Try to get Keys for Thymeleaf related jars
Description
Environment
Confluence content
Activity
Done. Now build correctly and passed sig check
Also:
Move dependant versions up to 5.2
add a check-m2 stage
https://github.com/attoparser/attoparser-org/blob/main/GPG-KEYS-attoparser.txt
https://github.com/unbescape/unbescape-org/blob/main/GPG-KEYS-unbescape.txt
Slightly weird indirection but there you go
Took a while, but:
https://github.com/thymeleaf/thymeleaf-org/blob/main/GPG-KEYS-thymeleaf.txt
https://github.com/thymeleaf/attoparser-org/blob/main/GPG-KEYS-attoparser.txt
https://github.com/thymeleaf/unbescape-org/blob/main/GPG-KEYS-unbescape.txt
That might leave only 1 or 2 artifacts left for us to deal with, not too bad.
No response for two weeks from the Thymeleaf offer, so doesn’t bode terribly well.
Expected signer for OGNL, filed request with that project to have them posted. Keys posted:
https://github.com/orphan-oss/ognl/blob/master/KEYS
Added to ognl keyring (which I think in fact we don’t need).
Not a show stopped for the parent task but we need to do this sometime.
As per idp-2226 the issues appear to be
ognl : 3.3.4 No keyring for group ognl attoparser : 2.0.7.RELEASE No keyring for group org.attoparser javassist : 3.29.0-GA KeyId (0x164779204E106A76) not found in keyring for org.javassist thymeleaf : 3.1.2.RELEASE No keyring for group org.thymeleaf thymeleaf-spring6 : 3.1.2.RELEASE No keyring for group org.thymeleaf unbescape : 1.1.6.RELEASE No keyring for group org.unbescape