Skip to content

Commit ee1529e

Browse files
Copilotkbukum1mchammer01
authored
Clarify Gradle Wrapper update behavior in Dependabot documentation (#59472)
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: kbukum1 <171620528+kbukum1@users.noreply.github.com> Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
1 parent 83232d8 commit ee1529e

1 file changed

Lines changed: 9 additions & 2 deletions

File tree

data/reusables/dependabot/supported-package-managers.md

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -120,13 +120,20 @@ For more information about using {% data variables.product.prodname_dependabot_v
120120

121121
### Gradle
122122

123-
{% data variables.product.prodname_dependabot %} doesn't run Gradle but supports updates to the following files:
123+
{% data variables.product.prodname_dependabot %} supports updates to the following files without needing to run Gradle:
124+
124125
* `build.gradle`, `build.gradle.kts` (for Kotlin projects)
125126
* `gradle/libs.versions.toml` (for projects using a standard Gradle version catalog)
126127
* `gradle.lockfile` (for projects using Gradle dependency locking)
127-
* `gradle/wrapper/gradle-wrapper.properties` (for the Gradle Wrapper)
128128
* Files included via the `apply` declaration that have `dependencies` in the filename. Note that `apply` does not support `apply to`, recursion, or advanced syntaxes (for example, Kotlin's `apply` with `mapOf`, filenames defined by property).
129129

130+
To update the Gradle Wrapper, {% data variables.product.prodname_dependabot %} runs Gradle and updates:
131+
132+
* `gradle/wrapper/gradle-wrapper.properties`
133+
* `gradlew`
134+
* `gradlew.bat`
135+
* `gradle/wrapper/gradle-wrapper.jar`
136+
130137
{% data variables.product.prodname_dependabot %} uses information from the `pom.xml` file of dependencies to add links to release information in update pull requests. If the information is omitted from the `pom.xml` file, then it cannot be included in {% data variables.product.prodname_dependabot %} pull requests, see [AUTOTITLE](/code-security/dependabot/ecosystems-supported-by-dependabot/optimizing-java-packages-dependabot).
131138

132139
For {% data variables.product.prodname_dependabot_security_updates %}, Gradle support is limited to manual uploads of the dependency graph data using the {% data variables.dependency-submission-api.name %}. For more information about the {% data variables.dependency-submission-api.name %}, see [AUTOTITLE](/code-security/supply-chain-security/understanding-your-software-supply-chain/using-the-dependency-submission-api).

0 commit comments

Comments
 (0)