Skip to content

Skip Gradle cooldown metadata fetch when cooldown is not configured#15136

Open
yeikel wants to merge 1 commit into
dependabot:mainfrom
yeikel:fix-gradle-cooldown
Open

Skip Gradle cooldown metadata fetch when cooldown is not configured#15136
yeikel wants to merge 1 commit into
dependabot:mainfrom
yeikel:fix-gradle-cooldown

Conversation

@yeikel
Copy link
Copy Markdown
Contributor

@yeikel yeikel commented May 25, 2026

What are you trying to accomplish?

Avoids unnecessary network requests to fetch release-date metadata on every Gradle job when the user has no cooldown configured (the default).

Fixes #14152

Anything you want to highlight for special attention from reviewers?

As described in #14152, fetching this metadata by default when cooldown is not configured is wasteful

How will you know you've accomplished your goal?

  • Both existing and new tests pass

CLI tests:

Reproducer: https://github.com/yeikel/dependabot-reproducer-issue-15136

  1. The metadata is not fetched when cooldown is not configured

Before:

image

After:

image
  1. The metatadata continues to to be fetched when cooldown is configured
image

Checklist

  • I have run the complete test suite to ensure all tests and linters pass.
  • I have thoroughly tested my code changes to ensure they work as expected, including adding additional tests for new functionality.
  • I have written clear and descriptive commit messages.
  • I have provided a detailed description of the changes in the pull request, including the problem it addresses, how it fixes the problem, and any relevant details about the implementation.
  • I have ensured that the code is well-documented and easy to understand.

Avoids unnecessary network requests to fetch release-date metadata on
every Gradle job when the user has no cooldown configured (the default).

Fixes dependabot#14152
@github-actions github-actions Bot added the L: java:gradle Maven packages via Gradle label May 25, 2026
@yeikel yeikel marked this pull request as ready for review May 25, 2026 21:41
@yeikel yeikel requested a review from a team as a code owner May 25, 2026 21:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

L: java:gradle Maven packages via Gradle

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Gradle: dependabot is fetching cooldown related metadata even if cooldown is disabled

1 participant