[PR #6788] [MERGED] [deps]: Update gradle/actions action to v6 #43957

Closed
opened 2026-04-23 22:37:38 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/bitwarden/android/pull/6788
Author: @renovate[bot]
Created: 4/13/2026
Status: Merged
Merged: 4/13/2026
Merged by: @SaintPatrck

Base: mainHead: renovate/gradle-actions-6.x


📝 Commits (1)

  • 4d15283 [deps]: Update gradle/actions action to v6

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 .github/actions/setup-android-build/action.yml (+1 -1)

📄 Description

This PR contains the following updates:

Package Type Update Change
gradle/actions action major v5.0.1v6.1.0

Release Notes

gradle/actions (gradle/actions)

v6.1.0

Compare Source

New: Basic Cache Provider

A new MIT-licensed Basic Caching provider is now available as an alternative to the proprietary Enhanced Caching provided by gradle-actions-caching. Choose Basic Caching by setting cache-provider: basic on setup-gradle or dependency-submission actions.

  • Built on @actions/cache -- fully open source
  • Caches ~/.gradle/caches and ~/.gradle/wrapper directories
  • Cache key derived from build files (*.gradle*, gradle-wrapper.properties, etc.)
  • Clean cache on build file changes (no restore keys, preventing stale entry accumulation)

Limitations vs Enhanced Caching: No cache cleanup, no deduplication of cached content, cached content is fixed unless build files change.

Revamped Licensing & Distribution Documentation

  • New DISTRIBUTION.md documents the licensing of each component (particularly Basic Caching vs Enhanced Caching)
  • Simplified licensing notices in README, docs, and runtime log output
  • Clear usage tiers: Enhanced Caching is free for public repos and in Free Preview for private repos

What's Changed

Full Changelog: https://github.com/gradle/actions/compare/v6.0.1...v6.1.0

v6.0.1

Compare Source

[!IMPORTANT]
The release of gradle/actions@v6 contains important changes to the license terms. More details in this blog post.
TL;DR: By upgrading to v6, you accept the Terms of Use for the gradle-actions-caching component.

Summary

The license changes in v6 introduced a gradle-actions-caching license notice that is printed in logs and in each job summary.

With this release, the license notice will be muted if build-scan terms have been accepted, or if a Develocity access key is provided.

What's Changed
  • Bump actions used in docs by @​Goooler in #​792
  • Add typing information for use by typesafegithub by @​bigdaz in #​910
  • Mute license warning when terms are accepted by @​bigdaz in #​911
  • Mention explicit license acceptance in notice by @​bigdaz in #​912
  • Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.21.1 to 2.21.2 in /sources/test/init-scripts in the gradle group across 1 directory by @​dependabot[bot] in #​907

Full Changelog: https://github.com/gradle/actions/compare/v6.0.0...v6.0.1

v6.0.0

Compare Source

[!IMPORTANT]
The release of gradle/actions@v6 contains important changes to the license terms. More details in this blog post.
TL;DR: By upgrading to v6, you accept the Terms of Use for the gradle-actions-caching component.

Summary
  • Caching functionality of 'gradle-actions' has been extracted into a separate gradle-actions-caching library, and is no longer open-source. See this blog post for more context.
  • Existing, rudimentary, configuration-cache support has been removed, pending a fully functional implementation in gradle-actions-caching.
  • Dependencies updated to address security vulnerabilities

[!IMPORTANT]

Licensing notice

The caching functionality in `gradle-actions` has been extracted into `gradle-actions-caching`, a proprietary commercial component that is not covered by the MIT License.
The bundled `gradle-actions-caching` component is licensed and governed by a separate license, available at https://gradle.com/legal/terms-of-use/.

The `gradle-actions-caching` component is used only when caching is enabled and is not loaded or used when caching is disabled.

Use of the `gradle-actions-caching` component is subject to a separate license, available at https://gradle.com/legal/terms-of-use/.
If you do not agree to these license terms, do not use the `gradle-actions-caching` component.

What's Changed

Full Changelog: https://github.com/gradle/actions/compare/v5.0.2...v6.0.0

v5.0.2

Compare Source

Summary

This release contains no functional changes. It updates dependencies and known Gradle wrapper checksums.

What's Changed

Full Changelog: https://github.com/gradle/actions/compare/v5.0.1...v5.0.2


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "every 2nd week starting on the 2 week of the year before 4am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/bitwarden/android/pull/6788 **Author:** [@renovate[bot]](https://github.com/apps/renovate) **Created:** 4/13/2026 **Status:** ✅ Merged **Merged:** 4/13/2026 **Merged by:** [@SaintPatrck](https://github.com/SaintPatrck) **Base:** `main` ← **Head:** `renovate/gradle-actions-6.x` --- ### 📝 Commits (1) - [`4d15283`](https://github.com/bitwarden/android/commit/4d1528327c585c9aa814a634caca57617f9c2d20) [deps]: Update gradle/actions action to v6 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `.github/actions/setup-android-build/action.yml` (+1 -1) </details> ### 📄 Description This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [gradle/actions](https://redirect.github.com/gradle/actions) | action | major | `v5.0.1` → `v6.1.0` | --- ### Release Notes <details> <summary>gradle/actions (gradle/actions)</summary> ### [`v6.1.0`](https://redirect.github.com/gradle/actions/releases/tag/v6.1.0) [Compare Source](https://redirect.github.com/gradle/actions/compare/v6.0.1...v6.1.0) #### New: Basic Cache Provider A new MIT-licensed **Basic Caching** provider is now available as an alternative to the proprietary **Enhanced Caching** provided by `gradle-actions-caching`. Choose Basic Caching by setting `cache-provider: basic` on `setup-gradle` or `dependency-submission` actions. - Built on `@actions/cache` -- fully open source - Caches `~/.gradle/caches` and `~/.gradle/wrapper` directories - Cache key derived from build files (`*.gradle*`, `gradle-wrapper.properties`, etc.) - Clean cache on build file changes (no restore keys, preventing stale entry accumulation) **Limitations vs Enhanced Caching:** No cache cleanup, no deduplication of cached content, cached content is fixed unless build files change. #### Revamped Licensing & Distribution Documentation - New **DISTRIBUTION.md** documents the licensing of each component (particularly Basic Caching vs Enhanced Caching) - Simplified licensing notices in README, docs, and runtime log output - Clear usage tiers: Enhanced Caching is free for public repos and in Free Preview for private repos #### What's Changed - Use a unique cache entry for wrapper-validation test by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;921](https://redirect.github.com/gradle/actions/pull/921) - Update Dependencies by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;922](https://redirect.github.com/gradle/actions/pull/922) - Update dependencies and resolve npm vulnerabilities by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;933](https://redirect.github.com/gradle/actions/pull/933) - Add open-source 'basic' cache provider and revamp licensing documentation by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;930](https://redirect.github.com/gradle/actions/pull/930) - Restructure caching documentation for basic and enhanced providers by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;934](https://redirect.github.com/gradle/actions/pull/934) **Full Changelog**: <https://github.com/gradle/actions/compare/v6.0.1...v6.1.0> ### [`v6.0.1`](https://redirect.github.com/gradle/actions/releases/tag/v6.0.1) [Compare Source](https://redirect.github.com/gradle/actions/compare/v6.0.0...v6.0.1) > \[!IMPORTANT] > The release of `gradle/actions@v6` contains important changes to the license terms. More details in [this blog post](https://blog.gradle.org/github-actions-for-gradle-v6). > **TL;DR**: By upgrading to v6, you accept the [Terms of Use](https://gradle.com/legal/terms-of-use/) for the `gradle-actions-caching` component. ##### Summary The [license changes in v6](https://blog.gradle.org/github-actions-for-gradle-v6) introduced a `gradle-actions-caching` license notice that is printed in logs and in each job summary. With this release, the license notice will be muted if build-scan terms have been accepted, or if a Develocity access key is provided. ##### What's Changed - Bump actions used in docs by [@&#8203;Goooler](https://redirect.github.com/Goooler) in [#&#8203;792](https://redirect.github.com/gradle/actions/pull/792) - Add typing information for use by typesafegithub by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;910](https://redirect.github.com/gradle/actions/pull/910) - Mute license warning when terms are accepted by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;911](https://redirect.github.com/gradle/actions/pull/911) - Mention explicit license acceptance in notice by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;912](https://redirect.github.com/gradle/actions/pull/912) - Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.21.1 to 2.21.2 in /sources/test/init-scripts in the gradle group across 1 directory by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;907](https://redirect.github.com/gradle/actions/pull/907) **Full Changelog**: <https://github.com/gradle/actions/compare/v6.0.0...v6.0.1> ### [`v6.0.0`](https://redirect.github.com/gradle/actions/releases/tag/v6.0.0) [Compare Source](https://redirect.github.com/gradle/actions/compare/v5.0.2...v6.0.0) > \[!IMPORTANT] > The release of `gradle/actions@v6` contains important changes to the license terms. More details in [this blog post](https://blog.gradle.org/github-actions-for-gradle-v6). > **TL;DR**: By upgrading to v6, you accept the [Terms of Use](https://gradle.com/legal/terms-of-use/) for the `gradle-actions-caching` component. ##### Summary - Caching functionality of 'gradle-actions' has been extracted into a separate `gradle-actions-caching` library, and is no longer open-source. See [this blog post](https://blog.gradle.org/github-actions-for-gradle-v6) for more context. - Existing, rudimentary, configuration-cache support has been removed, pending a fully functional implementation in `gradle-actions-caching`. - Dependencies updated to address security vulnerabilities > \[!IMPORTANT] > > #### Licensing notice > > The caching functionality in \`gradle-actions\` has been extracted into \`gradle-actions-caching\`, a proprietary commercial component that is not covered by the MIT License. > The bundled \`gradle-actions-caching\` component is licensed and governed by a separate license, available at <https://gradle.com/legal/terms-of-use/>. > > The \`gradle-actions-caching\` component is used only when caching is enabled and is not loaded or used when caching is disabled. > > Use of the \`gradle-actions-caching\` component is subject to a separate license, available at <https://gradle.com/legal/terms-of-use/>. > If you do not agree to these license terms, do not use the \`gradle-actions-caching\` component. ##### What's Changed - Bump the npm-dependencies group in /sources with 2 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;866](https://redirect.github.com/gradle/actions/pull/866) - Update known wrapper checksums by [@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot] in [#&#8203;868](https://redirect.github.com/gradle/actions/pull/868) - Dependency updates by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;876](https://redirect.github.com/gradle/actions/pull/876) - Update known wrapper checksums by [@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot] in [#&#8203;878](https://redirect.github.com/gradle/actions/pull/878) - Bump [@&#8203;types/node](https://redirect.github.com/types/node) from 25.3.3 to 25.3.5 in /sources in the npm-dependencies group across 1 directory by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;877](https://redirect.github.com/gradle/actions/pull/877) - Bump the github-actions group across 3 directories with 3 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;867](https://redirect.github.com/gradle/actions/pull/867) - Update known wrapper checksums by [@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot] in [#&#8203;881](https://redirect.github.com/gradle/actions/pull/881) - Bump the npm-dependencies group in /sources with 6 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;879](https://redirect.github.com/gradle/actions/pull/879) - Bump the github-actions group across 3 directories with 5 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;880](https://redirect.github.com/gradle/actions/pull/880) - Remove configuration-cache support by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;884](https://redirect.github.com/gradle/actions/pull/884) - Extract caching logic into a separate `gradle-actions-caching` component by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;885](https://redirect.github.com/gradle/actions/pull/885) - Update gradle-actions-caching library to v0.3.0 by [@&#8203;bot-githubaction](https://redirect.github.com/bot-githubaction) in [#&#8203;899](https://redirect.github.com/gradle/actions/pull/899) - Avoid windows shutdown bug by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;900](https://redirect.github.com/gradle/actions/pull/900) - Dependency updates by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;905](https://redirect.github.com/gradle/actions/pull/905) - Fix critical and high npm vulnerabilities by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;904](https://redirect.github.com/gradle/actions/pull/904) - Fix rendering of job-disabled message by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;909](https://redirect.github.com/gradle/actions/pull/909) **Full Changelog**: <https://github.com/gradle/actions/compare/v5.0.2...v6.0.0> ### [`v5.0.2`](https://redirect.github.com/gradle/actions/releases/tag/v5.0.2) [Compare Source](https://redirect.github.com/gradle/actions/compare/v5.0.1...v5.0.2) #### Summary This release contains no functional changes. It updates dependencies and known Gradle wrapper checksums. #### What's Changed - Update dependencies by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;851](https://redirect.github.com/gradle/actions/pull/851) - Bump the github-actions group across 2 directories with 3 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;850](https://redirect.github.com/gradle/actions/pull/850) - Update DV config by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;848](https://redirect.github.com/gradle/actions/pull/848) - Convert project to ESM and update dependencies by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;854](https://redirect.github.com/gradle/actions/pull/854) - Workflow fixes by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;856](https://redirect.github.com/gradle/actions/pull/856) - Remove superfluous text from log message by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;861](https://redirect.github.com/gradle/actions/pull/861) - Bump the github-actions group across 1 directory with 2 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;860](https://redirect.github.com/gradle/actions/pull/860) - Bump the npm-dependencies group across 1 directory with 3 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;859](https://redirect.github.com/gradle/actions/pull/859) - Update known wrapper checksums by [@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot] in [#&#8203;857](https://redirect.github.com/gradle/actions/pull/857) - Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.21.0 to 2.21.1 in /sources/test/init-scripts in the gradle group across 1 directory by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;862](https://redirect.github.com/gradle/actions/pull/862) - Bump the npm-dependencies group in /sources with 2 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;863](https://redirect.github.com/gradle/actions/pull/863) - Bump github/codeql-action from 4.32.3 to 4.32.4 in the github-actions group across 1 directory by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;864](https://redirect.github.com/gradle/actions/pull/864) **Full Changelog**: <https://github.com/gradle/actions/compare/v5.0.1...v5.0.2> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/bitwarden/android). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJtYWpvci11cGRhdGUiXX0=--> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-23 22:37:38 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#43957