Gradle Technologies

Avoiding the Next Supply Chain Disaster with GitHub and Gradle Supply chain security is a big deal, and it’s dangerously easy to ignore. For Android or JVM developers, the sheer scale of the ecosystem is our greatest strength, and our greatest risk.

Your build file is just the tip of the iceberg. 🧊

Transitive dependencies are where the real security risks hide.

See how #Gradle + #GitHub can automate your supply chain defense:

https://blog.gradle.org/avoid-supply-chain-disaster-with-github-gradle 🛡️

#AppSec #Gradle #GitHub

Manual compliance is a bottleneck. 🛑

Automate your #GRC policies with Develocity Provenance Governor.

Enforce build policies with cryptographic proof and secure your supply chain. 🛡️

https://gradle.com/blog/prevent-nx-npm-attacks-with-continuous-grc/

#DevSecOps #SupplyChainSecurity #Develocity

GenAI Won't Replace Your Continuous Delivery Pipeline—It Will Stress It Ready to harness the power of GenAI without disrupting your software delivery? Learn how to ensure reliable testing, maintain human oversight of AI code, optimize your continuous delivery pipelines, a...

Don't let AI-driven "pipeline friction" kill your flow. 📉

GenAI creates code faster than your Continuous Delivery pipeline can ship it. Learn how to scale for the GenAI era in this white paper 👉 👉

📘 https://tinyurl.com/yc5dhsfe

#ContinuousIntegration #CI #CD #GenAI

Lessons learned modernizing Apache Kafka CI builds with Develocity and GitHub Actions | Gradle Get the lessons-learned from the migration from Apache Kafka's migration from Jenkins to GitHub Actions, including how Develocity helped quantify performance gains and prove ROI.

From #Jenkins to #GitHub Actions: How Apache #Kafka modernized its CI. 🚀

Join the webinar on March 12:

https://gradle.com/events/modernizing-apache-kafka-ci-builds-develocity-github-actions-03-26/ 🔗

#CI #ApacheKafka #GitHubActions #DevOps

Gradle 9.4.0 Release Notes We are excited to announce Gradle 9.4.0.

Happy Wednesday!

📣 #Gradle 9.4.0 is out 📣

https://docs.gradle.org/9.4.0/release-notes.html

Bug fixes and…

☕ #Java26 support
🔧 Non-class-based #JVM tests
💻 Enhanced console progress bar

Please report any 🐛 on #GitHub!

With hundreds of developers shipping code, it's hard to verify production artifacts 🙈

We make it simple to enforce your build policies with cryptographic proof using #Develocity Provenance Governor

https://gradle.com/blog/prevent-nx-npm-attacks-with-continuous-grc/

#GRC #Compliance #Security

Avoiding the Next Supply Chain Disaster with GitHub and Gradle Supply chain security is a big deal, and it’s dangerously easy to ignore. For Android or JVM developers, the sheer scale of the ecosystem is our greatest strength, and our greatest risk.

Solve the "Transitive Trap" 🪤

Direct dependencies are easy. Transitives are where vulnerabilities hide.

#Gradle + #GitHubActions now automate the submission of your entire resolved graph.

Stop auditing. Start automating. 🛡️

https://blog.gradle.org/avoid-supply-chain-disaster-with-github-gradle

Gradle 9.4.0-rc-2 Release Notes We are excited to announce Gradle 9.4.0-rc-2.

📣 #Gradle 9.4.0 RC2 is out and ready for testing 🔬

https://docs.gradle.org/9.4.0-rc-2/release-notes.html

Bug fixes and…

☕ #Java26 support
🔧 Non-class-based #JVM tests
💻 Enhanced console progress bar

Please report any 🐛 on #GitHub!

Large enterprises lose 8,000+ hours DAILY to CI cold starts.

📉 Reclaim 60% of wasted compute costs with #Develocity Universal Cache. 🏛️

Scale smarter: https://gradle.com/develocity/product/universal-cache/

#PlatformEngineering #CloudCosts #AI

Lessons learned modernizing Apache Kafka CI builds with Develocity and GitHub Actions | Gradle Get the lessons-learned from the migration from Apache Kafka's migration from Jenkins to GitHub Actions, including how Develocity helped quantify performance gains and prove ROI.

📅 MAR-12 📅

Modernizing #ApacheKafka's CI was a masterclass in DPE. 🛠️

✅ Accelerated builds

✅ Fixed flaky signals

✅ Scaled with observability

Join us for the blueprint and lessons learned!
👇 👇 👇

https://tinyurl.com/45985t9r

#Develocity #GitHubActions #GHA #CImigration #CI

DORA | Value stream mapping for software delivery DORA is a long running research program that seeks to understand the capabilities that drive software delivery and operations performance. DORA helps teams apply those capabilities, leading to better ...

Is it time to realign your organization with #DORA capabilities? 🤔

"How to use value stream mapping to improve software delivery"

https://dora.dev/guides/value-stream-management/

Gradle Learning Day: Reinforcement Learning for Build Optimization This month at Gradle, we had our Learning Day, a day dedicated to exploring new ideas and...

Manual tuning is a 🚩

#Gradle engineer Iñaki Villar spent his last Learning Day exploring how Reinforcement Learning can find your Gradle "sweet spot" automatically. 🤖⚡️

https://dev.to/cdsap/gradle-learning-day-reinforcement-learning-for-build-optimization-2oh7

Taming the #ApacheKafka build is no small feat.

🏗️ Join us March 12 to see how #Develocity & #GitHubActions modernized CI builds for this massive project. 🚀

Sign up: https://gradle.com/events/modernizing-apache-kafka-ci-builds-develocity-github-actions-03-26/

Wait a minute...🤔

If you don't have to download dependencies on CI all the time, then you can reduce setup wait times by 50% or more!

🐇 #Develocity Universal Cache is here 🐇

https://gradle.com/develocity/product/universal-cache/

#CI #Dependencies #Setup #Cache #ColdStart

GenAI Won't Replace Your Continuous Delivery Pipeline—It Will Stress It Ready to harness the power of GenAI without disrupting your software delivery? Learn how to ensure reliable testing, maintain human oversight of AI code, optimize your continuous delivery pipelines, a...

Is your delivery pipeline ready for #GenAI-scale code volume? 🤔

🛋️ Weekend reading by Hans Dockter, creator of #Gradle Build Tool and CEO of #GradleTechnologies 👇

https://gradle.com/resources/ebooks-and-whitepapers/gen-ai-will-stress-continuous-delivery/

#ContinuousDelivery #AI #Code #DORA

Final call! 📢

Solve your CI scaling and governance headaches with #Gradle and #JFrog 🐘 🐸

https://gradle.com/events/automating-governance-build-release-gradle-jfrog-02-26/

We go live TODAY (in a bit over 4 hours), so don't miss out!

📅 TOMORROW!

In the tsunami of #GenAI code, can you prove the integrity of every artifact? 🧐

Manual compliance checks are slow and prone to error. Join #Gradle & #JFrog to learn how to automate build governance and avoid vulnerabilities!

Save your seat 🪑👇

https://tinyurl.com/2jjbjdka

From the #Gradle community:

"Going Offline - Steps to a hermetic Gradle build"

https://www.liutikas.net/2025/12/19/Going-Offline.html

AI-generated code is fast, but it’s 10x more likely to introduce security gaps. 🤖⚠️

Learn how to shift from "guessing" to automated governance with #Gradle and #JFrog!

Register for Feb-19 👇

https://tinyurl.com/2jjbjdka

#DevOps #PlatformEngineering #CyberSecurity #SoftwareSupplyChain

🔍 Still scattering dependency versions across multiple build.gradle files? There’s a better way!

📦 Version Catalogs =

✅ Centralized dependency definitions
✅ Easier upgrades
✅ Fewer bugs
✅ Happier teams

https://tinyurl.com/2kf99auf

Security, governance, and compliance is now a baseline technical skill, not an afterthought. 🛡️

Don't let a manual oversight derail your delivery. Master automated governance on Feb-19 with #Gradle and #JFrog 👇

https://tinyurl.com/2jjbjdka

#DevOps #CyberSecurity #SoftwareSupplyChain

Build Artifact CDN: Strategic infrastructure for AI-driven DevOps by Frank Zhu and Hans Dockter The uncomfortable truth about your build pipeline The world's largest financial institutions, telcos, and government

Can you afford to routinely spend 50–80% of your total build time on redundant work in cold-start, ephemeral CI environments?

GenAI has shifted software delivery from being developer-limited to pipeline-limited.

Learn how a Build Artifact CDN can help 👇

https://tinyurl.com/mrxj86vc

New in #Develocity 2025.4!

The value of Artifact Cache on network request time, revealed:

❌ disabled — Wall clock time = 44m

✅ enabled — Wall clock time = 2m

https://gradle.com/develocity/releases/2025.4#develocity-artifact-cache-and-setup-cache

#ArtifactCache #UniversalCache

🤔 Now that #GenAI is causing a 5-10x growth in commit volume, can you deliver it faster?

And does that mean your #CI system is going to incur a 5-10x cost increase? 😬

WATCH: https://gradle.com/events/develocity-universal-cache-01-26/

#UniversalCache #BuildArtifactCDN #Develocity

📣 Happy Monday!

#Gradle 9.4.0 RC1 is out and ready for testing 🔬

https://docs.gradle.org/9.4.0-rc-1/release-notes.html

Bug fixes and…

☕ #Java26 support
🔧 Non-class-based #JVM tests
💻 Enhanced console progress bar

Please report any 🐛 on #GitHub!

Gradle 9 Will Break Your KMP Project - Here's the Full Migration Strategy YouTube video by Philipp Lackner

🐘 From the #Gradle community >>>

"Gradle 9 Will Break Your KMP Project - Here's the Full Migration Strategy", by @philipplackner.bsky.social 👇

https://www.youtube.com/watch?v=Jp3Yg1VSRkY

#Android #Developer #Gradle9 #KMP

Automating governance from build to release with Gradle and JFrog | Gradle Explore how the emerging practice of Continuous Governance, Risk, and Compliance (GRC) ensures the integrity of the build process in today's AI-powered development world.

Manual #governance is a release bottleneck. 🛑

Learn how #Gradle & @jfrog automate #compliance to eliminate delivery delays and security risks. Register for Feb-19! 👇

https://tinyurl.com/2jjbjdka

#GRC #Security #Vulnerability #ShiftLeft #DevOps #DevGovOps

Fast inner dev loops for Kotlin Gradle builds | Alex Semin and Rodrigo Oliveira YouTube video by Kotlin by JetBrains

If you missed #KotlinConf, check out this recording of our #Gradle team presenting:

"Fast inner dev loops for #Kotlin Gradle builds" 👇

https://www.youtube.com/watch?v=eryPIdJjBgk

Scaling releases without automated governance is a liability. ⚠️

Join our Feb-19 webinar with co-host #JFrog to fix your path to production 👇

https://tinyurl.com/2jjbjdka

#GRC #Governance #Compliance #DevOps #DevGovOps #Provenance #Artifacts #Attenstations

How to use the Develocity IntelliJ plugin to speed up Gradle builds with real-time insights The new Develocity IntelliJ Plugin integrates powerful real-time analysis directly into IntelliJ IDEA and Android Studio for immediate troubleshooting

Stop tab-switching! 🚫

Speed up your #Gradle builds without leaving your #IntelliJ IDE. 🚀

https://gradle.com/blog/develocity-intellij-plugin-speed-up-gradle-builds-insights/