Skip to content

chore(deps): bump gradle/actions/wrapper-validation from 6.2.0 to 6.3.0 - #43

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/gradle/actions/wrapper-validation-6.3.0
Closed

chore(deps): bump gradle/actions/wrapper-validation from 6.2.0 to 6.3.0#43
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/gradle/actions/wrapper-validation-6.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps gradle/actions/wrapper-validation from 6.2.0 to 6.3.0.

Release notes

Sourced from gradle/actions/wrapper-validation's releases.

v6.3.0

Highlights

Enhanced Caching: Windows fixes and a cache-protocol bump

This release updates gradle-actions-caching to v1.0.0 (up from v0.7.0), which fixes two significant caching defects, both most visible on Windows:

  • Cache entries failed to store at all on Windows.. Every entry failed with Path Validation Error: Path(s) specified in the action for caching do(es) not exist, even though the Gradle User Home was fully intact. Nothing was stored, so every downstream job ran against an empty Gradle User Home. The cause was a nested, unpatched copy of @actions/glob combined with a silently swallowed require() in the bundle, which left Windows path separators unnormalized.

  • Cache cleanup deleted instrumented jars that were in use. A bug in key hashing for paths shorter than 64 characters made cleanup judge freshly created caches/jars-9 entries as unused and remove them, so the instrumented-jars entry was never saved and every job re-instrumented its classpaths.

    Also included: cache entry names are now consistent between the save and restore reports — restore previously fell back to showing the raw glob pattern (e.g. /home/runner/.gradle/caches/modules-*/files-*/*/*/*/*/) instead of dependencies.

[!IMPORTANT] Existing cache entries are invalidated by this release. The cache protocol version was bumped to v2, so the first run after upgrading will be a cache miss and will repopulate the cache. No configuration changes are required.

Basic caching warns instead of failing silently

The basic (open-source) caching provider now emits a warning and reports (Entry not saved: save failed) in the Job Summary when a cache save fails, rather than reporting success (#1028).

Dependency submission works with Isolated Projects

dependency-submission now disables Isolated Projects via a promoted property, so dependency graph generation works on builds that enable it (#1025). Thanks to @​reinsch82 for the contribution.

Updated defaults

  • Injected Develocity Gradle plugin: 4.4.2 → 4.5.0
  • 36 new known-good wrapper checksums added for wrapper-validation

What's Changed

... (truncated)

Commits
  • 9c97196 Bump the github-actions group across 2 directories with 9 updates (#1024)
  • 760e4a4 Bump the npm-dependencies group across 1 directory with 2 updates (#1037)
  • 73e4c42 Update gradle-actions-caching library to v1.0.0 (#1029)
  • a9d1438 Add dependabot ignore rules for TypeScript 7.x and @​types/node 25.x/26.x
  • 68f3700 [bot] Update dist directory
  • 5971332 Bump Gradle Wrapper to 9.6.1, wrapper checksums, and Develocity plugin to 4.5...
  • b5bc804 [bot] Update dist directory
  • dcbab4e Bump npm-dependencies group with TypeScript 6.0.3, @​types/node 24.x, and secu...
  • ca8d957 Move non-smoke restore-gradle-home tests back to the integ-test suite (#1032)
  • 4318659 [bot] Update dist directory
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 10, 2026
@dependabot
dependabot Bot requested a review from CodeinScrubs as a code owner August 10, 2026 11:55
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 10, 2026
@CodeinScrubs

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/gradle/actions/wrapper-validation-6.3.0 branch from 851f4ec to bdfc718 Compare August 13, 2026 11:15
@CodeinScrubs

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/gradle/actions/wrapper-validation-6.3.0 branch from bdfc718 to 27bc079 Compare August 13, 2026 13:51
@CodeinScrubs

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [gradle/actions/wrapper-validation](https://github.com/gradle/actions) from 6.2.0 to 6.3.0.
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](gradle/actions@3f131e8...9c97196)

---
updated-dependencies:
- dependency-name: gradle/actions/wrapper-validation
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/gradle/actions/wrapper-validation-6.3.0 branch from 27bc079 to 474f04d Compare August 13, 2026 14:14
@CodeinScrubs

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@CodeinScrubs

Copy link
Copy Markdown
Owner

Superseded by #54, which combines this exact Dependabot update with the other current build-tool maintenance updates on current main and runs the full protected matrix once.

@dependabot @github

dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/github_actions/gradle/actions/wrapper-validation-6.3.0 branch August 13, 2026 14:28
CodeinScrubs added a commit that referenced this pull request Aug 13, 2026
## What changed

Combines the five current Dependabot maintenance updates on one
current-main branch:

- `actions/setup-java` 5.6.0 → 5.7.0
- `gradle/actions/wrapper-validation` 6.2.0 → 6.3.0
- `pnpm/action-setup` 6.0.9 → 6.0.10
- Gradle wrapper 9.5.0 → 9.5.1 with the published distribution checksum
- 12 patch/minor development-tool updates, including Playwright, Vite,
esbuild, ESLint, TypeScript-ESLint, Vue, and type packages

This supersedes #42, #43, #44, #48, and #50 so the full protected matrix
runs once against a single current base.

## Scope and tradeoff

The combined diff is larger than each individual bot PR, but it avoids
five serial stale-base/rebase cycles. It changes build and test tooling
only: no production dependency, exported API, corpus case, direction
policy, rendering logic, or platform adapter source changes.

## Local evidence

- `pnpm install --frozen-lockfile`
- `pnpm run check`: 16 files / 401 tests; 932-case corpus; all packages
and Action build passed
- coverage: 92.03% statements, 86.01% branches, 94.78% functions, 94.86%
lines
- `pnpm run deps:audit`: no known vulnerabilities
- `pnpm run release:check`: all 12 packed packages, examples, clean
consumer, CLI, and size budgets passed
- `git diff --check`

Native Android, Apple, Windows, Rust, browser, packed-consumer, and
five-language CodeQL checks are required before merge.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant