daz
72abd931ce
Set workflow permissions where required
2024-01-01 17:50:40 -07:00
daz
a4dabb3a70
Adapt dependency-graph support for new artifact API
...
- Don't upload artifacts when using 'generate-and-submit'
- New option 'generate-and-upload' to be used with 'download-and-submit'
- Use Artifact API for downloading in the same and different workflow
2023-12-23 21:24:11 -07:00
Daz DeBoer
444c20baf7
Test multiple dependency graphs on all os's
2023-09-21 18:22:31 +02:00
dependabot[bot]
5e3952da92
Bump the github-actions group with 2 updates
...
Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout ) and [gradle/gradle-build-action](https://github.com/gradle/gradle-build-action ).
Updates `actions/checkout` from 3 to 4
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
Updates `gradle/gradle-build-action` from 2.7.1 to 2.8.0
- [Release notes](https://github.com/gradle/gradle-build-action/releases )
- [Commits](https://github.com/gradle/gradle-build-action/compare/v2.7.1...v2.8.0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: gradle/gradle-build-action
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-09-21 16:35:57 +02:00
Daz DeBoer
ed940a329a
Fix name of test dependency-graph workflow
2023-09-21 08:19:49 -06:00
daz
9e58f8b1de
Add dependency-graph-file as step output
...
Fixes #804
2023-07-24 08:37:14 -06:00
daz
9f977db2d8
Update to latest plugin version
2023-07-17 15:12:30 -06:00
daz
b69de5f2a9
Support multiple invocations in dependency-graph init script
...
If an existing dependency graph file is present for the configured job correlator,
we now generate a unique correlator value for the invocation. This allows the action
to submit dependency snapshots for a series of Gradle invocations within the same Job.
This commit updates to `github-dependency-graph-gradle-plugin@v0.0.6`, which reduces
redundancy in the mapping of resolved Gradle dependencies to the GitHub Dependency Graph.
2023-07-15 22:33:31 -06:00
daz
437bff62b6
Add basic test coverage for dependency graph
...
- Test workflow with dependency graph enabled
- Gradle test for init-script functionality
2023-07-07 20:42:49 -06:00