Skip to content

FAIR-58 deps: Bump the all-dependencies group across 1 directory with 11 updates #42

FAIR-58 deps: Bump the all-dependencies group across 1 directory with 11 updates

FAIR-58 deps: Bump the all-dependencies group across 1 directory with 11 updates #42

Workflow file for this run

name: CI
on:
push:
branches: [main]
pull_request:
workflow_dispatch:
# Supersede stale pull request runs, but never abandon a run on main:
# every commit that lands there deserves its own verdict.
concurrency:
group: ci-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
# Deny by default, then grant per job. Code injected into a build step would
# otherwise inherit a token that can write to this repository.
permissions: {}
jobs:
build:
name: Compile debug
runs-on: ubuntu-latest
permissions:
contents: read
steps:
# Third-party actions are pinned to a commit SHA, not a tag: tags are
# movable, so a hijacked action repo could otherwise swap in new code on
# our next run. Dependabot keeps these SHAs current.
- name: Check out
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
- name: Set up JDK 17
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4.8.0
with:
distribution: temurin
java-version: '17'
# Fails the build if gradle-wrapper.jar was tampered with.
- name: Validate Gradle wrapper
uses: gradle/actions/wrapper-validation@48b5f213c81028ace310571dc5ec0fbbca0b2947 # v4
- name: Set up Gradle
uses: gradle/actions/setup-gradle@48b5f213c81028ace310571dc5ec0fbbca0b2947 # v4
# The runner image does not necessarily ship the exact compileSdk.
- name: Install Android SDK platform 36
run: |
yes | "$ANDROID_HOME/cmdline-tools/latest/bin/sdkmanager" --licenses > /dev/null
"$ANDROID_HOME/cmdline-tools/latest/bin/sdkmanager" \
"platforms;android-36" "build-tools;36.0.0" > /dev/null
- name: Compile Kotlin (debug)
run: ./gradlew --no-daemon :app:compileDebugKotlin
- name: Process resources (debug)
run: ./gradlew --no-daemon :app:processDebugResources