You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@groovy.apache.org by pa...@apache.org on 2022/11/15 04:35:38 UTC

[groovy] 02/02: GROOVY-10835: Bump Spotbugs/Spotbugs annotations to 4.7.3 (build dependency)

This is an automated email from the ASF dual-hosted git repository.

paulk pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/groovy.git

commit add2a094cec1c57a2d347405e13132481dfc03ee
Author: Paul King <pa...@asert.com.au>
AuthorDate: Tue Nov 15 14:35:26 2022 +1000

    GROOVY-10835: Bump Spotbugs/Spotbugs annotations to 4.7.3 (build dependency)
---
 gradle/verification-metadata.xml | 10 +++++++++-
 versions.properties              |  4 ++--
 2 files changed, 11 insertions(+), 3 deletions(-)

diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 0c2df63ebf..b5110093b8 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -61,7 +61,10 @@
             <trusting group="io.github.x-stream"/>
          </trusted-key>
          <trusted-key id="06d34ed6ff73de368a772a781063fe98bcecb758" group="com.puppycrawl.tools" name="checkstyle" version="9.3"/>
-         <trusted-key id="0785b3eff60b1b1bea94e0bb7c25280eae63ebe5" group="org.apache.httpcomponents"/>
+         <trusted-key id="0785b3eff60b1b1bea94e0bb7c25280eae63ebe5">
+            <trusting group="org.apache.httpcomponents"/>
+            <trusting group="^org[.]apache[.]httpcomponents($|([.].*))" regex="true"/>
+         </trusted-key>
          <trusted-key id="0cc641c3a62453ab390066c4a41f13c999945293">
             <trusting group="commons-collections" name="commons-collections" version="3.2.2"/>
             <trusting group="commons-logging" name="commons-logging" version="1.2"/>
@@ -295,6 +298,11 @@
             <sha512 value="7753c96b4599504bb444cf44839f825e718dd4193af74a828341dc5a7b560d497a341466969c5dd23f1be62f87c84a9574e431088e3594f7b1a5e22e49ad526f" origin="Generated by Gradle because artifact wasn't signed"/>
          </artifact>
       </component>
+      <component group="commons-codec" name="commons-codec" version="1.15">
+         <artifact name="commons-codec-1.15.jar">
+            <pgp value="bc87a3fd0a54480f0badbebd21939ff0ca2a6567"/>
+         </artifact>
+      </component>
       <component group="commons-logging" name="commons-logging" version="1.1.1">
          <artifact name="commons-logging-1.1.1.pom">
             <pgp value="b920d295bf0e61cb4cf0896c33cd6733af5ec452"/>
diff --git a/versions.properties b/versions.properties
index d61be74fff..12e5899290 100644
--- a/versions.properties
+++ b/versions.properties
@@ -48,8 +48,8 @@ xmlunit=1.6
 xstream=1.4.19
 # running with Groovy 5 can be allowed with -Dspock.iKnowWhatImDoing.disableGroovyVersionCheck=true
 spock=2.3-groovy-4.0
-spotbugs=4.7.1
-spotbugsAnnotations=4.7.1
+spotbugs=4.7.3
+spotbugsAnnotations=4.7.3
 checkstyle=9.3
 junit5=5.9.1
 junit5Platform=1.9.1