Daz DeBoer
Daz DeBoer
Because [all dependencies are assigned to the settings.gradle.kts file](https://github.com/gradle/github-dependency-graph-gradle-plugin/issues/80), it can be difficult for users to work out how to fix vulnerable dependencies. (Attributing to a particular project would help...
We've been getting some odd bug reports that seem to be related to `gradle-home-cache-cleanup`, but it's not exactly clear how. We should add a little more logging so we know...
When a Job is cancelled, it may result in Gradle User Home being in an incomplete or inconsistent state. In this case, it's safer not to save the Gradle User...
If the Job execution is failed or cancelled, then it is quite possible that some _required_ downloads and assets in the Gradle User Home will be incorrectly flagged as "unused"...
With [improved cache-cleanup configurability in Gradle 8](https://docs.gradle.org/8.0-rc-3/userguide/directory_layout.html#dir:gradle_user_home:cache_cleanup), we may be able to simplify the code used to force the cleanup of all unused entries. Investigate.
When setting `gradle-home-cache-cleanup: true`, the action will attempt to remove all unused files from Gradle User Home before saving the state. When running a build with state loaded from the...
Currently, if a checksum isn't in the "known" list, we fetch every time. We could cache the results to avoid this unnecessary work.
Currently, if a wrapper checksum isn't in the "known" list we then fetch the checksums for _all_ Gradle versions (even those that are in the "known" list). Instead, we should...
This currently uses a PAT, which isn't ideal.
Currently, we recommend that users configure a separate workflow running the [wrapper-validation-action](https://github.com/marketplace/actions/gradle-wrapper-validation) to verify that the Gradle wrapper jar is not corrupted. Doing this automatically for any workflow using `setup-gradle`...