Combines several open bot PRs into one:
- Bump Gradle Wrapper from 9.7.1 to 9.8.2 (squashed): closes#1098,
closes#1099, closes#1100, closes#1101, closes#1102
- Bump the github-actions group (`init-integ-test` action): closes#1096
- Bump references to Develocity Gradle plugin from 4.6.0 to 4.6.1:
closes#1103
- Bump the npm-dependencies group with 10 updates: closes#1097
Notes:
- `nock` moves from 14 to 15, a major version bump. Tests that intercept
HTTP requests are the most likely to break.
- Local `npm run build` (prettier + eslint + esbuild) passes under node
24.22.1. Locally, jest passed 490/491. The one failure is `fetches
wrapper jar checksums for snapshots`, which hits the live
services.gradle.org API and timed out at 60s on a slow connection. I
didn't check whether it also fails on `main`, so CI will settle it.
Also included:
- Switch the solutions Develocity server URL from
`ge.solutions-team.gradle.com` to `solutions.develocity.cloud`. The old
host now 308-redirects to the new one. `@actions/http-client` strips the
`Authorization` header on a cross-host redirect, so the short-lived
token request failed with a 401, which broke all the Develocity
injection integ tests.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: bot-githubaction <bot-githubaction@gradle.com>
Consolidates seven open bot PRs into three commits.
## 1. Bump Gradle Wrapper from 9.5.1 to 9.6.1
Combines **#1008, #1009, #1010, #1011, #1012** into a single commit.
Each of those PRs bumped the wrapper in one directory; this covers all
five (15 files):
- `sources/test/init-scripts`
- `.github/workflow-samples/gradle-plugin`
- `.github/workflow-samples/groovy-dsl`
- `.github/workflow-samples/java-toolchain`
- `.github/workflow-samples/kotlin-dsl`
Each location gets the same `distributionUrl` → `gradle-9.6.1-bin.zip`
and `distributionSha256Sum` update, plus the regenerated `gradlew` /
`gradlew.bat` scripts.
## 2. Update known wrapper checksums
**#990**, unchanged, as its own commit. Adds 36 checksum entries to
`sources/src/wrapper-validation/wrapper-checksums.json`, **including the
9.6.1 checksums** — which is what lets the wrapper bump above pass
`CI-validate-wrappers`. These two are worth landing together.
## 3. Bump Develocity Gradle plugin from 4.4.2 to 4.5.0
**#1015**, unchanged, as its own commit. Updates the plugin reference
across workflow samples, init-script tests, docs, and the injected
default in `sources/src/develocity/build-scan.ts`:
```diff
-maybeExportVariable('DEVELOCITY_INJECTION_DEVELOCITY_PLUGIN_VERSION', '4.4.2')
+maybeExportVariable('DEVELOCITY_INJECTION_DEVELOCITY_PLUGIN_VERSION', '4.5.0')
```
Since this touches `sources/src`, the bundled `dist/` will change when
the update-dist bot runs.
## Verification
All three cherry-picks applied without conflicts. On the combined
branch:
- `./build` — clean
- `npm run check` (prettier + eslint) — clean
- `npm test` — 373 tests, 15 suites, all passing
Original bot authorship is preserved on all three commits.
## Superseded PRs
Once this merges, these can be closed: #1008, #1009, #1010, #1011,
#1012, #990, #1015.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Co-authored-by: bot-githubaction <bot-githubaction@gradle.com>
