mirror of
https://github.com/runelite/plugin-hub.git
synced 2026-01-30 17:22:00 -05:00
531a9a8554
This lets us have better control over which dependencies are verified, as changes to runelite-client's dependencies cause all Hub plugins with pinned deps to fail, as the new transitive deps aren't pinned. Moving this file into this repo not only lets us update it in these situations, but also means individual plugin authors don't need to touch Gradle's verification and all of it's associated pains. This also allows plugins to pull a dependency that another plugin pulls already with no extra work.
5 lines
459 B
Markdown
5 lines
459 B
Markdown
This project includes the dependency verification hashes used by all Plugin Hub plugins.
|
|
At the start of every build `core` dependencies are verified, but `thirdParty` deps are not.
|
|
To add a new dependency for a plugin add a new dep to the `thirdParty` configuration in this
|
|
`build.gradle` and run `../gradlew --write-verification-metadata sha256`. The maintainer MUST
|
|
then verify the hashes match Maven Central and that the library in question is reasonable. |