Update Dependency verification section in ReadMe.md

This commit is contained in:
Vyacheslav Gerasimov
2023-06-16 14:06:32 +02:00
committed by Space Team
parent 5df50c0fca
commit 77e5f077f3
+5 -4
View File
@@ -133,16 +133,17 @@ to perform such updates:
- Use auto-generation for getting an initial list of new hashes (verify updates relate to you changes).
```bash
./gradlew -i --write-verification-metadata sha256,md5 -Pkotlin.native.enabled=true help
./gradlew -i --write-verification-metadata sha256,md5 -Pkotlin.native.enabled=true resolveDependencies
```
*(any other task may be used instead of `help`)*
*(`resolveDependencies` task resolves dependencies for all platforms including dependencies downloaded by plugins)*
- Consider removing old versions from the file if you are updating dependencies.
- Leave meaningful `origin` attribute (instead of `Generated by Gradle`) if you did some manual verification of the artifact.
- Always do manual verification if several hashes are needed, and a new `also-trust` tag has to be added.
- If youre adding a dependency with OS mentioning in an artifact name (`darwin`, `mac`, `osx`, `linux`, `windows`), remember to add
counterparts for other platforms.
- If youre adding a dependency with OS mentioning in an artifact name (`darwin`, `mac`, `osx`, `linux`, `windows`), remember to add them to
`implicitDependencies` configuration or update `resolveDependencies` task if needed. `resolveDependencies` should resolve all dependencies
including dependencies for different platforms.
## Using -dev and -SNAPSHOT versions