This is an automated email from the ASF dual-hosted git repository.

paulk pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/groovy.git


The following commit(s) were added to refs/heads/master by this push:
     new 93768547a0 update dependency metadata
93768547a0 is described below

commit 93768547a0ad8a5fc87867935bc75c5bbed275d0
Author: Paul King <[email protected]>
AuthorDate: Tue Feb 27 16:37:19 2024 +1000

    update dependency metadata
---
 build-logic/src/main/groovy/org.apache.groovy-base.gradle |  2 ++
 gradle/verification-metadata.xml                          | 14 ++++++++++++--
 2 files changed, 14 insertions(+), 2 deletions(-)

diff --git a/build-logic/src/main/groovy/org.apache.groovy-base.gradle 
b/build-logic/src/main/groovy/org.apache.groovy-base.gradle
index e982789057..6f4ca56449 100644
--- a/build-logic/src/main/groovy/org.apache.groovy-base.gradle
+++ b/build-logic/src/main/groovy/org.apache.groovy-base.gradle
@@ -131,6 +131,8 @@ dependencies {
 
     checkstyle "com.puppycrawl.tools:checkstyle:${versions.checkstyle}"
     spotbugs "com.github.spotbugs:spotbugs:${versions.spotbugs}"
+    spotbugs "org.apache.logging.log4j:log4j-api:${versions.log4j2}"
+    spotbugs "org.apache.logging.log4j:log4j-core:${versions.log4j2}"
     spotbugsSlf4j "org.slf4j:slf4j-simple:${versions.slf4j}"
 }
 
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 44a8411d56..df8e9d2e01 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -280,8 +280,8 @@
             <sha512 
value="5aafb351a0b2ca51e3aaee5b03af16caea4a53484c3b7f40153ef1b78edde8a8c2cc6638f77fdb95902f90a54b91938b68934b296ff88216d5135c2e40bc563a"
 origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
          </artifact>
       </component>
-      <component group="com.h3xstream.findsecbugs" name="findsecbugs-plugin" 
version="1.12.0">
-         <artifact name="findsecbugs-plugin-1.12.0.jar">
+      <component group="com.h3xstream.findsecbugs" name="findsecbugs-plugin" 
version="1.13.0">
+         <artifact name="findsecbugs-plugin-1.13.0.jar">
             <pgp value="CFC10B69382CBCF5387E51484ECE492B63E38ACF"/>
          </artifact>
       </component>
@@ -439,6 +439,16 @@
             <sha512 
value="0b846ff8b036be03426be46da4974a126cfec7f491ec495859d1ba6f6ec4ea8625795bf420d076c01084a82f9339a7c001f79349de1f79ba096051b45993db7d"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
       </component>
+      <component group="org.apache.logging.log4j" name="log4j-api" 
version="2.23.0">
+         <artifact name="log4j-api-2.23.0.jar">
+            <sha512 
value="6c73eb1471d6326e4c425a7323d1603091585bd0234a4ff50927201246df7c6195120b44871f561855311f8fead64c1bfa5a17c62835d9dcb87cfee7e476bdc8"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
+      <component group="org.apache.logging.log4j" name="log4j-core" 
version="2.23.0">
+         <artifact name="log4j-core-2.23.0.jar">
+            <sha512 
value="4e9c09c14a6880d888412fa3393c1fa110af66c1e496f790a2c6ba34960f5fccbfc4d040b318277caac42f013a902cd4e6f6e1419009262d44cc0f40533fc168"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="me.champeau.gradle" name="buildscan-recipes-plugin" 
version="0.2.3">
          <artifact name="buildscan-recipes-plugin-0.2.3.jar">
             <sha512 
value="2059df05624934092062ea615f188f5adfa80929fb7f5f1c341c60a7f86eeb31539021bf98fb7a5354c071c7ef2be99e5fdd459fc38bb621b8b447984da128cb"
 origin="Generated by Gradle" reason="Artifact is not signed"/>

Reply via email to