You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@groovy.apache.org by pa...@apache.org on 2026/03/04 10:29:23 UTC
(groovy) branch master updated: GROOVY-11867: Bump checkstyle to 12.3.1 (build dependency)
This is an automated email from the ASF dual-hosted git repository.
paulk pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/groovy.git
The following commit(s) were added to refs/heads/master by this push:
new 2ac5b7579f GROOVY-11867: Bump checkstyle to 12.3.1 (build dependency)
2ac5b7579f is described below
commit 2ac5b7579f7f128848047377d856a58910bdb2f4
Author: Paul King <pa...@asert.com.au>
AuthorDate: Wed Mar 4 20:29:08 2026 +1000
GROOVY-11867: Bump checkstyle to 12.3.1 (build dependency)
---
.../src/main/groovy/org.apache.groovy-base.gradle | 2 +-
gradle/verification-metadata.xml | 24 +++++++++++++++-------
versions.properties | 2 +-
3 files changed, 19 insertions(+), 9 deletions(-)
diff --git a/build-logic/src/main/groovy/org.apache.groovy-base.gradle b/build-logic/src/main/groovy/org.apache.groovy-base.gradle
index 69512dbf46..19766f5621 100644
--- a/build-logic/src/main/groovy/org.apache.groovy-base.gradle
+++ b/build-logic/src/main/groovy/org.apache.groovy-base.gradle
@@ -131,7 +131,7 @@ dependencies {
codenarc project(':groovy-templates')
checkstyle "com.puppycrawl.tools:checkstyle:${versions.checkstyle}"
- checkstyle "commons-codec:commons-codec:1.19.0"
+ checkstyle "commons-codec:commons-codec:1.21.0" // avoid 1.11 which has vulnerabilities
spotbugs "com.github.spotbugs:spotbugs:${versions.spotbugs}"
spotbugs "org.apache.logging.log4j:log4j-api:${versions.log4j2}"
spotbugs "org.apache.logging.log4j:log4j-core:${versions.log4j2}"
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 3ec4ebf779..38bf376425 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -124,6 +124,8 @@
<ignored-key id="F13D3E721D56BD54" reason="Key couldn't be downloaded from any key server"/>
<ignored-key id="F5C81DE10A0B8ECC" reason="Key couldn't be downloaded from any key server"/>
<ignored-key id="FE66BCA17E67AE6F" reason="Key couldn't be downloaded from any key server"/>
+ <ignored-key id="530AA5F25C25011F" reason="Key couldn't be downloaded from any key server"/>
+ <ignored-key id="340B090F727518D8" reason="Key couldn't be downloaded from any key server"/>
</ignored-keys>
<trusted-keys>
<trusted-key id="0181A4828FA27B6BE6F1F5A68611CD28F472E006" group="org.jline"/>
@@ -158,6 +160,10 @@
<trusting group="commons-io"/>
<trusting group="org.apache.commons"/>
</trusted-key>
+ <trusted-key id="F4DD59C90148BDC52BEB90A4530AA5F25C25011F">
+ <trusting group="org.apache.commons"/>
+ <trusting group="commons-codec"/>
+ </trusted-key>
<trusted-key id="2FC53E6B1F681184F4CCD637F5C81DE10A0B8ECC" group="org.yaml" name="snakeyaml" version="2.3"/>
<trusted-key id="32118CF76C9EC5D918E54967CA80D1F0EB6CA4BA" group="org.codehaus.plexus"/>
<trusted-key id="34D6FF19930ADF43AC127792A50569C7CA7FA1F0" group="com.jcraft" name="jsch" version="0.1.55"/>
@@ -594,6 +600,11 @@
<sha512 value="1406b1aa53b19f8269129d96ce8b64bf36f215eacf7d8f1e0adadee31614e53bb3f7acf4ff97418c5bfc75677a6f3cd637c3d9889d1e85117b6fa12467c91e9f" origin="Generated by Gradle" reason="Artifact is not signed"/>
</artifact>
</component>
+ <component group="com.google.j2objc" name="j2objc-annotations" version="3.1">
+ <artifact name="j2objc-annotations-3.1.jar">
+ <sha512 value="34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1" origin="Generated by Gradle" reason="Artifact is not signed"/>
+ </artifact>
+ </component>
<component group="com.gradle" name="build-scan-plugin" version="1.10.1">
<artifact name="build-scan-plugin-1.10.1.jar">
<sha512 value="4757fe5f5140d3ba223cbc242afc5e513d08b2a4454d1b00987fc670217db55527d206943c356ebdd80f77ed7b867c8dd3b17432b4a57b3e9d19dfc7e43bf9aa" origin="Generated by Gradle" reason="Artifact is not signed"/>
@@ -652,10 +663,10 @@
<sha512 value="5ba210c135717a6ed043e0889d96f6381b3668f9e2a011bd0def8138ad327813f792259858ae5ed192cb8ec0645308113769aa8ebee903db1ccd82e98cb3009d" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
</artifact>
</component>
- <component group="com.puppycrawl.tools" name="checkstyle" version="11.0.1">
- <artifact name="checkstyle-11.0.1.jar">
+ <component group="com.puppycrawl.tools" name="checkstyle" version="12.3.1">
+ <artifact name="checkstyle-12.3.1.jar">
<pgp value="06D34ED6FF73DE368A772A781063FE98BCECB758"/>
- <sha512 value="08544e6cc484874b3454e797ef445076180ad1a4069c8fab964cd1ff76b74eeefd73abae7814c3c4534f6b0447983bb1d642d8e382048a266495709dedb6daed" origin="Generated by Gradle"/>
+ <sha512 value="945f9bc646ffeda72cc3bdc28f229e26eac63b2c127a14b724d501701c61211f538122d0924c0d31df6c266f374abb791045b749d02a54005903b8771ad900a5" origin="Generated by Gradle"/>
</artifact>
</component>
<component group="com.squareup.moshi" name="moshi" version="1.12.0">
@@ -768,10 +779,9 @@
<sha512 value="4d974c2203dd6780da6e50ec1c7d8ff727f9ed55fba706fdc50b9484fc5da5e03b67bc6ad2f0d9ae74f823ecce04a40c513bbabd8bf9e91ac8fec04cd3519ffa" origin="Generated by Gradle"/>
</artifact>
</component>
- <component group="commons-codec" name="commons-codec" version="1.19.0">
- <artifact name="commons-codec-1.19.0.jar">
- <pgp value="2DB4F1EF0FA761ECC4EA935C86FDC7E2A11262CB"/>
- <sha512 value="d98a7a1cfcc08aa9cce4f7778e3f37ecb99da7b1da01944e5fa8faf06fbf9f969f2efb0b416832f419d53085250f711c071f1dac9fa0968483c37034198367fb" origin="Generated by Gradle"/>
+ <component group="commons-codec" name="commons-codec" version="1.21.0">
+ <artifact name="commons-codec-1.21.0.jar">
+ <sha512 value="3ceb4aa588d0b918e46b1ddda9ff41b5a765985bf66542d2728458fc3f83b9dedfd972ff5d919cf6f456fbaa9f8c4e5f0c0913848ec3a471c316374e683b1f2a" origin="Generated by Gradle"/>
</artifact>
</component>
<component group="commons-codec" name="commons-codec" version="1.20.0">
diff --git a/versions.properties b/versions.properties
index 17c2aa09f6..2155c8c730 100644
--- a/versions.properties
+++ b/versions.properties
@@ -22,7 +22,7 @@ asciidoctorPdf=2.3.23
asciidoctorj=2.5.11
asm=9.9.1
bridger=1.6.Final
-checkstyle=11.0.1
+checkstyle=12.3.1
cobertura=1.9.4.1
codenarc=3.7.0
commonsCli=1.11.0