Bump github/codeql-action from 3.27.1 to 3.27.3 #841
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This workflow will build a Java project with Gradle and cache/restore any dependencies to improve the workflow execution time | |
| # For more information see: https://help.github.com/actions/language-and-framework-guides/building-and-testing-java-with-gradle | |
| name: Build | |
| on: | |
| push: | |
| branches: [ main ] | |
| pull_request: | |
| branches: [ main ] | |
| permissions: | |
| contents: read | |
| jobs: | |
| build: | |
| if: ${{ github.run_number != 1 }} | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| - uses: gradle/wrapper-validation-action@f9c9c575b8b21b6485636a91ffecd10e558c62f6 # v3.5.0 | |
| - name: Set up JDK | |
| uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4.5.0 | |
| with: | |
| java-version: '17' | |
| distribution: 'adopt' | |
| cache: gradle | |
| - name: Build | |
| env: | |
| COVERALLS_REPO_TOKEN: ${{ secrets.COVERALLS_REPO_TOKEN }} | |
| run: ./gradlew build coveralls | |
| - name: Upload Checkstyle reports | |
| if: failure() | |
| uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 | |
| with: | |
| name: reports | |
| path: '**/build/reports/**/*.xml' | |
| retention-days: 5 | |
| - name: Upload Test Results | |
| if: failure() | |
| uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 | |
| with: | |
| name: test-results-linux | |
| path: '**/build/test-results/**/*.xml' | |
| retention-days: 5 | |
| release: | |
| if: github.event_name == 'push' | |
| permissions: | |
| contents: write | |
| packages: write | |
| needs: build | |
| runs-on: ubuntu-latest | |
| concurrency: | |
| group: "${{ github.repository }}-release" | |
| steps: | |
| - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| - name: Fetch version history | |
| # Do NOT want to fetch all tags if building a specific tag. | |
| # Doing so could result in code published with wrong version, if newer tags have been pushed | |
| if: (!startsWith(github.ref, 'refs/tags/')) | |
| run: git fetch --tag --unshallow | |
| - name: Set up JDK | |
| uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4.5.0 | |
| with: | |
| java-version: '17' | |
| distribution: 'adopt' | |
| cache: gradle | |
| - name: Login to GitHub Container Registry | |
| uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Increment patch number | |
| run: | | |
| ./gradlew cV | |
| ./gradlew release clean | |
| ./gradlew cV | |
| - name: Publish jars | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: ./gradlew publish | |
| - name: Push Docker images | |
| run: ./gradlew pushAppImage |