This is an automated email from the ASF dual-hosted git repository.

paulk pushed a commit to branch GROOVY_4_0_X
in repository https://gitbox.apache.org/repos/asf/groovy.git


The following commit(s) were added to refs/heads/GROOVY_4_0_X by this push:
     new 555c63061a update dependency metadata
555c63061a is described below

commit 555c63061a092f872828bdccc01c4363e81978cb
Author: Paul King <[email protected]>
AuthorDate: Sat Dec 20 04:53:52 2025 +1000

    update dependency metadata
---
 gradle/verification-metadata.xml | 87 ++++++++++++++++++++++++++++++++++++++--
 1 file changed, 83 insertions(+), 4 deletions(-)

diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 9b2365c516..11ec5cb6e5 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -1,10 +1,50 @@
 <?xml version="1.0" encoding="UTF-8"?>
+<!--
+
+     Licensed to the Apache Software Foundation (ASF) under one
+     or more contributor license agreements.  See the NOTICE file
+     distributed with this work for additional information
+     regarding copyright ownership.  The ASF licenses this file
+     to you under the Apache License, Version 2.0 (the
+     "License"); you may not use this file except in compliance
+     with the License.  You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+     Unless required by applicable law or agreed to in writing,
+     software distributed under the License is distributed on an
+     "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+     KIND, either express or implied.  See the License for the
+     specific language governing permissions and limitations
+     under the License.
+
+-->
+<!--
+   This file declares the dependency verification metadata for dependencies 
used by Groovy.
+   When you upgrade a dependency, verification is likely to fail so you will 
need to update
+   it.
+
+   If, for whatever reason, verification fails for you, DO NOT DISABLE IT but 
follow the
+   troubleshooting guide at 
https://docs.gradle.org/current/userguide/dependency_verification.html
+
+   This build uses PGP verification and SHA512 checksum verification for 
unsigned artifacts:
+
+   ./gradlew -write-verification-metadata sha512,pgp -export-keys <tasks>
+
+   Then check the diff, remove the unnecessary entries (for old dependencies) 
and make sure
+   the new ones are correct.
+
+   Do not remove this header.
+
+-->
 <verification-metadata 
xmlns="https://schema.gradle.org/dependency-verification"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; 
xsi:schemaLocation="https://schema.gradle.org/dependency-verification 
https://schema.gradle.org/dependency-verification/dependency-verification-1.3.xsd";>
    <configuration>
-      <verify-metadata>true</verify-metadata>
+      <verify-metadata>false</verify-metadata>
       <verify-signatures>true</verify-signatures>
+      <trusted-artifacts>
+         <trust file=".+-(sources|javadoc).jar" regex="true"/>
+      </trusted-artifacts>
       <ignored-keys>
-         <ignored-key id="991EFB94DB91127D" reason="Key couldn't be downloaded 
from any key server"/>
          <ignored-key id="0374CF2E8DD1BDFD" reason="Key couldn't be downloaded 
from any key server"/>
          <ignored-key id="153E7A3C2B4E5118" reason="Key couldn't be downloaded 
from any key server"/>
          <ignored-key id="2BFD7825A8984FBE" reason="Key couldn't be downloaded 
from any key server"/>
@@ -13,6 +53,7 @@
          <ignored-key id="6CCC36CC6C69FC17" reason="Key couldn't be downloaded 
from any key server"/>
          <ignored-key id="74DAFDFD6DAE2441" reason="Key couldn't be downloaded 
from any key server"/>
          <ignored-key id="928FBF39003C0425" reason="Key couldn't be downloaded 
from any key server"/>
+         <ignored-key id="991EFB94DB91127D" reason="Key couldn't be downloaded 
from any key server"/>
          <ignored-key id="BFFC9B54721244AD" reason="Key couldn't be downloaded 
from any key server"/>
          <ignored-key id="E0130A3ED5A2079E" reason="Key couldn't be downloaded 
from any key server"/>
       </ignored-keys>
@@ -392,8 +433,46 @@
          <artifact name="asciidoctor-gradle-jvm-pdf-4.0.2.jar">
             <sha512 
value="f15bc25848c48badd2b48e27f166d0252344b9273733bd2eebe5d241faeb2787ff312f4c8b7bed10fd9a64a75cae8a2425cc088e14645b8dbe4c4cfff4dd0084"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
          </artifact>
-         <artifact name="asciidoctor-gradle-jvm-pdf-4.0.2.module">
-            <sha512 
value="c2a3cd80cde490a0e5baa65cd45515de17b26b8faa593f6201585138d57f61704666a38366b6f06e7a63b0cd3bf540c8f015d1971b71f285f6adbc1a2fcef362"
 origin="Generated by Gradle" reason="Artifact is not signed"/>
+      </component>
+      <component group="org.asciidoctor" name="asciidoctorj" version="2.5.11">
+         <artifact name="asciidoctorj-2.5.11.jar">
+            <sha512 
value="16030a65ebeeb9b5c88be278cc2ebcb8df22096b438314c5c59e5544eb5a3ba813d85980f62d17467cedba4c7b0a2d346a5c8121176eee1e639c22159e05807f"
 origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+      </component>
+      <component group="org.asciidoctor" name="asciidoctorj-api" 
version="2.5.11">
+         <artifact name="asciidoctorj-api-2.5.11.jar">
+            <sha512 
value="93ff1b8fc521b6a570a2bd354ec0c1aff40ca01c2b07d06cb931568f912ecdd2c60f35a035fecf9b5f607675eb268935debb027f932117c69d67965a7b8e6056"
 origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+      </component>
+      <component group="org.asciidoctor" name="asciidoctorj-api" 
version="2.5.7">
+         <artifact name="asciidoctorj-api-2.5.7.jar">
+            <sha512 
value="3548c0285bffe394e72c8bcfedee10f862ef6bf579a60132f116686af9de8a5113f24957995cabf2dee0f993296e74f5fdc56263b01314c2e45535fcbd663868"
 origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+      </component>
+      <component group="org.asciidoctor" name="asciidoctorj-diagram" 
version="2.2.17">
+         <artifact name="asciidoctorj-diagram-2.2.17.jar">
+            <sha512 
value="fef5ad644db433c46b31c4007953fbb9e83e6306b9f13550dad4e207c80e854ec2594e3e2c0a2abd08d7cdfc524cd4a8c5af11d46b53f4808a1b853653d15ed0"
 origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+      </component>
+      <component group="org.asciidoctor" name="asciidoctorj-diagram-ditaamini" 
version="1.0.3">
+         <artifact name="asciidoctorj-diagram-ditaamini-1.0.3.jar">
+            <sha512 
value="6e3a109fb5e2743bf413640953b3096a892760d93212098d4dc2315671d07d1c7133bfe6b347b85a9fdcbc99ccdf0249332b93bbadc52b79896b8c5078935dae"
 origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+      </component>
+      <component group="org.asciidoctor" name="asciidoctorj-diagram-plantuml" 
version="1.2023.13">
+         <artifact name="asciidoctorj-diagram-plantuml-1.2023.13.jar">
+            <sha512 
value="781fcbf6ef5af6e7fd2db8490a130adce2d3da81d768fb20726bec9068396017f4d95cfeaed363ab5c21b582394c8c9febc2fa610f1fae87958c71998dd676c3"
 origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+      </component>
+      <component group="org.asciidoctor" name="asciidoctorj-groovy-dsl" 
version="2.0.2">
+         <artifact name="asciidoctorj-groovy-dsl-2.0.2.jar">
+            <pgp value="36390DE6A0E61EE4C7B4BA02C1D3063467F1EBD1"/>
+         </artifact>
+      </component>
+      <component group="org.asciidoctor" name="asciidoctorj-pdf" 
version="2.3.19">
+         <artifact name="asciidoctorj-pdf-2.3.19.jar">
+            <pgp value="051927E24FA091722E05A3B23C03136EA34A60F7"/>
+            <sha512 
value="cd4055ad4393d8513e082bf0427bb84a34dd924e657ec113d424518a9645cc5a84d6d20623475cf43abb58cbbbd82f2d039d488bad15177e815c9aecec6bdaad"
 origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
          </artifact>
       </component>
       <component group="org.codehaus" name="codehaus-parent" version="4">

Reply via email to