From 77e5f077f37ad9c9eeb5e7d6d94a89c3732ef207 Mon Sep 17 00:00:00 2001 From: Vyacheslav Gerasimov Date: Fri, 16 Jun 2023 14:06:32 +0200 Subject: [PATCH] Update `Dependency verification` section in ReadMe.md --- ReadMe.md | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/ReadMe.md b/ReadMe.md index 0c7131c84d0..9cf07e718f4 100644 --- a/ReadMe.md +++ b/ReadMe.md @@ -133,16 +133,17 @@ to perform such updates: - Use auto-generation for getting an initial list of new hashes (verify updates relate to you changes). ```bash -./gradlew -i --write-verification-metadata sha256,md5 -Pkotlin.native.enabled=true help +./gradlew -i --write-verification-metadata sha256,md5 -Pkotlin.native.enabled=true resolveDependencies ``` -*(any other task may be used instead of `help`)* +*(`resolveDependencies` task resolves dependencies for all platforms including dependencies downloaded by plugins)* - Consider removing old versions from the file if you are updating dependencies. - Leave meaningful `origin` attribute (instead of `Generated by Gradle`) if you did some manual verification of the artifact. - Always do manual verification if several hashes are needed, and a new `also-trust` tag has to be added. -- If you’re adding a dependency with OS mentioning in an artifact name (`darwin`, `mac`, `osx`, `linux`, `windows`), remember to add - counterparts for other platforms. +- If you’re adding a dependency with OS mentioning in an artifact name (`darwin`, `mac`, `osx`, `linux`, `windows`), remember to add them to + `implicitDependencies` configuration or update `resolveDependencies` task if needed. `resolveDependencies` should resolve all dependencies + including dependencies for different platforms. ## Using -dev and -SNAPSHOT versions