Skip to content

Update dummy.yml and remove gradle/wrapper-validation-action from approval#586

Closed
dave2wave wants to merge 2 commits intomainfrom
dave2wave-patch-1
Closed

Update dummy.yml and remove gradle/wrapper-validation-action from approval#586
dave2wave wants to merge 2 commits intomainfrom
dave2wave-patch-1

Conversation

@dave2wave
Copy link
Copy Markdown
Member

wrapper-validation-action uses another action by tag

wrapper-validation-action uses another action by tag

Signed-off-by: Dave Fisher <dave2wave@comcast.net>
Signed-off-by: Dave Fisher <dave2wave@comcast.net>
@dave2wave dave2wave changed the title Update dummy.yml and remove approval Update dummy.yml and remove grade/wrapper-validation-action from approval Mar 24, 2026
@dave2wave dave2wave changed the title Update dummy.yml and remove grade/wrapper-validation-action from approval Update dummy.yml and remove grade/wrapper-validation-action from approval Mar 24, 2026
@dave2wave dave2wave changed the title Update dummy.yml and remove grade/wrapper-validation-action from approval Update dummy.yml and remove gradle/wrapper-validation-action from approval Mar 24, 2026
@raboof
Copy link
Copy Markdown
Member

raboof commented Mar 26, 2026

I see (https://github.com/gradle/wrapper-validation-action/blob/main/action.yml#L29). This is used by a couple of actions:

apache/calcite-avatica
apache/fineract-credit-scorecard
apache/groovy-geb
apache/samza
apache/solr

might be nice to see if upstream would be open to a PR pinning it to a hash?

Copy link
Copy Markdown
Member

@raboof raboof left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ah it's archived, and recommends people should be using uses: gradle/actions/wrapper-validation@v3 instead. Seems fine to drop it then I think?

@raboof
Copy link
Copy Markdown
Member

raboof commented Mar 26, 2026

now merged as #601

@raboof raboof closed this Mar 26, 2026
@dave2wave
Copy link
Copy Markdown
Member Author

The trouble is that some yet unknown number of previously approved composite actions need to disapproved due to using actions via tag not sha. This PR was a start to a slow incremental process.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants