Generate checksum file for dependency verification
This commit introduces the generation of a dependency
verification metadata file from the… Show more
This commit introduces the generation of a dependency
verification metadata file from the… Show more
Generate checksum file for dependency verificationThis commit introduces the generation of a dependencyverification metadata file from the CLI. If the usercalls `--write-verification-metadata`, then an XMLfile is generated (`gradle/verification-metadata.xml`).This file will contain the checksums for all artifactsrequired by a build, which includes:- plugin artifacts- jars and other artifacts requested via a `configuration`- secondary artifacts (javadocs, classifiers, ...)It does NOT include metadata of those artifacts (pom files,ivy files, Gradle Module metadata).It isn't required to resolve any configuration to get thisbehavior: the build will automatically process all resolvableconfigurations and _try_ to resolve them automatically. Allartifacts resolved during this process are going to be automaticallydownloaded (if not already). Then SHA-1 and SHA-512 checksumsare computed for all those artifacts.The current format is an XML file planned to support more thanjust artifacts: module metadata AND signature information isplanned.See #11398
Show less