This is an automated email from the ASF dual-hosted git repository.
paulk pushed a commit to branch GROOVY_4_0_X
in repository https://gitbox.apache.org/repos/asf/groovy.git
The following commit(s) were added to refs/heads/GROOVY_4_0_X by this push:
new 555c63061a update dependency metadata
555c63061a is described below
commit 555c63061a092f872828bdccc01c4363e81978cb
Author: Paul King <[email protected]>
AuthorDate: Sat Dec 20 04:53:52 2025 +1000
update dependency metadata
---
gradle/verification-metadata.xml | 87 ++++++++++++++++++++++++++++++++++++++--
1 file changed, 83 insertions(+), 4 deletions(-)
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 9b2365c516..11ec5cb6e5 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -1,10 +1,50 @@
<?xml version="1.0" encoding="UTF-8"?>
+<!--
+
+ Licensed to the Apache Software Foundation (ASF) under one
+ or more contributor license agreements. See the NOTICE file
+ distributed with this work for additional information
+ regarding copyright ownership. The ASF licenses this file
+ to you under the Apache License, Version 2.0 (the
+ "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing,
+ software distributed under the License is distributed on an
+ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ KIND, either express or implied. See the License for the
+ specific language governing permissions and limitations
+ under the License.
+
+-->
+<!--
+ This file declares the dependency verification metadata for dependencies
used by Groovy.
+ When you upgrade a dependency, verification is likely to fail so you will
need to update
+ it.
+
+ If, for whatever reason, verification fails for you, DO NOT DISABLE IT but
follow the
+ troubleshooting guide at
https://docs.gradle.org/current/userguide/dependency_verification.html
+
+ This build uses PGP verification and SHA512 checksum verification for
unsigned artifacts:
+
+ ./gradlew -write-verification-metadata sha512,pgp -export-keys <tasks>
+
+ Then check the diff, remove the unnecessary entries (for old dependencies)
and make sure
+ the new ones are correct.
+
+ Do not remove this header.
+
+-->
<verification-metadata
xmlns="https://schema.gradle.org/dependency-verification"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="https://schema.gradle.org/dependency-verification
https://schema.gradle.org/dependency-verification/dependency-verification-1.3.xsd">
<configuration>
- <verify-metadata>true</verify-metadata>
+ <verify-metadata>false</verify-metadata>
<verify-signatures>true</verify-signatures>
+ <trusted-artifacts>
+ <trust file=".+-(sources|javadoc).jar" regex="true"/>
+ </trusted-artifacts>
<ignored-keys>
- <ignored-key id="991EFB94DB91127D" reason="Key couldn't be downloaded
from any key server"/>
<ignored-key id="0374CF2E8DD1BDFD" reason="Key couldn't be downloaded
from any key server"/>
<ignored-key id="153E7A3C2B4E5118" reason="Key couldn't be downloaded
from any key server"/>
<ignored-key id="2BFD7825A8984FBE" reason="Key couldn't be downloaded
from any key server"/>
@@ -13,6 +53,7 @@
<ignored-key id="6CCC36CC6C69FC17" reason="Key couldn't be downloaded
from any key server"/>
<ignored-key id="74DAFDFD6DAE2441" reason="Key couldn't be downloaded
from any key server"/>
<ignored-key id="928FBF39003C0425" reason="Key couldn't be downloaded
from any key server"/>
+ <ignored-key id="991EFB94DB91127D" reason="Key couldn't be downloaded
from any key server"/>
<ignored-key id="BFFC9B54721244AD" reason="Key couldn't be downloaded
from any key server"/>
<ignored-key id="E0130A3ED5A2079E" reason="Key couldn't be downloaded
from any key server"/>
</ignored-keys>
@@ -392,8 +433,46 @@
<artifact name="asciidoctor-gradle-jvm-pdf-4.0.2.jar">
<sha512
value="f15bc25848c48badd2b48e27f166d0252344b9273733bd2eebe5d241faeb2787ff312f4c8b7bed10fd9a64a75cae8a2425cc088e14645b8dbe4c4cfff4dd0084"
origin="Generated by Gradle" reason="Artifact is not signed"/>
</artifact>
- <artifact name="asciidoctor-gradle-jvm-pdf-4.0.2.module">
- <sha512
value="c2a3cd80cde490a0e5baa65cd45515de17b26b8faa593f6201585138d57f61704666a38366b6f06e7a63b0cd3bf540c8f015d1971b71f285f6adbc1a2fcef362"
origin="Generated by Gradle" reason="Artifact is not signed"/>
+ </component>
+ <component group="org.asciidoctor" name="asciidoctorj" version="2.5.11">
+ <artifact name="asciidoctorj-2.5.11.jar">
+ <sha512
value="16030a65ebeeb9b5c88be278cc2ebcb8df22096b438314c5c59e5544eb5a3ba813d85980f62d17467cedba4c7b0a2d346a5c8121176eee1e639c22159e05807f"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+ </artifact>
+ </component>
+ <component group="org.asciidoctor" name="asciidoctorj-api"
version="2.5.11">
+ <artifact name="asciidoctorj-api-2.5.11.jar">
+ <sha512
value="93ff1b8fc521b6a570a2bd354ec0c1aff40ca01c2b07d06cb931568f912ecdd2c60f35a035fecf9b5f607675eb268935debb027f932117c69d67965a7b8e6056"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+ </artifact>
+ </component>
+ <component group="org.asciidoctor" name="asciidoctorj-api"
version="2.5.7">
+ <artifact name="asciidoctorj-api-2.5.7.jar">
+ <sha512
value="3548c0285bffe394e72c8bcfedee10f862ef6bf579a60132f116686af9de8a5113f24957995cabf2dee0f993296e74f5fdc56263b01314c2e45535fcbd663868"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+ </artifact>
+ </component>
+ <component group="org.asciidoctor" name="asciidoctorj-diagram"
version="2.2.17">
+ <artifact name="asciidoctorj-diagram-2.2.17.jar">
+ <sha512
value="fef5ad644db433c46b31c4007953fbb9e83e6306b9f13550dad4e207c80e854ec2594e3e2c0a2abd08d7cdfc524cd4a8c5af11d46b53f4808a1b853653d15ed0"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+ </artifact>
+ </component>
+ <component group="org.asciidoctor" name="asciidoctorj-diagram-ditaamini"
version="1.0.3">
+ <artifact name="asciidoctorj-diagram-ditaamini-1.0.3.jar">
+ <sha512
value="6e3a109fb5e2743bf413640953b3096a892760d93212098d4dc2315671d07d1c7133bfe6b347b85a9fdcbc99ccdf0249332b93bbadc52b79896b8c5078935dae"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+ </artifact>
+ </component>
+ <component group="org.asciidoctor" name="asciidoctorj-diagram-plantuml"
version="1.2023.13">
+ <artifact name="asciidoctorj-diagram-plantuml-1.2023.13.jar">
+ <sha512
value="781fcbf6ef5af6e7fd2db8490a130adce2d3da81d768fb20726bec9068396017f4d95cfeaed363ab5c21b582394c8c9febc2fa610f1fae87958c71998dd676c3"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+ </artifact>
+ </component>
+ <component group="org.asciidoctor" name="asciidoctorj-groovy-dsl"
version="2.0.2">
+ <artifact name="asciidoctorj-groovy-dsl-2.0.2.jar">
+ <pgp value="36390DE6A0E61EE4C7B4BA02C1D3063467F1EBD1"/>
+ </artifact>
+ </component>
+ <component group="org.asciidoctor" name="asciidoctorj-pdf"
version="2.3.19">
+ <artifact name="asciidoctorj-pdf-2.3.19.jar">
+ <pgp value="051927E24FA091722E05A3B23C03136EA34A60F7"/>
+ <sha512
value="cd4055ad4393d8513e082bf0427bb84a34dd924e657ec113d424518a9645cc5a84d6d20623475cf43abb58cbbbd82f2d039d488bad15177e815c9aecec6bdaad"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
</artifact>
</component>
<component group="org.codehaus" name="codehaus-parent" version="4">