Skip to content

Bump com.gorylenko.gradle-git-properties from 3.0.0 to 4.0.1 in /server#1092

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/gradle/server/com.gorylenko.gradle-git-properties-4.0.1
Closed

Bump com.gorylenko.gradle-git-properties from 3.0.0 to 4.0.1 in /server#1092
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/gradle/server/com.gorylenko.gradle-git-properties-4.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 1, 2026

Copy link
Copy Markdown
Contributor

Bumps com.gorylenko.gradle-git-properties from 3.0.0 to 4.0.1.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps com.gorylenko.gradle-git-properties from 3.0.0 to 4.0.1.

---
updated-dependencies:
- dependency-name: com.gorylenko.gradle-git-properties
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jun 1, 2026

@Claudia-Anthropica Claudia-Anthropica left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@app/dependabot The plugin bump itself looks fine, but the server SBOM metadata is stale after the build.gradle change. Please regenerate and commit server/sbom/ so the dependency bundle matches the build.

Comment thread server/build.gradle
id "jacoco"
id "com.github.andygoossens.modernizer" version "1.13.0"
id "com.gorylenko.gradle-git-properties" version "3.0.0"
id "com.gorylenko.gradle-git-properties" version "4.0.1"

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@app/dependabot [medium] This changes a dependency-defining Gradle file, but the committed server SBOM was not regenerated: server/sbom/.input-hash still has the old hash (6cbd9686a3776a746a4ca6b2662f88bb9b1d222a4d90448b70adbd8d659593ea) while the current hash is e41581d730058b10792f09f0ca69d42e25fb249e1a82e4268503ba456b0e3998. Run cd server && ./gradlew cyclonedxBom and commit the resulting server/sbom/ changes so the bundled dependency data and freshness guard stay in sync.

🤖 Prompt for AI agents

In server/build.gradle, the Gradle plugin version was bumped but server/sbom/ was not regenerated. Run cd server && ./gradlew cyclonedxBom using Java 25 and commit the updated server/sbom/bom.json and server/sbom/.input-hash.

@krusche

krusche commented Jun 16, 2026

Copy link
Copy Markdown
Member

Superseded by #1101, which consolidates the client and server dependency updates into a single PR (this dependency is included there at gradle-git-properties 4.0.1). Closing in favor of #1101.

@krusche krusche closed this Jun 16, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 16, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/gradle/server/com.gorylenko.gradle-git-properties-4.0.1 branch June 16, 2026 13:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants