This is an automated email from the ASF dual-hosted git repository. paulk pushed a commit to branch GROOVY_5_0_X in repository https://gitbox.apache.org/repos/asf/groovy.git
commit db26cc3d148b50287dc62fb9b68be528c81bfcfb Author: Paul King <[email protected]> AuthorDate: Tue Dec 23 17:33:37 2025 +1000 update dependency metadata --- gradle/verification-metadata.xml | 133 +++++++++++---------------------------- 1 file changed, 38 insertions(+), 95 deletions(-) diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml index 511fe1dfdb..c17451a41c 100644 --- a/gradle/verification-metadata.xml +++ b/gradle/verification-metadata.xml @@ -71,7 +71,7 @@ <ignored-key id="66D68DAA073BE985" reason="Key couldn't be downloaded from any key server"/> <ignored-key id="6A0975F8B1127B83" reason="Key couldn't be downloaded from any key server"/> <ignored-key id="6C70A3B7599C5736" reason="Key couldn't be downloaded from any key server"/> - <ignored-key id="6D9567281201E5E3" reason="Key couldn't be downloaded from any key server"/> + <ignored-key id="6D9567281201E5E3" reason="Verification frequently hangs"/> <ignored-key id="6FD54E1F311B47E9" reason="Key couldn't be downloaded from any key server"/> <ignored-key id="72FEFD1572EB75E1" reason="Key couldn't be downloaded from any key server"/> <ignored-key id="734AEF3D43509290" reason="Key couldn't be downloaded from any key server"/> @@ -268,19 +268,14 @@ <sha512 value="b4f3231d2489c19615520dfd3282cc5c14d92beb72e8bb20a2301df4b89bdac34958dac39dd8864bf826838072cb6a2f1ab97c1db4c05efd8a17218f1004fdcf" origin="Generated by Gradle" reason="A key couldn't be downloaded"/> </artifact> </component> - <component group="ch.qos.logback" name="logback-classic" version="1.5.21"> - <artifact name="logback-classic-1.5.21.jar"> - <sha512 value="a37432f096f97b5b7610d2887345daddf03cb5fa4518532aa2849bbd6745da1921b87ce4d7b26df8667fdc412ed48ef78ab658d4e44e3c99b17e135e08ef863e" origin="Generated by Gradle"/> + <component group="ch.qos.logback" name="logback-classic" version="1.5.23"> + <artifact name="logback-classic-1.5.23.jar"> + <sha512 value="d9d3123161a0ac22e4d5fd2753ef1be79d813738b7d528420d77393ce5d422b95fa2f1da5138dae70c2115497462ea70044dd5282993a29d46437687cba79d7d" origin="Generated by Gradle"/> </artifact> </component> - <component group="ch.qos.logback" name="logback-core" version="1.5.19"> - <artifact name="logback-core-1.5.19.jar"> - <sha512 value="20f6e485eab6851fa74a68f740c6387ac041e7a2ce7eb2be1ec291ad287cb7154ebbd4514655624e3845269db38cbb57ae7a240f1f79cb4fe5a31f9c70cc4c53" origin="Generated by Gradle" reason="A key couldn't be downloaded"/> - </artifact> - </component> - <component group="ch.qos.logback" name="logback-core" version="1.5.21"> - <artifact name="logback-core-1.5.21.jar"> - <sha512 value="fdfe6da279fe10fa19bdfc401c5eba4f6a0db7cc4aec9148def5d59a5ffaec0bdd38e0e0c187aa124490129bef0c062719900483e6e7c7f6ff0333c521ed7e1d" origin="Generated by Gradle"/> + <component group="ch.qos.logback" name="logback-core" version="1.5.23"> + <artifact name="logback-core-1.5.23.jar"> + <sha512 value="d5f9108b62b44d940a80bf0181e8c1976bb72b9cc407dc27389b9c9ba710ad6d3d8d6699853e7d079534a362a66089d1a5da02c8a17f3c19ed8b289210baee46" origin="Generated by Gradle"/> </artifact> </component> <component group="classworlds" name="classworlds" version="1.1"> @@ -833,7 +828,6 @@ </component> <component group="jakarta.servlet" name="jakarta.servlet-api" version="6.0.0"> <artifact name="jakarta.servlet-api-6.0.0.jar"> - <pgp value="7464550A61C90BA385FC97A76D9567281201E5E3"/> <sha512 value="b810ce040ed0671a3161fb197845f3ae750cd38c474ef54c351b7b127ff3b4d624a26c33450c62474f42c1cde21c65324cda63b1b3ea0515a286e0bcb0c0c9d5" origin="Generated by Gradle" reason="A key couldn't be downloaded"/> </artifact> </component> @@ -1121,11 +1115,21 @@ <sha512 value="697af1320d949b0e03d29cc097143c4f8724e26ec944b936c201b983b88117dd7037f843f099b0fd955f1f5355c4d5fc2f12ca7c2b8aea3ce16d9b01b83fbcb5" origin="Generated by Gradle" reason="Artifact is not signed"/> </artifact> </component> + <component group="org.apache.httpcomponents" name="httpclient" version="4.5.13"> + <artifact name="httpclient-4.5.13.jar"> + <sha512 value="3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089" origin="Generated by Gradle"/> + </artifact> + </component> <component group="org.apache.httpcomponents" name="httpclient" version="4.5.14"> <artifact name="httpclient-4.5.14.jar"> <sha512 value="a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced" origin="Generated by Gradle"/> </artifact> </component> + <component group="org.apache.httpcomponents" name="httpcore" version="4.4.14"> + <artifact name="httpcore-4.4.14.jar"> + <sha512 value="f16a652f4a7b87dbf7cb16f8590d54a3f719c4c7b2f8883ce59db2d73be4701b64f2ca8a2c45aca6a5dbeaddeedff0c280a03722f70c076e239b645faa54eff9" origin="Generated by Gradle"/> + </artifact> + </component> <component group="org.apache.httpcomponents" name="httpcore" version="4.4.16"> <artifact name="httpcore-4.4.16.jar"> <sha512 value="168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838" origin="Generated by Gradle"/> @@ -1163,9 +1167,9 @@ <sha512 value="df1142813e3f64768695e5891a0eff499692cb8b3213f1d87ce9c14f06343252733ad14ff193a0934997f65f0ba1d8b58cbdaab13349c305781f58a937683afb" origin="Generated by Gradle" reason="Artifact is not signed"/> </artifact> </component> - <component group="org.apache.logging.log4j" name="log4j-core" version="2.25.2"> - <artifact name="log4j-core-2.25.2.jar"> - <sha512 value="9923dafcec7d8015b2656ae1881aef7b448656b08f235371208c8e10aaf5d6220b7251f7880262ef03883783e8b0fce120a55fe380bc673ac35d34fb8100b24d" origin="Generated by Gradle" reason="Artifact is not signed"/> + <component group="org.apache.logging.log4j" name="log4j-api" version="2.25.3"> + <artifact name="log4j-api-2.25.3.jar"> + <sha512 value="ce9aaf5beec0fb8cbed8c4ae8a91a58d3f6935c731220b294d70f1569128b5ff367e1bf94d69572dd7ab05bff2a63bde5ff7489eb9743e8c307b644eaeadbc50" origin="Generated by Gradle"/> </artifact> </component> <component group="org.apache.maven" name="maven-artifact" version="3.9.11"> @@ -1537,15 +1541,9 @@ <sha512 value="1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6" origin="Generated by Gradle" reason="A key couldn't be downloaded"/> </artifact> </component> - <component group="org.codenarc" name="CodeNarc" version="3.5.0-groovy-4.0"> - <artifact name="CodeNarc-3.5.0-groovy-4.0.jar"> - <pgp value="851264C36365D4FF9427625F38362FD5CFA2668B"/> - </artifact> - </component> - <component group="org.codenarc" name="CodeNarc" version="3.6.0"> - <artifact name="CodeNarc-3.6.0.jar"> - <pgp value="851264C36365D4FF9427625F38362FD5CFA2668B"/> - <sha512 value="8a9d21ee4cff69b93a53d6fde6734eadba53e04494ca3930b3151a39f6a03b6cfe1fec04c88aa8dfeaa91e407a22e0587ecc433cbc51f01a170ace026ccc73e6" origin="Generated by Gradle"/> + <component group="org.codenarc" name="CodeNarc" version="3.7.0"> + <artifact name="CodeNarc-3.7.0.jar"> + <sha512 value="50cc6a6ae143ce6a7e42d21d7fc049a252c63ee8f1cb7ceff6a7a97bc4a0f4b4dda646d108e175b7fe2eaa3214b04c75672c6abee7fafb5b587809a916500215" origin="Generated by Gradle"/> </artifact> </component> <component group="org.cyclonedx" name="cyclonedx-core-java" version="10.2.1"> @@ -1961,84 +1959,29 @@ <sha512 value="5dbdf60bace26f9dbe2610d3de178e729fae77d65f57cb8238a828d020aaf1b4cc3d3d804bbdcf4a385c141b14fbf92ff689d9caa1f9e86542b5c47b0b1e9288" origin="Generated by Gradle" reason="A key couldn't be downloaded"/> </artifact> </component> - <component group="org.ow2.asm" name="asm" version="9.0"> - <artifact name="asm-9.0.jar"> - <sha512 value="135f0be16323936ef10a291df4e5d13ab8e488f41cc2835e9ccdddb3f6b65e948ef3b79eb12636c97815380455a32ece7fa9dd094f04b192a3e8752bbcb83463" origin="Generated by Gradle"/> - </artifact> - </component> - <component group="org.ow2.asm" name="asm" version="9.7.1"> - <artifact name="asm-9.7.1.jar"> - <sha512 value="4767b01603dad5c79cc1e2b5f3722f72b1059d928f184f446ba11badeb1b381b3a3a9a801cc43d25d396df950b09d19597c73173c411b1da890de808b94f1f50" origin="Generated by Gradle" reason="Artifact is not signed"/> - </artifact> - </component> - <component group="org.ow2.asm" name="asm" version="9.8"> - <artifact name="asm-9.8.jar"> - <sha512 value="cbd250b9c698a48a835e655f5f5262952cc6dd1a434ec0bc3429a9de41f2ce08fcd3c4f569daa7d50321ca6ad1d32e131e4199aa4fe54bce9e9691b37e45060e" origin="Generated by Gradle" reason="Artifact is not signed"/> - </artifact> - </component> - <component group="org.ow2.asm" name="asm" version="9.9"> - <artifact name="asm-9.9.jar"> - <sha512 value="197a4fb3ecb34d05ac555c6a510e69affcb1e476f24c5e935ad513ecdabf74b45aa1b0e0b25dbe91224fc6db7959b2677ea5876ee49e7487265e2a29c560c21c" origin="Generated by Gradle"/> - </artifact> - </component> - <component group="org.ow2.asm" name="asm-analysis" version="9.7.1"> - <artifact name="asm-analysis-9.7.1.jar"> - <sha512 value="a8bd265c81d9bb4371cafd3f5d18f96ad79aec65031457d518c54599144d199d9feddf13b8dc822b2598b8b504a88edbd81d1f2c52991a70a6b343d8f5bb6fe5" origin="Generated by Gradle" reason="Artifact is not signed"/> - </artifact> - </component> - <component group="org.ow2.asm" name="asm-analysis" version="9.8"> - <artifact name="asm-analysis-9.8.jar"> - <sha512 value="0268e6dc2cc4965180ca1b62372e3c5fc280d6dc09cfeace2ac4e43468025e8a78813e4e93beafc0352e67498c70616cb4368313aaab532025fa98146c736117" origin="Generated by Gradle" reason="Artifact is not signed"/> - </artifact> - </component> - <component group="org.ow2.asm" name="asm-analysis" version="9.9"> - <artifact name="asm-analysis-9.9.jar"> - <sha512 value="293fdf9ffd6858559d9bf4a2b68dfcfc58cb581d27e0fbcd2c2d0c540520498e9d587094534dd58d782ff5051b90f160971cfc388ea132e06eafa089bcc0bed7" origin="Generated by Gradle"/> - </artifact> - </component> - <component group="org.ow2.asm" name="asm-commons" version="9.7.1"> - <artifact name="asm-commons-9.7.1.jar"> - <sha512 value="81daf5765e387e6aeec5d45c4b9e4e1b471fb4f350931e5a214845c7c657a2142768f6902765e49c0ce2c595962e5d008883cba2e4a40c4bdce8f2e92518d2db" origin="Generated by Gradle" reason="Artifact is not signed"/> - </artifact> - </component> - <component group="org.ow2.asm" name="asm-commons" version="9.8"> - <artifact name="asm-commons-9.8.jar"> - <sha512 value="d2add10e25416b701bd84651b42161e090df2f32940de5e06e0e2a41c6106734db2fe5136f661d8a8af55e80dc958bc7b385a1004f0ebe550828dfa1e9d70d41" origin="Generated by Gradle" reason="Artifact is not signed"/> - </artifact> - </component> - <component group="org.ow2.asm" name="asm-commons" version="9.9"> - <artifact name="asm-commons-9.9.jar"> - <sha512 value="4949cde2b51e5d171d0ff02ebd1f9f7f111bf538c8bfd62f139364181ee4bebd6598949d895f1c78daaba6dd1da4e564fab10e602cfe297915cd0287f8c2f1d5" origin="Generated by Gradle"/> - </artifact> - </component> - <component group="org.ow2.asm" name="asm-tree" version="9.7.1"> - <artifact name="asm-tree-9.7.1.jar"> - <sha512 value="e55008c392fdd35e95d3404766b12dd4b46e13d5c362fcd0ab42a65751a82737eaf0ebc857691d1916190d34407adfde4437615d69c278785416fd911e00978d" origin="Generated by Gradle" reason="Artifact is not signed"/> - </artifact> - </component> - <component group="org.ow2.asm" name="asm-tree" version="9.8"> - <artifact name="asm-tree-9.8.jar"> - <sha512 value="4493f573d9f0cfc8837db9be25a8b61a825a06aafc0e02f0363875584ff184a5a14600e53793c09866300859e44f153faffd0e050de4a7fba1a63b5fb010a9a7" origin="Generated by Gradle" reason="Artifact is not signed"/> + <component group="org.ow2.asm" name="asm" version="9.9.1"> + <artifact name="asm-9.9.1.jar"> + <sha512 value="bb43eaca8777c7b2b4bce9fc19f9be5742a736a23415e271643c3e14d3d82f565f6de0e29ebac570ce66b3921ece1ebd4de06abeb633ae28c17891de56973807" origin="Generated by Gradle"/> </artifact> </component> - <component group="org.ow2.asm" name="asm-tree" version="9.9"> - <artifact name="asm-tree-9.9.jar"> - <sha512 value="8b555d9166a17dcd0d1b297bd61fb3da59279b00a97fd7d0a3b139cb68ca8012ac14fb9bab0a6fa7ebe5612337f8e39b240d97b05a2c25ebc9ece15b7a1bc131" origin="Generated by Gradle"/> + <component group="org.ow2.asm" name="asm-analysis" version="9.9.1"> + <artifact name="asm-analysis-9.9.1.jar"> + <sha512 value="f860f19969391398a80dc75417912e3d04978d38048b654ffef048ba801976fbd97480ec9d49a7f3cec0c2a80e2257c4a660804b2dd6fb79a02ca934e5d66036" origin="Generated by Gradle"/> </artifact> </component> - <component group="org.ow2.asm" name="asm-util" version="9.7.1"> - <artifact name="asm-util-9.7.1.jar"> - <sha512 value="522d793d15a2c5ea6504a50222cf0750f1eab7b881cf289675042539b1aba8b3868197b1bebe729de728dd10020eb028ae16252dcd5d84fdcbf7f925832bc269" origin="Generated by Gradle" reason="Artifact is not signed"/> + <component group="org.ow2.asm" name="asm-commons" version="9.9.1"> + <artifact name="asm-commons-9.9.1.jar"> + <sha512 value="261b39b5344c87a84d462373ae58b41a372f351150f592e46d620a64483621fae2b0fcd07f7c0d11973a8183a00119579bd84cd25a6a04e0cd82261f9760f8d4" origin="Generated by Gradle"/> </artifact> </component> - <component group="org.ow2.asm" name="asm-util" version="9.8"> - <artifact name="asm-util-9.8.jar"> - <sha512 value="b68048e199c49d2f90b2990c6993f1fcddccd34fb9d91154ef327d874aa5ff8609db5fbd63e23141020cdeda8fb753e97a61c2152e1b4e8f20003a5390e7e1d9" origin="Generated by Gradle" reason="Artifact is not signed"/> + <component group="org.ow2.asm" name="asm-tree" version="9.9.1"> + <artifact name="asm-tree-9.9.1.jar"> + <sha512 value="17346f9d37dc90956c451b841ac052aa9217a19b5fdd7744a497a35addfcdff8a5e7c42dcb192910685ec6161e7b29e6867b5f84764ee3850502ac48ba392009" origin="Generated by Gradle"/> </artifact> </component> - <component group="org.ow2.asm" name="asm-util" version="9.9"> - <artifact name="asm-util-9.9.jar"> - <sha512 value="cd4f82589e0acc801618e4f55de2e7b85718d30cf5a7d2e5ead383dcdc2689a934abea37b81f5a7c508d9f7fc9ceb2e8ae5c8e4e958537ebb80b621814b099fb" origin="Generated by Gradle"/> + <component group="org.ow2.asm" name="asm-util" version="9.9.1"> + <artifact name="asm-util-9.9.1.jar"> + <sha512 value="adcc480f68828ffd68d03846be852988b595c2e1bb69224d273578dd6c2ad2773edfe96625a7c00bc40ae0f2d1cac8412eaa54b88cc8e681b0b4c0ee3b082333" origin="Generated by Gradle"/> </artifact> </component> <component group="org.reflections" name="reflections" version="0.10.2">
