This is an automated email from the ASF dual-hosted git repository.
vladimirsitnikov pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/jmeter.git
The following commit(s) were added to refs/heads/master by this push:
new a17fd4250b chore: add missing pgp keys to Gradle verification metadata
a17fd4250b is described below
commit a17fd4250b47dd319bbd6d4829186efe7dd1b986
Author: Vladimir Sitnikov <[email protected]>
AuthorDate: Sun Oct 19 12:19:49 2025 +0300
chore: add missing pgp keys to Gradle verification metadata
---
gradle/verification-keyring.keys | 44 ++++++++++++++
gradle/verification-metadata.xml | 128 +++------------------------------------
2 files changed, 51 insertions(+), 121 deletions(-)
diff --git a/gradle/verification-keyring.keys b/gradle/verification-keyring.keys
index b1fcf99bbc..6a244c4a0c 100644
--- a/gradle/verification-keyring.keys
+++ b/gradle/verification-keyring.keys
@@ -13,6 +13,25 @@ biA8bm9jLWFkbWluQDEwZ2VuLmNvbT4=
=0ybl
-----END PGP PUBLIC KEY BLOCK-----
+pub 84E913A8E3A748C0
+uid The Legion of the Bouncy Castle Inc. (Maven Repository Artifact Signer)
<[email protected]>
+
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=/HDf
+-----END PGP PUBLIC KEY BLOCK-----
+
pub 85911F425EC61B51
uid Marc Philipp <[email protected]>
@@ -4324,6 +4343,31 @@ q5Ru/lMoBMcJjV1n4nZ13dj2e+rYMN06ued0zR5NwVopLZ4MVUSqb/8=
=QMxW
-----END PGP PUBLIC KEY BLOCK-----
+pub 17A27CE7A60FF5F0
+sub E86F52398AF20855
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=5I6i
+-----END PGP PUBLIC KEY BLOCK-----
+
pub 1861C322C56014B2
uid Niall Pemberton (Code signing) <[email protected]>
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 779887ac7d..6223139061 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -4,6 +4,11 @@
<verify-metadata>true</verify-metadata>
<verify-signatures>true</verify-signatures>
<keyring-format>armored</keyring-format>
+ <key-servers>
+ <key-server uri="https://keyserver.ubuntu.com"/>
+ <key-server uri="https://keys.openpgp.org"/>
+ <key-server uri="https://pgp.mit.edu"/>
+ </key-servers>
<trusted-artifacts>
<trust group="gradle" name="gradle"/>
<trust file=".*-javadoc[.]jar" regex="true"/>
@@ -79,6 +84,7 @@
<trusted-key id="3692C12C7E3D336A452BEB254E066E0459CD109B"
group="org.apache.commons"/>
<trusted-key id="3A4D86C56CA99373B6D8953DBE84D764623A3644"
group="org.brotli"/>
<trusted-key id="3E1AC64F4E34E290503C90323449EC3AC2EFE8AA"
group="dnsjava"/>
+ <trusted-key id="3F05DDA9F317301E927136D417A27CE7A60FF5F0"
group="io.opentelemetry"/>
<trusted-key id="3F2A008A91D11A7FAC4A0786F13D3E721D56BD54"
group="org.reflections"/>
<trusted-key id="3F999BB69041CF17E73BB1CEC038787776A19D18"
group="net.javacrumbs.json-unit"/>
<trusted-key id="41A1A08C62FCA78B79D3081164A16FAAEC16A4BE"
group="org.apache.commons"/>
@@ -137,6 +143,7 @@
<trusted-key id="7186BBF993566D8C2F4F7ED7D945E643368FEF62"
group="io.github.eisop"/>
<trusted-key id="7615AD56144DF2376F49D98B1669C4BB543E0445"
group="com.google.errorprone"/>
<trusted-key id="7616EB882DAF57A11477AAF559A252FB1199D873"
group="com.google.code.findbugs"/>
+ <trusted-key id="7B121B76A7ED6CE6E60AD51784E913A8E3A748C0"
group="org.bouncycastle"/>
<trusted-key id="7B79ADD11F8A779FE90FD3D0893A028475557671"
group="com.gradle"/>
<trusted-key id="7B9751FC3F01F134F476464CD0EB627D4885CED1"
group="org.apache.velocity"/>
<trusted-key id="7C669810892CBD3148FA92995B05CCDE140C2876"
group="org.eclipse.jgit"/>
@@ -387,14 +394,6 @@
<sha256
value="943e12b100627804638fa285805a0ab788a680266531e650921ebfe4621a8bfa"
origin="Generated by Gradle" reason="Artifact is not signed"/>
</artifact>
</component>
- <component group="me.champeau.jmh" name="jmh-gradle-plugin"
version="0.7.2">
- <artifact name="jmh-gradle-plugin-0.7.2.jar">
- <sha256
value="d9672099ff8fc3f9bf3d4d015864e1586f07ecbd2a8a177a66184ef0b68aba65"
origin="Generated by Gradle" reason="Artifact is not signed"/>
- </artifact>
- <artifact name="jmh-gradle-plugin-0.7.2.module">
- <sha256
value="6d849ae7454ab391718e5fc70e2716418ef3ed264472345bd80c6de64e00b6c4"
origin="Generated by Gradle" reason="Artifact is not signed"/>
- </artifact>
- </component>
<component group="me.champeau.jmh" name="jmh-gradle-plugin"
version="0.7.3">
<artifact name="jmh-gradle-plugin-0.7.3.jar">
<sha256
value="d7097e619541d90e0a970b2a68573e22ad01d2999ee5365d56d59830765bf98f"
origin="Generated by Gradle" reason="Artifact is not signed"/>
@@ -403,11 +402,6 @@
<sha256
value="3487d1aba24fe0af527c6d5f78b5f0e8fd64fe9878708b460e6600e39a47bc43"
origin="Generated by Gradle" reason="Artifact is not signed"/>
</artifact>
</component>
- <component group="me.champeau.jmh" name="me.champeau.jmh.gradle.plugin"
version="0.7.2">
- <artifact name="me.champeau.jmh.gradle.plugin-0.7.2.pom">
- <sha256
value="57e0c23ac60945aefb5a0c4a9339bea68a295364ca47c7a9079a032f79013abb"
origin="Generated by Gradle" reason="Artifact is not signed"/>
- </artifact>
- </component>
<component group="me.champeau.jmh" name="me.champeau.jmh.gradle.plugin"
version="0.7.3">
<artifact name="me.champeau.jmh.gradle.plugin-0.7.3.pom">
<sha256
value="d516226b3b114e4b32d42544d1d2796c732c5465d5dae7cc846be6b23bed8d1d"
origin="Generated by Gradle" reason="Artifact is not signed"/>
@@ -450,56 +444,6 @@
<sha256
value="62a7b33ccc3fc9e4327f1babd32ff3769cd47fc117c60593400cb60acac0d06a"
origin="Generated by Gradle" reason="PGP signature verification failed!"/>
</artifact>
</component>
- <component group="org.apache" name="apache" version="18">
- <artifact name="apache-18.pom">
- <sha256
value="7831307285fd475bbc36b20ae38e7882f11c3153b1d5930f852d44eda8f33c17"
origin="Generated by Gradle"/>
- </artifact>
- </component>
- <component group="org.apache" name="apache" version="25">
- <artifact name="apache-25.pom">
- <sha256
value="e68fc19a48cec582a6732fd0b10dbfe9feca25060963def89e547f8a3759d379"
origin="Generated by Gradle"/>
- </artifact>
- </component>
- <component group="org.apache" name="apache" version="29">
- <artifact name="apache-29.pom">
- <sha256
value="3e49037174820bbd0df63420a977255886398954c2a06291fa61f727ac35b377"
origin="Generated by Gradle"/>
- </artifact>
- </component>
- <component group="org.apache" name="apache" version="30">
- <artifact name="apache-30.pom">
- <sha256
value="63dd4a393a9c0dfcb314efe83871a41d243bc8d200cbc7f2d197f30da78239d8"
origin="Generated by Gradle"/>
- </artifact>
- </component>
- <component group="org.apache" name="apache" version="33">
- <artifact name="apache-33.pom">
- <sha256
value="d78bd8524c5f8380a190a6525686629a95dfe512df21111383a6d8c0923a4415"
origin="Generated by Gradle"/>
- </artifact>
- </component>
- <component group="org.apache" name="apache" version="35">
- <artifact name="apache-35.pom">
- <sha256
value="ea297dcd114136e8b8e8b630230d52a76c2fc69f6c5db25d672b1857000728b8"
origin="Generated by Gradle"/>
- </artifact>
- </component>
- <component group="org.apache.commons" name="commons-parent" version="58">
- <artifact name="commons-parent-58.pom">
- <sha256
value="2d4b12e18899063abd7c75278b5fa97a3729d80878ceecb6a40d946e9c0d5590"
origin="Generated by Gradle"/>
- </artifact>
- </component>
- <component group="org.apache.commons" name="commons-parent" version="79">
- <artifact name="commons-parent-79.pom">
- <sha256
value="628df30148acd3c491cfcb6b73c7ae4b5989e5526ab13a2f428dea5d4ad10d7a"
origin="Generated by Gradle"/>
- </artifact>
- </component>
- <component group="org.apache.commons" name="commons-parent" version="81">
- <artifact name="commons-parent-81.pom">
- <sha256
value="348d4e7c131be6114c854a719ce7a44307a7c39bd366084977b24fd29ad0edb4"
origin="Generated by Gradle"/>
- </artifact>
- </component>
- <component group="org.apache.commons" name="commons-parent" version="85">
- <artifact name="commons-parent-85.pom">
- <sha256
value="d189ff2c0027e96bb65d31e6f227ed2af966169b36af1e973dd5ba08926dc7b5"
origin="Generated by Gradle"/>
- </artifact>
- </component>
<component group="org.checkerframework"
name="checkerframework-gradle-plugin" version="0.6.37">
<artifact name="checkerframework-gradle-plugin-0.6.37.jar">
<sha256
value="f6c3f7c2d2fd68cead661b5b3a4ee3b27a337165c0f9634876d42aeb9e67bf32"
origin="Generated by Gradle" reason="Artifact is not signed"/>
@@ -521,11 +465,6 @@
<sha256
value="30f03aba17e3925d171ac44f076e8bd254eec34221816d041123b72be97a2e49"
origin="Generated by Gradle" reason="Artifact is not signed"/>
</artifact>
</component>
- <component group="org.eclipse.jetty" name="jetty-bom"
version="9.4.53.v20231009">
- <artifact name="jetty-bom-9.4.53.v20231009.pom">
- <sha256
value="faf973a19874266cd0865b0299eba9f167cbb07075dd4fedbe3d6156357e9dd5"
origin="Generated by Gradle"/>
- </artifact>
- </component>
<component group="org.fusesource" name="fusesource-pom" version="1.10">
<artifact name="fusesource-pom-1.10.pom">
<sha256
value="4797b2420a47ceae6c139a4a46f9c11f0802bce1b5d430931c438887cb635335"
origin="Generated by Gradle" reason="Artifact is not signed"/>
@@ -566,19 +505,6 @@
<sha256
value="000dd616298aebd21a9d5731874df083d7298424b91e037b73cbdd07ebc83e0e"
origin="Generated by Gradle" reason="Artifact is not signed"/>
</artifact>
</component>
- <component group="org.jetbrains.dokka" name="dokka-gradle-plugin"
version="1.9.10">
- <artifact name="dokka-gradle-plugin-1.9.10.pom">
- <ignored-keys>
- <ignored-key id="98465301A4939C0279F2E847D89D05374952262B"
reason="PGP verification failed"/>
- </ignored-keys>
- <sha256
value="fffe835e7088d5be855fc722770388d403b416e4d145696b1d56fdd1395e0617"
origin="Generated by Gradle" reason="PGP signature verification failed!"/>
- </artifact>
- </component>
- <component group="org.jetbrains.dokka"
name="org.jetbrains.dokka.gradle.plugin" version="2.0.0">
- <artifact name="org.jetbrains.dokka.gradle.plugin-2.0.0.pom">
- <sha256
value="e1fc686a01837e7e86291185901507ffeaf794b8a9ec947b5d04368fa70e00ca"
origin="Generated by Gradle" reason="Artifact is not signed"/>
- </artifact>
- </component>
<component group="org.jetbrains.dokka-javadoc"
name="org.jetbrains.dokka-javadoc.gradle.plugin" version="2.0.0">
<artifact name="org.jetbrains.dokka-javadoc.gradle.plugin-2.0.0.pom">
<sha256
value="9f7c10804ddd447174153f009f8b1b1b65b712a6bec0dd57e5faf8a20c9ac807"
origin="Generated by Gradle" reason="Artifact is not signed"/>
@@ -589,46 +515,16 @@
<sha256
value="b953806a04ecd62b1bc87f81da56e809f5f0d7881c181f056554805af8664eb9"
origin="Generated by Gradle" reason="Artifact is not signed"/>
</artifact>
</component>
- <component group="org.jetbrains.kotlin.jvm"
name="org.jetbrains.kotlin.jvm.gradle.plugin" version="1.9.22">
- <artifact name="org.jetbrains.kotlin.jvm.gradle.plugin-1.9.22.pom">
- <sha256
value="1cb4ecb933c919b2fbfd765efca5fe4907a08712e8c9942c33a208b2b169b18c"
origin="Generated by Gradle" reason="Artifact is not signed"/>
- </artifact>
- </component>
<component group="org.jetbrains.kotlin.jvm"
name="org.jetbrains.kotlin.jvm.gradle.plugin" version="2.2.20">
<artifact name="org.jetbrains.kotlin.jvm.gradle.plugin-2.2.20.pom">
<sha256
value="4eb87defec3e7c2fece0e1a1ecdf22a70cdd61898262555b1d92e7c7b3f3b95d"
origin="Generated by Gradle" reason="Artifact is not signed"/>
</artifact>
</component>
- <component group="org.jetbrains.kotlin.kapt"
name="org.jetbrains.kotlin.kapt.gradle.plugin" version="1.9.22">
- <artifact name="org.jetbrains.kotlin.kapt.gradle.plugin-1.9.22.pom">
- <sha256
value="1daf64ddd8e90a6aa8a831f3e649b4b094e72fe91df0dfd91b5b1ba1dcd54d54"
origin="Generated by Gradle" reason="Artifact is not signed"/>
- </artifact>
- </component>
<component group="org.jetbrains.kotlin.kapt"
name="org.jetbrains.kotlin.kapt.gradle.plugin" version="2.2.20">
<artifact name="org.jetbrains.kotlin.kapt.gradle.plugin-2.2.20.pom">
<sha256
value="a7555d7d4625a985c9739a7f73a2b07f3bc5a7ba2c935e9b5d68e843999ae354"
origin="Generated by Gradle" reason="Artifact is not signed"/>
</artifact>
</component>
- <component group="org.junit" name="junit-bom" version="5.11.4">
- <artifact name="junit-bom-5.11.4.pom">
- <sha256
value="19d4b747b204805325b6334553296f986562277a4ac1cb5e593a5e4c4f5e4115"
origin="Generated by Gradle"/>
- </artifact>
- </component>
- <component group="org.junit" name="junit-bom" version="5.13.1">
- <artifact name="junit-bom-5.13.1.pom">
- <sha256
value="fa68451ea830572ed43ffe51d75b6a05f7a5e665a602a51f49d6be02063a65f3"
origin="Generated by Gradle"/>
- </artifact>
- </component>
- <component group="org.junit" name="junit-bom" version="5.13.4">
- <artifact name="junit-bom-5.13.4.pom">
- <sha256
value="d7a08a99b2502f0bb68cd4e1f984f0bf69324aaa208bd0f73366c03fc3548a42"
origin="Generated by Gradle"/>
- </artifact>
- </component>
- <component group="org.junit" name="junit-bom" version="5.9.3">
- <artifact name="junit-bom-5.9.3.pom">
- <sha256
value="4d0329cd9e72f2420e5ca15724cbfe6ffa6e5fd2888361516271190fdc342ed7"
origin="Generated by Gradle"/>
- </artifact>
- </component>
<component group="org.nosphere.apache" name="creadur-rat-gradle"
version="0.8.1">
<artifact name="creadur-rat-gradle-0.8.1.jar">
<sha256
value="c1a58cbbe3d0a5e207cd90e79a9e22c9eb01d9e77f7313f4f5aa7d9e478a0550"
origin="Generated by Gradle" reason="Artifact is not signed"/>
@@ -642,11 +538,6 @@
<sha256
value="958d4f0ee63caee175085f9396d298c2fd88278918bbf3337a32ec74ce488b61"
origin="Generated by Gradle" reason="Artifact is not signed"/>
</artifact>
</component>
- <component group="org.ow2" name="ow2" version="1.5">
- <artifact name="ow2-1.5.pom">
- <sha256
value="0f8a1b116e760b8fe6389c51b84e4b07a70fc11082d4f936e453b583dd50b43b"
origin="Generated by Gradle" reason="Artifact is not signed"/>
- </artifact>
- </component>
<component group="org.sonarqube" name="org.sonarqube.gradle.plugin"
version="4.4.1.3373">
<artifact name="org.sonarqube.gradle.plugin-4.4.1.3373.pom">
<sha256
value="37b316009dad2438e5102910e54ddb414a755cab23213d7dc9a712e35d8eabbf"
origin="Generated by Gradle" reason="Artifact is not signed"/>
@@ -670,11 +561,6 @@
<sha256
value="b51f8867c92b6a722499557fc3a1fdea77bdf9ef574722fe90ce436a29559454"
origin="Generated by Gradle" reason="Artifact is not signed"/>
</artifact>
</component>
- <component group="org.sonatype.oss" name="oss-parent" version="9">
- <artifact name="oss-parent-9.pom">
- <sha256
value="fb40265f982548212ff82e362e59732b2187ec6f0d80182885c14ef1f982827a"
origin="Generated by Gradle"/>
- </artifact>
- </component>
<component group="oro" name="oro" version="2.0.8">
<artifact name="oro-2.0.8.jar">
<sha256
value="e00ccdad5df7eb43fdee44232ef64602bf63807c2d133a7be83ba09fd49af26e"
origin="Generated by Gradle" reason="Artifact is not signed"/>
