Skip to content

Artifacts should be signed for dependency verification #115

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dlam opened this issue May 24, 2023 · 1 comment · May be fixed by #295
Open

Artifacts should be signed for dependency verification #115

dlam opened this issue May 24, 2023 · 1 comment · May be fixed by #295
Assignees
@fzhinkin
Labels
enhancement New feature or request

Comments

@dlam
Copy link

dlam commented May 24, 2023

In AndroidX we are needing to add exceptions for dependency verification for kotlinx-benchmark artifacts.

  These files failed verification:
    - GRADLE_USER_HOME/caches/modules-2/files-2.1/org.jetbrains.kotlinx.benchmark/org.jetbrains.kotlinx.benchmark.gradle.plugin/0.4.8/24d8d69982d768bcfa9c2f4c8aed7fdcec2ae5c3/org.jetbrains.kotlinx.benchmark.gradle.plugin-0.4.8.pom
    - GRADLE_USER_HOME/caches/modules-2/files-2.1/org.jetbrains.kotlinx/kotlinx-benchmark-plugin/0.4.8/452ca78e63a94ede9eb8b9dcfcc6c693708a1b22/kotlinx-benchmark-plugin-0.4.8.jar
    - GRADLE_USER_HOME/caches/modules-2/files-2.1/org.jetbrains.kotlinx/kotlinx-benchmark-plugin/0.4.8/dd0525949f4c23c9468860892d7ed4625a4834b4/kotlinx-benchmark-plugin-0.4.8.module

Repro:

  1. git clone [email protected]:androidx/androidx.git
  2. Manually remove kotlinx.benchmark entries in gradle/verification-metadata.xml
  3. cd collection && ./gradlew collection:collection-benchmark-kmp:assembleBenchmarks
OndrejSliva pushed a commit to OndrejSliva/kotlinx-benchmark that referenced this issue Jan 10, 2024
@github-actions
Merge pull request Kotlin#115 from sureshg/dependabot/maven/org.apach…
3d9d7f9 
…e.maven.plugins-maven-release-plugin-3.0.0

build(deps): bump maven-release-plugin from 3.0.0-M7 to 3.0.0
@qurbonzoda qurbonzoda added the enhancement New feature or request label May 27, 2024
@liutikas
Copy link
Contributor

liutikas commented Oct 9, 2024

Any updates here? The main work here seems to be upgrading to a newer version of Gradle plugin publish plugin (1.0 or newer) https://plugins.gradle.org/plugin/com.gradle.plugin-publish

@fzhinkin fzhinkin self-assigned this Jan 16, 2025
fzhinkin added a commit that referenced this issue Mar 5, 2025
@fzhinkin
Update publish-plugin to published signed plugin artifacts
49fc804 
Closes #115
@fzhinkin fzhinkin linked a pull request Mar 5, 2025 that will close this issue
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@fzhinkin fzhinkin

Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Update publish-plugin to published signed plugin artifacts Kotlin/kotlinx-benchmark
4 participants
@dlam @liutikas @qurbonzoda @fzhinkin