build(deps): bump gradle/actions from 5.0.2 to 6.1.0

[dependabot]

Bumps gradle/actions from 5.0.2 to 6.1.0.

Release notes

Sourced from gradle/actions's releases.

v6.1.0

New: Basic Cache Provider

A new MIT-licensed Basic Caching provider is now available as an alternative to the proprietary Enhanced Caching provided by gradle-actions-caching. Choose Basic Caching by setting cache-provider: basic on setup-gradle or dependency-submission actions.

• Built on @actions/cache -- fully open source
• Caches ~/.gradle/caches and ~/.gradle/wrapper directories
• Cache key derived from build files (*.gradle*, gradle-wrapper.properties, etc.)
• Clean cache on build file changes (no restore keys, preventing stale entry accumulation)

Limitations vs Enhanced Caching: No cache cleanup, no deduplication of cached content, cached content is fixed unless build files change.

Revamped Licensing & Distribution Documentation

• New DISTRIBUTION.md documents the licensing of each component (particularly Basic Caching vs Enhanced Caching)
• Simplified licensing notices in README, docs, and runtime log output
• Clear usage tiers: Enhanced Caching is free for public repos and in Free Preview for private repos

What's Changed

• Use a unique cache entry for wrapper-validation test by @​bigdaz in gradle/actions#921
• Update Dependencies by @​bigdaz in gradle/actions#922
• Update dependencies and resolve npm vulnerabilities by @​bigdaz in gradle/actions#933
• Add open-source 'basic' cache provider and revamp licensing documentation by @​bigdaz in gradle/actions#930
• Restructure caching documentation for basic and enhanced providers by @​bigdaz in gradle/actions#934

Full Changelog: gradle/actions@v6.0.1...v6.1.0

v6.0.1

[!IMPORTANT] The release of gradle/actions@v6 contains important changes to the license terms. More details in this blog post. TL;DR: By upgrading to v6, you accept the Terms of Use for the gradle-actions-caching component.

Summary

The license changes in v6 introduced a gradle-actions-caching license notice that is printed in logs and in each job summary.

With this release, the license notice will be muted if build-scan terms have been accepted, or if a Develocity access key is provided.

What's Changed

• Bump actions used in docs by @​Goooler in gradle/actions#792
• Add typing information for use by typesafegithub by @​bigdaz in gradle/actions#910
• Mute license warning when terms are accepted by @​bigdaz in gradle/actions#911
• Mention explicit license acceptance in notice by @​bigdaz in gradle/actions#912
• Bump com.fasterxml.jackson.dataformat:jackson-dataformat-smile from 2.21.1 to 2.21.2 in /sources/test/init-scripts in the gradle group across 1 directory by @​dependabot[bot] in gradle/actions#907

Full Changelog: gradle/actions@v6.0.0...v6.0.1

v6.0.0

[!IMPORTANT]

... (truncated)

Commits

• 50e97c2 Link to docs for caching providers
• f2e6298 Restructure caching documentation for basic and enhanced providers (#934)
• b294b1e Really fix integ-test-full
• 83d3189 Revise license details for gradle-actions-caching
• 1d5db06 Update license link for gradle-actions-caching component
• 1c80961 Fix license link for Enhanced Caching component
• 9e99920 Fix integ-test-full workflow
• bb8aaaf Fix workflow permissions
• f5dfb43 [bot] Update dist directory
• ff9ae24 Add open-source 'basic' cache provider and revamp licensing documentation (#930)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Semver Impact of This PR

⚪ None (no version bump detected)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).

---

Fixes 🐛

• fix: prevent redundant native exceptions on Android/CoreCLR by jpnurmi in #5127

Dependencies ⬆️

Deps

• chore(deps): update Java SDK to v8.39.0 by github-actions in #5137
• chore(deps): update Native SDK to v0.13.7 by github-actions in #5136

Other

• build(deps): bump gradle/actions from 5.0.2 to 6.1.0 by dependabot[bot] in #5130

• chore: fix missing skill by jamescrosswell in #5134

---

_{🤖 This preview updates automatically when you update the PR.}

[Flash0ver]

note: https://github.com/gradle/actions/blob/main/DISTRIBUTION.md

Gradle's Setup action changed the licensing of it's caching component (gradle-actions-caching) to a proprietary / commercially-based license in 6.0.0.
Now, 6.1.0 has added an explicit opt-in to instead use an open-source caching component, based on https://github.com/actions/cache. The default remains the non-open-source non-MIT gradle-actions-caching caching component.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.05%. Comparing base (39ea4d8) to head (eb6fc76).
⚠️ Report is 28 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #5130      +/-   ##
==========================================
- Coverage   74.12%   74.05%   -0.07%     
==========================================
  Files         499      501       +2     
  Lines       18067    18107      +40     
  Branches     3520     3523       +3     
==========================================
+ Hits        13392    13410      +18     
- Misses       3813     3837      +24     
+ Partials      862      860       -2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Flash0ver]

question: upgrade to v6.1.0 with basic caching -or- remain at v5.0.2 (for now)

The basic caching component has significant limitations:

• https://github.com/gradle/actions/blob/main/docs/setup-gradle.md#limitations

But I don't think we need any of these features ... do we?

The Gradle Technologies Terms of Use (to use v6's Enhanced Caching) are currently under review by Legal.

[Flash0ver]

If the "Basic Cache Provider" suffices (instead of the "Enhanced Cache Provider"),
we can then also remove the change from #5086 again, which does not work as expected anyway:

sentry-dotnet/.github/dependabot.yml

Lines 25 to 27 in e6a6c24

	ignore:
	- dependency-name: "gradle/actions/setup-gradle"
	versions: ['>= 6.0.0'] # license change: the bundled 'gradle-actions-caching' component is licensed and governed by a separate license (no longer MIT)