Skip to content

Commit 9ae127b

Browse files
author
CVE Bot
committed
fix: add missing checksums for netty 4.1.129.Final, reactor-netty 1.2.8, log4j 2.25.3 in verification metadata
The CVE fix commit bumped these dependencies but did not add their checksums to the Gradle dependency verification metadata. This causes build failures when tasks that use these artifacts cannot be served from the remote cache. Added SHA-256 checksums for: - netty 4.1.129.Final (14 artifacts) - reactor-netty-core/http 1.2.8 - log4j-api/core/1.2-api/jcl/jul/slf4j-impl/to-slf4j 2.25.3
1 parent c53aca0 commit 9ae127b

File tree

1 file changed

+115
-0
lines changed

1 file changed

+115
-0
lines changed

gradle/verification-metadata.xml

Lines changed: 115 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1632,6 +1632,76 @@
16321632
<sha256 value="b6578df0ad9092f4e846d34976a5f887b067ebaa71307eb90653d3a1898c1f5f" origin="Generated by Gradle"/>
16331633
</artifact>
16341634
</component>
1635+
<component group="io.netty" name="netty-buffer" version="4.1.129.Final">
1636+
<artifact name="netty-buffer-4.1.129.Final.jar">
1637+
<sha256 value="c8ad1c1c0dd3d3749c535383003817190284cd7164a266c0a7aa5c51d6411b03" origin="Generated by Gradle"/>
1638+
</artifact>
1639+
</component>
1640+
<component group="io.netty" name="netty-codec" version="4.1.129.Final">
1641+
<artifact name="netty-codec-4.1.129.Final.jar">
1642+
<sha256 value="34f187ca84dc5c9e1bf6268e1d52025076c56bf39942495981d648d6f93ae341" origin="Generated by Gradle"/>
1643+
</artifact>
1644+
</component>
1645+
<component group="io.netty" name="netty-codec-dns" version="4.1.129.Final">
1646+
<artifact name="netty-codec-dns-4.1.129.Final.jar">
1647+
<sha256 value="edc2940abd7346243433c506c59d45f178b15d4491db4b723884e2de74e87d2d" origin="Generated by Gradle"/>
1648+
</artifact>
1649+
</component>
1650+
<component group="io.netty" name="netty-codec-http" version="4.1.129.Final">
1651+
<artifact name="netty-codec-http-4.1.129.Final.jar">
1652+
<sha256 value="8a7e52e937fea72d13e7ad9590e9ed76171fa61ef5725eec6016e863fbdebb94" origin="Generated by Gradle"/>
1653+
</artifact>
1654+
</component>
1655+
<component group="io.netty" name="netty-codec-http2" version="4.1.129.Final">
1656+
<artifact name="netty-codec-http2-4.1.129.Final.jar">
1657+
<sha256 value="9bdd306199ab725dded3f9b5537df8069c9d71d28da127feeb888fab0d48001a" origin="Generated by Gradle"/>
1658+
</artifact>
1659+
</component>
1660+
<component group="io.netty" name="netty-codec-socks" version="4.1.129.Final">
1661+
<artifact name="netty-codec-socks-4.1.129.Final.jar">
1662+
<sha256 value="17202a0f94a0493898d317861427f25374ca4e3aa920cd742842a8b745469045" origin="Generated by Gradle"/>
1663+
</artifact>
1664+
</component>
1665+
<component group="io.netty" name="netty-common" version="4.1.129.Final">
1666+
<artifact name="netty-common-4.1.129.Final.jar">
1667+
<sha256 value="0cbbbb12f5f046e5a6f323fb34a2f12ac1789ed74d8860f37047b286dbe11fde" origin="Generated by Gradle"/>
1668+
</artifact>
1669+
</component>
1670+
<component group="io.netty" name="netty-handler" version="4.1.129.Final">
1671+
<artifact name="netty-handler-4.1.129.Final.jar">
1672+
<sha256 value="bae0ad5962400675c5b57de7684e56079358c02e348c9bc019eccf3008054536" origin="Generated by Gradle"/>
1673+
</artifact>
1674+
</component>
1675+
<component group="io.netty" name="netty-handler-proxy" version="4.1.129.Final">
1676+
<artifact name="netty-handler-proxy-4.1.129.Final.jar">
1677+
<sha256 value="6b1795b47df97c9afcc54da229bd05c676402542fd51f2b7f775cd7fa72820a7" origin="Generated by Gradle"/>
1678+
</artifact>
1679+
</component>
1680+
<component group="io.netty" name="netty-resolver" version="4.1.129.Final">
1681+
<artifact name="netty-resolver-4.1.129.Final.jar">
1682+
<sha256 value="05217d2bb74e304fb370d940e2bee30c6bb988c76ebb5d7d4a780a6bba6ec1c6" origin="Generated by Gradle"/>
1683+
</artifact>
1684+
</component>
1685+
<component group="io.netty" name="netty-resolver-dns" version="4.1.129.Final">
1686+
<artifact name="netty-resolver-dns-4.1.129.Final.jar">
1687+
<sha256 value="432217343413670b6231f780f37ff905ae040127e6b4a1a70d2757e18fc9bb58" origin="Generated by Gradle"/>
1688+
</artifact>
1689+
</component>
1690+
<component group="io.netty" name="netty-transport" version="4.1.129.Final">
1691+
<artifact name="netty-transport-4.1.129.Final.jar">
1692+
<sha256 value="2bfe0b2fe57594a8b72fa3927a983d3367bec0e08ad663d67f215ab1b3281bfc" origin="Generated by Gradle"/>
1693+
</artifact>
1694+
</component>
1695+
<component group="io.netty" name="netty-transport-classes-epoll" version="4.1.129.Final">
1696+
<artifact name="netty-transport-classes-epoll-4.1.129.Final.jar">
1697+
<sha256 value="5818715430823ded25ae9d6ce76173807a7cb1c3cb8be4d9aa72aef1f454f054" origin="Generated by Gradle"/>
1698+
</artifact>
1699+
</component>
1700+
<component group="io.netty" name="netty-transport-native-unix-common" version="4.1.129.Final">
1701+
<artifact name="netty-transport-native-unix-common-4.1.129.Final.jar">
1702+
<sha256 value="2ea70d286e01d9588ebec6bb00d33c0292be071e3e20a28004c083632317f8dd" origin="Generated by Gradle"/>
1703+
</artifact>
1704+
</component>
16351705
<component group="io.opencensus" name="opencensus-api" version="0.30.0">
16361706
<artifact name="opencensus-api-0.30.0.jar">
16371707
<sha256 value="421cbc06d9fb56fcf07332553677ddea04a47079b30955567c8a80b34689ed32" origin="Generated by Gradle"/>
@@ -1717,6 +1787,16 @@
17171787
<sha256 value="f657ebfcf8115008fa8c55e75200da886a45f22c488d82ddaaf013ffccb65205" origin="Generated by Gradle"/>
17181788
</artifact>
17191789
</component>
1790+
<component group="io.projectreactor.netty" name="reactor-netty-core" version="1.2.8">
1791+
<artifact name="reactor-netty-core-1.2.8.jar">
1792+
<sha256 value="108e2bd0db4f23da1d4ee8ec149e40bdef717b652c63540f2705843f66c99f66" origin="Generated by Gradle"/>
1793+
</artifact>
1794+
</component>
1795+
<component group="io.projectreactor.netty" name="reactor-netty-http" version="1.2.8">
1796+
<artifact name="reactor-netty-http-1.2.8.jar">
1797+
<sha256 value="2e3306ef24ca39077971bafd2f21c1e890f8703f01e8d1741013642413530692" origin="Generated by Gradle"/>
1798+
</artifact>
1799+
</component>
17201800
<component group="io.sgr" name="s2-geometry-library-java" version="1.0.1">
17211801
<artifact name="s2-geometry-library-java-1.0.1.jar">
17221802
<sha256 value="8b239af6921e35204e0d6c9578b04398732dc3f43309b20d9a830e613dcbc2bb" origin="Generated by Gradle"/>
@@ -2993,6 +3073,41 @@
29933073
<sha256 value="78c232747855464b182f0abf78a99a22c88d4d270ff585343dab55576d7420e2" origin="Generated by Gradle"/>
29943074
</artifact>
29953075
</component>
3076+
<component group="org.apache.logging.log4j" name="log4j-1.2-api" version="2.25.3">
3077+
<artifact name="log4j-1.2-api-2.25.3.jar">
3078+
<sha256 value="72aab8a06335962bfd441605cb4da94777798f699414e02931d29e63fd12ace4" origin="Generated by Gradle"/>
3079+
</artifact>
3080+
</component>
3081+
<component group="org.apache.logging.log4j" name="log4j-api" version="2.25.3">
3082+
<artifact name="log4j-api-2.25.3.jar">
3083+
<sha256 value="e886682920fa0fb9d6eb6395dcb4de088443f8646c89c5e5846e168e327f406f" origin="Generated by Gradle"/>
3084+
</artifact>
3085+
</component>
3086+
<component group="org.apache.logging.log4j" name="log4j-core" version="2.25.3">
3087+
<artifact name="log4j-core-2.25.3.jar">
3088+
<sha256 value="362b7fcb65b73aa46cc4bc53abf4eb216f444a83b5d1a037cb6fdfff0ae9f0f9" origin="Generated by Gradle"/>
3089+
</artifact>
3090+
</component>
3091+
<component group="org.apache.logging.log4j" name="log4j-jcl" version="2.25.3">
3092+
<artifact name="log4j-jcl-2.25.3.jar">
3093+
<sha256 value="ad910ad16e1e542edbd965bb395f6d3e049b472e6a756df764900c1d55eec833" origin="Generated by Gradle"/>
3094+
</artifact>
3095+
</component>
3096+
<component group="org.apache.logging.log4j" name="log4j-jul" version="2.25.3">
3097+
<artifact name="log4j-jul-2.25.3.jar">
3098+
<sha256 value="26f180a7467580446b0b6a18c25d8bc77372d10467623d1ea6ffa08bf66e6d3f" origin="Generated by Gradle"/>
3099+
</artifact>
3100+
</component>
3101+
<component group="org.apache.logging.log4j" name="log4j-slf4j-impl" version="2.25.3">
3102+
<artifact name="log4j-slf4j-impl-2.25.3.jar">
3103+
<sha256 value="f835ac2bf1a895d5e687b4ebf238bff05316dd672e572dff235024b6e320bcc9" origin="Generated by Gradle"/>
3104+
</artifact>
3105+
</component>
3106+
<component group="org.apache.logging.log4j" name="log4j-to-slf4j" version="2.25.3">
3107+
<artifact name="log4j-to-slf4j-2.25.3.jar">
3108+
<sha256 value="90a09280390c54a28ac1514ded7c5293f3fe62f4448bf371b4e2415272e67a3d" origin="Generated by Gradle"/>
3109+
</artifact>
3110+
</component>
29963111
<component group="org.apache.logging.log4j" name="log4j-jcl" version="2.19.0">
29973112
<artifact name="log4j-jcl-2.19.0.jar">
29983113
<sha256 value="47f768ffd66107a66f0c2a19445ab1e42ce6719a7f30f9aa9ef96157c83949fd" origin="Generated by Gradle"/>

0 commit comments

Comments
 (0)