File tree 1 file changed +4
-20
lines changed
1 file changed +4
-20
lines changed Original file line number Diff line number Diff line change 1
1
<?xml version =" 1.0" encoding =" UTF-8" ?>
2
2
<!--
3
- This is a lockfile for gradle dependencies. See the following page for more information:
4
- https://docs.gradle.org/current/userguide/dependency_verification.html
3
+ This is a lockfile with keys for gradle dependencies. This lists all the keys which all our gradle
4
+ dependencies are signed with. The packages that lacks signatures are listed as components and verified
5
+ by it's hash instead.
5
6
6
- The easiest way to update this file is to run the following script:
7
- <repository-root>/android/scripts/update-lockfile.sh
8
-
9
- The following trust group is only used for GitHub Actions: com.github.burrunan.multicache
10
-
11
- NOTE:
12
- - In order to properly generate the components, no gradle caches should be present
13
- (for example junit-bom-*). This is automatically handled by using the mentioned script.
14
- For more information see: https://github.com/gradle/gradle/issues/19228
15
- - Comments after the verification-metadata opening tag will automatically be removed by gradle
16
- when generating components.
17
- see: https://github.com/gradle/gradle/issues/14885
18
-
19
- WORKAROUNDS:
20
- - Ignore gradle wrapper source being downloaded when running "Sync Project with Gradle Files"
21
- https://youtrack.jetbrains.com/issue/IDEA-258328
22
- Line added:
23
- <trust file="gradle-[0-9.]+-src.zip" regex="true"/>
7
+ For more information about the contents in this file see `verification-metadata.xml`
24
8
-->
25
9
<verification-metadata xmlns =" https://schema.gradle.org/dependency-verification" xmlns : xsi =" http://www.w3.org/2001/XMLSchema-instance" xsi : schemaLocation =" https://schema.gradle.org/dependency-verification https://schema.gradle.org/dependency-verification/dependency-verification-1.3.xsd" >
26
10
<configuration >
You can’t perform that action at this time.
0 commit comments