Commit 14305a3
authored
chore: ignore gradle/actions/setup-gradle v6 in dependabot (#317)
gradle/actions/setup-gradle v6 introduced a licensing change requiring
acceptance of new Terms of Use tied to a proprietary caching component.
The ToS language is broad and legally ambiguous, raising concerns about
IP rights over cached build artifacts (e.g. sources.jar).
Key concerns:
- ToS grants Gradle broad rights over "user submissions", unclear scope
- Disabling the new caching also disables Gradle distribution caching (known bug)
- No clear legal guidance for private/commercial repos yet
Gradle maintainers have stated no data is currently sent to Gradle and
plan to clarify the ToS, but until that happens we stay on v5 to avoid
accidental acceptance of unclear terms.1 parent 6ba951a commit 14305a3
1 file changed
Lines changed: 3 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
48 | 48 | | |
49 | 49 | | |
50 | 50 | | |
| 51 | + | |
| 52 | + | |
| 53 | + | |
51 | 54 | | |
52 | 55 | | |
53 | 56 | | |
| |||
0 commit comments