Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: junit-team/junit-framework
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: r5.12.2
Choose a base ref
...
head repository: junit-team/junit-framework
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: r5.13.0
Choose a head ref
12 contributors

Commits on Feb 12, 2025

  1. Create initial 5.13.0-M1 release notes from template

    @marcphilipp
    marcphilipp committed Feb 12, 2025
    Copy the full SHA
    ec7aa6e View commit details

  2. Start 5.13 release cycle

    @marcphilipp
    marcphilipp committed Feb 12, 2025
    Copy the full SHA
    ff01c90 View commit details

  3. Update graalvm/setup-graalvm digest to dea0e3d (#4314) 

    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    @renovate
    renovate[bot] authored Feb 12, 2025
    Copy the full SHA
    51365f3 View commit details

  4. Move string-based argument conversion tests to platform-test 

    Prior to this commit, `platform-tests` had no dedicated tests for
`ConversionSupport`. Instead, `DefaultArgumentConverterTests` from
`jupiter-tests` provided the corresponding coverage.

Now, string-based tests are moved to `ConversionSupportTests`, while
`DefaultArgumentConverterTests` verify that the delegation to
`ConversionSupport` happens correctly.
    @scordio @marcphilipp
    scordio authored and marcphilipp committed Feb 12, 2025
    Copy the full SHA
    779a46f View commit details

  5. Reintroduce snapshot dependency on open-test-reporting

    @marcphilipp
    marcphilipp committed Feb 12, 2025
    Copy the full SHA
    5596b9b View commit details

  6. Update open-test-reporting to 0.2.0-M3 

    Fixes #4313.
    @marcphilipp
    marcphilipp committed Feb 12, 2025
    Copy the full SHA
    16674fb View commit details

Commits on Feb 13, 2025

  1. Update graalvm/setup-graalvm digest to b0cb26a (#4316) 

    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    @renovate
    renovate[bot] authored Feb 13, 2025
    Copy the full SHA
    0013075 View commit details

Commits on Feb 14, 2025

  1. Fix version references to be 1.x in Platform and 5.x in Jupiter

    @marcphilipp
    marcphilipp committed Feb 14, 2025
    Copy the full SHA
    c9d8cb1 View commit details

Commits on Feb 17, 2025

  1. Update open-test-reporting to 0.2.0

    @marcphilipp
    marcphilipp committed Feb 17, 2025
    Copy the full SHA
    484320e View commit details

Commits on Feb 19, 2025

  1. Update plugin develocity to v3.19.2 (#4324) 

    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    @renovate
    renovate[bot] authored Feb 19, 2025
    Copy the full SHA
    67071ee View commit details

  2. Introduce extension API for container templates (#4315) 

    Analogous to `@TestTemplate` on the method level, this commit introduces
a class-level `@ContainerTemplate` annotation with an accompanying 
`ContainerTemplateInvocationContextProvider` extension API.

Resolves #871.
    @marcphilipp
    marcphilipp authored Feb 19, 2025
    Copy the full SHA
    202d939 View commit details

  3. Evaluate Arguments.get() at most once

    @marcphilipp
    marcphilipp committed Feb 19, 2025
    Copy the full SHA
    1293376 View commit details

  4. Close all arguments, not just consumed ones

    @marcphilipp
    marcphilipp committed Feb 19, 2025
    Copy the full SHA
    8f8b694 View commit details

  5. Use existing static import

    @marcphilipp
    marcphilipp committed Feb 19, 2025
    Copy the full SHA
    96ec3cd View commit details

  6. Close all arguments, despite early failures

    @marcphilipp
    marcphilipp committed Feb 19, 2025
    Copy the full SHA
    c5359ec View commit details

Commits on Feb 21, 2025

  1. Remove duplicated reference to SimpleArgumentConverter

    @marcphilipp
    marcphilipp committed Feb 21, 2025
    Copy the full SHA
    dc7a0b5 View commit details

  2. Upgradle to 8.13-rc-2

    @marcphilipp
    marcphilipp committed Feb 21, 2025
    Copy the full SHA
    0f25505 View commit details

  3. Update log suppressions for tests

    @marcphilipp
    marcphilipp committed Feb 21, 2025
    Copy the full SHA
    3a7ea6f View commit details

  4. Reapply "Use Gradle's new daemon JVM criteria feature" 

    This reverts commit 292f6a0.
    @marcphilipp
    marcphilipp committed Feb 21, 2025
    Copy the full SHA
    f0064ee View commit details

  5. Update dependency org.apache.maven.plugins:maven-compiler-plugin to v… 

    …3.14.0
    @renovate @marcphilipp
    renovate[bot] authored and marcphilipp committed Feb 21, 2025
    Copy the full SHA
    25dd6e5 View commit details

  6. Release 5.12.0

    @marcphilipp
    marcphilipp committed Feb 21, 2025
    Copy the full SHA
    7b4f122 View commit details

  7. Update supported versions

    @marcphilipp
    marcphilipp authored Feb 21, 2025
    Copy the full SHA
    dd9cb1d View commit details

Commits on Feb 22, 2025

  1. Update actions/upload-artifact digest to 4cec3d8

    @renovate @marcphilipp
    renovate[bot] authored and marcphilipp committed Feb 22, 2025
    Copy the full SHA
    dc8a015 View commit details

  2. Update github/codeql-action digest to b56ba49 (#4331) 

    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    @renovate
    renovate[bot] authored Feb 22, 2025
    Copy the full SHA
    a224d41 View commit details

  3. Update ossf/scorecard-action action to v2.4.1

    @renovate @marcphilipp
    renovate[bot] authored and marcphilipp committed Feb 22, 2025
    Copy the full SHA
    962b926 View commit details

Commits on Feb 23, 2025

  1. Update dependency com.puppycrawl.tools:checkstyle to v10.21.3

    @renovate @marcphilipp
    renovate[bot] authored and marcphilipp committed Feb 23, 2025
    Copy the full SHA
    34084d8 View commit details

Commits on Feb 24, 2025

  1. Remove obsolete method

    @sbrannen
    sbrannen committed Feb 24, 2025
    Copy the full SHA
    0ad7fae View commit details

  2. Polishing

    @sbrannen
    sbrannen committed Feb 24, 2025
    Copy the full SHA
    02cd2f6 View commit details

  3. Adhere to project coding and style guidelines

    @sbrannen
    sbrannen committed Feb 24, 2025
    Copy the full SHA
    6804dd9 View commit details

  4. Add missing @⁠since tag and polish/format Javadoc

    @sbrannen
    sbrannen committed Feb 24, 2025
    Copy the full SHA
    c110619 View commit details

Commits on Feb 25, 2025

  1. Handle state_reason "duplicate"

    @marcphilipp
    marcphilipp committed Feb 25, 2025
    Copy the full SHA
    21b76da View commit details

  2. Update dependency gradle to v8.13 (#4340) 

    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    @renovate
    renovate[bot] authored Feb 25, 2025
    Copy the full SHA
    826d6f8 View commit details

  3. Update dependency org.slf4j:slf4j-jdk14 to v2.0.17

    @renovate @marcphilipp
    renovate[bot] authored and marcphilipp committed Feb 25, 2025
    Copy the full SHA
    64d633b View commit details

Commits on Feb 26, 2025

  1. Update dependency ch.qos.logback:logback-core to v1.5.17

    @renovate @marcphilipp
    renovate[bot] authored and marcphilipp committed Feb 26, 2025
    Copy the full SHA
    ab00092 View commit details

  2. Update actions/download-artifact digest to cc20338

    @renovate @marcphilipp
    renovate[bot] authored and marcphilipp committed Feb 26, 2025
    Copy the full SHA
    5c8a643 View commit details

Commits on Feb 27, 2025

  1. Update actions/attest-build-provenance action to v2.2.1

    @renovate @marcphilipp
    renovate[bot] authored and marcphilipp committed Feb 27, 2025
    Copy the full SHA
    275b239 View commit details

  2. Extract not(IndicativeSentences.class) to static Predicate

    @sbrannen
    sbrannen committed Feb 27, 2025
    Copy the full SHA
    1892336 View commit details

  3. Remove unnecessary static imports

    @sbrannen
    sbrannen committed Feb 27, 2025
    Copy the full SHA
    af4df14 View commit details

  4. Update actions/attest-build-provenance action to v2.2.2

    @renovate @marcphilipp
    renovate[bot] authored and marcphilipp committed Feb 27, 2025
    Copy the full SHA
    b4ab5d7 View commit details

Commits on Feb 28, 2025

  1. Track exact versions to make Renovate updates easier to understand

    @marcphilipp
    marcphilipp committed Feb 28, 2025
    1
    Copy the full SHA
    556594c View commit details

  2. Update codecov/codecov-action digest to 0565863

    @renovate @marcphilipp
    renovate[bot] authored and marcphilipp committed Feb 28, 2025
    Copy the full SHA
    fb89b3b View commit details

  3. Update dependency org.apache.groovy:groovy to v4.0.26

    @renovate @marcphilipp
    renovate[bot] authored and marcphilipp committed Feb 28, 2025
    Copy the full SHA
    8cab7b8 View commit details

  4. Introduce support for parameterized classes (#4342) 

    This commit introduces @ParameterizedClass which builds on
@ContainerTemplate and allows declaring a top-level or @nested test
class as a parameterized container to be invoked multiple times with
different arguments. The same @...Source annotations as for
@ParameterizedTest may be used to provide arguments via constructor or
field injection.

Resolves #878.
    @marcphilipp
    marcphilipp authored Feb 28, 2025
    Copy the full SHA
    c4faa6c View commit details

Commits on Mar 1, 2025

  1. Update jackson monorepo to v2.18.3

    @renovate @marcphilipp
    renovate[bot] authored and marcphilipp committed Mar 1, 2025
    Copy the full SHA
    77e1bf9 View commit details

  2. Avoid Gradle deprecation warnings originating in Kotlin plugin

    @marcphilipp
    marcphilipp committed Mar 1, 2025
    Copy the full SHA
    a6c6910 View commit details

  3. Move ArchUnit tests to separate test suite that runs before other tests

    @marcphilipp
    marcphilipp committed Mar 1, 2025
    Copy the full SHA
    52fdf59 View commit details

Commits on Mar 2, 2025

  1. Polish log message for blank @⁠DisplayName 

    See #4349
    @sbrannen
    sbrannen committed Mar 2, 2025
    Copy the full SHA
    b3f2046 View commit details

  2. Avoid unnecessary imports for @⁠ParameterizedClass in Javadoc 

    This commit also makes the Javadoc references to @⁠ParameterizedClass
and @⁠ParameterizedTest consistent across argument source annotations.
    @sbrannen
    sbrannen committed Mar 2, 2025
    Copy the full SHA
    20b0eea View commit details

  3. Apply consistent code formatting

    @sbrannen
    sbrannen committed Mar 2, 2025
    Copy the full SHA
    34509e5 View commit details

  4. Polishing

    @sbrannen
    sbrannen committed Mar 2, 2025
    Copy the full SHA
    603b109 View commit details
Showing 585 changed files with 24,514 additions and 5,817 deletions.
2 changes: 1 addition & 1 deletion .github/actions/main-build/action.yml
View file
Original file line number Diff line number Diff line change
@@ -16,7 +16,7 @@ runs:
with:
arguments: ${{ inputs.arguments }}
encryptionKey: ${{ inputs.encryptionKey }}
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
if: ${{ always() }}
with:
name: Open Test Reports (${{ github.job }})
17 changes: 17 additions & 0 deletions .github/actions/maven-central-user-token/action.yml
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
name: Prepare Maven Central user token
description: Compute the Maven Central user token from username and password
inputs:
username:
required: true
description: Maven Central username
password:
required: true
description: Maven Central password
runs:
using: "composite"
steps:
- shell: bash
run: |
USER_TOKEN=$(printf "${{ inputs.username }}:${{ inputs.password }}" | base64)
echo "::add-mask::$USER_TOKEN"
echo "MAVEN_CENTRAL_USER_TOKEN=$USER_TOKEN" >> $GITHUB_ENV
4 changes: 2 additions & 2 deletions .github/actions/run-gradle/action.yml
View file
Original file line number Diff line number Diff line change
@@ -11,13 +11,13 @@ inputs:
runs:
using: "composite"
steps:
- uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4
- uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
id: setup-gradle-jdk
with:
distribution: temurin
java-version: 21
check-latest: true
- uses: gradle/actions/setup-gradle@94baf225fe0a508e581a564467443d0e2379123b # v4
- uses: gradle/actions/setup-gradle@8379f6a1328ee0e06e2bb424dadb7b159856a326 # v4.4.0
with:
cache-encryption-key: ${{ inputs.encryptionKey }}
- shell: bash
2 changes: 1 addition & 1 deletion .github/actions/setup-test-jdk/action.yml
View file
Original file line number Diff line number Diff line change
@@ -8,7 +8,7 @@ inputs:
runs:
using: "composite"
steps:
- uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4
- uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
with:
distribution: ${{ inputs.distribution }}
java-version: 8
1 change: 1 addition & 0 deletions .github/renovate.json5
View file
Original file line number Diff line number Diff line change
@@ -3,6 +3,7 @@
extends: [
'github>junit-team/renovate-config',
],
baseBranches: ["main", "/^develop\\/.*/"],
packageRules: [
{
matchCurrentValue: '/^2\\./',
5 changes: 0 additions & 5 deletions .github/scripts/waitForMavenCentralSync.sh
View file

This file was deleted.

2 changes: 1 addition & 1 deletion .github/workflows/close-inactive-issues.yml
View file
Original file line number Diff line number Diff line change
@@ -11,7 +11,7 @@ jobs:
issues: write
pull-requests: write
steps:
- uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9
- uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0
with:
only-labels: "status: waiting-for-feedback"
days-before-stale: 14
6 changes: 3 additions & 3 deletions .github/workflows/codeql-analysis.yml
View file
Original file line number Diff line number Diff line change
@@ -32,9 +32,9 @@ jobs:
- javascript
steps:
- name: Check out repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Initialize CodeQL
uses: github/codeql-action/init@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3
uses: github/codeql-action/init@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
with:
languages: ${{ matrix.language }}
tools: linked
@@ -47,4 +47,4 @@ jobs:
-Dscan.tag.CodeQL \
allMainClasses
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3
uses: github/codeql-action/analyze@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
21 changes: 8 additions & 13 deletions .github/workflows/cross-version.yml
View file
Original file line number Diff line number Diff line change
@@ -22,34 +22,29 @@ jobs:
fail-fast: false
matrix:
jdk:
- version: 23
type: ga
- version: 24
type: ea
- version: 24
type: ea
release: leyden
type: ga
- version: 25
type: ea
name: "OpenJDK ${{ matrix.jdk.version }} (${{ matrix.jdk.release || matrix.jdk.type }})"
runs-on: ubuntu-latest
steps:
- name: Check out repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 1
- name: Set up Test JDK
uses: ./.github/actions/setup-test-jdk
- name: "Set up JDK ${{ matrix.jdk.version }} (${{ matrix.jdk.release || 'ea' }})"
if: matrix.jdk.type == 'ea'
uses: oracle-actions/setup-java@2e744f723b003fdd759727d0ff654c8717024845 # v1.4.0
uses: oracle-actions/setup-java@8fb9d7717810ccde9f8d4bef1e6f43d180f506b5 # v1.4.1
with:
website: jdk.java.net
release: ${{ matrix.jdk.release || matrix.jdk.version }}
version: latest
- name: "Set up JDK ${{ matrix.jdk.version }} (${{ matrix.jdk.distribution || 'temurin' }})"
if: matrix.jdk.type == 'ga'
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4
uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
with:
distribution: ${{ matrix.jdk.distribution || 'temurin' }}
java-version: ${{ matrix.jdk.version }}
@@ -67,7 +62,7 @@ jobs:
-Dscan.tag.JDK_${{ matrix.jdk.version }} \
build \
--no-configuration-cache #Disable configuration cache due to https://github.com/diffplug/spotless/issues/2318
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
if: ${{ always() }}
with:
name: Open Test Reports (${{ github.job }} ${{ matrix.jdk.version }} (${{ matrix.jdk.release || matrix.jdk.type }}))
@@ -81,15 +76,15 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 1
- name: Set up Test JDK
uses: ./.github/actions/setup-test-jdk
with:
distribution: semeru
- name: 'Set up JDK ${{ matrix.jdk }}'
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4
uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
with:
distribution: semeru
java-version: ${{ matrix.jdk }}
@@ -109,7 +104,7 @@ jobs:
-Dscan.tag.OpenJ9 \
build \
--no-configuration-cache # Disable configuration cache due to https://github.com/diffplug/spotless/issues/2318
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
if: ${{ always() }}
with:
name: Open Test Reports (${{ github.job }})
6 changes: 3 additions & 3 deletions .github/workflows/gradle-dependency-submission.yml
View file
Original file line number Diff line number Diff line change
@@ -15,14 +15,14 @@ jobs:
contents: write
steps:
- name: Check out repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 1
- name: Setup Java
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4
uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
with:
distribution: temurin
java-version: 21
check-latest: true
- name: Generate and submit dependency graph
uses: gradle/actions/dependency-submission@94baf225fe0a508e581a564467443d0e2379123b # v4
uses: gradle/actions/dependency-submission@8379f6a1328ee0e06e2bb424dadb7b159856a326 # v4.4.0
4 changes: 2 additions & 2 deletions .github/workflows/label-opened-issues.yml
View file
Original file line number Diff line number Diff line change
@@ -10,7 +10,7 @@ jobs:
permissions:
issues: write
steps:
- uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
- uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
with:
script: |
const issue = await github.rest.issues.get({
@@ -20,7 +20,7 @@ jobs:
});
const originalLabels = issue.data.labels.map(l => l.name);
const statusLabels = originalLabels.filter(l => l.startsWith("status: "));
if (statusLabels.length === 0) {
if (statusLabels.length === 0 && !originalLabels.includes("up-for-grabs")) {
github.rest.issues.addLabels({
issue_number: context.issue.number,
owner: context.repo.owner,
20 changes: 10 additions & 10 deletions .github/workflows/main.yml
View file
Original file line number Diff line number Diff line change
@@ -21,11 +21,11 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 1
- name: Install GraalVM
uses: graalvm/setup-graalvm@aafbedb8d382ed0ca6167d3a051415f20c859274 # v1
uses: graalvm/setup-graalvm@01ed653ac833fe80569f1ef9f25585ba2811baab # v1.3.3
with:
distribution: graalvm-community
version: 'latest'
@@ -41,15 +41,15 @@ jobs:
jacocoRootReport \
--no-configuration-cache # Disable configuration cache due to https://github.com/diffplug/spotless/issues/2318
- name: Upload to Codecov.io
uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5
uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
with:
token: ${{ secrets.CODECOV_TOKEN }}

Windows:
runs-on: windows-latest
steps:
- name: Check out repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 1
- name: Build
@@ -61,7 +61,7 @@ jobs:
runs-on: macos-latest
steps:
- name: Check out repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 1
- name: Build
@@ -79,21 +79,21 @@ jobs:
if: github.event_name == 'push' && github.repository == 'junit-team/junit5' && (startsWith(github.ref, 'refs/heads/releases/') || github.ref == 'refs/heads/main')
steps:
- name: Check out repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 1
- name: Publish
uses: ./.github/actions/run-gradle
env:
ORG_GRADLE_PROJECT_sonatypeUsername: ${{ secrets.SONATYPE_USERNAME }}
ORG_GRADLE_PROJECT_sonatypePassword: ${{ secrets.SONATYPE_PASSWORD }}
ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.MAVEN_CENTRAL_USERNAME }}
ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.MAVEN_CENTRAL_PASSWORD }}
with:
encryptionKey: ${{ secrets.GRADLE_ENCRYPTION_KEY }}
arguments: |
publish -x check \
prepareGitHubAttestation
- name: Generate build provenance attestations
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
with:
subject-path: documentation/build/attestation/*.jar

@@ -106,7 +106,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 1
- name: Install Graphviz
8 changes: 4 additions & 4 deletions .github/workflows/ossf-scorecard.yml
View file
Original file line number Diff line number Diff line change
@@ -21,12 +21,12 @@ jobs:

steps:
- name: "Checkout code"
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
persist-credentials: false

- name: "Run analysis"
uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
uses: ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186 # v2.4.1
with:
results_file: results.sarif
results_format: sarif
@@ -48,7 +48,7 @@ jobs:
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
# format to the repository Actions tab.
- name: "Upload artifact"
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.pre.node20
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
with:
name: SARIF file
path: results.sarif
@@ -57,6 +57,6 @@ jobs:
# Upload the results to GitHub's code scanning dashboard (optional).
# Commenting out will disable upload of results to your repo's Code Scanning dashboard
- name: "Upload to code-scanning"
uses: github/codeql-action/upload-sarif@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3
uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
with:
sarif_file: results.sarif
Loading