[deps]: Update gradle/actions action to v5 (#1356)

renovate[bot] · web-flow · commit ef02a977eb4a · 2025-10-29T08:36:56.000-07:00
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [gradle/actions](https://redirect.github.com/gradle/actions) | action | major | `v4.1.0` -> `v5.0.0` | --- ### Release Notes <details> <summary>gradle/actions (gradle/actions)</summary> ### [`v5.0.0`](https://redirect.github.com/gradle/actions/releases/tag/v5.0.0) [Compare Source](https://redirect.github.com/gradle/actions/compare/v4.4.4...v5.0.0) #### What's Changed ##### Breaking Changes - Upgrade to node 24 by [@&#8203;amyu](https://redirect.github.com/amyu) in [#&#8203;721](https://redirect.github.com/gradle/actions/pull/721) Make sure your runner is updated to this version or newer to use this release. v2.327.1 [Release Notes](https://redirect.github.com/actions/runner/releases/tag/v2.327.1) ##### Dependency upgrades - Bump the github-actions group across 1 directory with 2 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;748](https://redirect.github.com/gradle/actions/pull/748) **Full Changelog**: <gradle/actions@v4...v5.0.0> ### [`v4.4.4`](https://redirect.github.com/gradle/actions/releases/tag/v4.4.4) [Compare Source](https://redirect.github.com/gradle/actions/compare/v4.4.3...v4.4.4) #### What's Changed - Bump the github-actions group across 2 directories with 3 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;726](https://redirect.github.com/gradle/actions/pull/726) - Regenerating package lock by [@&#8203;cdsap](https://redirect.github.com/cdsap) in [#&#8203;729](https://redirect.github.com/gradle/actions/pull/729) - Update known wrapper checksums by [@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot] in [#&#8203;730](https://redirect.github.com/gradle/actions/pull/730) - Bump the github-actions group across 1 directory with 3 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;735](https://redirect.github.com/gradle/actions/pull/735) - Bump the gradle group across 3 directories with 1 update by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;734](https://redirect.github.com/gradle/actions/pull/734) - Bump the npm-dependencies group in /sources with 4 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;733](https://redirect.github.com/gradle/actions/pull/733) - Bump references to Develocity Gradle plugin from 4.1.1 to 4.2 by [@&#8203;bot-githubaction](https://redirect.github.com/bot-githubaction) in [#&#8203;736](https://redirect.github.com/gradle/actions/pull/736) - Handle gracefully parse errors in checksum file by [@&#8203;jprinet](https://redirect.github.com/jprinet) in [#&#8203;737](https://redirect.github.com/gradle/actions/pull/737) - Bump Gradle Wrapper from 9.0.0 to 9.1.0 in /.github/workflow-samples/kotlin-dsl by [@&#8203;bot-githubaction](https://redirect.github.com/bot-githubaction) in [#&#8203;742](https://redirect.github.com/gradle/actions/pull/742) - Bump Gradle Wrapper from 9.0.0 to 9.1.0 in /.github/workflow-samples/java-toolchain by [@&#8203;bot-githubaction](https://redirect.github.com/bot-githubaction) in [#&#8203;741](https://redirect.github.com/gradle/actions/pull/741) - Bump Gradle Wrapper from 9.0.0 to 9.1.0 in /.github/workflow-samples/groovy-dsl by [@&#8203;bot-githubaction](https://redirect.github.com/bot-githubaction) in [#&#8203;740](https://redirect.github.com/gradle/actions/pull/740) - Bump Gradle Wrapper from 9.0.0 to 9.1.0 in /.github/workflow-samples/gradle-plugin by [@&#8203;bot-githubaction](https://redirect.github.com/bot-githubaction) in [#&#8203;739](https://redirect.github.com/gradle/actions/pull/739) - Bump Gradle Wrapper from 9.0.0 to 9.1.0 in /sources/test/init-scripts by [@&#8203;bot-githubaction](https://redirect.github.com/bot-githubaction) in [#&#8203;738](https://redirect.github.com/gradle/actions/pull/738) - Update known wrapper checksums by [@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot] in [#&#8203;743](https://redirect.github.com/gradle/actions/pull/743) - Bump com.google.guava:guava from 33.4.8-jre to 33.5.0-jre in /.github/workflow-samples/kotlin-dsl in the gradle group across 1 directory by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;746](https://redirect.github.com/gradle/actions/pull/746) - Bump the npm-dependencies group in /sources with 5 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;745](https://redirect.github.com/gradle/actions/pull/745) **Full Changelog**: <gradle/actions@v4...v4.4.4> ### [`v4.4.3`](https://redirect.github.com/gradle/actions/releases/tag/v4.4.3) [Compare Source](https://redirect.github.com/gradle/actions/compare/v4.4.2...v4.4.3) ##### What's Changed - Adapt tests to future new Build Scan publication message by [@&#8203;alextu](https://redirect.github.com/alextu) in [#&#8203;708](https://redirect.github.com/gradle/actions/pull/708) - Add missing Gradle version input to setup-gradle by [@&#8203;jprinet](https://redirect.github.com/jprinet) in [#&#8203;713](https://redirect.github.com/gradle/actions/pull/713) - Bump the github-actions group across 2 directories with 4 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;710](https://redirect.github.com/gradle/actions/pull/710) - Bump references to Develocity Gradle plugin from 4.1 to 4.1.1 by [@&#8203;bot-githubaction](https://redirect.github.com/bot-githubaction) in [#&#8203;712](https://redirect.github.com/gradle/actions/pull/712) - Update known wrapper checksums by [@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot] in [#&#8203;709](https://redirect.github.com/gradle/actions/pull/709) - Bump the npm-dependencies group across 1 directory with 4 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;711](https://redirect.github.com/gradle/actions/pull/711) - Do not run setup-gradle post action if workflow is cancelled by [@&#8203;jprinet](https://redirect.github.com/jprinet) in [#&#8203;716](https://redirect.github.com/gradle/actions/pull/716) - Bump the github-actions group across 2 directories with 2 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;715](https://redirect.github.com/gradle/actions/pull/715) - Bump the npm-dependencies group across 1 directory with 3 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;720](https://redirect.github.com/gradle/actions/pull/720) - Bump github/codeql-action from 3.29.11 to 3.30.0 in the github-actions group across 1 directory by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;719](https://redirect.github.com/gradle/actions/pull/719) - Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.19.2 to 2.20.0 in /sources/test/init-scripts in the gradle group across 1 directory by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;718](https://redirect.github.com/gradle/actions/pull/718) - Update known wrapper checksums by [@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot] in [#&#8203;723](https://redirect.github.com/gradle/actions/pull/723) - Bump the npm-dependencies group in /sources with 5 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;725](https://redirect.github.com/gradle/actions/pull/725) **Full Changelog**: <gradle/actions@v4.4.2...v4.4.3> ### [`v4.4.2`](https://redirect.github.com/gradle/actions/releases/tag/v4.4.2) [Compare Source](https://redirect.github.com/gradle/actions/compare/v4.4.1...v4.4.2) This patch release updates a bunch of dependency versions ##### What's Changed - Bump github/codeql-action from 3.29.4 to 3.29.5 in the github-actions group across 1 directory ([#&#8203;703](https://redirect.github.com/gradle/actions/pull/703)) - Bumps the npm-dependencies group in /sources with 4 updates ([#&#8203;702](https://redirect.github.com/gradle/actions/pull/702)) - Upgrade to gradle 9 in workflows and tests ([#&#8203;704](https://redirect.github.com/gradle/actions/pull/704)) - Update known wrapper checksums ([#&#8203;701](https://redirect.github.com/gradle/actions/pull/701)) - Bump Gradle Wrapper from 8.14.3 to 9.0.0 in /.github/workflow-samples/gradle-plugin ([#&#8203;695](https://redirect.github.com/gradle/actions/pull/695)) - Bump Gradle Wrapper from 8.14.3 to 9.0.0 in /.github/workflow-samples/groovy-dsl ([#&#8203;696](https://redirect.github.com/gradle/actions/pull/696)) - Bump Gradle Wrapper from 8.14.3 to 9.0.0 in /.github/workflow-samples/java-toolchain ([#&#8203;697](https://redirect.github.com/gradle/actions/pull/697)) - Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.19.1 to 2.19.2 in /sources/test/init-scripts in the gradle group across 1 directory ([#&#8203;693](https://redirect.github.com/gradle/actions/pull/693)) - Bump github/codeql-action from 3.29.0 to 3.29.4 in the github-actions group across 1 directory ([#&#8203;691](https://redirect.github.com/gradle/actions/pull/691)) - Bump the npm-dependencies group in /sources with 5 updates ([#&#8203;692](https://redirect.github.com/gradle/actions/pull/692)) - Bump references to Develocity Gradle plugin from 4.0.2 to 4.1 ([#&#8203;685](https://redirect.github.com/gradle/actions/pull/685)) - Bump the npm-dependencies group across 1 directory with 8 updates ([#&#8203;684](https://redirect.github.com/gradle/actions/pull/684)) - Run Gradle release candidate tests with JDK 17 ([#&#8203;690](https://redirect.github.com/gradle/actions/pull/690)) - Update Develocity npm agent to version 1.0.1 ([#&#8203;687](https://redirect.github.com/gradle/actions/pull/687)) - Update known wrapper checksums ([#&#8203;688](https://redirect.github.com/gradle/actions/pull/688)) - Bump Gradle Wrapper from 8.14.2 to 8.14.3 in /.github/workflow-samples/kotlin-dsl ([#&#8203;683](https://redirect.github.com/gradle/actions/pull/683) - Bump the github-actions group across 1 directory with 3 updates ([#&#8203;675](https://redirect.github.com/gradle/actions/pull/675)) - Bump the gradle group across 3 directories with 2 updates ([#&#8203;674](https://redirect.github.com/gradle/actions/pull/674)) - Bump Gradle Wrapper from 8.14.2 to 8.14.3 in /sources/test/init-scripts ([#&#8203;679](https://redirect.github.com/gradle/actions/pull/679)) - Bump Gradle Wrapper from 8.14.2 to 8.14.3 in /.github/workflow-samples/java-toolchain ([#&#8203;682](https://redirect.github.com/gradle/actions/pull/682)) - Bump Gradle Wrapper from 8.14.2 to 8.14.3 in /.github/workflow-samples/groovy-dsl ([#&#8203;681](https://redirect.github.com/gradle/actions/pull/681)) - Bump Gradle Wrapper from 8.14.2 to 8.14.3 in /.github/workflow-samples/gradle-plugin ([#&#8203;680](https://redirect.github.com/gradle/actions/pull/680)) - Update known wrapper checksums ([#&#8203;676](https://redirect.github.com/gradle/actions/pull/676)) **Full Changelog**: <gradle/actions@v4.4.1...v4.4.2> ### [`v4.4.1`](https://redirect.github.com/gradle/actions/releases/tag/v4.4.1) [Compare Source](https://redirect.github.com/gradle/actions/compare/v4.4.0...v4.4.1) This patch release fixes a bug in Develocity Injection with a custom plugin repository. The `gradle-plugin-repository-*` action parameters were not being correctly mapped to environment variables that are read by the Develocity Injection init script. This issue has been fixed by setting the correct environment variables: - `gradle-plugin-repository-url` is mapped to `DEVELOCITY_INJECTION_PLUGIN_REPOSITORY_URL` - `gradle-plugin-repository-username` is mapped to `DEVELOCITY_INJECTION_PLUGIN_REPOSITORY_USERNAME` - `gradle-plugin-repository-password` is mapped to `DEVELOCITY_INJECTION_PLUGIN_REPOSITORY_PASSWORD` Additionally, these parameters can now be used to configure a custom plugin repository for the GitHub Dependency Graph Gradle Plugin, required for dependency submission. ##### What's Changed - Dependency updates by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;667](https://redirect.github.com/gradle/actions/pull/667) - Fix plugin repository env vars by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;669](https://redirect.github.com/gradle/actions/pull/669) **Full Changelog**: <gradle/actions@v4.4.0...v4.4.1> ### [`v4.4.0`](https://redirect.github.com/gradle/actions/releases/tag/v4.4.0) [Compare Source](https://redirect.github.com/gradle/actions/compare/v4.3.1...v4.4.0) This release updates 2 downstream components: - Develocity injection has been updated to [v2.0](https://redirect.github.com/gradle/develocity-ci-injection/releases/tag/v2.0) - Some environment variables related to Develocity injection have been renamed. All vars now being with `DEVELOCITY_INJECTION_`. Check [the docs](https://redirect.github.com/gradle/actions/blob/main/docs/setup-gradle.md#configuring-develocity-injection) for more details. - Dependency-graph plugin has been updated to [v1.4.0](https://redirect.github.com/gradle/github-dependency-graph-gradle-plugin/releases/tag/v1.4.0) - The 'detector' values included in the generated graph can now be configured via environment variables. ##### What's Changed - Update develocity-injection init script to v1.3 by [@&#8203;bot-githubaction](https://redirect.github.com/bot-githubaction) in [#&#8203;592](https://redirect.github.com/gradle/actions/pull/592) - Update develocity-injection init script to v2.0 by [@&#8203;bot-githubaction](https://redirect.github.com/bot-githubaction) in [#&#8203;593](https://redirect.github.com/gradle/actions/pull/593) - \[StepSecurity] ci: Harden GitHub Actions by [@&#8203;step-security-bot](https://redirect.github.com/step-security-bot) in [#&#8203;597](https://redirect.github.com/gradle/actions/pull/597) - Use v1.4.0 of dependency graph plugin by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;638](https://redirect.github.com/gradle/actions/pull/638) ##### New Contributors - [@&#8203;step-security-bot](https://redirect.github.com/step-security-bot) made their first contribution in [#&#8203;597](https://redirect.github.com/gradle/actions/pull/597) **Full Changelog**: <gradle/actions@v4.3.1...v4.4.0> ### [`v4.3.1`](https://redirect.github.com/gradle/actions/releases/tag/v4.3.1) [Compare Source](https://redirect.github.com/gradle/actions/compare/v4.3.0...v4.3.1) This release fixes a couple of minor issues, as well as keeping dependencies up to date. #### Fixed issues - The develocity-allow-untrusted-server parameter should be honoured when fetching short-lived access tokens [#&#8203;583](https://redirect.github.com/gradle/actions/issues/583) - Build summary may incorrectly report build success [#&#8203;415](https://redirect.github.com/gradle/actions/issues/415) #### What's Changed - Update develocity-injection init script to v1.1.1 by [@&#8203;bot-githubaction](https://redirect.github.com/bot-githubaction) in [#&#8203;545](https://redirect.github.com/gradle/actions/pull/545) - Bump the github-actions group across 2 directories with 3 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;547](https://redirect.github.com/gradle/actions/pull/547) - Bump the npm-dependencies group in /sources with 2 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;548](https://redirect.github.com/gradle/actions/pull/548) - Update develocity-injection init script to v1.2 by [@&#8203;bot-githubaction](https://redirect.github.com/bot-githubaction) in [#&#8203;550](https://redirect.github.com/gradle/actions/pull/550) - Bump the github-actions group across 1 directory with 2 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;552](https://redirect.github.com/gradle/actions/pull/552) - Bump the npm-dependencies group across 1 directory with 5 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;558](https://redirect.github.com/gradle/actions/pull/558) - Update known wrapper checksums by [@&#8203;github-actions](https://redirect.github.com/github-actions) in [#&#8203;560](https://redirect.github.com/gradle/actions/pull/560) - Bump references to Develocity Gradle plugin from 3.19.1 to 3.19.2 by [@&#8203;bot-githubaction](https://redirect.github.com/bot-githubaction) in [#&#8203;561](https://redirect.github.com/gradle/actions/pull/561) - Catch more build failures in job summary by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;571](https://redirect.github.com/gradle/actions/pull/571) - Scope captured build failures by [@&#8203;erichaagdev](https://redirect.github.com/erichaagdev) in [#&#8203;574](https://redirect.github.com/gradle/actions/pull/574) - Ignore SSL certificate validation when fetching Develocity short-lived access token if `develocity-allow-untrusted-server` is enabled by [@&#8203;remcomokveld](https://redirect.github.com/remcomokveld) in [#&#8203;575](https://redirect.github.com/gradle/actions/pull/575) - Dependency updates by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;579](https://redirect.github.com/gradle/actions/pull/579) - Bump com.google.guava:guava from 33.4.5-jre to 33.4.6-jre in /.github/workflow-samples/kotlin-dsl in the gradle group across 1 directory by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;580](https://redirect.github.com/gradle/actions/pull/580) - Bump the github-actions group across 2 directories with 2 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;582](https://redirect.github.com/gradle/actions/pull/582) #### New Contributors - [@&#8203;erichaagdev](https://redirect.github.com/erichaagdev) made their first contribution in [#&#8203;574](https://redirect.github.com/gradle/actions/pull/574) - [@&#8203;remcomokveld](https://redirect.github.com/remcomokveld) made their first contribution in [#&#8203;575](https://redirect.github.com/gradle/actions/pull/575) **Full Changelog**: <gradle/actions@v4.3.0...v4.3.1> ### [`v4.3.0`](https://redirect.github.com/gradle/actions/releases/tag/v4.3.0) [Compare Source](https://redirect.github.com/gradle/actions/compare/v4.2.2...v4.3.0) This release brings some significant improvements to cache-cleanup and dependency-submission: - Cleanup cache entries written by newly released Gradle versions ([#&#8203;436](https://redirect.github.com/gradle/actions/issues/436)) - Use existing Gradle wrapper distribution for cache-cleanup where possible ([#&#8203;515](https://redirect.github.com/gradle/actions/issues/515)) - Automatically save each dependency-graph that is submitted by `dependency-submission` ([#&#8203;519](https://redirect.github.com/gradle/actions/issues/519)) - Fix deprecation warnings emitted by Gradle 8.12+ when: - Using `build-scan-publish: true` or Develocity injection ([#&#8203;543](https://redirect.github.com/gradle/actions/issues/543)) - Using dependency-submission with an authenticated plugin repository with Gradle ([#&#8203;541](https://redirect.github.com/gradle/actions/issues/541)) - Fix warning when using toolchain support with Gradle 7.x ([#&#8203;511](https://redirect.github.com/gradle/actions/issues/511)) #### What's Changed - Update known wrapper checksums by [@&#8203;github-actions](https://redirect.github.com/github-actions) in [#&#8203;493](https://redirect.github.com/gradle/actions/pull/493) - Fix typo in `cache-reporting.ts` by [@&#8203;SimonMarquis](https://redirect.github.com/SimonMarquis) in [#&#8203;492](https://redirect.github.com/gradle/actions/pull/492) - Bump Gradle Wrappers by [@&#8203;github-actions](https://redirect.github.com/github-actions) in [#&#8203;499](https://redirect.github.com/gradle/actions/pull/499) - Bump the github-actions group across 3 directories with 7 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;510](https://redirect.github.com/gradle/actions/pull/510) - Bump the npm-dependencies group across 1 directory with 6 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;512](https://redirect.github.com/gradle/actions/pull/512) - Clean-up missing imports for tests by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;513](https://redirect.github.com/gradle/actions/pull/513) - Bump the npm-dependencies group in /sources with 3 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;521](https://redirect.github.com/gradle/actions/pull/521) - Add npm build scans by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;517](https://redirect.github.com/gradle/actions/pull/517) - Avoid env-var interpolation in toolchains.xml by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;518](https://redirect.github.com/gradle/actions/pull/518) - Avoid saving build-results for cache cleanup by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;520](https://redirect.github.com/gradle/actions/pull/520) - Save dependency graph as workflow artifact by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;522](https://redirect.github.com/gradle/actions/pull/522) - Update to CCUDGP 2.1 by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;524](https://redirect.github.com/gradle/actions/pull/524) - Bump references to Develocity Gradle plugin from 3.19 to 3.19.1 by [@&#8203;bot-githubaction](https://redirect.github.com/bot-githubaction) in [#&#8203;527](https://redirect.github.com/gradle/actions/pull/527) - Choose best Gradle version to use for cache cleanup by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;526](https://redirect.github.com/gradle/actions/pull/526) - Uppercase cache-encryption-key by [@&#8203;Goooler](https://redirect.github.com/Goooler) in [#&#8203;528](https://redirect.github.com/gradle/actions/pull/528) - Attempt to use gradle wrapper for cache cleanup by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;525](https://redirect.github.com/gradle/actions/pull/525) - Document GRADLE\_ACTIONS\_SKIP\_BUILD\_RESULT\_CAPTURE by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;529](https://redirect.github.com/gradle/actions/pull/529) - Update known wrapper checksums by [@&#8203;github-actions](https://redirect.github.com/github-actions) in [#&#8203;509](https://redirect.github.com/gradle/actions/pull/509) - Bump Gradle Wrappers by [@&#8203;github-actions](https://redirect.github.com/github-actions) in [#&#8203;535](https://redirect.github.com/gradle/actions/pull/535) - Bump the github-actions group across 2 directories with 2 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;538](https://redirect.github.com/gradle/actions/pull/538) - Update undici to resolve vulnerability by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;536](https://redirect.github.com/gradle/actions/pull/536) - Bump the npm-dependencies group across 1 directory with 2 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;539](https://redirect.github.com/gradle/actions/pull/539) - Update docs for dependency review by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;540](https://redirect.github.com/gradle/actions/pull/540) - Fix space assignment deprecations in init-scripts by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;542](https://redirect.github.com/gradle/actions/pull/542) #### New Contributors - [@&#8203;SimonMarquis](https://redirect.github.com/SimonMarquis) made their first contribution in [#&#8203;492](https://redirect.github.com/gradle/actions/pull/492) **Full Changelog**: <gradle/actions@v4.2.2...v4.3.0> ### [`v4.2.2`](https://redirect.github.com/gradle/actions/releases/tag/v4.2.2) [Compare Source](https://redirect.github.com/gradle/actions/compare/v4.2.1...v4.2.2) This patch release updates a bunch of dependency versions and fixes a deprecation warning emitted with Gradle 8.12. #### What's Changed - Bump cross-spawn in /sources by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;455](https://redirect.github.com/gradle/actions/pull/455) - Update known wrapper checksums by [@&#8203;github-actions](https://redirect.github.com/github-actions) in [#&#8203;462](https://redirect.github.com/gradle/actions/pull/462) - Bump the github-actions group across 1 directory with 2 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;474](https://redirect.github.com/gradle/actions/pull/474) - Update [@&#8203;actions/cache4](https://redirect.github.com/actions/cache4).0.0 and patch by [@&#8203;amyu](https://redirect.github.com/amyu) in [#&#8203;479](https://redirect.github.com/gradle/actions/pull/479) - Update develocity-injection init script to v1.1 by [@&#8203;bot-githubaction](https://redirect.github.com/bot-githubaction) in [#&#8203;471](https://redirect.github.com/gradle/actions/pull/471) - Dependency updates by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;480](https://redirect.github.com/gradle/actions/pull/480) - Bump references to Develocity Gradle plugin from 3.18.2 to 3.19 by [@&#8203;bot-githubaction](https://redirect.github.com/bot-githubaction) in [#&#8203;483](https://redirect.github.com/gradle/actions/pull/483) - Update known wrapper checksums by [@&#8203;github-actions](https://redirect.github.com/github-actions) in [#&#8203;484](https://redirect.github.com/gradle/actions/pull/484) - Bump the gradle group across 1 directory with 2 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot) in [#&#8203;485](https://redirect.github.com/gradle/actions/pull/485) - Attempt to limit failures in wrapper-validation tests by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;490](https://redirect.github.com/gradle/actions/pull/490) - Update known wrapper checksums by [@&#8203;github-actions](https://redirect.github.com/github-actions) in [#&#8203;488](https://redirect.github.com/gradle/actions/pull/488) - Remove deprecation warning from init-script by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;491](https://redirect.github.com/gradle/actions/pull/491) - Use latest dependency-graph plugin by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;489](https://redirect.github.com/gradle/actions/pull/489) #### New Contributors - [@&#8203;sebastian-dyroff](https://redirect.github.com/sebastian-dyroff) made their first contribution in [#&#8203;465](https://redirect.github.com/gradle/actions/pull/465) - [@&#8203;amyu](https://redirect.github.com/amyu) made their first contribution in [#&#8203;479](https://redirect.github.com/gradle/actions/pull/479) **Full Changelog**: <gradle/actions@v4.2.1...v4.2.2> ### [`v4.2.1`](https://redirect.github.com/gradle/actions/releases/tag/v4.2.1) [Compare Source](https://redirect.github.com/gradle/actions/compare/v4.2.0...v4.2.1) This patch release fixes some issues with Develocity and Build Scan integration: - Build scan links not captured in project using plugin com.gradle.enteprise:3.18.2 ([#&#8203;449](https://redirect.github.com/gradle/actions/issues/449)) - Enabling `build-scan-publish` causes some Develocity injection parameters to be ignored ([#&#8203;447](https://redirect.github.com/gradle/actions/issues/447)) - Setting `develocity-ccud-plugin-version` parameter is ignored ([#&#8203;446](https://redirect.github.com/gradle/actions/issues/446)) #### What's Changed - Do not fail wrapper-validation on filename with illegal characters [#&#8203;438](https://redirect.github.com/gradle/actions/issues/438) - Bump references to Develocity Gradle plugin from 3.18.1 to 3.18.2 by [@&#8203;bot-githubaction](https://redirect.github.com/bot-githubaction) in [#&#8203;441](https://redirect.github.com/gradle/actions/pull/441) - Bump Gradle from 8.10.2 to 8.11 in [#&#8203;443](https://redirect.github.com/gradle/actions/pull/443) - Develocity injection fixes in [#&#8203;448](https://redirect.github.com/gradle/actions/pull/448) - Adapt build-result-capture script for GE plugin 3.17+ in [#&#8203;450](https://redirect.github.com/gradle/actions/pull/450) - ci: add scorecard by [@&#8203;nitrocode](https://redirect.github.com/nitrocode) in [#&#8203;384](https://redirect.github.com/gradle/actions/pull/384) #### New Contributors - [@&#8203;nitrocode](https://redirect.github.com/nitrocode) made their first contribution in [#&#8203;384](https://redirect.github.com/gradle/actions/pull/384) **Full Changelog**: <gradle/actions@v4.2.0...v4.2.1> ### [`v4.2.0`](https://redirect.github.com/gradle/actions/releases/tag/v4.2.0) [Compare Source](https://redirect.github.com/gradle/actions/compare/v4.1.0...v4.2.0) This release [fixes a bug](https://redirect.github.com/gradle/actions/issues/431) that prevents cache-cleanup from working with Gradle 8.11. A number of improvements to cache reporting are also included. #### What's Changed - Fix cache-cleanup with Gradle 8.11 ([#&#8203;430](https://redirect.github.com/gradle/actions/pull/430)) - Update known wrapper checksums to include Gradle 8.11 ([#&#8203;424](https://redirect.github.com/gradle/actions/pull/424)) - Include cache save/restore times in Job Summary ([#&#8203;389](https://redirect.github.com/gradle/actions/pull/389)) - Improve cache logging by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) ([#&#8203;392](https://redirect.github.com/gradle/actions/pull/392)) - Correctly handle multiline patterns for extracted entries ([#&#8203;393](https://redirect.github.com/gradle/actions/pull/393)) - Numerous dependency updates **Full Changelog**: <gradle/actions@v4.1.0...v4.2.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/bitwarden/sdk-sm).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
diff --git a/.github/workflows/publish-java.yml b/.github/workflows/publish-java.yml
@@ -108,7 +108,7 @@ jobs:
           java-version: 17
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@d156388eb19639ec20ade50009f3d199ce1e2808 # v4.1.0
+        uses: gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v5.0.0
 
       - name: Download Java SDK Build
         uses: bitwarden/gh-actions/download-artifacts@main
