To have truly reproducible builds you need to have dependency
management for the tools and JDK, not just libraries. That's what the
wrapper is about. The wrapper can do hash checks on the downloaded Gradle
tool so it should be "safe". Using the Gradle mechanism to run with a
specified JDK, and f
On Sat, 6 Aug 2022 at 17:16, Bernd Michaely wrote:
>
> The original Gradle (7.5) doc says:
>
> The project root directory contains all source files that are part of your
> project. In addition, it contains files and directories that are generated by
> Gradle such as .gradle and build. While the
