Skip to content

chore: bump GitHub Actions dependencies to latest versions#667

Merged
torlando-tech merged 2 commits intomainfrom
worktree-workflow-updates
Mar 12, 2026
Merged

chore: bump GitHub Actions dependencies to latest versions#667
torlando-tech merged 2 commits intomainfrom
worktree-workflow-updates

Conversation

@torlando-tech
Copy link
Copy Markdown
Owner

Summary

  • gradle/actions/wrapper-validation: v3/v4 → v5 (ci, pre-release)
  • gradle/actions/setup-gradle: v4 → v5 (ci, pre-release, release)
  • softprops/action-gh-release: v1 → v2 (pre-release)
  • actions/github-script: v7 → v8 (ci)

Test plan

  • CI passes on this PR (validates the updated actions work)

🤖 Generated with Claude Code

- gradle/actions/wrapper-validation: v3/v4 → v5
- gradle/actions/setup-gradle: v4 → v5
- softprops/action-gh-release: v1 → v2 (pre-release)
- actions/github-script: v7 → v8 (ci)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@greptile-apps
Copy link
Copy Markdown
Contributor

greptile-apps bot commented Mar 12, 2026

Greptile Summary

This PR bumps four GitHub Actions dependencies to their latest major versions across three workflow files. The upgrades cover gradle/actions/setup-gradle (v4→v5), gradle/actions/wrapper-validation (v3/v4→v5), softprops/action-gh-release (v1→v2), and actions/github-script (v7→v8). All action configurations (inputs/parameters) used in these workflows remain compatible with the updated versions, and the changes fit neatly into the project's standard CI, pre-release, and release workflows.

Key changes:

  • gradle/actions/setup-gradle@v5 applied consistently across all three workflow files (7 call sites total)
  • gradle/actions/wrapper-validation@v5 replaces both a v3 (prerelease workflow) and v4 (ci workflow) reference — the v3→v5 jump intentionally skips v4 per the PR description
  • softprops/action-gh-release@v2 updated in build-prerelease-apk.yml; release.yml was already using v2 prior to this PR
  • actions/github-script@v8 updated in ci.yml; the script's use of github.rest.issues.createComment is compatible with v8's Octokit client

Confidence Score: 4/5

  • This PR is safe to merge; it is a routine dependency bump with no logic changes and all action parameters remain compatible.
  • All bumped actions have stable v5/v2/v8 releases and the input parameters used in these workflows (e.g., cache-read-only, tag_name, files, script) are supported in the new versions. The only minor uncertainty is around undiscovered breaking changes in major version upgrades (especially softprops/action-gh-release v1→v2 and gradle/actions/setup-gradle v4→v5), which CI on this PR should confirm. No application code is modified.
  • No files require special attention.

Important Files Changed

Filename Overview
.github/workflows/build-prerelease-apk.yml Three action bumps: gradle/actions/setup-gradle v4→v5, gradle/actions/wrapper-validation v3→v5 (skipping v4, intentional per PR description), and softprops/action-gh-release v1→v2. Configuration parameters look compatible with the new versions.
.github/workflows/ci.yml Five action bumps: gradle/actions/wrapper-validation and gradle/actions/setup-gradle (×4 jobs) v4→v5, and actions/github-script v7→v8. The github-script usage (github.rest.issues.createComment) is compatible with v8's Octokit REST API.
.github/workflows/release.yml Single change: gradle/actions/setup-gradle v4→v5. Minimal risk; the action parameters used (cache-read-only: false) are unchanged and supported in v5.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Push / PR / Tag] --> B{Workflow trigger}
    B -->|push/PR to main| C[ci.yml]
    B -->|workflow_dispatch| D[build-prerelease-apk.yml]
    B -->|push tag v*| E[release.yml]

    C --> C1["gradle/actions/wrapper-validation@v5 ✅"]
    C --> C2["gradle/actions/setup-gradle@v5 ✅\n×4 jobs"]
    C --> C3["actions/github-script@v8 ✅\nThread audit PR comment"]

    D --> D1["gradle/actions/setup-gradle@v5 ✅"]
    D --> D2["gradle/actions/wrapper-validation@v5 ✅\ncontinue-on-error: true"]
    D --> D3["softprops/action-gh-release@v2 ✅\nCreate Pre-Release"]

    E --> E1["gradle/actions/setup-gradle@v5 ✅"]
    E --> E2["softprops/action-gh-release@v2\nalready at v2 pre-PR"]
Loading

Last reviewed commit: 6d5871e

@sentry
Copy link
Copy Markdown
Contributor

sentry bot commented Mar 12, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Pin android-emulator-runner to v2.36.0 (AVD creation fix) and add
timeout to adb logcat capture so a dead emulator can't block the
job for 29+ minutes.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@torlando-tech torlando-tech merged commit cc454ed into main Mar 12, 2026
14 checks passed
@torlando-tech torlando-tech deleted the worktree-workflow-updates branch March 12, 2026 02:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant