This is an automated email from the ASF dual-hosted git repository.

paulk pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/groovy.git

commit 4df192c996f6a592b09ed751c12260b87847385c
Author: Paul King <[email protected]>
AuthorDate: Tue Jul 29 16:41:16 2025 +1000

    bump dependency metadata
---
 gradle/verification-metadata.xml | 82 ++++++++++++++++++++++++++++------------
 1 file changed, 58 insertions(+), 24 deletions(-)

diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index d43daaa51d..a27ba46d7f 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -133,6 +133,7 @@
          <trusted-key id="0A123C1ED3F13A6A0140E166C71FB765CD9DE313" 
group="org.apache.ant"/>
          <trusted-key id="120D6F34E627ED3A772EBBFE55C7E5E701832382" 
group="org.yaml" name="snakeyaml"/>
          <trusted-key id="19BEAB2D799C020F17C69126B16698A4ADF4D638" 
group="org.checkerframework" name="checker-qual"/>
+         <trusted-key id="1D85469D8559C2E1DF5F925131D2D79DF7E85DD3" 
group="org.jcommander" name="jcommander" version="1.83"/>
          <trusted-key id="204A1D460C2310A23EE6EF958D3D03C45575D893" 
group="me.sunlan"/>
          <trusted-key id="28118C070CB22A0175A2E8D43D12CA2AC19F3181">
             <trusting group="^com[.]fasterxml($|([.].*))" regex="true"/>
@@ -196,7 +197,6 @@
          <trusted-key id="BDB5FA4FE719D787FB3D3197F6D4A1D411E9D1AE" 
group="com.google.guava"/>
          <trusted-key id="C4F54D8622C95CC3F098721A0F13D5631D6AF36D" 
group="org.testng" name="testng" version="7.10.2"/>
          <trusted-key id="C668130C58722C9DC1C0FC633F1EB974E7AB9B37" 
group="biz.aQute.bnd"/>
-         <trusted-key id="C70B844F002F21F6D2B9C87522E44AC0622B91C3" 
group="com.beust" name="jcommander" version="1.82"/>
          <trusted-key id="C7BE5BCC9FEC15518CFDA882B0F3710FA64900E7" 
group="com.google.code.gson" name="gson"/>
          <trusted-key id="CE8075A251547BEE249BC151A2115AE15F6B8B72">
             <trusting group="org.apache.ant"/>
@@ -270,8 +270,8 @@
             <sha512 
value="eb7752c709ec703764de895099661df36536ff4bd2380bd68726d0cdb40bd27c8cf775ee98fd2ce7b3cfbd07b100c782513d964a2c9c82f33c56909212e5b8cd"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
-      <component group="com.beust" name="jcommander" version="1.82">
-         <artifact name="jcommander-1.82.jar">
+      <component group="com.beust" name="jcommander" version="1.83">
+         <artifact name="jcommander-1.83.jar">
             <pgp value="C70B844F002F21F6D2B9C87522E44AC0622B91C3"/>
             <sha512 
value="72c9beb5d282ecdebadbd595c4f05710599328e48432dc196a261d8973ec767d52038e5bd26e7c0b78b85b4455687d59f9d0a367221e848e39c72f2f583baf26"
 origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
          </artifact>
@@ -414,6 +414,11 @@
             <pgp value="694621A7227D8D5289699830ABE9F3126BB741C1"/>
          </artifact>
       </component>
+      <component group="com.google.guava" name="failureaccess" version="1.0.2">
+         <artifact name="failureaccess-1.0.2.jar">
+            <sha512 
value="ff4ee76aa661708989d53d45576cff3beea9ebbd86481dbbf2ee8c81bb22f882097b430588312b711025f0e890f22c6799d722ccd422a6a7278de08660fe2f51"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="com.google.guava" name="guava" version="25.1-android">
          <artifact name="guava-25.1-android.jar">
             <pgp value="694621A7227D8D5289699830ABE9F3126BB741C1"/>
@@ -924,14 +929,14 @@
             <sha512 
value="be291ddf612703fd3657a72820199430d053a8e06f7631e78477b428ba343631bc36b16bde8c25df544b64b420be84568d3898921f8db63fe676fb590586355b"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
-      <component group="org.apache.logging.log4j" name="log4j-api" 
version="2.24.3">
-         <artifact name="log4j-api-2.24.3.jar">
-            <sha512 
value="d936ac37b3d7ca2e4370ef122629c5ceb0bef60a6c08a3bd8bb278204dbed84bb888aaa307c58e80e4e9d645b73792433f52adcccd30378fbac99b1d271042f7"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
+      <component group="org.apache.logging.log4j" name="log4j-api" 
version="2.25.1">
+         <artifact name="log4j-api-2.25.1.jar">
+            <sha512 
value="0422500e4522ad2752f363758ff0abea55b73195cf38784328b9ed17f4b3356546923d6b7c67de4a6bbb8d54e42063e6df2f4548eb6136da99a0452437b20aae"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
-      <component group="org.apache.logging.log4j" name="log4j-core" 
version="2.24.3">
-         <artifact name="log4j-core-2.24.3.jar">
-            <sha512 
value="61332e92ea6ef6656994105a675eb8de85ec859f07cde9da5ef16a22cbf2e0d7695348e04e066dd1a1ff0146ec03a8884974319d4f71155db9c9ab0d073197ef"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
+      <component group="org.apache.logging.log4j" name="log4j-core" 
version="2.25.1">
+         <artifact name="log4j-core-2.25.1.jar">
+            <sha512 
value="f980579477a00759882e43ec60842a3f79264d16cb4823de271444a2919e2e8733fedb46cebb30e809824ba131ddc10bef32106cc1afa3057659a29a24937479"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
       <component group="org.apache.maven" name="maven-artifact" 
version="3.9.10">
@@ -1039,11 +1044,26 @@
             <sha512 
value="aa2b61dd81291b30e627e1894d8336d68b2f4cb99cedf087cc7081d6f3b6685a33c943e3fb04a851fd7635c916f2d0fb8dd705067ea67d13fc43d08025cec19a"
 origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
          </artifact>
       </component>
+      <component group="org.apache.maven.doxia" name="doxia-core" 
version="1.12.0">
+         <artifact name="doxia-core-1.12.0.jar">
+            <sha512 
value="d42f47501666f9618355be35ae762fce2c5bb1e24fdc79e1571858748d2f0c2e18d4c577b4ec2aad8258e805411e628f192e783c8ca5bba918b9ab924f3af8d5"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
+      <component group="org.apache.maven.doxia" name="doxia-logging-api" 
version="1.12.0">
+         <artifact name="doxia-logging-api-1.12.0.jar">
+            <sha512 
value="3e1b7491f18e5a8a96179f8f7789fe848e74433b75fc0494f7de912271042dd5f93abfabb9dac14357e4b340b0bc1e64b6303ea2c2f466084d6daab36645f985"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="org.apache.maven.doxia" name="doxia-sink-api" 
version="1.0-alpha-7">
          <artifact name="doxia-sink-api-1.0-alpha-7.jar">
             <pgp value="C739CE4075D9F0F0DED13A7D39BE51A1084C9113"/>
          </artifact>
       </component>
+      <component group="org.apache.maven.doxia" name="doxia-sink-api" 
version="1.12.0">
+         <artifact name="doxia-sink-api-1.12.0.jar">
+            <sha512 
value="0a53e355c5bcf5dead379643f66f95a4d1987cc7a40cc47c8aa9cdf1db04b70dc5bf6fa97b4b204b250b04a0b353da8ad2e12cbee163ada0ecdea604d54e012e"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="org.apache.maven.plugin-tools" 
name="maven-plugin-annotations" version="3.2">
          <artifact name="maven-plugin-annotations-3.2.jar">
             <pgp value="47063E8BA7A6450E4A52E7AE466CAED6E0747D50"/>
@@ -1142,11 +1162,13 @@
       <component group="org.apache.xbean" name="xbean-reflect" version="3.7">
          <artifact name="xbean-reflect-3.7.jar">
             <pgp value="223D3A74B068ECA354DC385CE126833F9CF64915"/>
+            <sha512 
value="bf85e1c95a7362eea675e1bd972b59f76cf63e15d12f7ee555860596aa5b17aee16835b5a60a3480f12baaa8e136909c9b775c5d779f3938ac6571d103cb2a2a"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
       <component group="org.apiguardian" name="apiguardian-api" 
version="1.1.2">
          <artifact name="apiguardian-api-1.1.2.jar">
             <pgp value="FF6E2C001948C5F2F38B0CC385911F425EC61B51"/>
+            <sha512 
value="d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
       <component group="org.asciidoctor" name="asciidoctor-gradle-base" 
version="4.0.2">
@@ -1279,6 +1301,11 @@
             <sha512 
value="7cb690f7d8e07da36f019b9853cc924c513c254037abdb11b2b77d26df886b94468332f59008de6cafbc18bae102617df7877a68159717fbcdb1fae932b67f5b"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
+      <component group="org.codehaus.plexus" name="plexus-container-default" 
version="2.1.0">
+         <artifact name="plexus-container-default-2.1.0.jar">
+            <sha512 
value="5e49a1635e2a9ec134199f688d741e2c1889d9de93f88e8901a32ecd84eb2a8d7d8a1529035381a4e43857d2bc26703377eabec036f9b5239ef1890d521a5ee0"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="org.codehaus.plexus" name="plexus-interactivity-api" 
version="1.0-alpha-4">
          <artifact name="plexus-interactivity-api-1.0-alpha-4.jar">
             <sha512 
value="42625dfa453daaa4ae1ae9909acec0bcbbd0a1f3d97486d471d6b6ce030b412c1ee2408d3dce484ba2f30160d56bd257eb2ac565f996f459ac57c1131f8ee1bf"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
@@ -1300,6 +1327,11 @@
             <sha512 
value="ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07"
 origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
          </artifact>
       </component>
+      <component group="org.codehaus.plexus" name="plexus-utils" 
version="3.3.0">
+         <artifact name="plexus-utils-3.3.0.jar">
+            <sha512 
value="a93038005cd9793476c913beaea7c8c170d1853dddf39bf6794ad6446165eaf538c2c3c2314baa9d919d6b0bda78e5ea3cd987d5dbacf8e3b98e315bcfa7db64"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="org.codehaus.plexus" name="plexus-utils" 
version="4.0.2">
          <artifact name="plexus-utils-4.0.2.jar">
             <pgp value="073F7A9345756F3B40CDB99E6C70A3B7599C5736"/>
@@ -1336,6 +1368,7 @@
       <component group="org.dom4j" name="dom4j" version="2.1.4">
          <artifact name="dom4j-2.1.4.jar">
             <pgp value="8F9A3C6D105B9F57844A721D79E193516BE7998F"/>
+            <sha512 
value="b647a1c9cbd8e8e0a855160b8522fff8e1d4df95e54e116a1cfe66d17083ff8b8ca6fe706d6aeea6e7d3e0116212af9a5f6c7fade642869a33fc7a971d116af9"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
       <component group="org.eclipse.sisu" name="org.eclipse.sisu.inject" 
version="0.9.0.M3">
@@ -1535,25 +1568,25 @@
             <sha512 
value="efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc"
 origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
          </artifact>
       </component>
-      <component group="org.junit.platform" name="junit-platform-commons" 
version="1.13.3">
-         <artifact name="junit-platform-commons-1.13.3.jar">
-            <sha512 
value="64f13082f42c6a42e94810ecad0a5b104904a3a3163046943f71b15bab7bbb21e58d419f79311757ae1c23c522dbcc0cb904799555e66da0980f821ecac3fe96"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
+      <component group="org.junit.jupiter" name="junit-jupiter-api" 
version="5.13.4">
+         <artifact name="junit-jupiter-api-5.13.4.jar">
+            <sha512 
value="6e6c1d1247b5aa99649e6cc2f8ea8f0f3720f2a141682b152eed878b1b807b4d6348741a4e616d695f92a80d327ef4e857c48cde13b9668fa75f1301202ec652"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
-      <component group="org.junit.jupiter" name="junit-jupiter-api" 
version="5.13.3">
-         <artifact name="junit-jupiter-api-5.13.3.jar">
-            <sha512 
value="4ae0ff2b3c96eeaecda7ba3ebf6a5e00721646d080159e787dff5aa67eb8856ff2761d21db9374cffe76a69f07c9538cec60839b4ad82cc72d6a9a407d2e5b44"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
+      <component group="org.junit.jupiter" name="junit-jupiter-params" 
version="5.13.4">
+         <artifact name="junit-jupiter-params-5.13.4.jar">
+            <sha512 
value="9a020ecde5b884d2950b844fcffd5be5575434edb6bb3d2b86957133f48e45f79e770443aa07962ec340ba8da46dcb4fb6e33721c04e4ca5974c6dbe29ca47f2"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
-      <component group="org.junit.jupiter" name="junit-jupiter-params" 
version="5.13.3">
-         <artifact name="junit-jupiter-params-5.13.3.jar">
-            <sha512 
value="b2e6aa28d29be942c05b3e0320ea37dd65eb56ab26d7b2f04427b3d19ced2836196a8db6d572c989f85f882fc0a0f4f0848571b356f0786d7ccb55fa20f469e0"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
+      <component group="org.junit.platform" name="junit-platform-commons" 
version="1.13.4">
+         <artifact name="junit-platform-commons-1.13.4.jar">
+            <sha512 
value="a0c4a73a150729b26c57b0a0057b754836605287b89b64ef737c197f11d5022b097af3b15459fe10d0dfebc4ae54e8ba50d8e466297b576d2b7451aa00014079"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
-      <component group="org.junit.vintage" name="junit-vintage-engine" 
version="5.13.3">
-         <artifact name="junit-vintage-engine-5.13.3.jar">
+      <component group="org.junit.vintage" name="junit-vintage-engine" 
version="5.13.4">
+         <artifact name="junit-vintage-engine-5.13.4.jar">
             <pgp value="FF6E2C001948C5F2F38B0CC385911F425EC61B51"/>
-            <sha512 
value="041322e4f9732a5968f953c3b134676748e46534bf3af31d5e8924d5e73b14a1ed9e0fe1d187ce8a614bc990f98f0863ae0b9743f99e29715b3e7360cf8f2ef7"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
+            <sha512 
value="25d574d3e87a61e8b1a6da11f722f89d54ff3c0110542022e8663e53de455f4a871a22fbe4f61ca29d2cbb1f803ae561a3767f17bfd51965bfd844a563bd3b04"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
       <component group="org.jvnet.staxex" name="stax-ex" version="1.8.1">
@@ -1788,10 +1821,10 @@
             <sha512 
value="ab14c5254653e7be75d6e52ef64122242766d005b42c5d8b4366b1a8557fca9e1629c79f66bf5cfc6031904c756cf84ec04ba5bcf0593ec69a58a3f2ab5a3dde"
 origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
          </artifact>
       </component>
-      <component group="org.testng" name="testng" version="7.10.2">
-         <artifact name="testng-7.10.2.jar">
+      <component group="org.testng" name="testng" version="7.11.0">
+         <artifact name="testng-7.11.0.jar">
             <pgp value="C4F54D8622C95CC3F098721A0F13D5631D6AF36D"/>
-            <sha512 
value="a7d601851e94d668f4aa9a89a6e8a0eeae8a257528e94279e55596dab70f4b269604bbfe2bc41ffeab61fcaccbf6a15424c713b4035fb3a469335257b372b886"
 origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+            <sha512 
value="7046baf6f33f4b2ff9d840956e0221abaaf9afe3a44605beb17bc133e49aa618d324ac5940094139b6a0939d281d5ca203b516e53b72378f4a8501c905b14a86"
 origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
          </artifact>
       </component>
       <component group="org.tukaani" name="xz" version="1.6">
@@ -1895,6 +1928,7 @@
       <component group="xmlunit" name="xmlunit" version="1.6">
          <artifact name="xmlunit-1.6.jar">
             <pgp value="CE8075A251547BEE249BC151A2115AE15F6B8B72"/>
+            <sha512 
value="2efcdaa75fefe588f58fdade622e38cdc3b99607b97b79e8654d6e104706a258ba2da6f48180db629e91b7f743d1cdbf5a3154947d4e57732dac50200a00893d"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
    </components>

Reply via email to