Merge pull request #486 from CycloneDX/gradle-actions-4

build(deps): migrate to gradle actions v4

.github/workflows/ci-build.yaml

@@ -38,11 +38,8 @@ jobs:
           java-version: "${{ matrix.java-version }}"
           cache: "gradle"
 
-      - name: Validate Gradle wrapper
-        uses: gradle/actions/wrapper-validation@v3
-
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v3
+        uses: gradle/actions/setup-gradle@v4.0.0
 
       - name: Build with Gradle
         run: ./gradlew build
@@ -52,3 +49,16 @@ jobs:
         with:
           name: assembled-plugin-jdk_${{ matrix.java-version }}
           path: build/
+
+  dependency-submission:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/[email protected]
+      - name: Setup Java
+        uses: actions/[email protected]
+        with:
+          distribution: 'temurin'
+          java-version: 8
+      - name: Generate and submit dependency graph
+        uses: gradle/actions/[email protected]

.github/workflows/ci-publish.yaml

@@ -31,20 +31,14 @@ jobs:
           server-id: "github" # Value of the distributionManagement/repository/id field of the pom.xml
           settings-path: "${{ github.workspace }}" # location for the settings.xml file
 
-      - name: Validate Gradle wrapper
-        uses: gradle/actions/wrapper-validation@v3
-
       - name: Setup Gradle
-        uses: gradle/actions/setup-gradle@v3
+        uses: gradle/actions/setup-gradle@v4.0.0
 
       - name: Build with Gradle
         run: ./gradlew build
 
       - name: Publish to Gradle portal
-        uses: gradle/actions/setup-gradle@v3
-        with:
-          arguments: |-
-            publishPlugin
+        run: |-
+            ./gradlew publishPlugin
             -Pgradle.publish.key=${{ secrets.GRADLE_PUBLISH_KEY }}
             -Pgradle.publish.secret=${{ secrets.GRADLE_PUBLISH_SECRET }}
-