Skip to content

Bump gradle/actions from 5 to 6#1695

Merged
Frisch12 merged 1 commit intomainfrom
dependabot/github_actions/gradle/actions-6
Apr 4, 2026
Merged

Bump gradle/actions from 5 to 6#1695
Frisch12 merged 1 commit intomainfrom
dependabot/github_actions/gradle/actions-6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 30, 2026

Bumps gradle/actions from 5 to 6.

Release notes

Sourced from gradle/actions's releases.

v6.0.0

[!IMPORTANT] The release of gradle/actions@v6 contains important changes to the license terms. More details in this blog post. TL;DR: By upgrading to v6, you accept the Terms of Use for the gradle-actions-caching component.

Summary

  • Caching functionality of 'gradle-actions' has been extracted into a separate gradle-actions-caching library, and is no longer open-source. See this blog post for more context.
  • Existing, rudimentary, configuration-cache support has been removed, pending a fully functional implementation in gradle-actions-caching.
  • Dependencies updated to address security vulnerabilities

[!IMPORTANT]

Licensing notice

The caching functionality in `gradle-actions` has been extracted into `gradle-actions-caching`, a proprietary commercial component that is not covered by the MIT License. The bundled `gradle-actions-caching` component is licensed and governed by a separate license, available at https://gradle.com/legal/terms-of-use/.

The `gradle-actions-caching` component is used only when caching is enabled and is not loaded or used when caching is disabled.

Use of the `gradle-actions-caching` component is subject to a separate license, available at https://gradle.com/legal/terms-of-use/. If you do not agree to these license terms, do not use the `gradle-actions-caching` component.

What's Changed

Full Changelog: gradle/actions@v5.0.2...v6.0.0

v5.0.2

Summary

This release contains no functional changes. It updates dependencies and known Gradle wrapper checksums.

What's Changed

... (truncated)

Commits
  • 50e97c2 Link to docs for caching providers
  • f2e6298 Restructure caching documentation for basic and enhanced providers (#934)
  • b294b1e Really fix integ-test-full
  • 83d3189 Revise license details for gradle-actions-caching
  • 1d5db06 Update license link for gradle-actions-caching component
  • 1c80961 Fix license link for Enhanced Caching component
  • 9e99920 Fix integ-test-full workflow
  • bb8aaaf Fix workflow permissions
  • f5dfb43 [bot] Update dist directory
  • ff9ae24 Add open-source 'basic' cache provider and revamp licensing documentation (#930)
  • Additional commits viewable in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Mar 30, 2026
@Frisch12
Copy link
Copy Markdown
Member

Frisch12 commented Apr 3, 2026

@dependabot rebase

Bumps [gradle/actions](https://github.com/gradle/actions) from 5 to 6.
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](gradle/actions@v5...v6)

---
updated-dependencies:
- dependency-name: gradle/actions
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/gradle/actions-6 branch from 6c09e38 to 51a5471 Compare April 3, 2026 16:07
@Frisch12
Copy link
Copy Markdown
Member

Frisch12 commented Apr 3, 2026

Automated Review — gradle/actions v5 → v6 (Major Version Bump)

Summary

The diff is straightforward — only version bumps from @v5 to @v6 across three workflow files. All CI checks pass.

Licensing change

The main change in v6 is that the caching functionality has been extracted into a proprietary gradle-actions-caching component, governed by Gradle's Terms of Use instead of the MIT License. By upgrading to v6, you accept these terms. The caching component is only loaded when caching is enabled.

Since v6.2.0, an open-source "basic" cache provider is available as an alternative, but the enhanced caching remains proprietary.

Result

Technically safe to merge — all checks green, no breaking changes. However, the licensing change is a policy decision that needs your sign-off.

@Frisch12 Frisch12 merged commit adc3514 into main Apr 4, 2026
12 checks passed
@Frisch12 Frisch12 deleted the dependabot/github_actions/gradle/actions-6 branch April 4, 2026 14:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant