Merge branch '23-dependency-verification' into 'main'

Enable gradle built-in dependency verification

Closes #23

See merge request !157

.gitlab-ci.yml

@@ -29,6 +29,12 @@ test:
     paths:
       - .gradle/wrapper
       - .gradle/caches
+  artifacts:
+    name: "${CI_PROJECT_PATH}_${CI_JOB_STAGE}_${CI_COMMIT_REF_NAME}_${CI_COMMIT_SHA}"
+    paths:
+      - build/reports
+    expire_in: 3 days
+    when: on_failure
   rules:
     - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
       when: always

gradle.properties

 android.useAndroidX=true
 org.gradle.jvmargs=-Xmx1g
+org.gradle.dependency.verification.console=verbose

update-dependency-verification.sh

+#!/bin/bash
+set -e
+
+# do not clear metadata file because of https://github.com/gradle/gradle/issues/19228
+
+# calculating new checksums for all tasks usually need (add if missing)
+./gradlew --write-verification-metadata sha256 check lint connectedCheck