Skip to content

Merge pull request #361 from gocd-contrib/dependabot/gradle/org.asser… #260

Merge pull request #361 from gocd-contrib/dependabot/gradle/org.asser…

Merge pull request #361 from gocd-contrib/dependabot/gradle/org.asser… #260

name: Test and Release
on:
push:
branches: [ master ]
workflow_dispatch:
inputs:
prerelease:
description: 'The release should be an experimental release'
default: 'NO'
required: true
jobs:
test:
runs-on: ubuntu-latest
strategy:
matrix:
docker-version: # See https://endoflife.date/docker-engine / https://download.docker.com/linux/static/stable/x86_64/
- "25.0" # 2024-01 --> EOL ?
- "29" # 2025-11 --> EOL ?
fail-fast: false
steps:
- name: Harden the runner (Audit all outbound calls)
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
with:
egress-policy: audit
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
with:
fetch-depth: 0
- name: Set up JDK
uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5.1.0
with:
java-version: 21
distribution: temurin
cache: gradle
- name: Set up Docker
uses: docker/setup-docker-action@e61617a16c407a86262fb923c35a616ddbe070b3 # v4.6.0
with:
version: 'type=image,tag=${{ matrix.docker-version }}'
- name: Test with Gradle
run: ./gradlew assemble check
githubRelease:
needs: test
runs-on: ubuntu-latest
steps:
- name: Harden the runner (Audit all outbound calls)
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
with:
egress-policy: audit
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
with:
fetch-depth: 0
- name: Set up JDK
uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5.1.0
with:
java-version: 21
distribution: temurin
cache: gradle
- name: Release with Gradle
run: ./gradlew githubRelease
env:
GITHUB_USER: "gocd-contrib"
GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
PRERELEASE: "${{ github.event.inputs.prerelease }}"