From 6d5c99c9d312beae8e8b00428344dd167416a13f Mon Sep 17 00:00:00 2001 From: manvisingh55 Date: Mon, 11 May 2026 12:34:28 +0530 Subject: [PATCH 1/5] java.yml update --- .github/workflows/java.yaml | 22 +++++++++++++++++++--- 1 file changed, 19 insertions(+), 3 deletions(-) diff --git a/.github/workflows/java.yaml b/.github/workflows/java.yaml index 71cf2df..ef867ad 100644 --- a/.github/workflows/java.yaml +++ b/.github/workflows/java.yaml @@ -20,6 +20,9 @@ jobs: matrix: jdk: [17, 21] steps: + # Using version tag for GitHub official actions (trusted) for easier maintenance. + # For production code, consider pinning to commit SHA for enhanced security. + # See: https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions - uses: actions/checkout@v4 - name: Set up JDK ${{ matrix.jdk }} uses: actions/setup-java@v4 @@ -43,6 +46,9 @@ jobs: matrix: jdk: [17, 21] steps: + # Using version tag for GitHub official actions (trusted) for easier maintenance. + # For production code, consider pinning to commit SHA for enhanced security. + # See: https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions - uses: actions/checkout@v4 - name: Set up JDK ${{ matrix.jdk }} uses: actions/setup-java@v4 @@ -61,16 +67,21 @@ jobs: matrix: jdk: [17, 21] steps: + # Using version tag for GitHub official actions (trusted) for easier maintenance. + # For production code, consider pinning to commit SHA for enhanced security. + # See: https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions - uses: actions/checkout@v4 - name: Set up JDK ${{ matrix.jdk }} uses: actions/setup-java@v4 with: java-version: ${{ matrix.jdk }} distribution: 'semeru' + # Using version tag for Gradle official action (trusted) for easier maintenance. + # Migrated from deprecated gradle-build-action to modern setup-gradle action. + - name: Setup Gradle + uses: gradle/actions/setup-gradle@v4 - name: Build with Gradle - uses: gradle/gradle-build-action@bd5760595778326ba7f1441bcf7e88b49de61a25 - with: - arguments: build -Pjava_version=${{ matrix.jdk }} + run: gradle build -Pjava_version=${{ matrix.jdk }} build-gradlew: name: Build Gradle wrapper @@ -80,12 +91,17 @@ jobs: matrix: jdk: [17, 21] steps: + # Using version tag for GitHub official actions (trusted) for easier maintenance. + # For production code, consider pinning to commit SHA for enhanced security. + # See: https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions - uses: actions/checkout@v4 - name: Set up JDK ${{ matrix.jdk }} uses: actions/setup-java@v4 with: java-version: ${{ matrix.jdk }} distribution: 'semeru' + # Using version tag for Gradle official action (trusted) for easier maintenance. + # This demonstrates the recommended approach for CICS sample repositories. - name: Setup Gradle uses: gradle/actions/setup-gradle@v4 - name: Build with Gradle From e22396c9ea92d1fb962a03a06a714201885002a0 Mon Sep 17 00:00:00 2001 From: manvisingh55 Date: Mon, 11 May 2026 12:43:05 +0530 Subject: [PATCH 2/5] plugin update --- .../build.gradle | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/cics-java-liberty-springboot-transactions-cicsbundle/build.gradle b/cics-java-liberty-springboot-transactions-cicsbundle/build.gradle index 722f3a7..816af01 100644 --- a/cics-java-liberty-springboot-transactions-cicsbundle/build.gradle +++ b/cics-java-liberty-springboot-transactions-cicsbundle/build.gradle @@ -2,7 +2,8 @@ // Plugins // ============================================================================ plugins { - id 'com.ibm.cics.bundle' version '1.0.8' + // Updated to latest version for Gradle 8.x compatibility + id 'com.ibm.cics.bundle' version '1.1.0' } // ============================================================================ From 135a8bb9ab5313cff2a90f49ff4cd50dc60559ff Mon Sep 17 00:00:00 2001 From: manvisingh55 Date: Mon, 11 May 2026 12:55:32 +0530 Subject: [PATCH 3/5] version change --- .github/workflows/java.yaml | 7 ++++--- .../build.gradle | 3 +-- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/java.yaml b/.github/workflows/java.yaml index ef867ad..b69e155 100644 --- a/.github/workflows/java.yaml +++ b/.github/workflows/java.yaml @@ -76,12 +76,13 @@ jobs: with: java-version: ${{ matrix.jdk }} distribution: 'semeru' - # Using version tag for Gradle official action (trusted) for easier maintenance. - # Migrated from deprecated gradle-build-action to modern setup-gradle action. + # Using version tag for Gradle (trusted action) for easier maintenance. + # For production code, consider pinning to commit SHA for enhanced security. + # See: https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions - name: Setup Gradle uses: gradle/actions/setup-gradle@v4 - name: Build with Gradle - run: gradle build -Pjava_version=${{ matrix.jdk }} + run: ./gradlew build -Pjava_version=${{ matrix.jdk }} build-gradlew: name: Build Gradle wrapper diff --git a/cics-java-liberty-springboot-transactions-cicsbundle/build.gradle b/cics-java-liberty-springboot-transactions-cicsbundle/build.gradle index 816af01..b0a1c5c 100644 --- a/cics-java-liberty-springboot-transactions-cicsbundle/build.gradle +++ b/cics-java-liberty-springboot-transactions-cicsbundle/build.gradle @@ -2,8 +2,7 @@ // Plugins // ============================================================================ plugins { - // Updated to latest version for Gradle 8.x compatibility - id 'com.ibm.cics.bundle' version '1.1.0' + id 'com.ibm.cics.bundle' version '1.0.7' } // ============================================================================ From eaf78541a3d0644901cea8d074344247e10ffdca Mon Sep 17 00:00:00 2001 From: manvisingh55 Date: Mon, 11 May 2026 16:08:40 +0530 Subject: [PATCH 4/5] plugin version change --- .../build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cics-java-liberty-springboot-transactions-cicsbundle/build.gradle b/cics-java-liberty-springboot-transactions-cicsbundle/build.gradle index b0a1c5c..0fdd3bd 100644 --- a/cics-java-liberty-springboot-transactions-cicsbundle/build.gradle +++ b/cics-java-liberty-springboot-transactions-cicsbundle/build.gradle @@ -2,7 +2,7 @@ // Plugins // ============================================================================ plugins { - id 'com.ibm.cics.bundle' version '1.0.7' + id 'com.ibm.cics.bundle' version '2.0.1' } // ============================================================================ From 2d89ecb7858b907113c467d25359dadd14fabea1 Mon Sep 17 00:00:00 2001 From: manvisingh55 Date: Mon, 11 May 2026 16:14:57 +0530 Subject: [PATCH 5/5] typo --- .../build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cics-java-liberty-springboot-transactions-cicsbundle/build.gradle b/cics-java-liberty-springboot-transactions-cicsbundle/build.gradle index 0fdd3bd..722f3a7 100644 --- a/cics-java-liberty-springboot-transactions-cicsbundle/build.gradle +++ b/cics-java-liberty-springboot-transactions-cicsbundle/build.gradle @@ -2,7 +2,7 @@ // Plugins // ============================================================================ plugins { - id 'com.ibm.cics.bundle' version '2.0.1' + id 'com.ibm.cics.bundle' version '1.0.8' } // ============================================================================