@@ -14,12 +14,12 @@ jobs:
14
14
runs-on : ubuntu-latest
15
15
steps :
16
16
- name : Checkout repository
17
- uses : actions/checkout@v4
17
+ uses : actions/checkout@v5
18
18
with :
19
19
token : ${{ secrets.GH_TOKEN }}
20
20
- uses : gradle/actions/wrapper-validation@v4
21
21
- name : Set up JDK
22
- uses : actions/setup-java@v4
22
+ uses : actions/setup-java@v5
23
23
with :
24
24
distribution : ' temurin'
25
25
java-version : |
49
49
echo $GPG_FILE | base64 -d > secring.gpg
50
50
# Publish both locally and to Sonatype.
51
51
# The artifacts stored locally will be used to generate the SLSA provenance.
52
- ./gradlew publishAllPublicationsToBuildRepository publishToSonatype closeAndReleaseSonatypeStagingRepository
52
+ ./gradlew publishToMavenCentral --publishing-type=AUTOMATIC
53
53
# Read the current version from gradle.properties.
54
54
VERSION=$(./gradlew properties | grep 'version:' | awk '{print $2}')
55
55
# Read the project group from gradle.properties.
@@ -117,7 +117,7 @@ jobs:
117
117
artifacts-sha256 : ${{ steps.set-hash.outputs.artifacts-sha256 }}
118
118
steps :
119
119
- name : Download artifacts-sha256
120
- uses : actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3 .0
120
+ uses : actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0 .0
121
121
with :
122
122
name : artifacts-sha256
123
123
# The SLSA provenance generator expects the hash digest of artifacts to be passed as a job
@@ -148,9 +148,9 @@ jobs:
148
148
if : startsWith(github.ref, 'refs/tags/')
149
149
steps :
150
150
- name : Checkout repository
151
- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
151
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
152
152
- name : Download artifacts
153
- uses : actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3 .0
153
+ uses : actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0 .0
154
154
with :
155
155
name : gradle-build-outputs
156
156
path : build/repo
0 commit comments