This is an automated email from the ASF dual-hosted git repository.
jleroux pushed a change to branch trunk in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git. from 208cd1f Improved: Dependency verification (OFBIZ-12186) new 7b6de27 Documented: Dependency verification (OFBIZ-12186) new 99d26d9 Improved: Dependency verification (OFBIZ-12186) The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: .../src/docs/asciidoc/_include/sy-dependency-verification.adoc | 4 ++++ gradle/{verification-metadata.xml => no-verification-metadata.xml} | 4 ++-- 2 files changed, 6 insertions(+), 2 deletions(-) rename gradle/{verification-metadata.xml => no-verification-metadata.xml} (99%) |
This is an automated email from the ASF dual-hosted git repository.
jleroux pushed a commit to branch trunk in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git commit 7b6de27404ecc223fdac78e0333e8a7a48107ae4 Author: Jacques Le Roux <[hidden email]> AuthorDate: Sat Feb 27 15:55:43 2021 +0100 Documented: Dependency verification (OFBIZ-12186) Note that this feature is for now disabled. You may use it locally if you want... --- .../src/docs/asciidoc/_include/sy-dependency-verification.adoc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/framework/security/src/docs/asciidoc/_include/sy-dependency-verification.adoc b/framework/security/src/docs/asciidoc/_include/sy-dependency-verification.adoc index fb76929..72cb897 100644 --- a/framework/security/src/docs/asciidoc/_include/sy-dependency-verification.adoc +++ b/framework/security/src/docs/asciidoc/_include/sy-dependency-verification.adoc @@ -21,6 +21,10 @@ under the License. The Apache OFBiz Project Release trunk +CAUTION: This feature is for now disabled. You may use it locally if you want... + + + https://docs.gradle.org/current/userguide/dependency_verification.html[Here is the Gradle documentation about dependency verification] As it's a long read you might prefer this summary: |
In reply to this post by jleroux@apache.org
This is an automated email from the ASF dual-hosted git repository.
jleroux pushed a commit to branch trunk in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git commit 99d26d986ab329c822871b961b1af3788406010f Author: Jacques Le Roux <[hidden email]> AuthorDate: Sat Feb 27 16:16:20 2021 +0100 Improved: Dependency verification (OFBIZ-12186) It does not work on Buildbot, not sure why yet. Better to not use it for now... To deactivate, you don't need to change the <verify-... elements but the file name --- gradle/{verification-metadata.xml => no-verification-metadata.xml} | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gradle/verification-metadata.xml b/gradle/no-verification-metadata.xml similarity index 99% rename from gradle/verification-metadata.xml rename to gradle/no-verification-metadata.xml index 6ed1aea..219f7a5 100644 --- a/gradle/verification-metadata.xml +++ b/gradle/no-verification-metadata.xml @@ -1,8 +1,8 @@ <?xml version="1.0" encoding="UTF-8"?> <verification-metadata xmlns="https://schema.gradle.org/dependency-verification" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="https://schema.gradle.org/dependency-verification https://schema.gradle.org/dependency-verification/dependency-verification-1.0.xsd"> <configuration> - <verify-metadata>false</verify-metadata> - <verify-signatures>false</verify-signatures> + <verify-metadata>true</verify-metadata> + <verify-signatures>true</verify-signatures> <trusted-keys> <trusted-key id="0143e2aa6983731f9d1dd82a2184c00abbcd7e0e" group="org.locationtech.spatial4j" name="spatial4j" version="0.7"/> <trusted-key id="015479e1055341431b4545ab72475fd306b9cab7" group="com.googlecode.javaewah" name="JavaEWAH" version="0.7.9"/> |
Free forum by Nabble | Edit this page |