From c238db058a957cc9e44296bf86913c690fe38a19 Mon Sep 17 00:00:00 2001 From: Jamie Tanna <jamie.tanna@elastic.co> Date: Thu, 14 Nov 2024 14:49:34 +0000 Subject: [PATCH] docs(gradle): correct requirements to process verification-metadata (#32534) --- lib/modules/manager/gradle/readme.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/modules/manager/gradle/readme.md b/lib/modules/manager/gradle/readme.md index 5cd0635a83..118a958d50 100644 --- a/lib/modules/manager/gradle/readme.md +++ b/lib/modules/manager/gradle/readme.md @@ -11,7 +11,7 @@ As the output of these commands can be very large, any text other than errors (i ### Dependency verification -If Renovate finds a `gradle/verification-metadata.xml` file, it updates the content by using the `gradle --write-verification-metadata <hashTypes> dependencies` command. +If Renovate finds a `gradle/verification-metadata.xml` file and either `<verify-metadata>true</verify-metadata>` or `<verify-signatures>true</verify-signatures>` (or both), it updates the content by using the `gradle --write-verification-metadata <hashTypes> dependencies` command. Renovate will check the file for existing hash types (like `sha256`) and use them as `<hashTypes>`. <!-- prettier-ignore --> -- GitLab