Message-ID: From: "renovate-bot (@renovate-bot)" To: "pgjdbc/pgjdbc" Date: Mon, 25 May 2026 10:32:46 +0000 Subject: [pgjdbc/pgjdbc] PR #4098: chore(deps): update gradle/actions action to v6 List-Id: X-GitHub-Author-Id: 25180681 X-GitHub-Author-Login: renovate-bot X-GitHub-Issue: 4098 X-GitHub-Labels: dependencies X-GitHub-Repo: pgjdbc/pgjdbc X-GitHub-State: merged X-GitHub-Type: pull_request X-GitHub-Url: https://github.com/pgjdbc/pgjdbc/pull/4098 Content-Type: text/plain; charset=utf-8 This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [gradle/actions](https://redirect.github.com/gradle/actions) | action | major | `v4.4.4` → `v6.1.0` | --- ### Release Notes
gradle/actions (gradle/actions) ### [`v6.1.0`](https://redirect.github.com/gradle/actions/releases/tag/v6.1.0) [Compare Source](https://redirect.github.com/gradle/actions/compare/v6.0.1...v6.1.0) #### New: Basic Cache Provider A new MIT-licensed **Basic Caching** provider is now available as an alternative to the proprietary **Enhanced Caching** provided by `gradle-actions-caching`. Choose Basic Caching by setting `cache-provider: basic` on `setup-gradle` or `dependency-submission` actions. - Built on `@actions/cache` -- fully open source - Caches `~/.gradle/caches` and `~/.gradle/wrapper` directories - Cache key derived from build files (`*.gradle*`, `gradle-wrapper.properties`, etc.) - Clean cache on build file changes (no restore keys, preventing stale entry accumulation) **Limitations vs Enhanced Caching:** No cache cleanup, no deduplication of cached content, cached content is fixed unless build files change. #### Revamped Licensing & Distribution Documentation - New **DISTRIBUTION.md** documents the licensing of each component (particularly Basic Caching vs Enhanced Caching) - Simplified licensing notices in README, docs, and runtime log output - Clear usage tiers: Enhanced Caching is free for public repos and in Free Preview for private repos #### What's Changed - Use a unique cache entry for wrapper-validation test by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​921](https://redirect.github.com/gradle/actions/pull/921) - Update Dependencies by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​922](https://redirect.github.com/gradle/actions/pull/922) - Update dependencies and resolve npm vulnerabilities by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​933](https://redirect.github.com/gradle/actions/pull/933) - Add open-source 'basic' cache provider and revamp licensing documentation by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​930](https://redirect.github.com/gradle/actions/pull/930) - Restructure caching documentation for basic and enhanced providers by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​934](https://redirect.github.com/gradle/actions/pull/934) **Full Changelog**: ### [`v6.0.1`](https://redirect.github.com/gradle/actions/releases/tag/v6.0.1) [Compare Source](https://redirect.github.com/gradle/actions/compare/v6...v6.0.1) > \[!IMPORTANT] > The release of `gradle/actions@v6` contains important changes to the license terms. More details in [this blog post](https://blog.gradle.org/github-actions-for-gradle-v6). > **TL;DR**: By upgrading to v6, you accept the [Terms of Use](https://gradle.com/legal/terms-of-use/) for the `gradle-actions-caching` component. ##### Summary The [license changes in v6](https://blog.gradle.org/github-actions-for-gradle-v6) introduced a `gradle-actions-caching` license notice that is printed in logs and in each job summary. With this release, the license notice will be muted if build-scan terms have been accepted, or if a Develocity access key is provided. ##### What's Changed - Bump actions used in docs by [@​Goooler](https://redirect.github.com/Goooler) in [#​792](https://redirect.github.com/gradle/actions/pull/792) - Add typing information for use by typesafegithub by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​910](https://redirect.github.com/gradle/actions/pull/910) - Mute license warning when terms are accepted by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​911](https://redirect.github.com/gradle/actions/pull/911) - Mention explicit license acceptance in notice by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​912](https://redirect.github.com/gradle/actions/pull/912) - Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.21.1 to 2.21.2 in /sources/test/init-scripts in the gradle group across 1 directory by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​907](https://redirect.github.com/gradle/actions/pull/907) **Full Changelog**: ### [`v6.0.0`](https://redirect.github.com/gradle/actions/releases/tag/v6.0.0) [Compare Source](https://redirect.github.com/gradle/actions/compare/v6...v6) > \[!IMPORTANT] > The release of `gradle/actions@v6` contains important changes to the license terms. More details in [this blog post](https://blog.gradle.org/github-actions-for-gradle-v6). > **TL;DR**: By upgrading to v6, you accept the [Terms of Use](https://gradle.com/legal/terms-of-use/) for the `gradle-actions-caching` component. ##### Summary - Caching functionality of 'gradle-actions' has been extracted into a separate `gradle-actions-caching` library, and is no longer open-source. See [this blog post](https://blog.gradle.org/github-actions-for-gradle-v6) for more context. - Existing, rudimentary, configuration-cache support has been removed, pending a fully functional implementation in `gradle-actions-caching`. - Dependencies updated to address security vulnerabilities > \[!IMPORTANT] > > #### Licensing notice > > The caching functionality in \`gradle-actions\` has been extracted into \`gradle-actions-caching\`, a proprietary commercial component that is not covered by the MIT License. > The bundled \`gradle-actions-caching\` component is licensed and governed by a separate license, available at . > > The \`gradle-actions-caching\` component is used only when caching is enabled and is not loaded or used when caching is disabled. > > Use of the \`gradle-actions-caching\` component is subject to a separate license, available at . > If you do not agree to these license terms, do not use the \`gradle-actions-caching\` component. ##### What's Changed - Bump the npm-dependencies group in /sources with 2 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​866](https://redirect.github.com/gradle/actions/pull/866) - Update known wrapper checksums by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​868](https://redirect.github.com/gradle/actions/pull/868) - Dependency updates by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​876](https://redirect.github.com/gradle/actions/pull/876) - Update known wrapper checksums by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​878](https://redirect.github.com/gradle/actions/pull/878) - Bump [@​types/node](https://redirect.github.com/types/node) from 25.3.3 to 25.3.5 in /sources in the npm-dependencies group across 1 directory by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​877](https://redirect.github.com/gradle/actions/pull/877) - Bump the github-actions group across 3 directories with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​867](https://redirect.github.com/gradle/actions/pull/867) - Update known wrapper checksums by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​881](https://redirect.github.com/gradle/actions/pull/881) - Bump the npm-dependencies group in /sources with 6 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​879](https://redirect.github.com/gradle/actions/pull/879) - Bump the github-actions group across 3 directories with 5 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​880](https://redirect.github.com/gradle/actions/pull/880) - Remove configuration-cache support by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​884](https://redirect.github.com/gradle/actions/pull/884) - Extract caching logic into a separate `gradle-actions-caching` component by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​885](https://redirect.github.com/gradle/actions/pull/885) - Update gradle-actions-caching library to v0.3.0 by [@​bot-githubaction](https://redirect.github.com/bot-githubaction) in [#​899](https://redirect.github.com/gradle/actions/pull/899) - Avoid windows shutdown bug by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​900](https://redirect.github.com/gradle/actions/pull/900) - Dependency updates by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​905](https://redirect.github.com/gradle/actions/pull/905) - Fix critical and high npm vulnerabilities by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​904](https://redirect.github.com/gradle/actions/pull/904) - Fix rendering of job-disabled message by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​909](https://redirect.github.com/gradle/actions/pull/909) **Full Changelog**: ### [`v6`](https://redirect.github.com/gradle/actions/compare/v5...v6) [Compare Source](https://redirect.github.com/gradle/actions/compare/v5.0.2...v6) ### [`v5.0.2`](https://redirect.github.com/gradle/actions/releases/tag/v5.0.2) [Compare Source](https://redirect.github.com/gradle/actions/compare/v5.0.1...v5.0.2) #### Summary This release contains no functional changes. It updates dependencies and known Gradle wrapper checksums. #### What's Changed - Update dependencies by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​851](https://redirect.github.com/gradle/actions/pull/851) - Bump the github-actions group across 2 directories with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​850](https://redirect.github.com/gradle/actions/pull/850) - Update DV config by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​848](https://redirect.github.com/gradle/actions/pull/848) - Convert project to ESM and update dependencies by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​854](https://redirect.github.com/gradle/actions/pull/854) - Workflow fixes by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​856](https://redirect.github.com/gradle/actions/pull/856) - Remove superfluous text from log message by [@​bigdaz](https://redirect.github.com/bigdaz) in [#​861](https://redirect.github.com/gradle/actions/pull/861) - Bump the github-actions group across 1 directory with 2 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​860](https://redirect.github.com/gradle/actions/pull/860) - Bump the npm-dependencies group across 1 directory with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​859](https://redirect.github.com/gradle/actions/pull/859) - Update known wrapper checksums by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​857](https://redirect.github.com/gradle/actions/pull/857) - Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.21.0 to 2.21.1 in /sources/test/init-scripts in the gradle group across 1 directory by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​862](https://redirect.github.com/gradle/actions/pull/862) - Bump the npm-dependencies group in /sources with 2 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​863](https://redirect.github.com/gradle/actions/pull/863) - Bump github/codeql-action from 4.32.3 to 4.32.4 in the github-actions group across 1 directory by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​864](https://redirect.github.com/gradle/actions/pull/864) **Full Changelog**: ### [`v5.0.1`](https://redirect.github.com/gradle/actions/releases/tag/v5.0.1) [Compare Source](https://redirect.github.com/gradle/actions/compare/v5...v5.0.1) ##### What's Changed - Bump `npm` code dependency versions - Bump Gradle versions used in sample builds - Bump dependencies versions in Gradle sample builds - Bump GitHub actions used for build and test - Update known wrapper checksums to include Gradle 9.2+ **Full Changelog**: ### [`v5.0.0`](https://redirect.github.com/gradle/actions/releases/tag/v5.0.0) [Compare Source](https://redirect.github.com/gradle/actions/compare/v5...v5) ##### What's Changed ##### Breaking Changes - Upgrade to node 24 by [@​amyu](https://redirect.github.com/amyu) in [#​721](https://redirect.github.com/gradle/actions/pull/721) Make sure your runner is updated to this version or newer to use this release. v2.327.1 [Release Notes](https://redirect.github.com/actions/runner/releases/tag/v2.327.1) ##### Dependency upgrades - Bump the github-actions group across 1 directory with 2 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​748](https://redirect.github.com/gradle/actions/pull/748) **Full Changelog**: ### [`v5`](https://redirect.github.com/gradle/actions/compare/v4...v5) [Compare Source](https://redirect.github.com/gradle/actions/compare/v4.4.4...v5)
--- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "every 3 weeks on Monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/pgjdbc/pgjdbc).