subprojects

Clone Tools
  • last updated a few seconds ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Update library versions in build init to latest for 6.2

Clean release notes and welcome message for 6.2

    • -34
    • +11
    ./docs/src/docs/release/notes.md
Clean accepted API changes

    • -28
    • +2
    ./distributions/src/changes/accepted-public-api-changes.json
More content.

Mention contributor

Document lock mode

    • -0
    • +6
    ./docs/src/docs/dsl/org.gradle.api.Project.xml
Mention contributor in release notes

Add dependency checksum verification

This commit introduces dependency checksum verification.

If, and only if, a dependency verification metadata file

is present, then Gradle will load this metadata and use

it as the "source of truth" for dependency checksums.

Verification occurs whenever a file is accessed, so it

doesn't matter if the file comes from the local cache

or if it was downloaded in the current build.

Gradle performs all verifications during the build and

fails at the end of the build, similarly to the behavior

for "write dependency verification metadata".

This allows collecting as much information as possible

regarding, typically, the missing checksums, which can

be painful during dependency upgrades.

If a dependency verification file contains multiple

checksums, then _all_ checksums are verified. This is to

avoid the case where one of the checksums is wrong but

not the other, and can be used to further secure verification:

often we only see MD5 and SHA1 checksums. While both can be

baked, it's much harder to bake a dependency which will have

both the same MD5 and SHA1 checksums.

Closes #11399

Bump `kotlin-dsl` plugins version

Signed-off-by: Paul Merlin <paul@gradle.com>

    • -1
    • +1
    ./kotlin-dsl-plugins/kotlin-dsl-plugins.gradle.kts
Add test for possible 6.0 regression

  1. … 1 more file in changeset.
Add test for possible 6.0 regression

  1. … 1 more file in changeset.
Add test for possible 6.0 regression

  1. … 1 more file in changeset.
Add test for possible 6.0 regression

Add test for possible 6.0 regression

Annotate tests for instant execution after recent changes

Signed-off-by: Paul Merlin <paul@gradle.com>

Annotate tests for instant execution after recent changes

Signed-off-by: Paul Merlin <paul@gradle.com>

  1. … 6 more files in changeset.
Annotate tests for instant execution after recent changes

Signed-off-by: Paul Merlin <paul@gradle.com>

  1. … 6 more files in changeset.
Make it illegal to tweak lock mode after resolution

This is mostly to help usability through consistency and accidental

updates detection.

Note that the resolution is for a _locked_ configuration. Resolving a

configuration that is not locked has no impact on this check.

Make it illegal to tweak lock mode after resolution

This is mostly to help usability through consistency and accidental

updates detection.

Note that the resolution is for a _locked_ configuration. Resolving a

configuration that is not locked has no impact on this check.

Add test case documenting behavior of included builds

This commit adds a test case for dependency verification

and included builds, showing that transitive included build

dependencies are included in the result.

Close reader/writer of verification metadata

Assumption that the parse() and write() methods would

automatically close the streams was obviously wrong.

Add test case for update

    • -1
    • +3
    ./dependency-management/dependency-management.gradle.kts
Test empty children as well

Add remaining test coverage for SnapshotUtil

Compute checksums concurrently

This commit reworks how checksums are computed by computing

them concurrently between projects. Checksums are computed

in parallel, however we preserve write order. This involves

a bit more memory usage but it proves to be faster.

Fix wrong hash in DistributionIntegritySpec

Signed-off-by: Paul Merlin <paul@gradle.com>

Fix broken DistributionIntegritySpec

since 71c862eb314286144989d35ad5354899729deb9a

Signed-off-by: Paul Merlin <paul@gradle.com>

Retrieve tasks without realizing task graph

Add Javadoc for FileSystemNode.getSnapshot()

Ignore broken script caching test for now.