pgjdbc/pgjdbc GitHub issues and pull requests (mirror)
help / color / mirror / Atom feedFrom: renovate-bot (@renovate-bot) <[email protected]>
To: pgjdbc/pgjdbc <[email protected]>
Subject: [pgjdbc/pgjdbc] PR #4098: chore(deps): update gradle/actions action to v6
Date: Mon, 25 May 2026 10:32:46 +0000
Message-ID: <[email protected]> (raw)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [gradle/actions](https://redirect.github.com/gradle/actions) | action | major | `v4.4.4` → `v6.1.0` |
---
### Release Notes
<details>
<summary>gradle/actions (gradle/actions)</summary>
### [`v6.1.0`](https://redirect.github.com/gradle/actions/releases/tag/v6.1.0)
[Compare Source](https://redirect.github.com/gradle/actions/compare/v6.0.1...v6.1.0)
#### New: Basic Cache Provider
A new MIT-licensed **Basic Caching** provider is now available as an alternative to the proprietary **Enhanced Caching** provided by `gradle-actions-caching`. Choose Basic Caching by setting `cache-provider: basic` on `setup-gradle` or `dependency-submission` actions.
- Built on `@actions/cache` -- fully open source
- Caches `~/.gradle/caches` and `~/.gradle/wrapper` directories
- Cache key derived from build files (`*.gradle*`, `gradle-wrapper.properties`, etc.)
- Clean cache on build file changes (no restore keys, preventing stale entry accumulation)
**Limitations vs Enhanced Caching:** No cache cleanup, no deduplication of cached content, cached content is fixed unless build files change.
#### Revamped Licensing & Distribution Documentation
- New **DISTRIBUTION.md** documents the licensing of each component (particularly Basic Caching vs Enhanced Caching)
- Simplified licensing notices in README, docs, and runtime log output
- Clear usage tiers: Enhanced Caching is free for public repos and in Free Preview for private repos
#### What's Changed
- Use a unique cache entry for wrapper-validation test by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​921](https://redirect.github.com/gradle/actions/pull/921)
- Update Dependencies by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​922](https://redirect.github.com/gradle/actions/pull/922)
- Update dependencies and resolve npm vulnerabilities by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​933](https://redirect.github.com/gradle/actions/pull/933)
- Add open-source 'basic' cache provider and revamp licensing documentation by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​930](https://redirect.github.com/gradle/actions/pull/930)
- Restructure caching documentation for basic and enhanced providers by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​934](https://redirect.github.com/gradle/actions/pull/934)
**Full Changelog**: <https://github.com/gradle/actions/compare/v6.0.1...v6.1.0;
### [`v6.0.1`](https://redirect.github.com/gradle/actions/releases/tag/v6.0.1)
[Compare Source](https://redirect.github.com/gradle/actions/compare/v6...v6.0.1)
> \[!IMPORTANT]
> The release of `gradle/actions@v6` contains important changes to the license terms. More details in [this blog post](https://blog.gradle.org/github-actions-for-gradle-v6).
> **TL;DR**: By upgrading to v6, you accept the [Terms of Use](https://gradle.com/legal/terms-of-use/) for the `gradle-actions-caching` component.
##### Summary
The [license changes in v6](https://blog.gradle.org/github-actions-for-gradle-v6) introduced a `gradle-actions-caching` license notice that is printed in logs and in each job summary.
With this release, the license notice will be muted if build-scan terms have been accepted, or if a Develocity access key is provided.
##### What's Changed
- Bump actions used in docs by [@​Goooler](https://redirect.github.com/Goooler) in [#​792](https://redirect.github.com/gradle/actions/pull/792)
- Add typing information for use by typesafegithub by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​910](https://redirect.github.com/gradle/actions/pull/910)
- Mute license warning when terms are accepted by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​911](https://redirect.github.com/gradle/actions/pull/911)
- Mention explicit license acceptance in notice by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​912](https://redirect.github.com/gradle/actions/pull/912)
- Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.21.1 to 2.21.2 in /sources/test/init-scripts in the gradle group across 1 directory by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​907](https://redirect.github.com/gradle/actions/pull/907)
**Full Changelog**: <https://github.com/gradle/actions/compare/v6.0.0...v6.0.1;
### [`v6.0.0`](https://redirect.github.com/gradle/actions/releases/tag/v6.0.0)
[Compare Source](https://redirect.github.com/gradle/actions/compare/v6...v6)
> \[!IMPORTANT]
> The release of `gradle/actions@v6` contains important changes to the license terms. More details in [this blog post](https://blog.gradle.org/github-actions-for-gradle-v6).
> **TL;DR**: By upgrading to v6, you accept the [Terms of Use](https://gradle.com/legal/terms-of-use/) for the `gradle-actions-caching` component.
##### Summary
- Caching functionality of 'gradle-actions' has been extracted into a separate `gradle-actions-caching` library, and is no longer open-source. See [this blog post](https://blog.gradle.org/github-actions-for-gradle-v6) for more context.
- Existing, rudimentary, configuration-cache support has been removed, pending a fully functional implementation in `gradle-actions-caching`.
- Dependencies updated to address security vulnerabilities
> \[!IMPORTANT]
>
> #### Licensing notice
>
> The caching functionality in \`gradle-actions\` has been extracted into \`gradle-actions-caching\`, a proprietary commercial component that is not covered by the MIT License.
> The bundled \`gradle-actions-caching\` component is licensed and governed by a separate license, available at <https://gradle.com/legal/terms-of-use/;.
>
> The \`gradle-actions-caching\` component is used only when caching is enabled and is not loaded or used when caching is disabled.
>
> Use of the \`gradle-actions-caching\` component is subject to a separate license, available at <https://gradle.com/legal/terms-of-use/;.
> If you do not agree to these license terms, do not use the \`gradle-actions-caching\` component.
##### What's Changed
- Bump the npm-dependencies group in /sources with 2 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​866](https://redirect.github.com/gradle/actions/pull/866)
- Update known wrapper checksums by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​868](https://redirect.github.com/gradle/actions/pull/868)
- Dependency updates by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​876](https://redirect.github.com/gradle/actions/pull/876)
- Update known wrapper checksums by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​878](https://redirect.github.com/gradle/actions/pull/878)
- Bump [@​types/node](https://redirect.github.com/types/node) from 25.3.3 to 25.3.5 in /sources in the npm-dependencies group across 1 directory by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​877](https://redirect.github.com/gradle/actions/pull/877)
- Bump the github-actions group across 3 directories with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​867](https://redirect.github.com/gradle/actions/pull/867)
- Update known wrapper checksums by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​881](https://redirect.github.com/gradle/actions/pull/881)
- Bump the npm-dependencies group in /sources with 6 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​879](https://redirect.github.com/gradle/actions/pull/879)
- Bump the github-actions group across 3 directories with 5 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​880](https://redirect.github.com/gradle/actions/pull/880)
- Remove configuration-cache support by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​884](https://redirect.github.com/gradle/actions/pull/884)
- Extract caching logic into a separate `gradle-actions-caching` component by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​885](https://redirect.github.com/gradle/actions/pull/885)
- Update gradle-actions-caching library to v0.3.0 by [@​bot-githubaction](https://redirect.github.com/bot-githubaction) in [#​899](https://redirect.github.com/gradle/actions/pull/899)
- Avoid windows shutdown bug by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​900](https://redirect.github.com/gradle/actions/pull/900)
- Dependency updates by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​905](https://redirect.github.com/gradle/actions/pull/905)
- Fix critical and high npm vulnerabilities by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​904](https://redirect.github.com/gradle/actions/pull/904)
- Fix rendering of job-disabled message by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​909](https://redirect.github.com/gradle/actions/pull/909)
**Full Changelog**: <https://github.com/gradle/actions/compare/v5.0.2...v6.0.0;
### [`v6`](https://redirect.github.com/gradle/actions/compare/v5...v6)
[Compare Source](https://redirect.github.com/gradle/actions/compare/v5.0.2...v6)
### [`v5.0.2`](https://redirect.github.com/gradle/actions/releases/tag/v5.0.2)
[Compare Source](https://redirect.github.com/gradle/actions/compare/v5.0.1...v5.0.2)
#### Summary
This release contains no functional changes. It updates dependencies and known Gradle wrapper checksums.
#### What's Changed
- Update dependencies by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​851](https://redirect.github.com/gradle/actions/pull/851)
- Bump the github-actions group across 2 directories with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​850](https://redirect.github.com/gradle/actions/pull/850)
- Update DV config by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​848](https://redirect.github.com/gradle/actions/pull/848)
- Convert project to ESM and update dependencies by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​854](https://redirect.github.com/gradle/actions/pull/854)
- Workflow fixes by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​856](https://redirect.github.com/gradle/actions/pull/856)
- Remove superfluous text from log message by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​861](https://redirect.github.com/gradle/actions/pull/861)
- Bump the github-actions group across 1 directory with 2 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​860](https://redirect.github.com/gradle/actions/pull/860)
- Bump the npm-dependencies group across 1 directory with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​859](https://redirect.github.com/gradle/actions/pull/859)
- Update known wrapper checksums by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​857](https://redirect.github.com/gradle/actions/pull/857)
- Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.21.0 to 2.21.1 in /sources/test/init-scripts in the gradle group across 1 directory by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​862](https://redirect.github.com/gradle/actions/pull/862)
- Bump the npm-dependencies group in /sources with 2 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​863](https://redirect.github.com/gradle/actions/pull/863)
- Bump github/codeql-action from 4.32.3 to 4.32.4 in the github-actions group across 1 directory by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​864](https://redirect.github.com/gradle/actions/pull/864)
**Full Changelog**: <https://github.com/gradle/actions/compare/v5.0.1...v5.0.2;
### [`v5.0.1`](https://redirect.github.com/gradle/actions/releases/tag/v5.0.1)
[Compare Source](https://redirect.github.com/gradle/actions/compare/v5...v5.0.1)
##### What's Changed
- Bump `npm` code dependency versions
- Bump Gradle versions used in sample builds
- Bump dependencies versions in Gradle sample builds
- Bump GitHub actions used for build and test
- Update known wrapper checksums to include Gradle 9.2+
**Full Changelog**: <https://github.com/gradle/actions/compare/v5.0.0...v5.0.1;
### [`v5.0.0`](https://redirect.github.com/gradle/actions/releases/tag/v5.0.0)
[Compare Source](https://redirect.github.com/gradle/actions/compare/v5...v5)
##### What's Changed
##### Breaking Changes
- Upgrade to node 24 by [@​amyu](https://redirect.github.com/amyu) in [#​721](https://redirect.github.com/gradle/actions/pull/721)
Make sure your runner is updated to this version or newer to use this release. v2.327.1 [Release Notes](https://redirect.github.com/actions/runner/releases/tag/v2.327.1)
##### Dependency upgrades
- Bump the github-actions group across 1 directory with 2 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​748](https://redirect.github.com/gradle/actions/pull/748)
**Full Changelog**: <https://github.com/gradle/actions/compare/v4...v5.0.0;
### [`v5`](https://redirect.github.com/gradle/actions/compare/v4...v5)
[Compare Source](https://redirect.github.com/gradle/actions/compare/v4.4.4...v5)
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- "every 3 weeks on Monday"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/pgjdbc/pgjdbc).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTQuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE5NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: github://pgjdbc/pgjdbc
Cc: [email protected], [email protected]
Subject: Re: [pgjdbc/pgjdbc] PR #4098: chore(deps): update gradle/actions action to v6
In-Reply-To: <<[email protected]>>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox