Skip to content

Conversation

@ribafish
Copy link
Member

@ribafish ribafish commented Sep 1, 2025

Created a nightly job to run against future Gradle versions. The building and publish to maven local are executed with the next release candidate, testing against the published artifact is done against the current, rc and nightly Gradle versions.

@ribafish ribafish requested a review from a team September 1, 2025 11:27
…in permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Gašper Kojek <[email protected]>
Copy link
Member

@erichaagdev erichaagdev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good so far, just a few suggestions.

uses: gradle/actions/setup-gradle@v4
with:
develocity-access-key: ${{ secrets.DV_SOLUTIONS_ACCESS_KEY }}
gradle-version: 'release-candidate'
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we should focus only on verifying plugin compatibility here.

The primary goal of testing against RC/nightly versions is to catch compatibility issues in the plugin for users proactively. Any incompatibilities with the project's build are less critical and can be handled with the Wrapperbot PR that upgrades the Gradle version.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

While that's true, the release-candidate should be stabile enough to use for building IMO, I'd say we want to be as up to date as possible if someone does take this projects build as a sample.

Copy link
Member

@erichaagdev erichaagdev Sep 5, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It might be stable enough, but I still feel we should build with the Wrapper version. This workflow should only focus on verifying whether the current state of main is compatible with upcoming Gradle releases. Anything else should be outside the scope of this workflow.

If someone uses this project as a sample, they will also build using the Wrapper version unless they take it upon themselves to upgrade the Wrapper, at which point the possibility of incompatibilities should be expected.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Since we're testing against future Gradle versions and it's not blocking any release cycles or anything like that, I still feel we should be proactively fixing any issues that may pop up with a new Gradle RC version when building the CCUD itself. This feels like a perfect opportunity to ensure that.

Empty lines, workflow (file) name, changed project under test name, added gradle and jdk versions as custom values
…data-gradle-plugin into gk/nightlyGHA

* 'gk/nightlyGHA' of github.com:gradle/common-custom-user-data-gradle-plugin:
  Potential fix for code scanning alert no. 13: Workflow does not contain permissions

# Conflicts:
#	.github/workflows/build-verification-nightly.yml
@ribafish ribafish requested a review from erichaagdev September 5, 2025 10:51
Copy link
Member

@erichaagdev erichaagdev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One minor suggestion, but otherwise LGTM!

@ribafish ribafish merged commit d6eb838 into main Sep 11, 2025
27 checks passed
@ribafish ribafish deleted the gk/nightlyGHA branch September 11, 2025 11:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants