Skip to content

Disable gradle build cache on releases to mitigate supply chain risk#8254

Merged
jack-berg merged 2 commits into
open-telemetry:mainfrom
jack-berg:disable-cache-on-releases
Apr 6, 2026
Merged

Disable gradle build cache on releases to mitigate supply chain risk#8254
jack-berg merged 2 commits into
open-telemetry:mainfrom
jack-berg:disable-cache-on-releases

Conversation

@jack-berg

Copy link
Copy Markdown
Member

No description provided.

@jack-berg
jack-berg requested a review from a team as a code owner April 6, 2026 14:25
@codecov

codecov Bot commented Apr 6, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.32%. Comparing base (207c861) to head (c6b1f4f).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff            @@
##               main    #8254   +/-   ##
=========================================
  Coverage     90.32%   90.32%           
  Complexity     7651     7651           
=========================================
  Files           842      842           
  Lines         23075    23075           
  Branches       2312     2312           
=========================================
  Hits          20842    20842           
  Misses         1514     1514           
  Partials        719      719           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Comment thread .github/workflows/release.yml Outdated

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Instead, I think I'd remove this. I checked, and this is what instrumentation repo does

Suggested change

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As discussed, removing the develocity key isn't enough to disable build caching since it supports anonymous read access. Instead, pushed c6b1f4f to explicitly disable develocity on the release tasks.

@jack-berg
jack-berg merged commit 6d522eb into open-telemetry:main Apr 6, 2026
27 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants