Ecosystem/haveno
Ecosystem/haveno
2
1
Fork 0
mirror of https://github.com/haveno-dex/haveno.git synced 2024-12-22 11:39:29 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 5
haveno/gradle
History
Přemek Vyhnal 17d109a15e
replace witness plugin with gradle dependency checksum verification (#223) 
* replace witness plugin with gradle builtin dependency checksum verification

I noticed that a recent dependency change didn't needed checksum change. It was because the witness plugin only checked the listed checksums, not all the dependencies. If the dependency was not on the list, the new checksum was not verified.

Gradle now has its own verification mechanism, see https://docs.gradle.org/current/userguide/dependency_verification.html

After a dependency is added or a version is changed, the checksums could be regenerated using the following command.

```
gradle --write-verification-metadata sha256 help
````

 The help task is just used to discover as much as possible dependencies, and if subsequent builds fail with a verification error, you can re-execute generation with the appropriate tasks to "discover" more dependencies

 I verified that all the checksums from the removed file are present in the new one.

jcenter repository (used only for gradle shadow plugin) is replaced with gradlePluginPortal. jcenter is shutting down anyway and the checksums for shadow plugin and its dependencies were not added automatically to the xml file for some reason.

* add javadoc and source as trusted artifacts

Co-authored-by: woodser <woodser@protonmail.com>
2022-02-06 11:36:58 -05:00
..
wrapper Bisq 2021-05-04 20:20:01 -04:00
README.md Bisq 2021-05-04 20:20:01 -04:00
verification-metadata.xml replace witness plugin with gradle dependency checksum verification (#223) 2022-02-06 11:36:58 -05:00

README.md

How to upgrade the Gradle version

Visit the Gradle website and decide the:

  • desired version
  • desired distribution type
  • what is the sha256 for the version and type chosen above

Adjust the following command with tha arguments above and execute it twice:

./gradlew wrapper --gradle-version 6.6.1 \
    --distribution-type all \
    --gradle-distribution-sha256-sum 11657af6356b7587bfb37287b5992e94a9686d5c8a0a1b60b87b9928a2decde5

The first execution should automatically update:

  • bisq/gradle/wrapper/gradle-wrapper.properties

The second execution should then update:

  • bisq/gradle/wrapper/gradle-wrapper.jar
  • bisq/gradlew
  • bisq/gradlew.bat

The four updated files are ready to be committed.