Search Gradle plugins

Captures Gradle dependency downloads via BuildOperationListener and emits a Flathub-compliant flatpak-sources.json for offline Flatpak builds.

• #flatpak
• #flathub
• #offline
• #maven
• #dependencies
• #linux
• #packaging

Adds a checkBomAlignment task that fails the build if the BOM's transitive graph requests any org.openrewrite.* or io.moderne.* dependency at more than one version. Hooks into the check lifecycle and any AbstractPublishToMaven task.

• #rewrite
• #refactoring
• #bom

github-gradle implements an way to get dependencies from an the github assets, so you don't need services like jitpack anymore

• #github
• #dependency
• #jar
• #jitpack

Adds Groovy and Spock dependencies to the project

• #groovy
• #spock

Scans Gradle dependencies and Docker base images with Trivy, auto-pins vulnerable versions, and commits fixes locally. Prerequisites: trivy, jq, tar. Install with: apt install -y jq tar curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.72.0 Added tasks: gradleSecurityFix, baseImageSecurityFix (group: security). Both commit fixes to a local branch security/auto-fixes-YYYY-MM-DD. Push the branch and open a PR manually to apply the fixes.

• #security
• #trivy
• #cve
• #vulnerability
• #dependencies
• #docker

Settings-level plugin applied in settings.gradle. Configures dependency resolution management with mavenLocal(), mavenCentral(), and an optional private stano-maven repository. Configures local build cache and optional S3 remote build cache (enabled via STANO_BUILD_CACHE_TYPE=s3; configured via STANO_BUILD_CACHE_S3_* variables). Pins the Kotlin JVM plugin to a fixed version and self-pins all com.stano plugins to the version bundled with this plugin. Exposes a buildCacheSettings DSL to customize the S3 cache key prefix.

• #convention
• #settings
• #dependency-management

Embeds an npm build's output into a Java jar's resources. Extends com.stano.npm (auto-applied) with an npmAssemble task that copies the npm dist output into build/resources/main/public. When the java plugin is also applied, jar depends on npmAssemble and test depends on npmTest.

• #convention
• #npm
• #node
• #frontend

Plugin to check for dependency updates from version catalog

• #dependencies
• #update
• #version-catalog

Compact, constraint-friendly lockfiles for your dependencies

• #versions

Compact, constraint-friendly lockfiles for your dependencies

• #versions