From 10d7dc1cf049ddeda25891b1c1c8fd595a219bb6 Mon Sep 17 00:00:00 2001 From: Thomas Sapelza Date: Fri, 13 Nov 2026 16:01:46 +0100 Subject: [PATCH] run the dependency submission when a dependency file changes on main The weekly run left the graph up to a week old after a dependency update. GitHub checks new advisories against the last submitted graph, so a run is needed only when the dependencies change. Assisted-by: Claude:claude-opus-5-5 --- .github/workflows/dependency-submission.yml | 19 +++++++++++++++---- 1 file changed, 15 insertions(+), 4 deletions(-) diff --git a/.github/workflows/dependency-submission.yml b/.github/workflows/dependency-submission.yml index 05957b1..5b169c3 100644 --- a/.github/workflows/dependency-submission.yml +++ b/.github/workflows/dependency-submission.yml @@ -1,10 +1,21 @@ name: Dependency Submission on: - schedule: - # Mondays at 05:17 UTC. Dependencies change less than once a week, and GitHub checks new advisories against the - # last submitted dependency graph without a new run. Run it manually after a dependency update. - - cron: '17 5 * * 1' + push: + branches: + - main + # Every file that can change the resolved dependencies or the Gradle version, and this workflow. GitHub checks new + # advisories against the last submitted dependency graph, so the workflow needs no run without such a change. + # After a new release of the dependency-submission-with-gradle action, start the workflow by hand. + paths: + - '**/*.gradle' + - '**/*.gradle.kts' + - '**/gradle.properties' + - '**/*.versions.toml' + - '**/*.lockfile' + - 'buildSrc/**' + - 'gradle/wrapper/gradle-wrapper.properties' + - '.github/workflows/dependency-submission.yml' workflow_dispatch: concurrency: