Update gradle/actions action to v6 (#5773)

renovate[bot] · sagarwal · web-flow · commit 6ccebd4601cd · 2026-04-27T09:20:00.000Z
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [gradle/actions](https://redirect.github.com/gradle/actions) | action | major | `v5` → `v6` | --- ### Release Notes <details> <summary>gradle/actions (gradle/actions)</summary> ### [`v6.1.0`](https://redirect.github.com/gradle/actions/releases/tag/v6.1.0) [Compare Source](https://redirect.github.com/gradle/actions/compare/v6.0.1...v6.1.0) #### New: Basic Cache Provider A new MIT-licensed **Basic Caching** provider is now available as an alternative to the proprietary **Enhanced Caching** provided by `gradle-actions-caching`. Choose Basic Caching by setting `cache-provider: basic` on `setup-gradle` or `dependency-submission` actions. - Built on `@actions/cache` -- fully open source - Caches `~/.gradle/caches` and `~/.gradle/wrapper` directories - Cache key derived from build files (`*.gradle*`, `gradle-wrapper.properties`, etc.) - Clean cache on build file changes (no restore keys, preventing stale entry accumulation) **Limitations vs Enhanced Caching:** No cache cleanup, no deduplication of cached content, cached content is fixed unless build files change. #### Revamped Licensing & Distribution Documentation - New **DISTRIBUTION.md** documents the licensing of each component (particularly Basic Caching vs Enhanced Caching) - Simplified licensing notices in README, docs, and runtime log output - Clear usage tiers: Enhanced Caching is free for public repos and in Free Preview for private repos #### What's Changed - Use a unique cache entry for wrapper-validation test by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;921](https://redirect.github.com/gradle/actions/pull/921) - Update Dependencies by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;922](https://redirect.github.com/gradle/actions/pull/922) - Update dependencies and resolve npm vulnerabilities by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;933](https://redirect.github.com/gradle/actions/pull/933) - Add open-source 'basic' cache provider and revamp licensing documentation by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;930](https://redirect.github.com/gradle/actions/pull/930) - Restructure caching documentation for basic and enhanced providers by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;934](https://redirect.github.com/gradle/actions/pull/934) **Full Changelog**: <gradle/actions@v6.0.1...v6.1.0> ### [`v6.0.1`](https://redirect.github.com/gradle/actions/releases/tag/v6.0.1) [Compare Source](https://redirect.github.com/gradle/actions/compare/v6...v6.0.1) > \[!IMPORTANT] > The release of `gradle/actions@v6` contains important changes to the license terms. More details in [this blog post](https://blog.gradle.org/github-actions-for-gradle-v6). > **TL;DR**: By upgrading to v6, you accept the [Terms of Use](https://gradle.com/legal/terms-of-use/) for the `gradle-actions-caching` component. ##### Summary The [license changes in v6](https://blog.gradle.org/github-actions-for-gradle-v6) introduced a `gradle-actions-caching` license notice that is printed in logs and in each job summary. With this release, the license notice will be muted if build-scan terms have been accepted, or if a Develocity access key is provided. ##### What's Changed - Bump actions used in docs by [@&#8203;Goooler](https://redirect.github.com/Goooler) in [#&#8203;792](https://redirect.github.com/gradle/actions/pull/792) - Add typing information for use by typesafegithub by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;910](https://redirect.github.com/gradle/actions/pull/910) - Mute license warning when terms are accepted by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;911](https://redirect.github.com/gradle/actions/pull/911) - Mention explicit license acceptance in notice by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;912](https://redirect.github.com/gradle/actions/pull/912) - Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.21.1 to 2.21.2 in /sources/test/init-scripts in the gradle group across 1 directory by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;907](https://redirect.github.com/gradle/actions/pull/907) **Full Changelog**: <gradle/actions@v6.0.0...v6.0.1> ### [`v6.0.0`](https://redirect.github.com/gradle/actions/releases/tag/v6.0.0) [Compare Source](https://redirect.github.com/gradle/actions/compare/v6...v6) > \[!IMPORTANT] > The release of `gradle/actions@v6` contains important changes to the license terms. More details in [this blog post](https://blog.gradle.org/github-actions-for-gradle-v6). > **TL;DR**: By upgrading to v6, you accept the [Terms of Use](https://gradle.com/legal/terms-of-use/) for the `gradle-actions-caching` component. ##### Summary - Caching functionality of 'gradle-actions' has been extracted into a separate `gradle-actions-caching` library, and is no longer open-source. See [this blog post](https://blog.gradle.org/github-actions-for-gradle-v6) for more context. - Existing, rudimentary, configuration-cache support has been removed, pending a fully functional implementation in `gradle-actions-caching`. - Dependencies updated to address security vulnerabilities > \[!IMPORTANT] > > #### Licensing notice > > The caching functionality in \`gradle-actions\` has been extracted into \`gradle-actions-caching\`, a proprietary commercial component that is not covered by the MIT License. > The bundled \`gradle-actions-caching\` component is licensed and governed by a separate license, available at <https://gradle.com/legal/terms-of-use/>. > > The \`gradle-actions-caching\` component is used only when caching is enabled and is not loaded or used when caching is disabled. > > Use of the \`gradle-actions-caching\` component is subject to a separate license, available at <https://gradle.com/legal/terms-of-use/>. > If you do not agree to these license terms, do not use the \`gradle-actions-caching\` component. ##### What's Changed - Bump the npm-dependencies group in /sources with 2 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;866](https://redirect.github.com/gradle/actions/pull/866) - Update known wrapper checksums by [@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot] in [#&#8203;868](https://redirect.github.com/gradle/actions/pull/868) - Dependency updates by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;876](https://redirect.github.com/gradle/actions/pull/876) - Update known wrapper checksums by [@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot] in [#&#8203;878](https://redirect.github.com/gradle/actions/pull/878) - Bump [@&#8203;types/node](https://redirect.github.com/types/node) from 25.3.3 to 25.3.5 in /sources in the npm-dependencies group across 1 directory by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;877](https://redirect.github.com/gradle/actions/pull/877) - Bump the github-actions group across 3 directories with 3 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;867](https://redirect.github.com/gradle/actions/pull/867) - Update known wrapper checksums by [@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot] in [#&#8203;881](https://redirect.github.com/gradle/actions/pull/881) - Bump the npm-dependencies group in /sources with 6 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;879](https://redirect.github.com/gradle/actions/pull/879) - Bump the github-actions group across 3 directories with 5 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;880](https://redirect.github.com/gradle/actions/pull/880) - Remove configuration-cache support by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;884](https://redirect.github.com/gradle/actions/pull/884) - Extract caching logic into a separate `gradle-actions-caching` component by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;885](https://redirect.github.com/gradle/actions/pull/885) - Update gradle-actions-caching library to v0.3.0 by [@&#8203;bot-githubaction](https://redirect.github.com/bot-githubaction) in [#&#8203;899](https://redirect.github.com/gradle/actions/pull/899) - Avoid windows shutdown bug by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;900](https://redirect.github.com/gradle/actions/pull/900) - Dependency updates by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;905](https://redirect.github.com/gradle/actions/pull/905) - Fix critical and high npm vulnerabilities by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;904](https://redirect.github.com/gradle/actions/pull/904) - Fix rendering of job-disabled message by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;909](https://redirect.github.com/gradle/actions/pull/909) **Full Changelog**: <gradle/actions@v5.0.2...v6.0.0> ### [`v6`](https://redirect.github.com/gradle/actions/compare/v5...v6) [Compare Source](https://redirect.github.com/gradle/actions/compare/v5.0.2...v6) ### [`v5.0.2`](https://redirect.github.com/gradle/actions/releases/tag/v5.0.2) [Compare Source](https://redirect.github.com/gradle/actions/compare/v5.0.1...v5.0.2) #### Summary This release contains no functional changes. It updates dependencies and known Gradle wrapper checksums. #### What's Changed - Update dependencies by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;851](https://redirect.github.com/gradle/actions/pull/851) - Bump the github-actions group across 2 directories with 3 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;850](https://redirect.github.com/gradle/actions/pull/850) - Update DV config by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;848](https://redirect.github.com/gradle/actions/pull/848) - Convert project to ESM and update dependencies by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;854](https://redirect.github.com/gradle/actions/pull/854) - Workflow fixes by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;856](https://redirect.github.com/gradle/actions/pull/856) - Remove superfluous text from log message by [@&#8203;bigdaz](https://redirect.github.com/bigdaz) in [#&#8203;861](https://redirect.github.com/gradle/actions/pull/861) - Bump the github-actions group across 1 directory with 2 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;860](https://redirect.github.com/gradle/actions/pull/860) - Bump the npm-dependencies group across 1 directory with 3 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;859](https://redirect.github.com/gradle/actions/pull/859) - Update known wrapper checksums by [@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot] in [#&#8203;857](https://redirect.github.com/gradle/actions/pull/857) - Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.21.0 to 2.21.1 in /sources/test/init-scripts in the gradle group across 1 directory by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;862](https://redirect.github.com/gradle/actions/pull/862) - Bump the npm-dependencies group in /sources with 2 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;863](https://redirect.github.com/gradle/actions/pull/863) - Bump github/codeql-action from 4.32.3 to 4.32.4 in the github-actions group across 1 directory by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&#8203;864](https://redirect.github.com/gradle/actions/pull/864) **Full Changelog**: <gradle/actions@v5.0.1...v5.0.2> ### [`v5.0.1`](https://redirect.github.com/gradle/actions/releases/tag/v5.0.1) [Compare Source](https://redirect.github.com/gradle/actions/compare/v5...v5.0.1) ##### What's Changed - Bump `npm` code dependency versions - Bump Gradle versions used in sample builds - Bump dependencies versions in Gradle sample builds - Bump GitHub actions used for build and test - Update known wrapper checksums to include Gradle 9.2+ **Full Changelog**: <gradle/actions@v5.0.0...v5.0.1> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/simpledotorg/simple-android).  --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: sagarwal <sagarwal@rtsl.org>
diff --git a/.github/workflows/build_prod.yml b/.github/workflows/build_prod.yml
@@ -53,7 +53,7 @@ jobs:
           cache: 'gradle'
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v5
+        uses: gradle/actions/setup-gradle@v6
 
       - name: Decrypt secrets
         run: gpg --batch --yes --quiet --decrypt --passphrase=${{ secrets.KEYSTORE_PASSPHRASE }} --output release/simple.store release/simple.gpg
diff --git a/.github/workflows/build_sandbox.yml b/.github/workflows/build_sandbox.yml
@@ -52,7 +52,7 @@ jobs:
           cache: 'gradle'
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v5
+        uses: gradle/actions/setup-gradle@v6
 
       - name: Decrypt secrets
         run: gpg --batch --yes --quiet --decrypt --passphrase=${{ secrets.KEYSTORE_PASSPHRASE }} --output release/simple.store release/simple.gpg
diff --git a/.github/workflows/build_staging.yml b/.github/workflows/build_staging.yml
@@ -52,7 +52,7 @@ jobs:
           cache: 'gradle'
 
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v5
+        uses: gradle/actions/setup-gradle@v6
 
       - name: Decrypt secrets
         run: gpg --batch --yes --quiet --decrypt --passphrase=${{ secrets.KEYSTORE_PASSPHRASE }} --output release/simple.store release/simple.gpg
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -30,6 +30,7 @@
 - Bump Mockito Kotlin to v6.3.0
 - Bump RootBeer to 0.1.2
 - Update GH Actions `upload-artifact` to v7
+- Update GH Actions `setup-gradle` to v6
 
 ### Changes
 
