feat(build): enable buildscript dependency locking

build.gradle

@@ -12,6 +12,9 @@ buildscript {
         classpath("org.springframework.boot:spring-boot-gradle-plugin:${springBootGradlePluginVersion}")
         classpath("com.google.protobuf:protobuf-gradle-plugin:${protobufGradleVersion}")
     }
+    configurations.classpath {
+        resolutionStrategy.activateDependencyLocking()
+    }
 }
 
 plugins {

buildscript-gradle.lockfile

@@ -0,0 +1,84 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.fasterxml.jackson.core:jackson-annotations:2.14.2=classpath
+com.fasterxml.jackson.core:jackson-core:2.14.2=classpath
+com.fasterxml.jackson.core:jackson-databind:2.14.2=classpath
+com.fasterxml.jackson.module:jackson-module-parameter-names:2.14.2=classpath
+com.fasterxml.jackson:jackson-bom:2.14.2=classpath
+com.github.spotbugs.snom:spotbugs-gradle-plugin:5.0.13=classpath
+com.github.spotbugs:com.github.spotbugs.gradle.plugin:5.0.13=classpath
+com.github.zafarkhaja:java-semver:0.9.0=classpath
+com.google.code.findbugs:jsr305:3.0.2=classpath
+com.google.gradle:osdetector-gradle-plugin:1.7.3=classpath
+com.google.protobuf:protobuf-gradle-plugin:0.9.3=classpath
+com.googlecode.javaewah:JavaEWAH:1.1.12=classpath
+com.jcraft:jsch.agentproxy.connector-factory:0.0.7=classpath
+com.jcraft:jsch.agentproxy.core:0.0.7=classpath
+com.jcraft:jsch.agentproxy.pageant:0.0.7=classpath
+com.jcraft:jsch.agentproxy.sshagent:0.0.7=classpath
+com.jcraft:jsch.agentproxy.svnkit-trilead-ssh2:0.0.7=classpath
+com.jcraft:jsch.agentproxy.usocket-jna:0.0.7=classpath
+com.jcraft:jsch.agentproxy.usocket-nc:0.0.7=classpath
+com.jcraft:jzlib:1.1.2=classpath
+com.netflix.nebula.project:com.netflix.nebula.project.gradle.plugin:10.0.1=classpath
+com.netflix.nebula:gradle-contacts-plugin:6.0.0=classpath
+com.netflix.nebula:gradle-dependency-lock-plugin:12.4.1=classpath
+com.netflix.nebula:gradle-info-plugin:11.4.1=classpath
+com.netflix.nebula:gradle-lint-plugin:17.7.1=classpath
+com.netflix.nebula:gradle-scm-plugin:6.0.0=classpath
+com.netflix.nebula:nebula-dependencies-comparison:0.2.1=classpath
+com.netflix.nebula:nebula-gradle-interop:2.0.0=classpath
+com.netflix.nebula:nebula-project-plugin:10.0.1=classpath
+com.netflix.nebula:nebula-publishing-plugin:18.3.0=classpath
+com.netflix.nebula:nebula-release-plugin:17.1.0=classpath
+com.perforce:p4java:2015.2.1365273=classpath
+com.squareup.moshi:moshi:1.12.0=classpath
+com.squareup.okio:okio:2.10.0=classpath
+com.trilead:trilead-ssh2:1.0.0-build220=classpath
+de.regnis.q.sequence:sequence-library:1.0.3=classpath
+io.franzbecker.gradle-lombok:io.franzbecker.gradle-lombok.gradle.plugin:5.0.0=classpath
+io.franzbecker:gradle-lombok:5.0.0=classpath
+io.spring.gradle:dependency-management-plugin:1.1.3=classpath
+javax.inject:javax.inject:1=classpath
+joda-time:joda-time:2.10=classpath
+kr.motd.maven:os-maven-plugin:1.7.1=classpath
+nebula.lint:nebula.lint.gradle.plugin:17.7.1=classpath
+nebula.release:nebula.release.gradle.plugin:17.1.0=classpath
+net.java.dev.jna:jna-platform:5.7.0=classpath
+net.java.dev.jna:jna:5.7.0=classpath
+net.java.dev.jna:platform:3.4.0=classpath
+org.ajoberstar.grgit:grgit-core:4.1.1=classpath
+org.antlr:antlr-runtime:3.4=classpath
+org.antlr:antlr4-runtime:4.7.2=classpath
+org.apache.commons:commons-compress:1.21=classpath
+org.apache.commons:commons-lang3:3.8.1=classpath
+org.apache.httpcomponents.client5:httpclient5:5.2.1=classpath
+org.apache.httpcomponents.core5:httpcore5-h2:5.2=classpath
+org.apache.httpcomponents.core5:httpcore5:5.2=classpath
+org.apache.maven:maven-artifact:3.8.3=classpath
+org.apache.maven:maven-builder-support:3.8.3=classpath
+org.apache.maven:maven-model-builder:3.8.3=classpath
+org.apache.maven:maven-model:3.8.3=classpath
+org.codehaus.gpars:gpars:1.2.1=classpath
+org.codehaus.jsr166-mirror:jsr166y:1.7.0=classpath
+org.codehaus.plexus:plexus-interpolation:1.26=classpath
+org.codehaus.plexus:plexus-utils:3.3.0=classpath
+org.eclipse.jgit:org.eclipse.jgit:5.13.0.202109080827-r=classpath
+org.eclipse.sisu:org.eclipse.sisu.inject:0.3.5=classpath
+org.jetbrains.kotlin:kotlin-stdlib-common:1.5.31=classpath
+org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.5.31=classpath
+org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.5.31=classpath
+org.jetbrains.kotlin:kotlin-stdlib:1.5.31=classpath
+org.jetbrains:annotations:13.0=classpath
+org.multiverse:multiverse-core:0.7.0=classpath
+org.slf4j:slf4j-api:1.7.36=classpath
+org.springframework.boot:spring-boot-buildpack-platform:3.1.4=classpath
+org.springframework.boot:spring-boot-gradle-plugin:3.1.4=classpath
+org.springframework.boot:spring-boot-loader-tools:3.1.4=classpath
+org.springframework:spring-core:6.0.12=classpath
+org.springframework:spring-jcl:6.0.12=classpath
+org.tmatesoft.sqljet:sqljet:1.1.10=classpath
+org.tmatesoft.svnkit:svnkit:1.8.12=classpath
+org.tomlj:tomlj:1.0.0=classpath
+empty=

gradle/verification-metadata.xml

@@ -9,6 +9,7 @@
       </trusted-artifacts>
       <ignored-keys>
          <ignored-key id="74dafdfd6dae2441" reason="Key couldn't be downloaded from any key server"/>
+         <ignored-key id="8d7f1bec1e2ecae7" reason="Key couldn't be downloaded from any key server"/>
       </ignored-keys>
       <trusted-keys>
          <trusted-key id="015479e1055341431b4545ab72475fd306b9cab7" group="com.googlecode.javaewah" name="JavaEWAH" version="1.1.12"/>