This is an automated email from the ASF dual-hosted git repository.
paulk pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/groovy.git
The following commit(s) were added to refs/heads/master by this push:
new 93768547a0 update dependency metadata
93768547a0 is described below
commit 93768547a0ad8a5fc87867935bc75c5bbed275d0
Author: Paul King <[email protected]>
AuthorDate: Tue Feb 27 16:37:19 2024 +1000
update dependency metadata
---
build-logic/src/main/groovy/org.apache.groovy-base.gradle | 2 ++
gradle/verification-metadata.xml | 14 ++++++++++++--
2 files changed, 14 insertions(+), 2 deletions(-)
diff --git a/build-logic/src/main/groovy/org.apache.groovy-base.gradle
b/build-logic/src/main/groovy/org.apache.groovy-base.gradle
index e982789057..6f4ca56449 100644
--- a/build-logic/src/main/groovy/org.apache.groovy-base.gradle
+++ b/build-logic/src/main/groovy/org.apache.groovy-base.gradle
@@ -131,6 +131,8 @@ dependencies {
checkstyle "com.puppycrawl.tools:checkstyle:${versions.checkstyle}"
spotbugs "com.github.spotbugs:spotbugs:${versions.spotbugs}"
+ spotbugs "org.apache.logging.log4j:log4j-api:${versions.log4j2}"
+ spotbugs "org.apache.logging.log4j:log4j-core:${versions.log4j2}"
spotbugsSlf4j "org.slf4j:slf4j-simple:${versions.slf4j}"
}
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 44a8411d56..df8e9d2e01 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -280,8 +280,8 @@
<sha512
value="5aafb351a0b2ca51e3aaee5b03af16caea4a53484c3b7f40153ef1b78edde8a8c2cc6638f77fdb95902f90a54b91938b68934b296ff88216d5135c2e40bc563a"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
</artifact>
</component>
- <component group="com.h3xstream.findsecbugs" name="findsecbugs-plugin"
version="1.12.0">
- <artifact name="findsecbugs-plugin-1.12.0.jar">
+ <component group="com.h3xstream.findsecbugs" name="findsecbugs-plugin"
version="1.13.0">
+ <artifact name="findsecbugs-plugin-1.13.0.jar">
<pgp value="CFC10B69382CBCF5387E51484ECE492B63E38ACF"/>
</artifact>
</component>
@@ -439,6 +439,16 @@
<sha512
value="0b846ff8b036be03426be46da4974a126cfec7f491ec495859d1ba6f6ec4ea8625795bf420d076c01084a82f9339a7c001f79349de1f79ba096051b45993db7d"
origin="Generated by Gradle" reason="Artifact is not signed"/>
</artifact>
</component>
+ <component group="org.apache.logging.log4j" name="log4j-api"
version="2.23.0">
+ <artifact name="log4j-api-2.23.0.jar">
+ <sha512
value="6c73eb1471d6326e4c425a7323d1603091585bd0234a4ff50927201246df7c6195120b44871f561855311f8fead64c1bfa5a17c62835d9dcb87cfee7e476bdc8"
origin="Generated by Gradle" reason="Artifact is not signed"/>
+ </artifact>
+ </component>
+ <component group="org.apache.logging.log4j" name="log4j-core"
version="2.23.0">
+ <artifact name="log4j-core-2.23.0.jar">
+ <sha512
value="4e9c09c14a6880d888412fa3393c1fa110af66c1e496f790a2c6ba34960f5fccbfc4d040b318277caac42f013a902cd4e6f6e1419009262d44cc0f40533fc168"
origin="Generated by Gradle" reason="Artifact is not signed"/>
+ </artifact>
+ </component>
<component group="me.champeau.gradle" name="buildscan-recipes-plugin"
version="0.2.3">
<artifact name="buildscan-recipes-plugin-0.2.3.jar">
<sha512
value="2059df05624934092062ea615f188f5adfa80929fb7f5f1c341c60a7f86eeb31539021bf98fb7a5354c071c7ef2be99e5fdd459fc38bb621b8b447984da128cb"
origin="Generated by Gradle" reason="Artifact is not signed"/>