
626d937994
Remove commas from workflow name
...
Commas are explicitly disallowed in cache keys, so remove any from
workflow name when generating cache key.
2023-06-29 10:01:14 -06:00
daz
6c3f1eadfe
Reproduce issue with comma in workflow name
2023-06-29 09:59:12 -06:00
daz
8e02c8272a
Build outputs
2023-06-28 12:24:28 -06:00
daz
f63cb02cfc
Bump development dependencies
2023-06-28 11:51:09 -06:00
daz
198484d871
Bump java dependencies in samples/tests
2023-06-28 11:48:23 -06:00
Daz DeBoer
fce96e0d6a
Merge pull request #740 from gradle/dd/dependency-graph-actions
...
Initial support for GitHub Dependency Submission
2023-06-28 19:38:14 +02:00
daz
75a86cfe02
Build outputs
2023-06-28 11:24:58 -06:00
daz
be413309fa
First cut at actions for dependency-graph
...
- Dependency graph init-script references published version of plugin jar.
- `dependency-graph-generate` action will:
- Provision Gradle if required
- Execute Gradle with dependency-graph plugin to generate graph JSON
- Upload dependency-graph JSON file as workflow artifact
- `dependency-graph-submit` action will:
- Download dependency-graph JSON artifact
- Submit the graph via the GitHub dependency submission API
2023-06-28 11:24:57 -06:00
Daz DeBoer
1b2daf5833
Merge pull request #734 from gradle/dd/input-params
...
Refactor in preparation for dependency-graph support
2023-06-06 18:52:31 +02:00
daz
4388b1f9e5
Build outputs
2023-06-06 10:51:48 -06:00
daz
07023d3e3e
Refactor input parameters
...
Moved reading of all input parameters into a common source: `input-params.ts`.
This centralized all input parameter reads, and allowed an improved implementation
of reading boolean parameters. In particular, the implementation now provides a default
value for a boolean input parameter that isn't declared for an action.
2023-06-06 10:47:56 -06:00
daz
c94d573317
Refactor action execution for reuse
...
Introducing new actions for the GitHub dependency graph will involve reuse of much of
the action infrastructure. This commit reorganises things a little to facilitate reuse.
2023-06-03 14:09:52 -06:00
daz
680037c65b
Bump Gradle Enterprise plugin version
2023-05-29 13:17:01 -06:00
daz
2bf6bc3646
Include workflow name in cache key
...
Fixes #699 by avoiding cache key collisions between jobs with the
same name in different workflows.
2023-05-23 14:59:12 -06:00
Daz DeBoer
631021bf98
Document the generate-job-summary options
...
Fixes #646
2023-05-23 14:56:51 -06:00
Daz DeBoer
d1c4012c0d
Merge pull request #719 from gradle/dd/dependency-updates
...
Update development dependencies
2023-05-23 22:25:34 +02:00
daz
c097126a28
Bump NPM development dependencies
2023-05-23 14:15:08 -06:00
daz
b4a540a61f
Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.15.0 to 2.15.1
2023-05-23 14:13:17 -06:00
daz
c9a87440e3
Bump org.gradle.enterprise plugin to 3.13.2
2023-05-23 14:11:15 -06:00
daz
d23c38fad3
Remove incorrect comment
2023-05-04 08:25:28 -06:00
daz
a810b86311
Update dependencies
...
- Bump string-argv from 0.3.1 to 0.3.2
- Bump patch-package from 6.5.1 to 7.0.0
- Bump @typescript-eslint/parser from 5.59.1 to 5.59.2
2023-05-02 14:58:36 -06:00
Daz DeBoer
7e48093f71
Attempt to resolve security alert
...
Testing if explicitly using `v2.4.2` will cause the alert to be resolved.
2023-05-01 13:36:49 -06:00
Daz DeBoer
12681a2972
Merge pull request #695 from gradle/dd/issue-626
...
Handle GE plugin applied in settingsEvaluated
2023-04-29 09:07:12 -06:00
dependabot[bot]
a8aa75965b
Bump org.junit.jupiter:junit-jupiter ( #693 )
...
Bumps [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit5 ) from 5.9.2 to 5.9.3.
- [Release notes](https://github.com/junit-team/junit5/releases )
- [Commits](https://github.com/junit-team/junit5/compare/r5.9.2...r5.9.3 )
---
updated-dependencies:
- dependency-name: org.junit.jupiter:junit-jupiter
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-29 09:05:25 -06:00
