@@ -14,15 +14,17 @@ jobs:
1414 runs-on : ubuntu-latest
1515 steps :
1616 - name : Checkout repository
17- uses : actions/checkout@v4
17+ uses : actions/checkout@v5
1818 with :
1919 token : ${{ secrets.GH_TOKEN }}
20- - uses : gradle/wrapper-validation-action@v3
20+ - uses : gradle/actions/ wrapper-validation@v4
2121 - name : Set up JDK
22- uses : actions/setup-java@v4
22+ uses : actions/setup-java@v5
2323 with :
2424 distribution : ' temurin'
25- java-version : ' 17'
25+ java-version : |
26+ 17
27+ 21
2628 - name : Set the current release version
2729 id : release_version
2830 run : echo "release_version=${GITHUB_REF:11}" >> $GITHUB_OUTPUT
4749 echo $GPG_FILE | base64 -d > secring.gpg
4850 # Publish both locally and to Sonatype.
4951 # The artifacts stored locally will be used to generate the SLSA provenance.
50- ./gradlew publishAllPublicationsToBuildRepository publishToSonatype closeAndReleaseSonatypeStagingRepository
52+ ./gradlew publishToMavenCentral --publishing-type=AUTOMATIC
5153 # Read the current version from gradle.properties.
5254 VERSION=$(./gradlew properties | grep 'version:' | awk '{print $2}')
5355 # Read the project group from gradle.properties.
@@ -115,7 +117,7 @@ jobs:
115117 artifacts-sha256 : ${{ steps.set-hash.outputs.artifacts-sha256 }}
116118 steps :
117119 - name : Download artifacts-sha256
118- uses : actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3 .0
120+ uses : actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0 .0
119121 with :
120122 name : artifacts-sha256
121123 # The SLSA provenance generator expects the hash digest of artifacts to be passed as a job
@@ -146,9 +148,9 @@ jobs:
146148 if : startsWith(github.ref, 'refs/tags/')
147149 steps :
148150 - name : Checkout repository
149- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
151+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
150152 - name : Download artifacts
151- uses : actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3 .0
153+ uses : actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0 .0
152154 with :
153155 name : gradle-build-outputs
154156 path : build/repo
0 commit comments