WIP: merge queue: checking main (`6775127`) and #450 together #453

Closed

mergify[bot] wants to merge 2 commits from mergify/merge-queue/b3a6cad10f into main

Author	SHA1	Message	Date
Mergify	4c671b74c3	Merge of #450	2026-07-08 17:39:52 +00:00
JMR-dev	7a0cc3145c	ci(gradle): pin Gradle distribution against published SHA-256 The Gradle wrapper had no distributionSha256Sum, so the Gradle 9.6.0 distribution was the one unpinned download in CI (validateDistributionUrl only checks the URL shape, not content). Pin it to Gradle's published SHA-256 so the wrapper fails closed on any corrupt/tampered distribution, matching the SHA-256 integrity pin cmdline-tools already gets (#389).	2026-07-08 12:05:00 -05:00

Author

SHA1

Message

Date

Mergify

4c671b74c3

Merge of #450

2026-07-08 17:39:52 +00:00

JMR-dev

7a0cc3145c

ci(gradle): pin Gradle distribution against published SHA-256

The Gradle wrapper had no distributionSha256Sum, so the Gradle 9.6.0
distribution was the one unpinned download in CI (validateDistributionUrl
only checks the URL shape, not content). Pin it to Gradle's published
SHA-256 so the wrapper fails closed on any corrupt/tampered distribution,
matching the SHA-256 integrity pin cmdline-tools already gets (#389).

2026-07-08 12:05:00 -05:00

WIP: merge queue: checking main (6775127) and #450 together #453

WIP: merge queue: checking main (`6775127`) and #450 together #453