This is an automated email from the ASF dual-hosted git repository.

paulk pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/groovy.git


The following commit(s) were added to refs/heads/master by this push:
     new 71d261e110 update dependency metadata
71d261e110 is described below

commit 71d261e110ff8cdc19a51e79e756da5c5f608298
Author: Paul King <[email protected]>
AuthorDate: Wed Aug 9 11:22:11 2023 +1000

    update dependency metadata
---
 gradle/verification-metadata.xml | 35 +++++++++++++++--------------------
 1 file changed, 15 insertions(+), 20 deletions(-)

diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 491c930686..89c5c017eb 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -91,8 +91,10 @@
          <trusted-key id="314fe82e5a4c5377bca2edec5208812e1e4a6db0" 
group="com.gradle"/>
          <trusted-key id="31fae244a81d64507b47182e1b2718089ce964b8" 
group="com.thoughtworks.qdox" name="qdox" version="1.12.1"/>
          <trusted-key id="331224e1d7be883d16e8a685825c06c827af6b66" 
group="me.champeau.gradle" name="japicmp-gradle-plugin" version="0.4.2"/>
-         <trusted-key id="34441e504a937f43eb0daef96a65176a0fb1cd0b" 
group="org.apache.groovy"/>
-         <trusted-key id="34441e504a937f43eb0daef96a65176a0fb1cd0b" 
group="org.codehaus.groovy"/>
+         <trusted-key id="34441e504a937f43eb0daef96a65176a0fb1cd0b">
+            <trusting group="org.apache.groovy"/>
+            <trusting group="org.codehaus.groovy"/>
+         </trusted-key>
          <trusted-key id="3690c240ce51b4670d30ad1c38ee757d69184620" 
group="org.tukaani" name="xz" version="1.6"/>
          <trusted-key id="3f2a008a91d11a7fac4a0786f13d3e721d56bd54" 
group="org.reflections" name="reflections" version="0.10.2"/>
          <trusted-key id="3f999bb69041cf17e73bb1cec038787776a19d18" 
group="net.javacrumbs.json-unit"/>
@@ -187,7 +189,11 @@
          <trusted-key id="ee0ca873074092f806f59b65d364abaa39a47320" 
group="com.google.errorprone"/>
          <trusted-key id="f254b35617dc255d9344bcfa873a8e86b4372146" 
group="^org[.]apache($|([.].*))" regex="true"/>
          <trusted-key id="fa1703b1d287caea3a60f931e0130a3ed5a2079e" 
group="org.webjars" name="jquery" version="3.6.1"/>
-         <trusted-key id="fa77dcfef2ee6eb2debedd2c012579464d01c06a" 
group="org.apache" name="apache"/>
+         <trusted-key id="fa77dcfef2ee6eb2debedd2c012579464d01c06a">
+            <trusting group="org.apache" name="apache"/>
+            <trusting group="org.apache.maven.doxia"/>
+            <trusting group="org.codehaus.plexus"/>
+         </trusted-key>
          <trusted-key id="fb11d4bb7b244678337aad8bc7bf26d0bb617866">
             <trusting group="org.codehaus.plexus"/>
             <trusting group="^org[.]apache[.]maven($|([.].*))" regex="true"/>
@@ -315,12 +321,9 @@
             <sha512 
value="9bf3abfb83f3a1f3ac3540ce83052e0d779a50a69592c08e51e3707e077c754120267efd5e54b206dfa703e5f9beb9a4667680237482d0e1b36e0783ba54a99d"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
-      <component group="com.github.spotbugs.snom" 
name="spotbugs-gradle-plugin" version="5.0.14">
-         <artifact name="spotbugs-gradle-plugin-5.0.14.jar">
-            <sha512 
value="f8768877e3b204ea886f7bdee6b4d900db80b1b63cf37800f56e3bb1e2d3c13b38f7ba4784160db80a0cab658d4948bee1992e9fafe519c156bef8a4b0b3e903"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
-         </artifact>
-         <artifact name="spotbugs-gradle-plugin-5.0.14.module">
-            <sha512 
value="71605c2defe5f767f118469c89d54d9a549013820a82e33ea68db31f8da108b7567810244e19e995c51051a90d7cfd621035bb20530463651d67f61d64f9ffa0"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
+      <component group="com.github.spotbugs.snom" 
name="spotbugs-gradle-plugin" version="5.1.1">
+         <artifact name="spotbugs-gradle-plugin-5.1.1.jar">
+            <pgp value="9857c388d7d1d9d031274cd0a5def5a76f94a471"/>
          </artifact>
       </component>
       <component group="com.google" name="google" version="1">
@@ -870,17 +873,9 @@
             <sha512 
value="2e329d71ae7b7fa4e567728d61b6c1ad1f50afbea9008f8559245d79f7ee346f5b458af83cbc5d775ac225afae61b4a18f6d7375c7c6be4e3c3adc461d7afcf9"
 origin="Generated by Gradle"/>
          </artifact>
       </component>
-      <component group="org.sonarqube" name="org.sonarqube.gradle.plugin" 
version="4.2.1.3168">
-         <artifact name="org.sonarqube.gradle.plugin-4.2.1.3168.pom">
-            <sha512 
value="9d3a10255f354f6fc090835d4f36a1c947033316298400591e1d0b514ab772766bfaa6043f36a5019d212dfada80199ff789e6362fab51fb879822af1a075f38"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
-         </artifact>
-      </component>
-      <component group="org.sonarsource.scanner.gradle" 
name="sonarqube-gradle-plugin" version="4.2.1.3168">
-         <artifact name="sonarqube-gradle-plugin-4.2.1.3168.jar">
-            <sha512 
value="3eb4cac07f908dd5cf0b245aaa6560eae10f60d805699a7d0bac3be4acdda9414d18bd38e9367b24ae5369f4e7e6287bb8c70ccb71d0e086d4cac4dbbbb763dc"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
-         </artifact>
-         <artifact name="sonarqube-gradle-plugin-4.2.1.3168.module">
-            <sha512 
value="e806aed2c4cd36360fe9c91b19d6443cc4766b780094c3cb3c55be392fc7215bebbd210f213d9ec14bd9f590efdc1e6f5293de4ffc2912cb892e6115f3bc222b"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
+      <component group="org.sonarsource.scanner.gradle" 
name="sonarqube-gradle-plugin" version="4.3.0.3225">
+         <artifact name="sonarqube-gradle-plugin-4.3.0.3225.jar">
+            <sha512 
value="69354d97b68873525e4cd6dcf1a24696310e75276c664346f87d5120e4b385dc2e708c2ae149ce287bb2d92538cff1d10390a6a306b592d85169d63382a9beb3"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
       <component group="org.sonatype.forge" name="forge-parent" version="10">

Reply via email to