mirror of
https://github.com/runelite/plugin-hub.git
synced 2026-04-27 10:27:40 -04:00
3e17fb2cb7
this lets us get rid of shadow, which
1) lets hub plugins bring their own shadow if they desire without
impacting the build process
2) removes a vulnerable log4j from the build process. This isn't
a huge issue to us because if you can get arbitrary files into the
shadow jar, security is already compromised, so at worst this lets
you escalate
212 lines
12 KiB
XML
212 lines
12 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<verification-metadata xmlns="https://schema.gradle.org/dependency-verification" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="https://schema.gradle.org/dependency-verification https://schema.gradle.org/dependency-verification/dependency-verification-1.0.xsd">
|
|
<configuration>
|
|
<verify-metadata>true</verify-metadata>
|
|
<verify-signatures>false</verify-signatures>
|
|
<trusted-artifacts>
|
|
<trust file=".*-javadoc[.]jar" regex="true"/>
|
|
<trust file=".*-sources[.]jar" regex="true"/>
|
|
</trusted-artifacts>
|
|
</configuration>
|
|
<components>
|
|
<component group="com.google.code.findbugs" name="jsr305" version="3.0.2">
|
|
<artifact name="jsr305-3.0.2.jar">
|
|
<sha256 value="766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
<artifact name="jsr305-3.0.2.pom">
|
|
<sha256 value="19889dbdf1b254b2601a5ee645b8147a974644882297684c798afe5d63d78dfe" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="com.google.code.gson" name="gson" version="2.8.5">
|
|
<artifact name="gson-2.8.5.jar">
|
|
<sha256 value="233a0149fc365c9f6edbd683cfe266b19bdc773be98eabdaf6b3c924b48e7d81" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
<artifact name="gson-2.8.5.pom">
|
|
<sha256 value="b8308557a7fccc92d9fe7c8cd0599258b361285d2ecde7689eda98843255a092" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="com.google.code.gson" name="gson-parent" version="2.8.5">
|
|
<artifact name="gson-parent-2.8.5.pom">
|
|
<sha256 value="8f1fec72b91a71ea39ec39f5f778c4d1124b6b097c6d55b3a50b554a52237b27" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="com.google.errorprone" name="error_prone_annotations" version="2.0.18">
|
|
<artifact name="error_prone_annotations-2.0.18.jar">
|
|
<sha256 value="cb4cfad870bf563a07199f3ebea5763f0dec440fcda0b318640b1feaa788656b" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
<artifact name="error_prone_annotations-2.0.18.pom">
|
|
<sha256 value="9144127192d6f612c2366825dceaeb23b0d53130b83e0bf1ffe107d1470a8487" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="com.google.errorprone" name="error_prone_parent" version="2.0.18">
|
|
<artifact name="error_prone_parent-2.0.18.pom">
|
|
<sha256 value="cf149955279b07d4f11e817985c1164a69e930d73db7441b43a6ef53bbd286c4" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="com.google.guava" name="guava" version="23.2-jre">
|
|
<artifact name="guava-23.2-jre.jar">
|
|
<sha256 value="5be9a7d05ba0ccd74708bc8018ae412255f85843c0b92302e9b9befa6ed52564" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
<artifact name="guava-23.2-jre.pom">
|
|
<sha256 value="57abac7e3962e45ad1c8645d91cdad96e1e0bf23b8b38e6f389011f7ae496870" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="com.google.guava" name="guava-parent" version="23.2-jre">
|
|
<artifact name="guava-parent-23.2-jre.pom">
|
|
<sha256 value="e92cd52f3b86a0f6fe90fc94a86ea072a2b112fc40063bd33f6679778038cc47" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="com.google.j2objc" name="j2objc-annotations" version="1.1">
|
|
<artifact name="j2objc-annotations-1.1.jar">
|
|
<sha256 value="2994a7eb78f2710bd3d3bfb639b2c94e219cedac0d4d084d516e78c16dddecf6" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
<artifact name="j2objc-annotations-1.1.pom">
|
|
<sha256 value="f0c98c571e93a7cb4dd18df0fa308f0963e7a0620ac2d4244e61e709d03ad6be" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="com.squareup.okhttp3" name="mockwebserver" version="3.14.9">
|
|
<artifact name="mockwebserver-3.14.9.jar">
|
|
<sha256 value="099f70ab2997f628bf93c358baac829ccb625b6e08a9361e09d6923fa9af1f68" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
<artifact name="mockwebserver-3.14.9.pom">
|
|
<sha256 value="24fc2ed2c0d80c7461e24f4dc3f873381a5a77246cf99a57988d1b389b091fd6" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="com.squareup.okhttp3" name="okhttp" version="3.14.9">
|
|
<artifact name="okhttp-3.14.9.jar">
|
|
<sha256 value="2570fab55515cbf881d7a4ceef49fc515490bc027057e666776a2832465aeca0" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
<artifact name="okhttp-3.14.9.pom">
|
|
<sha256 value="61edf3c4764ea95f1212ca2dfbc6ea5d4133c71c4e8c40bd247ec83e7c6b7ce7" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="com.squareup.okhttp3" name="parent" version="3.14.9">
|
|
<artifact name="parent-3.14.9.pom">
|
|
<sha256 value="b5f101dcf2cc7f32ec3d7b68bdc078e77eac1979bb8664e8f87f762288c3dce5" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="com.squareup.okio" name="okio" version="1.17.2">
|
|
<artifact name="okio-1.17.2.jar">
|
|
<sha256 value="f80ce42d2ffac47ad4c47e1d6f980d604d247ceb1a886705cf4581ab0c9fe2b8" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
<artifact name="okio-1.17.2.pom">
|
|
<sha256 value="cd57f75443ab6a714b203da51994ee64ed0e919fea81f04e4f4b5324e4bb03f0" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="com.squareup.okio" name="okio-parent" version="1.17.2">
|
|
<artifact name="okio-parent-1.17.2.pom">
|
|
<sha256 value="e81f40146f2a0eb394b10fa3a175c85ab9fbe757aa418aa44d4b760efe16f024" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="junit" name="junit" version="4.12">
|
|
<artifact name="junit-4.12.jar">
|
|
<sha256 value="59721f0805e223d84b90677887d9ff567dc534d7c502ca903c0c2b17f05c116a" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
<artifact name="junit-4.12.pom">
|
|
<sha256 value="90f163f78e3ffb6f1c7ad97de9e7eba4eea25807141b85d6d12be67ca25449c4" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="org.codehaus" name="codehaus-parent" version="4">
|
|
<artifact name="codehaus-parent-4.pom">
|
|
<sha256 value="6b87237de8c2e1740cf80627c7f3ce3e15de1930bb250c55a1eca94fa3e014df" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="org.codehaus.mojo" name="animal-sniffer-annotations" version="1.14">
|
|
<artifact name="animal-sniffer-annotations-1.14.jar">
|
|
<sha256 value="2068320bd6bad744c3673ab048f67e30bef8f518996fa380033556600669905d" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
<artifact name="animal-sniffer-annotations-1.14.pom">
|
|
<sha256 value="1879f19a05991e3ed95910b96689333396b0c467a215dc4d1f90018404b72a26" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="org.codehaus.mojo" name="animal-sniffer-parent" version="1.14">
|
|
<artifact name="animal-sniffer-parent-1.14.pom">
|
|
<sha256 value="f51550a06b1410bd4962cb0e71df0b921a60a7ef47bfa9c4825a14be72316eea" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="org.codehaus.mojo" name="mojo-parent" version="34">
|
|
<artifact name="mojo-parent-34.pom">
|
|
<sha256 value="3e395d6fbc43c09a3774cac8694ce527398305ea3fd5492d80e25af27d382a9c" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="org.gradle" name="gradle-tooling-api" version="6.6.1">
|
|
<artifact name="gradle-tooling-api-6.6.1.jar">
|
|
<sha256 value="38b7a9317a06a0f3797f972462d198d8b370faa1aecc5832fba736c4c99aa3b2" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
<artifact name="gradle-tooling-api-6.6.1.module">
|
|
<sha256 value="41817723d2b2ff73f7fde1e7a927593a201b31348bcbfaff8322dbdf0d3f38b6" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="org.hamcrest" name="hamcrest-core" version="1.3">
|
|
<artifact name="hamcrest-core-1.3.jar">
|
|
<sha256 value="66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
<artifact name="hamcrest-core-1.3.pom">
|
|
<sha256 value="fde386a7905173a1b103de6ab820727584b50d0e32282e2797787c20a64ffa93" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="org.hamcrest" name="hamcrest-parent" version="1.3">
|
|
<artifact name="hamcrest-parent-1.3.pom">
|
|
<sha256 value="6d535f94efb663bdb682c9f27a50335394688009642ba7a9677504bc1be4129b" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="org.ow2" name="ow2" version="1.5">
|
|
<artifact name="ow2-1.5.pom">
|
|
<sha256 value="0f8a1b116e760b8fe6389c51b84e4b07a70fc11082d4f936e453b583dd50b43b" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="org.ow2.asm" name="asm" version="7.0">
|
|
<artifact name="asm-7.0.jar">
|
|
<sha256 value="b88ef66468b3c978ad0c97fd6e90979e56155b4ac69089ba7a44e9aa7ffe9acf" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
<artifact name="asm-7.0.pom">
|
|
<sha256 value="83f65b1083d5ce4f8ba7f9545cfe9ff17824589c9a7cc82c3a4695801e4f5f68" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="org.projectlombok" name="lombok" version="1.18.4">
|
|
<artifact name="lombok-1.18.4.pom">
|
|
<sha256 value="2eaf8fc3d7a9c2ce18ec874bc4674f7ab492b2121143342321e820eea12ffa2f" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="org.slf4j" name="slf4j-api" version="1.7.10">
|
|
<artifact name="slf4j-api-1.7.10.jar">
|
|
<sha256 value="3863e27005740d4d1289bf87b113efea115e9a22408a7d623be8004991232bfe" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
<artifact name="slf4j-api-1.7.10.pom">
|
|
<sha256 value="af9c5e8d2263422c74792ddd91b3cc1a24bd02b451b54cbb10cd6f2ba46c14b1" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="org.slf4j" name="slf4j-api" version="1.7.28">
|
|
<artifact name="slf4j-api-1.7.28.jar">
|
|
<sha256 value="fb6e4f67a2a4689e3e713584db17a5d1090c1ebe6eec30e9e0349a6ee118141e" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
<artifact name="slf4j-api-1.7.28.pom">
|
|
<sha256 value="61f10feac576665b68caa6170cd423e8fb00055f1fad7ad9d7de2150e5f15caa" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="org.slf4j" name="slf4j-parent" version="1.7.10">
|
|
<artifact name="slf4j-parent-1.7.10.pom">
|
|
<sha256 value="1abee7f5182fb79b4926fb64658af8c3248ed6b374f9ac7da1fd9e8b9197e2ce" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="org.slf4j" name="slf4j-parent" version="1.7.28">
|
|
<artifact name="slf4j-parent-1.7.28.pom">
|
|
<sha256 value="919b5f42dde33ace036865d1e2b292d98a0627417ff756e0287f4a56ad3e544e" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="org.slf4j" name="slf4j-simple" version="1.7.10">
|
|
<artifact name="slf4j-simple-1.7.10.jar">
|
|
<sha256 value="3209a859bb47873c0d1873f7d69aa6652dc07fe32ed935492fe0b1cf1d2cf140" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
<artifact name="slf4j-simple-1.7.10.pom">
|
|
<sha256 value="bbd8c6f5cf54d1c1fb11b415e51f6b35483fc264f81ccd98654cc3420e756901" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
<component group="org.sonatype.oss" name="oss-parent" version="7">
|
|
<artifact name="oss-parent-7.pom">
|
|
<sha256 value="b51f8867c92b6a722499557fc3a1fdea77bdf9ef574722fe90ce436a29559454" origin="Generated by Gradle"/>
|
|
</artifact>
|
|
</component>
|
|
</components>
|
|
</verification-metadata>
|