@@ -14,15 +14,17 @@ jobs:
14
14
runs-on : ubuntu-latest
15
15
steps :
16
16
- name : Checkout repository
17
- uses : actions/checkout@v4
17
+ uses : actions/checkout@v5
18
18
with :
19
19
token : ${{ secrets.GH_TOKEN }}
20
- - uses : gradle/wrapper-validation-action@v3
20
+ - uses : gradle/actions/ wrapper-validation@v4
21
21
- name : Set up JDK
22
- uses : actions/setup-java@v4
22
+ uses : actions/setup-java@v5
23
23
with :
24
24
distribution : ' temurin'
25
- java-version : ' 17'
25
+ java-version : |
26
+ 17
27
+ 21
26
28
- name : Set the current release version
27
29
id : release_version
28
30
run : echo "release_version=${GITHUB_REF:11}" >> $GITHUB_OUTPUT
@@ -115,7 +117,7 @@ jobs:
115
117
artifacts-sha256 : ${{ steps.set-hash.outputs.artifacts-sha256 }}
116
118
steps :
117
119
- name : Download artifacts-sha256
118
- uses : actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3 .0
120
+ uses : actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0 .0
119
121
with :
120
122
name : artifacts-sha256
121
123
# The SLSA provenance generator expects the hash digest of artifacts to be passed as a job
@@ -146,9 +148,9 @@ jobs:
146
148
if : startsWith(github.ref, 'refs/tags/')
147
149
steps :
148
150
- name : Checkout repository
149
- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
151
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
150
152
- name : Download artifacts
151
- uses : actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3 .0
153
+ uses : actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0 .0
152
154
with :
153
155
name : gradle-build-outputs
154
156
path : build/repo
0 commit comments