From 7eeb8602474b0670c9ad327c94e54966ec5cc505 Mon Sep 17 00:00:00 2001 From: Claude Date: Wed, 29 Jul 2026 07:30:15 +0000 Subject: [PATCH] Bump signing-selftest Gradle 8.14.3 -> 9.6.1 Updates the gradle-version pin (and its doc comment) in the verify-signing-key-gradle job to the current Gradle 9.6.1. Affects only the throwaway GPG signing self-test job; no impact on the Maven reactor build. Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_01Thq9dBXBCnUbZntzotkcPg --- .github/workflows/publish.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index aa4f890..66db813 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -162,7 +162,7 @@ jobs: # SECURITY: prints no secret material. Key/passphrase reach Gradle only via env # (read by System.getenv at runtime); `set -x` is never enabled; the passphrase # is `::add-mask::`ed; Gradle runs with `--stacktrace` only. Only the produced - # `.asc` (exit code) is asserted. Uses Gradle 8.14.3. + # `.asc` (exit code) is asserted. Uses Gradle 9.6.1. # --------------------------------------------------------------------------- verify-signing-key-gradle: name: Verify GPG signing key — Gradle/BouncyCastle path (no secrets printed) @@ -176,7 +176,7 @@ jobs: distribution: temurin - uses: gradle/actions/setup-gradle@v6 with: - gradle-version: "8.14.3" + gradle-version: "9.6.1" - name: Sign a throwaway artifact via useInMemoryPgpKeys (BouncyCastle) shell: bash env: