All gradle-wrapper.jar files commit to this repository, e.g. kotlin-dsl-samples/samples/multi-kotlin-project/gradle/wrapper/gradle-wrapper.jar, should validate with the official GitHub Action, see https://blog.gradle.org/gradle-wrapper-checksum-verification-github-action.
At least kotlin-dsl-samples/samples/multi-kotlin-project/gradle/wrapper/gradle-wrapper.jar does not pass validation.
We are using multi-kotlin-project as a Git submodule in a project that uses the GitHub Action to validate all Gradle wrappers.
I'm not sure whether the fix is to update the wrapper JARs, or to add their SHA-256 hashes as valid, but in any case I'd appreciate if this could be fixed.
or to add their SHA-256 hashes as valid
That probably depends on https://github.com/gradle/wrapper-validation-action/issues/8.
I'm guessing that you are probably right. @eskatos @bamboo, can we transition our samples in that repository to always use non-snapshot versions, or is it not a safe assumption that we won't ever use snapshot versions in that repository?
Yes. PR updating the wrappers and adding the wrapper validation action #1399
PR merged, closing
Most helpful comment
Yes. PR updating the wrappers and adding the wrapper validation action #1399