This is an automated email from the ASF dual-hosted git repository. sunlan pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/groovy.git
commit 46a002f159fd4b731605857b0f77e3f975426988 Author: Daniel Sun <[email protected]> AuthorDate: Sun Jan 11 14:35:48 2026 +0900 Update dependency metadata --- gradle/verification-metadata.xml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml index e4289aecc4..c1849ebabe 100644 --- a/gradle/verification-metadata.xml +++ b/gradle/verification-metadata.xml @@ -779,6 +779,11 @@ <sha512 value="d98a7a1cfcc08aa9cce4f7778e3f37ecb99da7b1da01944e5fa8faf06fbf9f969f2efb0b416832f419d53085250f711c071f1dac9fa0968483c37034198367fb" origin="Generated by Gradle"/> </artifact> </component> + <component group="commons-codec" name="commons-codec" version="1.20.0"> + <artifact name="commons-codec-1.20.0.jar"> + <pgp value="2DB4F1EF0FA761ECC4EA935C86FDC7E2A11262CB"/> + </artifact> + </component> <component group="commons-collections" name="commons-collections" version="3.2.2"> <artifact name="commons-collections-3.2.2.jar"> <pgp value="0CC641C3A62453AB390066C4A41F13C999945293"/> @@ -1628,6 +1633,7 @@ </component> <component group="org.codenarc" name="CodeNarc" version="3.7.0"> <artifact name="CodeNarc-3.7.0.jar"> + <pgp value="851264C36365D4FF9427625F38362FD5CFA2668B"/> <sha512 value="50cc6a6ae143ce6a7e42d21d7fc049a252c63ee8f1cb7ceff6a7a97bc4a0f4b4dda646d108e175b7fe2eaa3214b04c75672c6abee7fafb5b587809a916500215" origin="Generated by Gradle"/> </artifact> </component> @@ -1637,11 +1643,21 @@ <sha512 value="20d3c3b839fd2a5597665ee6e48f0f6bbd32168f275b851551230437aa25d80e22d6e7da760f05ebd17ddc92cec5a4c2c45e3280631da67478d77e16b612f00e" origin="Generated by Gradle" reason="A key couldn't be downloaded"/> </artifact> </component> + <component group="org.cyclonedx" name="cyclonedx-core-java" version="11.0.1"> + <artifact name="cyclonedx-core-java-11.0.1.jar"> + <pgp value="DC61AE5DFD409C64F592AC1A6FD54E1F311B47E9"/> + </artifact> + </component> <component group="org.cyclonedx" name="cyclonedx-gradle-plugin" version="3.0.0-alpha-2"> <artifact name="cyclonedx-gradle-plugin-3.0.0-alpha-2.jar"> <sha512 value="539cc070289c606e214b4af3596ed2cf90481aa9bdb7fe72b727cee67dbdb359eaa92a5096e602f4eaabef2e617c42c8009acfe28ee9152a20d7906213479cc4" origin="Generated by Gradle" reason="Artifact is not signed"/> </artifact> </component> + <component group="org.cyclonedx" name="cyclonedx-gradle-plugin" version="3.0.2"> + <artifact name="cyclonedx-gradle-plugin-3.0.2.jar"> + <sha512 value="2b19146826056d184c189fe1e4e10cb9a9aaaef0635459675299f09a3b61f72d25bd68eabb95b65ae072671b4000167a4d9a735900754a98b19b9dfd0864532b" origin="Generated by Gradle" reason="Artifact is not signed"/> + </artifact> + </component> <component group="org.dom4j" name="dom4j" version="2.2.0"> <artifact name="dom4j-2.2.0.jar"> <pgp value="8F9A3C6D105B9F57844A721D79E193516BE7998F"/> @@ -1800,6 +1816,9 @@ </component> <component group="org.jfrog.buildinfo" name="build-info-extractor-gradle" version="6.0.4"> <artifact name="build-info-extractor-gradle-6.0.4.jar"> + <ignored-keys> + <ignored-key id="49BC0306DEB0ECE16CDD09652EE4988C55528F25" reason="PGP verification failed"/> + </ignored-keys> <sha512 value="3e03bdcc0b2752ec7e323e4d077257705ce129ed8c2b0c4960d8a6da6e4552a13cd0bbc7bec8b83c127666a7a54b68f7d60f7d804558cb66a0634ba5388a4de9" origin="Generated by Gradle" reason="PGP signature verification failed!"/> </artifact> </component>
