kyuubi/.github/workflows/dep.yml
Bowen Liang e446724488 [KYUUBI #6775] Bump Github actions action/cache and actions/dependency-review-action v4
# 🔍 Description
## Issue References 🔗

This pull request fixes #

## Describe Your Solution 🔧

- as titled

## Types of changes 🔖

- [ ] Bugfix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing functionality to change)

## Test Plan 🧪

#### Behavior Without This Pull Request ⚰️

#### Behavior With This Pull Request 🎉

#### Related Unit Tests

---

# Checklist 📝

- [ ] This patch was not authored or co-authored using [Generative Tooling](https://www.apache.org/legal/generative-tooling.html)

**Be nice. Be informative.**

Closes #6775 from bowenliang123/gha-cache-v4.

Closes #6775

de7b9fdf0 [Bowen Liang] actions/dependency-review-action@v4
c9e41923a [Bowen Liang] actions/cache@v4

Authored-by: Bowen Liang <liangbowen@gf.com.cn>
Signed-off-by: Bowen Liang <liangbowen@gf.com.cn>
2024-10-23 14:32:16 +08:00

65 lines
2.0 KiB
YAML

#
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements. See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License. You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
name: Dependency
on:
pull_request:
branches:
- master
- branch-*
paths:
# when pom or dependency workflow changes
- '**/pom.xml'
- '.github/workflows/dep.yml'
- 'build/dependency.sh'
- 'dev/dependencyList'
concurrency:
group: dep-${{ github.head_ref || github.run_id }}
cancel-in-progress: true
jobs:
dep:
name: Dependency check
runs-on: ubuntu-24.04
steps:
- uses: actions/checkout@v4
- name: setup java
uses: actions/setup-java@v4
with:
distribution: temurin
java-version: 8
cache: 'maven'
- name: Setup Maven
uses: ./.github/actions/setup-maven
- name: Install modules
env:
MAVEN_ARGS: -Dorg.slf4j.simpleLogger.defaultLogLevel=error
run: |
build/mvn clean install \
-Pflink-provided,spark-provided,hive-provided \
-Dmaven.javadoc.skip=true -Drat.skip=true -Dscalastyle.skip=true -Dspotless.check.skip \
-DskipTests \
-pl kyuubi-ctl,kyuubi-server,kyuubi-assembly -am
- name: Check dependency list
run: build/dependency.sh
- name: Dependency Review
uses: actions/dependency-review-action@v4
with:
fail-on-severity: moderate