Skip to content

Commit ad1b8f6

Browse files
yeikelgmazzo
authored andcommitted
Document that Gradle runs when updating the Gradle Wrapper (#2)
* Updated `dependabot`'s docs to add `Gradle Wrapper` * Document that Gradle runs when updating the Gradle Wrapper * Remove empty line --------- Co-authored-by: Guillermo Mazzola <gmazzo65@gmail.com>
1 parent a4365cc commit ad1b8f6

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

data/reusables/dependabot/supported-package-managers.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -128,6 +128,12 @@ For more information about using {% data variables.product.prodname_dependabot_v
128128
* `gradle/wrapper/gradle-wrapper.properties` (for the Gradle Wrapper)
129129
* Files included via the `apply` declaration that have `dependencies` in the filename. Note that `apply` does not support `apply to`, recursion, or advanced syntaxes (for example, Kotlin's `apply` with `mapOf`, filenames defined by property).
130130

131+
{% data variables.product.prodname_dependabot %} runs Gradle to update the Gradle Wrapper:
132+
* `gradle/wrapper/gradle-wrapper.properties`
133+
* `gradlew`
134+
* `gradlew.bat`
135+
* `gradle/wrapper/gradle-wrapper.jar`
136+
131137
{% data variables.product.prodname_dependabot %} uses information from the `pom.xml` file of dependencies to add links to release information in update pull requests. If the information is omitted from the `pom.xml` file, then it cannot be included in {% data variables.product.prodname_dependabot %} pull requests, see [AUTOTITLE](/code-security/dependabot/ecosystems-supported-by-dependabot/optimizing-java-packages-dependabot).
132138

133139
For {% data variables.product.prodname_dependabot_security_updates %}, Gradle support is limited to manual uploads of the dependency graph data using the {% data variables.dependency-submission-api.name %}. For more information about the {% data variables.dependency-submission-api.name %}, see [AUTOTITLE](/code-security/supply-chain-security/understanding-your-software-supply-chain/using-the-dependency-submission-api).

0 commit comments

Comments
 (0)