slachiewicz opened a new pull request, #345:
URL: https://github.com/apache/maven-gh-actions-shared/pull/345

   Stacked on #344.
   
   `setup-java`'s `cache: 'maven'` restores only an exact match on the hash of 
every `pom.xml`, so any pull request or dependency bump that changes a POM 
started from an empty local repository and downloaded everything. The Maven 
repository is now cached with `actions/cache` directly: the key is still the 
POM hash, and a `maven-repository-<os>-<arch>-` restore key falls back to the 
newest entry the branch may read, normally the default branch's. A build that 
restored from the fallback saves under its own key when #344's policy allows 
it, and only after the build succeeded.
   
   The new key prefix also leaves behind the `setup-java-<os>-maven-` entries 
that Release Drafter overwrote with a 2 MB stub (#343).
   
   Verified: none yet beyond `actionlint` and `zizmor`, whose findings match 
`v5`; this branch's own push build exercises the restore path.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to