Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tooling updates: Gradle-wrapper + Android Plugin #76

Merged
merged 2 commits into from
Oct 13, 2023

Conversation

juleskers
Copy link
Collaborator

With our new CI Gradle-plugin, Dependabot is saying that our builds are using outdated, vulnerable dependencies.

I'm fairly certain that all of those are deep in Gradle itself, so there isn't much we can do.
I wanted to see if upgrading to the latest version of plugins helps any.

The gradle-wrapper should be inspected by our fancy new wrapper-validation-action, so that's a nice test too.

In the famous words of Great Barrayaran Emperor Gregor Vorbarra, "Let's see what happens" 😄

Jules Kerssemakers added 2 commits October 1, 2023 19:59
@juleskers juleskers self-assigned this Oct 8, 2023
@pserwylo
Copy link
Collaborator

Sounds good to me, lets see how it goes. Sometimes bumping Gradle requires changes to the F-Droid build. In fact, our recent bump through a few major versions (or perhaps it was the Android Gradle Plugin), required Java 17, which isn't on the build server. A wonderful fdroiddata maintainer fixed that for us by adding an apt-get install openjdk-17-jdk (or whatever).

I don't think this minor bump from 8.0.2 -> 8.1.0 would require anything similar, so should be an easy merge.

@pserwylo pserwylo merged commit c72d18a into master Oct 13, 2023
1 check passed
@juleskers juleskers deleted the depend-on-dependabot branch December 17, 2023 21:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants