Search Gradle plugins

Generates a Maven POM file for the bundled Umbrella AAR, accurately reflecting resolved Android dependencies from Kotlin Multiplatform projects and supporting advanced exclusion scenarios.

• #kmp
• #kotlin-multiplatform
• #android
• #aar
• #pom
• #maven
• #dependency-management
• #gradle-plugin
• #multiplatform

Bundles multiple Android modules—including those from Kotlin Multiplatform projects—into a single AAR for easier distribution. Supports module exclusion, dependency extraction, and source merging for Android targets.

• #kmp
• #kotlin-multiplatform
• #android
• #aar
• #bundle
• #multimodule
• #dependency-management
• #distribution
• #gradle-plugin

Adds a checkBomAlignment task that fails the build if the BOM's transitive graph requests any org.openrewrite.* or io.moderne.* dependency at more than one version. Hooks into the check lifecycle and any AbstractPublishToMaven task.

• #rewrite
• #refactoring
• #bom

Compact, constraint-friendly lockfiles for your dependencies

• #versions

Compact, constraint-friendly lockfiles for your dependencies

• #versions

Ensure Jakarta EE dependencies are at versions with the 'jakarta' namespace, or force them back to Java EE dependencies with the 'javax' namespace

• #versions

Captures Gradle dependency downloads via BuildOperationListener and emits a Flathub-compliant flatpak-sources.json for offline Flatpak builds.

• #flatpak
• #flathub
• #offline
• #maven
• #dependencies
• #linux
• #packaging

github-gradle implements an way to get dependencies from an the github assets, so you don't need services like jitpack anymore

• #github
• #dependency
• #jar
• #jitpack

Adds Groovy and Spock dependencies to the project

• #groovy
• #spock

Scans Gradle dependencies and Docker base images with Trivy, auto-pins vulnerable versions, and commits fixes locally. Prerequisites: trivy, jq, tar. Install with: apt install -y jq tar curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.72.0 Added tasks: gradleSecurityFix, baseImageSecurityFix (group: security). Both commit fixes to a local branch security/auto-fixes-YYYY-MM-DD. Push the branch and open a PR manually to apply the fixes.

• #security
• #trivy
• #cve
• #vulnerability
• #dependencies
• #docker