Commit Graph

61 Commits

Author SHA1 Message Date
Max Weber
bf231bf530 package: upload output jars as build artifacts 2023-02-14 08:50:48 -05:00
Adam
7b3bc4c350 verification-metadata: add protobuf 3.21.12 2022-12-21 12:11:28 -05:00
Max Weber
372130348d package: do not log disabled plugins 2022-10-23 18:22:01 -06:00
Max Weber
78630b8603 package: disallow new Gson/OkHttpClient 2022-10-23 18:22:01 -06:00
Max Weber
69cde750cc package: add reasons to disallowed apis 2022-10-23 18:22:01 -06:00
Max Weber
7b3a66982c package: limit icon bitmap size 2022-09-01 17:24:20 -06:00
Max Weber
79494b3bb4 package: fail prs with certain api uses present 2022-08-30 06:44:42 -06:00
Max Weber
94fe582778 package: update asm to 9.3 2022-07-02 11:33:43 -06:00
Adam
25ab86f241 verification-metadata: add lwjgl bom pom 2022-07-02 13:12:46 -04:00
Adam
295b3ef1b8 Update verification-metadata.xml 2022-06-19 10:21:17 -04:00
Max Weber
1910930e93 package: do not break manifest on mulitrelease jars 2022-06-15 20:16:54 -06:00
Max Weber
bb523a640e update gpu-experimental to 1.4.0 2022-06-15 19:59:06 -06:00
Max Weber
7b713b19a8 package: strip jar specific files when shading
these files will make the jar incorrect if copied blindly.
the maven-shade-plugin has similar logic
2022-06-15 19:41:13 -06:00
Max Weber
2627286f6c package: allow newer class files than asm supports in multirelease jars 2022-06-15 19:40:14 -06:00
Max Weber
c4491afc17 verification-template: fix formatting 2022-06-15 18:02:49 -06:00
Max Weber
b00c3ec2dc verification-template: enforce indentation 2022-06-15 18:02:11 -06:00
LlemonDuck
6fdadc67ac Update dps-calculator to v2.0.0 (#2795) 2022-06-15 00:25:03 +00:00
Adam
5d6a9b91a4 verification-metadata: trust group net.runelite.arn 2022-06-10 19:08:08 -04:00
furfy
6a7ab7e9d3 Update Polywoof to v0.10b (#2715) 2022-05-24 04:00:15 +00:00
Max Weber
c05944658b package: allow authors key in the plugin commit descriptor 2022-04-28 13:24:54 -06:00
Adam
227ce17155 Add verification metadata for org.jetbrains:annotations:23.0.0 2022-04-21 08:23:33 -04:00
Max Weber
100c1d6dcf add archive-patcher trust 2022-02-23 04:59:50 -07:00
Tom Donohue
d2f21a7eec Add Loot Lookup plugin (#2253) 2022-02-23 06:02:54 +00:00
Max Weber
fc629da51a package: update to Gradle 7.4 2022-02-09 05:51:59 -07:00
Max Weber
e27a887ed0 package: upgrade http connections to rrn to https 2022-02-09 05:39:03 -07:00
Adam
2052851771 Bump to 1.8.8-SNAPSHOT 2021-12-30 10:54:14 -05:00
Max Weber
3e17fb2cb7 package: manually shade jars
this lets us get rid of shadow, which
 1) lets hub plugins bring their own shadow if they desire without
    impacting the build process
 2) removes a vulnerable log4j from the build process. This isn't
    a huge issue to us because if you can get arbitrary files into the
    shadow jar, security is already compromised, so at worst this lets
    you escalate
2021-12-20 18:59:29 -07:00
Max Weber
c4aaffdbdd package/apirecorder: correctly follow nested method invocations 2021-12-03 02:07:12 -07:00
Max Weber
79e77d63b9 package: avoid rebuilding plugins with compatible apis
we have to do this as part of a compiler plugin, and not by just looking
at the classes' bytecode, because jls§13.1 requires inlining of certain
constant values, so references to these will not be present in the
bytecode.
2021-11-13 10:09:25 -07:00
Max Weber
37ffcecf8c package: emit warning for large jars 2021-11-08 06:55:42 -07:00
Max Weber
d85d251d5f package: allow v45.3 classes
if we ever support a versions that can emit preview classes this will
need to check that too, but only 13+ does that so this is fine for now
2021-11-08 06:47:54 -07:00
Nicholas Anzalone
480358eaa6 create phillip-hue-integration (#1988) 2021-10-31 15:37:26 -06:00
Max Weber
98669a69a6 package: allow modular java 8 projects
even if you compile with --release 8, javac will still emit a
module-info.class with it's version set to 53 (java 9) if you have a
module-info.java
2021-10-16 00:31:00 -06:00
Max Weber
b2d09b0d9f unify gitignores
the one in templateplugin needs to remain where it is, as it is part of
the template
2021-10-16 00:27:49 -06:00
Max Weber
3581afa6dc package: pin okhttp 3.14.9 2021-10-05 04:50:23 -06:00
Jimi
ce4ae999ff add gimptracker (#1903) 2021-10-01 05:39:51 -06:00
Max Weber
8ee6466adf package: pin jna 5.9.0 2021-09-11 20:26:17 -06:00
Zoinkwiz
234af23608 Add Region Chat plugin (#1783) 2021-08-18 17:29:36 +00:00
Adam
4f3c634021 Add lombok 1.18.20 verification metadata 2021-08-14 21:07:42 -04:00
Max Weber
00b3acafc2 package: only download tree & blobs for the commit we want
We can't do a real shallow clone since GitHub doesn't let you fetch
arbitrary commits. Instead we fetch the whole commit graph, but not the
file trees or file blobs, which are fetched by git checkout on-demand.
2021-08-02 15:05:05 -06:00
Max Weber
518ce3f265 package: use commit instead of SNAPSHOT versions 2021-06-13 22:10:58 -06:00
Zoinkwiz
77ba3acde1 Add broadcaster (#1286) 2021-04-19 11:47:11 -06:00
ThatGamerBlue
777d17bb6e Add blue-prox-chat (#1253) 2021-04-03 21:26:14 -06:00
Hexagon
78b397d401 Update chat-logger to v1.2 (#1305) 2021-04-02 21:32:14 -06:00
Max Weber
36840b9cb7 package: require plugins to be non-empty 2021-03-24 22:17:34 -06:00
Jordan
490818bb0e package: Increase build.gradle column limit to 120 (#1261)
Even with a narrow browser, 120 characters can easily be seen without
any wrapping occurring.
2021-03-24 21:54:13 -06:00
Chintan Suthar
9011781d36 update elysiumevents-plugin (#1211) 2021-03-14 11:52:18 -06:00
Max Weber
80ad30a472 package: update core transient dependencies 2021-03-03 05:11:00 -07:00
Max Weber
2ee8187be4 package: collapse gradle's massive stack traces 2021-02-26 10:23:09 -07:00
Max Weber
531a9a8554 package: use a central verification-metadata file
This lets us have better control over which dependencies are verified,
as changes to runelite-client's dependencies cause all Hub plugins with
pinned deps to fail, as the new transitive deps aren't pinned. Moving
this file into this repo not only lets us update it in these situations,
but also means individual plugin authors don't need to touch Gradle's
verification and all of it's associated pains. This also allows plugins
to pull a dependency that another plugin pulls already with no extra
work.
2021-02-26 10:23:08 -07:00