solrbot opened a new pull request, #4358: URL: https://github.com/apache/solr/pull/4358
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [gradle/actions](https://redirect.github.com/gradle/actions) | action | major | `v5.0.2` -> `v6.1.0` | --- ### Release Notes <details> <summary>gradle/actions (gradle/actions)</summary> ### [`v6.1.0`](https://redirect.github.com/gradle/actions/releases/tag/v6.1.0) [Compare Source](https://redirect.github.com/gradle/actions/compare/v6.0.1...v6.1.0) ##### New: Basic Cache Provider A new MIT-licensed **Basic Caching** provider is now available as an alternative to the proprietary **Enhanced Caching** provided by `gradle-actions-caching`. Choose Basic Caching by setting `cache-provider: basic` on `setup-gradle` or `dependency-submission` actions. - Built on `@actions/cache` -- fully open source - Caches `~/.gradle/caches` and `~/.gradle/wrapper` directories - Cache key derived from build files (`*.gradle*`, `gradle-wrapper.properties`, etc.) - Clean cache on build file changes (no restore keys, preventing stale entry accumulation) **Limitations vs Enhanced Caching:** No cache cleanup, no deduplication of cached content, cached content is fixed unless build files change. ##### Revamped Licensing & Distribution Documentation - New **DISTRIBUTION.md** documents the licensing of each component (particularly Basic Caching vs Enhanced Caching) - Simplified licensing notices in README, docs, and runtime log output - Clear usage tiers: Enhanced Caching is free for public repos and in Free Preview for private repos ##### What's Changed - Use a unique cache entry for wrapper-validation test by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​921](https://redirect.github.com/gradle/actions/pull/921) - Update Dependencies by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​922](https://redirect.github.com/gradle/actions/pull/922) - Update dependencies and resolve npm vulnerabilities by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​933](https://redirect.github.com/gradle/actions/pull/933) - Add open-source 'basic' cache provider and revamp licensing documentation by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​930](https://redirect.github.com/gradle/actions/pull/930) - Restructure caching documentation for basic and enhanced providers by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​934](https://redirect.github.com/gradle/actions/pull/934) **Full Changelog**: <https://github.com/gradle/actions/compare/v6.0.1...v6.1.0> ### [`v6.0.1`](https://redirect.github.com/gradle/actions/releases/tag/v6.0.1) [Compare Source](https://redirect.github.com/gradle/actions/compare/v6.0.0...v6.0.1) > \[!IMPORTANT] > The release of `gradle/actions@v6` contains important changes to the license terms. More details in [this blog post](https://blog.gradle.org/github-actions-for-gradle-v6). > **TL;DR**: By upgrading to v6, you accept the [Terms of Use](https://gradle.com/legal/terms-of-use/) for the `gradle-actions-caching` component. ##### Summary The [license changes in v6](https://blog.gradle.org/github-actions-for-gradle-v6) introduced a `gradle-actions-caching` license notice that is printed in logs and in each job summary. With this release, the license notice will be muted if build-scan terms have been accepted, or if a Develocity access key is provided. ##### What's Changed - Bump actions used in docs by [@​Goooler](https://redirect.github.com/Goooler) in [#​792](https://redirect.github.com/gradle/actions/pull/792) - Add typing information for use by typesafegithub by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​910](https://redirect.github.com/gradle/actions/pull/910) - Mute license warning when terms are accepted by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​911](https://redirect.github.com/gradle/actions/pull/911) - Mention explicit license acceptance in notice by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​912](https://redirect.github.com/gradle/actions/pull/912) - Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.21.1 to 2.21.2 in /sources/test/init-scripts in the gradle group across 1 directory by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​907](https://redirect.github.com/gradle/actions/pull/907) **Full Changelog**: <https://github.com/gradle/actions/compare/v6.0.0...v6.0.1> ### [`v6.0.0`](https://redirect.github.com/gradle/actions/releases/tag/v6.0.0) [Compare Source](https://redirect.github.com/gradle/actions/compare/v5.0.2...v6.0.0) > \[!IMPORTANT] > The release of `gradle/actions@v6` contains important changes to the license terms. More details in [this blog post](https://blog.gradle.org/github-actions-for-gradle-v6). > **TL;DR**: By upgrading to v6, you accept the [Terms of Use](https://gradle.com/legal/terms-of-use/) for the `gradle-actions-caching` component. ##### Summary - Caching functionality of 'gradle-actions' has been extracted into a separate `gradle-actions-caching` library, and is no longer open-source. See [this blog post](https://blog.gradle.org/github-actions-for-gradle-v6) for more context. - Existing, rudimentary, configuration-cache support has been removed, pending a fully functional implementation in `gradle-actions-caching`. - Dependencies updated to address security vulnerabilities > \[!IMPORTANT] > > #### Licensing notice > > The caching functionality in \`gradle-actions\` has been extracted into \`gradle-actions-caching\`, a proprietary commercial component that is not covered by the MIT License. > The bundled \`gradle-actions-caching\` component is licensed and governed by a separate license, available at <https://gradle.com/legal/terms-of-use/>. > > The \`gradle-actions-caching\` component is used only when caching is enabled and is not loaded or used when caching is disabled. > > Use of the \`gradle-actions-caching\` component is subject to a separate license, available at <https://gradle.com/legal/terms-of-use/>. > If you do not agree to these license terms, do not use the \`gradle-actions-caching\` component. ##### What's Changed - Bump the npm-dependencies group in /sources with 2 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​866](https://redirect.github.com/gradle/actions/pull/866) - Update known wrapper checksums by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​868](https://redirect.github.com/gradle/actions/pull/868) - Dependency updates by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​876](https://redirect.github.com/gradle/actions/pull/876) - Update known wrapper checksums by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​878](https://redirect.github.com/gradle/actions/pull/878) - Bump [@​types/node](https://redirect.github.com/types/node) from 25.3.3 to 25.3.5 in /sources in the npm-dependencies group across 1 directory by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​877](https://redirect.github.com/gradle/actions/pull/877) - Bump the github-actions group across 3 directories with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​867](https://redirect.github.com/gradle/actions/pull/867) - Update known wrapper checksums by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​881](https://redirect.github.com/gradle/actions/pull/881) - Bump the npm-dependencies group in /sources with 6 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​879](https://redirect.github.com/gradle/actions/pull/879) - Bump the github-actions group across 3 directories with 5 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​880](https://redirect.github.com/gradle/actions/pull/880) - Remove configuration-cache support by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​884](https://redirect.github.com/gradle/actions/pull/884) - Extract caching logic into a separate `gradle-actions-caching` component by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​885](https://redirect.github.com/gradle/actions/pull/885) - Update gradle-actions-caching library to v0.3.0 by [@​bot-githubaction](https://redirect.github.com/bot-githubaction) in [#​899](https://redirect.github.com/gradle/actions/pull/899) - Avoid windows shutdown bug by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​900](https://redirect.github.com/gradle/actions/pull/900) - Dependency updates by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​905](https://redirect.github.com/gradle/actions/pull/905) - Fix critical and high npm vulnerabilities by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​904](https://redirect.github.com/gradle/actions/pull/904) - Fix rendering of job-disabled message by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​909](https://redirect.github.com/gradle/actions/pull/909) **Full Changelog**: <https://github.com/gradle/actions/compare/v5.0.2...v6.0.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Only on Sunday ( * * * * 0 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. â™» **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/solrbot/renovate-github-action) <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS44Mi4xMCIsInVwZGF0ZWRJblZlciI6IjQxLjgyLjEwIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJleGVtcHQtc3RhbGUiXX0=--> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
