[ci] Update GitHub Actions to latest major/pinned release by gruenich · Pull Request #3272 · testng-team/testng

gruenich · 2026-04-30T05:21:46Z

Fixes most deprecation warnings that Node20.js will stop working in June.

Summary by CodeRabbit

Chores
- Updated GitHub Actions versions across all continuous integration workflows to the latest compatible releases. Changes include upgraded checkout (v6), Java setup, Gradle caching, and artifact upload utilities for improved workflow reliability and security.

Fixes most deprecation warnings that Node20.js will stop working in June.

coderabbitai · 2026-04-30T05:21:59Z

📝 Walkthrough

Walkthrough

GitHub Actions versions are updated across six CI/CD workflows: actions/checkout from v4 to v6, actions/setup-java from v4 to v5, actions/github-script to v9, burrunan/gradle-cache-action to v3, actions/upload-artifact to v7, with oracle-actions/setup-java pinned to v1.5.0 and gradle/actions/wrapper-validation downgraded to v2.

Changes

Cohort / File(s)	Summary
Checkout Action Upgrades `.github/workflows/gradle-wrapper-validation.yml`, `.github/workflows/label-commenter.yml`, `.github/workflows/publish-maven-central.yml`, `.github/workflows/publish-snapshot.yml`, `.github/workflows/test.yml`, `.github/workflows/update-gradle-wrapper.yml`	`actions/checkout` upgraded from v4 to v6 across all workflows.
Setup Java Action Upgrades `.github/workflows/publish-maven-central.yml`, `.github/workflows/publish-snapshot.yml`, `.github/workflows/test.yml`	`actions/setup-java` upgraded from v4 to v5 while maintaining Java 21 configuration with Zulu distribution.
Gradle Wrapper Validation Downgrade `.github/workflows/gradle-wrapper-validation.yml`	`gradle/actions/wrapper-validation` downgraded from v5 to v2.
Additional CI Action Updates `.github/workflows/test.yml`	Multiple actions updated: `oracle-actions/setup-java` pinned to v1.5.0 commit, `actions/github-script` to v9, `burrunan/gradle-cache-action` to v3, and `actions/upload-artifact` to v7.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

Possibly related PRs

[ci] Update GitHub Actions to latest major/pinned release #3271 — Updates identical GitHub Actions versions across the same workflow files with matching dependency bumps.

Suggested reviewers

juherr
krmahadevan

Poem

🐰 The workflows dance with actions new,
From v4 checking out to v6 through,
Java setup leaps from four to five,
These versions keep the builds alive,
A careful hop through CI/CD's way! ✨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: updating GitHub Actions to latest major/pinned releases across multiple workflows.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

⚔️ Resolve merge conflicts

Resolve merge conflict in branch feature/update-github-actions

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Review rate limit: 7/8 reviews remaining, refill in 7 minutes and 30 seconds.}

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

krmahadevan · 2026-04-30T05:23:36Z

@gruenich - There are merge conflicts.

coderabbitai

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In @.github/workflows/gradle-wrapper-validation.yml:
- Line 10: Update the GitHub Actions step that references the Gradle wrapper
validation action by changing the pinned version from
gradle/actions/wrapper-validation@v2 to the current major release
gradle/actions/wrapper-validation@v6 (e.g., v6.1.0) so the workflow uses the
latest supported major version; locate the step in the workflow that contains
the action identifier "gradle/actions/wrapper-validation@v2" and replace the
version tag accordingly.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

Push a commit to this branch (recommended)
Create a new PR with the fixes

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 4a61bcb7-beb4-42e0-aa90-646e8ef1b7c2

📥 Commits

Reviewing files that changed from the base of the PR and between ccc766a and 93268fa.

📒 Files selected for processing (6)

.github/workflows/gradle-wrapper-validation.yml
.github/workflows/label-commenter.yml
.github/workflows/publish-maven-central.yml
.github/workflows/publish-snapshot.yml
.github/workflows/test.yml
.github/workflows/update-gradle-wrapper.yml

coderabbitai · 2026-04-30T05:24:53Z

-      - uses: actions/checkout@v4
-      - uses: gradle/actions/wrapper-validation@v5
+      - uses: actions/checkout@v6
+      - uses: gradle/actions/wrapper-validation@v2


⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash set -euo pipefail echo "Latest gradle/actions release tag:" curl -fsSL https://api.github.com/repos/gradle/actions/releases/latest \ | sed -n 's/.*"tag_name": "\(v[^"]*\)".*/\1/p' | head -n1 echo echo "Official wrapper-validation doc usage:" curl -fsSL https://raw.githubusercontent.com/gradle/actions/main/docs/wrapper-validation.md \ | grep -n 'uses: gradle/actions/wrapper-validation@v' | head -n3

Repository: testng-team/testng

Length of output: 244

Upgrade wrapper-validation to the current major version on Line 10.

The action is pinned to @v2, but the current major is @v6 (v6.1.0), as confirmed by the official Gradle documentation and latest releases. Keeping the older version defeats the PR's goal of using current versions and risks deprecated runtime behavior.

Suggested fix

- - uses: gradle/actions/wrapper-validation@v2 + - uses: gradle/actions/wrapper-validation@v6

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed. In @.github/workflows/gradle-wrapper-validation.yml at line 10, Update the GitHub Actions step that references the Gradle wrapper validation action by changing the pinned version from gradle/actions/wrapper-validation@v2 to the current major release gradle/actions/wrapper-validation@v6 (e.g., v6.1.0) so the workflow uses the latest supported major version; locate the step in the workflow that contains the action identifier "gradle/actions/wrapper-validation@v2" and replace the version tag accordingly.

gruenich · 2026-04-30T05:27:13Z

I made a mistake in my last pull request. I am going to fix it

juherr

Upgrade wrapper action to latest too

gruenich · 2026-04-30T05:54:29Z

Replaced by #3273

[ci] Update GitHub Actions to latest major/pinned release

93268fa

Fixes most deprecation warnings that Node20.js will stop working in June.

gruenich requested review from juherr and krmahadevan as code owners April 30, 2026 05:21

coderabbitai Bot reviewed Apr 30, 2026

View reviewed changes

gruenich marked this pull request as draft April 30, 2026 05:26

juherr requested changes Apr 30, 2026

View reviewed changes

gruenich closed this Apr 30, 2026

gruenich deleted the feature/update-github-actions branch April 30, 2026 05:57

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[ci] Update GitHub Actions to latest major/pinned release#3272

[ci] Update GitHub Actions to latest major/pinned release#3272
gruenich wants to merge 1 commit into
testng-team:masterfrom
gruenich:feature/update-github-actions

gruenich commented Apr 30, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented Apr 30, 2026 •

edited

Loading

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested reviewers

Poem

Uh oh!

krmahadevan commented Apr 30, 2026

Uh oh!

coderabbitai Bot left a comment

Uh oh!

coderabbitai Bot Apr 30, 2026

Uh oh!

gruenich commented Apr 30, 2026

Uh oh!

juherr left a comment

Uh oh!

gruenich commented Apr 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

gruenich commented Apr 30, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Apr 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested reviewers

Poem

Uh oh!

krmahadevan commented Apr 30, 2026

Uh oh!

coderabbitai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

coderabbitai Bot Apr 30, 2026

Choose a reason for hiding this comment

Uh oh!

gruenich commented Apr 30, 2026

Uh oh!

juherr left a comment

Choose a reason for hiding this comment

Uh oh!

gruenich commented Apr 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

gruenich commented Apr 30, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Apr 30, 2026 •

edited

Loading