dependabot[bot]
|
deb298ee81
|
Bump actions/checkout from 6.0.3 to 7.0.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-06-19 01:03:52 +00:00 |
|
dependabot[bot]
|
d85666cbd6
|
Bump actions/checkout from 6.0.2 to 6.0.3
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-06-05 00:44:29 +00:00 |
|
dependabot[bot]
|
0435444be6
|
Bump actions/upload-artifact from 7.0.0 to 7.0.1
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-04-17 00:46:12 +00:00 |
|
dependabot[bot]
|
826f5d6d72
|
Bump spring-io/spring-gradle-build-action from 2.0.5 to 2.0.6
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action) from 2.0.5 to 2.0.6.
- [Release notes](https://github.com/spring-io/spring-gradle-build-action/releases)
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/efc55f07f4dfa22f2afd97f9ea1be4212eeed737...c8668747d7c264864c8c7f7026d0d277d14a78dc)
---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
dependency-version: 2.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-03-27 00:46:59 +00:00 |
|
dependabot[bot]
|
399ef5b663
|
Bump spring-io/spring-security-release-tools from 1.0.14 to 1.0.15
Bumps [spring-io/spring-security-release-tools](https://github.com/spring-io/spring-security-release-tools) from 1.0.14 to 1.0.15.
- [Release notes](https://github.com/spring-io/spring-security-release-tools/releases)
- [Changelog](https://github.com/spring-io/spring-security-release-tools/blob/main/RELEASE.adoc)
- [Commits](https://github.com/spring-io/spring-security-release-tools/compare/v1.0.14...b92832ecbc7cbe969201e6beafbde0ee400cf095)
---
updated-dependencies:
- dependency-name: spring-io/spring-security-release-tools
dependency-version: 1.0.15
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-03-20 00:58:59 +00:00 |
|
dependabot[bot]
|
18995c89ee
|
Bump actions/upload-artifact from 6.0.0 to 7.0.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/b7c566a772e6b6bfb58ed0dc250532a479d7789f...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-02-27 00:45:15 +00:00 |
|
Josh Cummings
|
6eb0af9912
|
Merge branch '7.0.x'
|
2026-02-12 10:28:00 -07:00 |
|
Josh Cummings
|
10cb6f7003
|
Update spring-security-release-tools 1.0.14
|
2026-02-12 10:25:47 -07:00 |
|
Josh Cummings
|
8cd2f36e84
|
Merge branch '7.0.x'
|
2026-02-05 14:45:09 -07:00 |
|
Josh Cummings
|
8432df498e
|
Update upload-artifact to 6.0.0
Issue gh-18648
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
|
2026-02-05 13:44:00 -07:00 |
|
Josh Cummings
|
5c3b8c513b
|
Update spring-gradle-build-action to 2.0.5
Issue gh-18648
|
2026-02-05 13:43:11 -07:00 |
|
Josh Cummings
|
d276c943fc
|
Update actions/checkout to 6.0.2
Issue gh-18648
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
|
2026-02-05 13:43:06 -07:00 |
|
Josh Cummings
|
18d9dd77ec
|
Use SHA Hashes for spring-security-release-tools Workflows
Issue gh-18648
Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
|
2026-02-05 13:42:22 -07:00 |
|
Robert Winch
|
048b6bdd88
|
Update to JDK 25 (release = 17)
This commit updates the build to use JDK 25 while remaining compatable with JDK 17.
Note that we must update our JAAS related tests to use release=25 due to the disabling of
the Security Manager. See
https://docs.oracle.com/en/java/javase/25/security/security-manager-is-permanently-disabled.html
Closes gh-18512
|
2026-01-16 11:25:59 -06:00 |
|
Daniel Garnier-Moiroux
|
a5edcba324
|
github-actions: configure PR workflow to publish anonymous build scans
|
2024-10-25 11:23:13 -05:00 |
|
Steve Riesenberg
|
fb054198af
|
Migrate slack notifications to GChat (2nd attempt)
Closes gh-15667
|
2024-08-21 16:16:50 -05:00 |
|
Marcus Hert Da Coregio
|
24f573dd4c
|
Merge branch '5.8.x' into 6.2.x
|
2024-06-28 09:32:25 -03:00 |
|
Marcus Hert Da Coregio
|
1135ad5a5a
|
Skip checkExpectedBranchVersion task on PR Build workflow
Issue gh-15226
|
2024-06-28 09:31:48 -03:00 |
|
Josh Cummings
|
5bfd1f59d1
|
Merge branch '5.8.x' into 6.1.x
|
2024-05-20 16:21:04 -06:00 |
|
Josh Cummings
|
4b10c2daac
|
Turn Off Build Scans
Currently, --scan is preventing PR builds from completing.
Issue gh-15120
|
2024-05-20 16:20:43 -06:00 |
|
Marcus Hert Da Coregio
|
a8c60393f1
|
Merge branch '5.8.x' into 6.1.x
Closes gh-15059
|
2024-05-13 08:53:01 -03:00 |
|
Marcus Hert Da Coregio
|
09198447af
|
Attach Antora Docs to Pull Requests
Closes gh-14992
|
2024-05-13 08:50:24 -03:00 |
|
Steve Riesenberg
|
74a77d2f72
|
Migrate to com.gradle.develocity plugin
Issue gh-15021
|
2024-05-08 10:07:53 -05:00 |
|
Steve Riesenberg
|
5c8311b7d3
|
Migrate to com.gradle.develocity plugin
Issue gh-15021
|
2024-05-08 10:03:34 -05:00 |
|
dependabot[bot]
|
b2c3bc6b3a
|
Bump spring-io/spring-gradle-build-action from 1 to 2
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action) from 1 to 2.
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/v1...v2)
---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-12-14 09:01:21 -03:00 |
|
dependabot[bot]
|
652f98a88c
|
Bump actions/checkout from 3 to 4
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-12-14 09:01:10 -03:00 |
|
dependabot[bot]
|
5593655bbf
|
Bump spring-io/spring-gradle-build-action from 1 to 2
Bumps [spring-io/spring-gradle-build-action](https://github.com/spring-io/spring-gradle-build-action) from 1 to 2.
- [Commits](https://github.com/spring-io/spring-gradle-build-action/compare/v1...v2)
---
updated-dependencies:
- dependency-name: spring-io/spring-gradle-build-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-12-14 08:58:09 -03:00 |
|
dependabot[bot]
|
47812e506f
|
Bump actions/checkout from 3 to 4
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-12-14 08:58:00 -03:00 |
|
Steve Riesenberg
|
1783a70fdb
|
Merge branch '5.8.x' into 6.1.x
|
2023-12-07 14:39:10 -06:00 |
|
Steve Riesenberg
|
9c44b700f5
|
Add Gradle Enterprise creds to PR builds
Closes gh-14249
|
2023-12-07 14:28:51 -06:00 |
|
Marcus Da Coregio
|
5955e89dff
|
Merge branch '5.8.x' into 6.0.x
Closes gh-12299
|
2022-11-25 09:24:03 -03:00 |
|
Kirk Lin
|
9c6d90490d
|
ci: fix GitHub Actions Deprecating save-state and set-output commands
Closes gh-12032
|
2022-11-25 09:05:28 -03:00 |
|
Steve Riesenberg
|
539b17f6da
|
Only run prerequisites job if on upstream repo
|
2022-07-28 15:13:54 -05:00 |
|
Steve Riesenberg
|
043fdd6f03
|
Use Spring Gradle Build Action
Closes gh-11630
|
2022-07-28 15:13:52 -05:00 |
|
naveen
|
f957e3c051
|
Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this
way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.
- Included permissions for the action.
https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests
https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
Closes gh-11367
|
2022-07-28 15:13:51 -05:00 |
|
Steve Riesenberg
|
f86d30f4a1
|
Only run prerequisites job if on upstream repo
|
2022-07-27 16:01:16 -05:00 |
|
Steve Riesenberg
|
bdeb32854e
|
Use Spring Gradle Build Action
Closes gh-11630
|
2022-07-27 16:01:15 -05:00 |
|
naveen
|
8f93a7fc94
|
Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this
way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.
- Included permissions for the action.
https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests
https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
|
2022-07-26 15:33:33 -05:00 |
|
Steve Riesenberg
|
148756076c
|
Backport release automation and github actions
Closes gh-11501
|
2022-07-13 15:51:25 -05:00 |
|
Steve Riesenberg
|
9601efd341
|
Add gradle-build-action to GitHub Actions pipelines
Closes gh-11099
|
2022-04-14 15:05:46 -05:00 |
|
Marcus Da Coregio
|
e5ff13901e
|
Switch workflows to use a JDK17 baseline
Closes gh-10353
|
2021-11-01 09:02:42 -03:00 |
|
Josh Cummings
|
a493660cdb
|
Stop CI Jobs on Forks
Closes gh-9701
|
2021-05-07 13:40:19 -06:00 |
|
Josh Cummings
|
f9c4dbae61
|
Update Git Workflows to Use JDK 11
Closes gh-9417
|
2021-02-17 11:53:51 -07:00 |
|
Ellie Bahadori
|
d69032a68d
|
Prevent PR builds from running on forks
|
2020-10-26 11:07:25 -05:00 |
|
Ellie Bahadori
|
7ef3f61924
|
Add build scans to PR builds
|
2020-09-30 10:20:12 -04:00 |
|
Ellie Bahadori
|
7319e81701
|
Change pipeline to run for all base branches
Issue gh-8680
|
2020-06-17 16:05:41 -05:00 |
|
Ellie Bahadori
|
e213e6430a
|
Create Github Actions pipeline for PR build workflow
|
2020-06-11 11:07:34 -07:00 |
|