This is an automated email from the ASF dual-hosted git repository.
paulk pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/groovy.git
The following commit(s) were added to refs/heads/master by this push:
new b43fb07579 update dependency metadata
b43fb07579 is described below
commit b43fb07579ce53b47c4810fafa6c52d6190fe14d
Author: Paul King <[email protected]>
AuthorDate: Sun Apr 16 18:23:40 2023 +1000
update dependency metadata
---
gradle/verification-metadata.xml | 99 ++++++++++++++++++++++++++++++++--------
1 file changed, 81 insertions(+), 18 deletions(-)
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 647a0695b8..a331c64d52 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -47,6 +47,7 @@
<ignored-keys>
<ignored-key id="7f5cafc87b6c2a89" reason="Key couldn't be downloaded
from any key server"/>
<ignored-key id="74dafdfd6dae2441" reason="Key couldn't be downloaded
from any key server"/>
+ <ignored-key id="13d979595e6d01e1" reason="Key couldn't be downloaded
from any key server"/>
</ignored-keys>
<trusted-keys>
<trusted-key id="019082bc00e0324e2aef4cf00d3b328562a119a7"
group="org.openjdk.jmh"/>
@@ -81,6 +82,7 @@
<trusting group="org.checkerframework" name="checker-qual"
version="3.27.0"/>
</trusted-key>
<trusted-key id="28118c070cb22a0175a2e8d43d12ca2ac19f3181"
group="^com[.]fasterxml($|([.].*))" regex="true"/>
+ <trusted-key id="29bea2a645f2d6ced7fb12e02b172e3e156466e8"
group="^org[.]apache[.]maven($|([.].*))" regex="true"/>
<trusted-key id="2b1042677fd8190c7b9fc0dc2161d72e7dcd4258"
group="^org[.]sonarsource($|([.].*))" regex="true"/>
<trusted-key id="2b547c530d62b57973f5e8997f5cafc87b6c2a89"
group="me.sunlan"/>
<trusted-key id="2db4f1ef0fa761ecc4ea935c86fdc7e2a11262cb">
@@ -122,11 +124,12 @@
</trusted-key>
<trusted-key id="666a4692ce11b7b3f4eb7b3410066a9707090cf9"
group="org.javassist" name="javassist" version="3.24.0-GA"/>
<trusted-key id="694621a7227d8d5289699830abe9f3126bb741c1"
group="com.google.guava"/>
+ <trusted-key id="6a814b1f869c2bbeab7cb7271a2a1c94bde89688"
group="org.codehaus.plexus"/>
<trusted-key id="6dd3b8c64ef75253beb2c53ad908a43fb7ec07ac"
group="jakarta.activation"/>
<trusted-key id="6f538074ccebf35f28af9b066a0975f8b1127b83"
group="org.jetbrains.kotlin"/>
<trusted-key id="7616eb882daf57a11477aaf559a252fb1199d873"
group="com.google.code.findbugs" name="jsr305" version="3.0.2"/>
<trusted-key id="76e94e8ff0ab5af3b6f8366972fefd1572eb75e1"
group="org.spockframework"/>
- <trusted-key id="7cd52b5a8295137c88fb5748dddafa7674e54418"
group="org.testng" name="testng" version="7.7.0"/>
+ <trusted-key id="7cd52b5a8295137c88fb5748dddafa7674e54418"
group="org.testng" name="testng" version="7.7.1"/>
<trusted-key id="82f833963889d7ed06f1e4dc6525fd70cc303655"
group="org.apache.maven.shared" name="maven-filtering" version="1.1"/>
<trusted-key id="851264c36365d4ff9427625f38362fd5cfa2668b">
<trusting group="org.codenarc"/>
@@ -199,6 +202,11 @@
</trusted-keys>
</configuration>
<components>
+ <component group="aopalliance" name="aopalliance" version="1.0">
+ <artifact name="aopalliance-1.0.jar">
+ <sha512
value="3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
origin="Generated by Gradle because artifact wasn't signed"/>
+ </artifact>
+ </component>
<component group="backport-util-concurrent"
name="backport-util-concurrent" version="3.1">
<artifact name="backport-util-concurrent-3.1.jar">
<sha512
value="5f881cb5fc18df80f574ab3af261ef4a45a628794b40c3ffd896af98b9fbbf06ad65ac41e0688fefc9769901bc84a0eff866c77bf07af467a26c811003845f62"
origin="Generated by Gradle because artifact wasn't signed"/>
@@ -228,6 +236,16 @@
<sha512
value="ac34d6a49e9ec336e129780fa1e03eefdbeb7b764f3c5a703058c9ed7b051168f4ec5c3a68cf03b8337df268a7d494dbdb57fd87bfce2fe7f140261b41837504"
origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
+ <component group="com.eed3si9n.jarjar" name="jarjar" version="1.8.2">
+ <artifact name="jarjar-1.8.2.jar">
+ <pgp value="ea313384ca0eba950ea017e937890e298d9a2bfa"/>
+ </artifact>
+ </component>
+ <component group="com.ethlo.time" name="itu" version="1.7.0">
+ <artifact name="itu-1.7.0.jar">
+ <pgp value="b286846c341bb72d1e5f85cab460e7c4ed66826d"/>
+ </artifact>
+ </component>
<component group="com.github.ben-manes" name="gradle-versions-plugin"
version="0.46.0">
<artifact name="gradle-versions-plugin-0.46.0.jar">
<sha512
value="396a4beca52d3868e0edc377319d8ec5052094e8560e505380e204dc6a69fdb829053c7860b8f4232ebfdbe5edf98bc67079012ca9f5803dc5bbebdfae433cd1"
origin="Generated by Gradle because artifact wasn't signed"/>
@@ -251,11 +269,21 @@
<sha512
value="19e2c738c0c842f6b818f0a6abbaafa30fb0082e2e1b79588f062d5c1e9d68484eb1b3c110873ff73f8077937da15f19da79512314b4f37c4faa4d20004e6e26"
origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
+ <component group="com.github.package-url" name="packageurl-java"
version="1.4.1">
+ <artifact name="packageurl-java-1.4.1.jar">
+ <pgp value="5d283c23d9d9dc2d9c2130e6aadf2c18dcf95764"/>
+ </artifact>
+ </component>
<component group="com.github.spotbugs.snom"
name="spotbugs-gradle-plugin" version="5.0.14">
<artifact name="spotbugs-gradle-plugin-5.0.14.jar">
<sha512
value="f8768877e3b204ea886f7bdee6b4d900db80b1b63cf37800f56e3bb1e2d3c13b38f7ba4784160db80a0cab658d4948bee1992e9fafe519c156bef8a4b0b3e903"
origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
+ <component group="com.google.inject" name="guice" version="5.1.0">
+ <artifact name="guice-5.1.0.jar">
+ <pgp value="d5f46bc0b86af5dc56df58f05e975cb00c643dbf"/>
+ </artifact>
+ </component>
<component group="com.gradle" name="build-scan-plugin" version="1.10.1">
<artifact name="build-scan-plugin-1.10.1.jar">
<sha512
value="4757fe5f5140d3ba223cbc242afc5e513d08b2a4454d1b00987fc670217db55527d206943c356ebdd80f77ed7b867c8dd3b17432b4a57b3e9d19dfc7e43bf9aa"
origin="Generated by Gradle because artifact wasn't signed"/>
@@ -264,8 +292,8 @@
<sha512
value="ec75067d2d87f5203b55bb06da8eb65613f6c35c9794d08c2ce7da5a6068780a1534bb3b0ebbbe4d420d2ec8d50407a7f9907b8c77955ae1cd463f433c58fe9f"
origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
- <component group="com.gradle" name="gradle-enterprise-gradle-plugin"
version="3.12.6">
- <artifact name="gradle-enterprise-gradle-plugin-3.12.6.jar">
+ <component group="com.gradle" name="gradle-enterprise-gradle-plugin"
version="3.13">
+ <artifact name="gradle-enterprise-gradle-plugin-3.13.jar">
<pgp value="314fe82e5a4c5377bca2edec5208812e1e4a6db0"/>
</artifact>
</component>
@@ -282,6 +310,11 @@
<sha512
value="7d122234353216e98807ab27a663ca4869589131a577c378aae85fbb7263fa9cbf641f0e980ebb6008d43d2d880fc5b30afb77b585c0470b33a2a6fdef8a803e"
origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
+ <component group="com.networknt" name="json-schema-validator"
version="1.0.76">
+ <artifact name="json-schema-validator-1.0.76.jar">
+ <pgp value="aeb1e1aec035c66fa39589d13efc46ee83c40224"/>
+ </artifact>
+ </component>
<component group="com.puppycrawl.tools" name="checkstyle"
version="10.6.0">
<artifact name="checkstyle-10.6.0.jar">
<pgp value="06d34ed6ff73de368a772a781063fe98bcecb758"/>
@@ -308,8 +341,8 @@
<sha512
value="3d9f60e6d3c19fb016fac73b97da4ca999822d4d6d981a42067c33e0f1ede479e059c2cb973e1f634dddcf33a516870a7639af5865f9a866182cb03613720b00"
origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
- <component group="info.picocli" name="picocli" version="4.7.1">
- <artifact name="picocli-4.7.1.jar">
+ <component group="info.picocli" name="picocli" version="4.7.2">
+ <artifact name="picocli-4.7.2.jar">
<pgp value="aa417737bd805456db3cbdde6601e5c08dccbb96"/>
</artifact>
</component>
@@ -321,6 +354,11 @@
<sha512
value="3191f2df56303bd0e711d932b79680225a718af6dcb2b8c7b8b1ae09219e2b2f2a856e089b405ddb9d9fd5ee3df7c4fab7648e50a0d61fb3671c48d288e85cb7"
origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
+ <component group="javax.annotation" name="javax.annotation-api"
version="1.2">
+ <artifact name="javax.annotation-api-1.2.jar">
+ <pgp value="4f7e32d440ef90a83011a8fc6425559c47cc79c4"/>
+ </artifact>
+ </component>
<component group="javax.annotation" name="jsr250-api" version="1.0">
<artifact name="jsr250-api-1.0.jar">
<sha512
value="8b5dd24460e42763f3645205be4b4f80691e217d36bee5fc5b5df6ebc8782ed0f641fb9e2fe918a2d0eede32556656f6b61fe65d2cbec5086e61ef3d91e4d871"
origin="Generated by Gradle because artifact wasn't signed"/>
@@ -551,6 +589,11 @@
<sha512
value="a06bf970f4bec3b938e4f5e705ab44258d39125afdfa5115c6eb3289c9897d7787799d5ff0164fcaaa4bbb7a26858dd6466a9ce2a70d13ee7295648cbf401050"
origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
+ <component group="org.apache.maven.shared" name="maven-shared-utils"
version="3.3.4">
+ <artifact name="maven-shared-utils-3.3.4.jar">
+ <sha512
value="c6693f8a061de74ac59c61d185f5b130cb574405cfc37febb8e73806ea64eea822a4a75c24098fb49b7871373091543a6f4c526c0842589e528cacad40e5554a"
origin="Generated by Gradle because a key couldn't be downloaded"/>
+ </artifact>
+ </component>
<component group="org.apache.maven.wagon" name="wagon"
version="1.0-beta-2">
<artifact name="wagon-1.0-beta-2.pom">
<sha512
value="7b73a834775918f11ac1b4560a7b0ff184bcc556da9f4a72a6cde351d1c5978c77e4f9cd15e4cfbed901975665585bd47fc976f0c5796fdef1ac122c841aeea3"
origin="Generated by Gradle because artifact wasn't signed"/>
@@ -654,21 +697,16 @@
<sha512
value="97cd6cae44621166813e70d0b896592a271e7541373fb6b9be9a2a0f4628b7c043880f56457ebf6fb749ffa2cf707c05de2238a6b2adf35b156786794a1e3acf"
origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
- <component group="org.codehaus.plexus" name="plexus" version="1.0.4">
- <artifact name="plexus-1.0.4.pom">
- <sha512
value="754ed23e59d997a5c1f9814f949df6618f65faf206221e301724c9aefa795186ed65802dad95ef8c9610d33e75c0e28526dc36aff0157efb8fa3b94a5a63fd85"
origin="Generated by Gradle because artifact wasn't signed"/>
- </artifact>
- </component>
- <component group="org.codehaus.plexus" name="plexus" version="2.0.2">
- <artifact name="plexus-2.0.2.pom">
- <sha512
value="1f65432d0912861ee6913874b8f8c415313d18e6addc7d2371d2fd82881c46ecd6b67689331587dcbaaebdd0459dcb28aefe43f243f5d2dd528e8648d0f65912"
origin="Generated by Gradle because artifact wasn't signed"/>
- </artifact>
- </component>
<component group="org.codehaus.plexus" name="plexus" version="6.5">
<artifact name="plexus-6.5.pom">
<pgp value="fa77dcfef2ee6eb2debedd2c012579464d01c06a"/>
</artifact>
</component>
+ <component group="org.codehaus.plexus" name="plexus-classworlds"
version="2.6.0">
+ <artifact name="plexus-classworlds-2.6.0.jar">
+ <pgp value="b02137d875d833d9b23392ecae5a7fb608a0221c"/>
+ </artifact>
+ </component>
<component group="org.codehaus.plexus" name="plexus-components"
version="1.1.14">
<artifact name="plexus-components-1.1.14.pom">
<sha512
value="8f00b358c7241268ab30c8bebee63c52d40fc89e33176abe4fba4af070e66812691d415346e63216c5f9a0a3d9f95b573f340b208eae9596a1f1f9100c9de29e"
origin="Generated by Gradle because artifact wasn't signed"/>
@@ -708,6 +746,31 @@
<sha512
value="01a1ce2ae359cde9f4b880fa6ffbace9f767a134cb016365f12ebd762dbbcc7e378be0f3f6f6c65828e839c4e6ecaffbf6b93170ee73c24cef22460c58b07965"
origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
+ <component group="org.codehaus.plexus" name="plexus-interpolation"
version="1.26">
+ <artifact name="plexus-interpolation-1.26.jar">
+ <pgp value="f254b35617dc255d9344bcfa873a8e86b4372146"/>
+ </artifact>
+ </component>
+ <component group="org.codehaus.plexus" name="plexus-sec-dispatcher"
version="2.0">
+ <artifact name="plexus-sec-dispatcher-2.0.jar">
+ <pgp value="f3d15b8ff9902805de4be6b18dc6f3d0abdbd017"/>
+ </artifact>
+ </component>
+ <component group="org.codehaus.woodstox" name="stax2-api"
version="4.2.1">
+ <artifact name="stax2-api-4.2.1.jar">
+ <pgp value="6214760097dc5cfad0175ac2c9fbaa83a8753994"/>
+ </artifact>
+ </component>
+ <component group="org.cyclonedx" name="cyclonedx-core-java"
version="7.3.1">
+ <artifact name="cyclonedx-core-java-7.3.1.jar">
+ <pgp value="5d283c23d9d9dc2d9c2130e6aadf2c18dcf95764"/>
+ </artifact>
+ </component>
+ <component group="org.cyclonedx" name="cyclonedx-gradle-plugin"
version="1.7.4">
+ <artifact name="cyclonedx-gradle-plugin-1.7.4.jar">
+ <sha512
value="c2a528986f1128e57c98202c3e70a0f9a8d1a5b25b2374552adb4be4f7c776a18d408187e3bc441333e0f53ffb656cc78aff5b50d56058181602823c7330bdb6"
origin="Generated by Gradle because artifact wasn't signed"/>
+ </artifact>
+ </component>
<component group="org.fusesource" name="fusesource-pom" version="1.12">
<artifact name="fusesource-pom-1.12.pom">
<sha512
value="1378fc44bd73525218e4e435b638d77de1c41185c1813220a024a564d63a1bdcb9fb20fb460937cd7e26b302d5ed0024835c8337b807f1e2f8c4cd63a16db794"
origin="Generated by Gradle because artifact wasn't signed"/>
@@ -726,12 +789,12 @@
<sha512
value="bc9cbda22130f8c6a0eef672a2dea0bc02ed785bb5382ac258678106175132b4c2a1e365ab69d4e06f705b88d71e9ea2aedb0861d6d63901d0320522352a6ddf"
origin="Generated by Gradle because artifact wasn't signed"/>
</artifact>
</component>
- <component group="org.jfrog.buildinfo"
name="build-info-extractor-gradle" version="4.31.8">
- <artifact name="build-info-extractor-gradle-4.31.8.jar">
+ <component group="org.jfrog.buildinfo"
name="build-info-extractor-gradle" version="4.31.9">
+ <artifact name="build-info-extractor-gradle-4.31.9.jar">
<ignored-keys>
<ignored-key id="49bc0306deb0ece16cdd09652ee4988c55528f25"
reason="PGP verification failed"/>
</ignored-keys>
- <sha512
value="d3026688eca48ba2bbc181d69a97d5abfde0f2b2ddd163ef3a5c404771b0427626ce4c52e7044c141c401419147be2329828a50c87a00affda482bd537b5a02d"
origin="Generated by Gradle because PGP signature verification failed!"/>
+ <sha512
value="a2d4b9536a93c0622c975ab54e3c9d32701e9533234685528e7f6582c1e89ffeb8387c9682b2b0b0b28ff3dc940dfd1936d3bc93fab4cad184bec15eb55153b0"
origin="Generated by Gradle because PGP signature verification failed!"/>
</artifact>
</component>
<component group="org.multiverse" name="multiverse" version="0.7.0">
