mirror of
https://github.com/runelite/plugin-hub.git
synced 2026-01-06 05:18:57 -05:00
531a9a8554
This lets us have better control over which dependencies are verified, as changes to runelite-client's dependencies cause all Hub plugins with pinned deps to fail, as the new transitive deps aren't pinned. Moving this file into this repo not only lets us update it in these situations, but also means individual plugin authors don't need to touch Gradle's verification and all of it's associated pains. This also allows plugins to pull a dependency that another plugin pulls already with no extra work.
459 B
459 B
This project includes the dependency verification hashes used by all Plugin Hub plugins.
At the start of every build core dependencies are verified, but thirdParty deps are not.
To add a new dependency for a plugin add a new dep to the thirdParty configuration in this
build.gradle and run ../gradlew --write-verification-metadata sha256. The maintainer MUST
then verify the hashes match Maven Central and that the library in question is reasonable.