gautamworah96 commented on a change in pull request #108: URL: https://github.com/apache/lucene/pull/108#discussion_r622691393
########## File path: gradle/verification-metadata.xml ########## @@ -0,0 +1,2198 @@ +<?xml version="1.0" encoding="UTF-8"?> +<verification-metadata xmlns="https://schema.gradle.org/dependency-verification"; xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; xsi:schemaLocation="https://schema.gradle.org/dependency-verification https://schema.gradle.org/dependency-verification/dependency-verification-1.0.xsd";> + <configuration> + <verify-metadata>true</verify-metadata> + <verify-signatures>false</verify-signatures> + </configuration> + <components> + <component group="com.beust" name="jcommander" version="1.78"> + <artifact name="jcommander-1.78.jar"> + <sha256 value="7891debb84b5f83e9bd57593ebece3399abbe0fd938cf306b3534c57913b9615" origin="Generated by Gradle"/> + </artifact> + <artifact name="jcommander-1.78.pom"> + <sha256 value="6fee231c0aeee6de1256b6b5590ce9e6f6cf6c39797ed668573520bc3412e2a7" origin="Generated by Gradle"/> + </artifact> + </component> + <component group="com.carrotsearch" name="hppc" version="0.8.2"> + <artifact name="hppc-0.8.2.jar"> + <sha256 value="97e45d4e0106d98dd3e76d9610e0bd3895409bd1ab1ed189855b05af0571025e" origin="Generated by Gradle"/> + </artifact> + <artifact name="hppc-0.8.2.pom"> + <sha256 value="dd84d3247b2bbdfea08f40e896f6d12aa5c3f2ec4982dcbf82b51efb8330a654" origin="Generated by Gradle"/> + </artifact> + </component> + <component group="com.carrotsearch" name="hppc-parent" version="0.8.2"> + <artifact name="hppc-parent-0.8.2.pom"> + <sha256 value="9af29845f5120dfd526d12d36d3eeaff045e8d85a826fca8039f830398df534f" origin="Generated by Gradle"/> + </artifact> + </component> + <component group="com.carrotsearch.randomizedtesting" name="randomizedtesting-parent" version="2.7.2"> + <artifact name="randomizedtesting-parent-2.7.2.pom"> + <sha256 value="43a0795f51c694dbfc7acf9430c96c867553d38fc44664649ffad68247046c57" origin="Generated by Gradle"/> + </artifact> + </component> + <component group="com.carrotsearch.randomizedtesting" name="randomizedtesting-parent" version="2.7.6"> + <artifact name="randomizedtesting-parent-2.7.6.pom"> + <sha256 value="4053e097749859df0955bcca1284ccf993e3dba23f9504236892081aab41079b" origin="Generated by Gradle"/> + </artifact> + </component> + <component group="com.carrotsearch.randomizedtesting" name="randomizedtesting-runner" version="2.7.2"> + <artifact name="randomizedtesting-runner-2.7.2.jar"> + <sha256 value="2c4f36dffe3578d30d0d9ea8eff0584f8b252f3f92ffea08ef76a1ecb2ef1e94" origin="Generated by Gradle"/> + </artifact> + <artifact name="randomizedtesting-runner-2.7.2.pom"> + <sha256 value="5fbda9cb925a05d51c01b31e35c9b64bbf5bd8c1ff2d457bd7e98da521f72cc0" origin="Generated by Gradle"/> + </artifact> + </component> + <component group="com.carrotsearch.randomizedtesting" name="randomizedtesting-runner" version="2.7.6"> + <artifact name="randomizedtesting-runner-2.7.6.jar"> + <sha256 value="7a95b60ac991630430f723485e0ddfcc7094bfe32e19816165a7443a255008a5" origin="Generated by Gradle"/> + </artifact> + <artifact name="randomizedtesting-runner-2.7.6.pom"> + <sha256 value="d845beab7418abe5167838f0c446212d8b330c33bd57ac81fa864ca20298e2c1" origin="Generated by Gradle"/> + </artifact> + </component> + <component group="com.diffplug.durian" name="durian-collect" version="1.2.0"> Review comment: Tried a few things that did not work. In general the docs say that, > In order to provide the strongest security level possible, dependency verification is enabled globally > For this purpose, Gradle provides an API which allows disabling dependency verification on some specific configurations. Which is the opposite of what we wanted? i.e, to enable it for just 1 configuration? There is also a [way](https://docs.gradle.org/current/userguide/resolution_rules.html#sec:disabling_resolution_transitive_dependencies) to disable transitive resolution for a particular configuration but that will need some more tinkering. Not sure how that works -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org For additional commands, e-mail: issues-h...@lucene.apache.org
