Hansel & Gradel?

Gradle is an open-source build automation tool focused on flexibility and performance. Gradle build scripts are written using a Groovy or Kotlin DSL.
https://gradle.org

Adaptable, fast automation for all
https://github.com/gradle/gradle
5,321 forks.
18,754 stars.
3,488 open issues.

Recent commits:

Check that the IDEA project SDK supports the project language level (#38722), GitHub
Allow source dependencies to be resolved when CC is degraded (#38659), GitHub
Update project JDK to 25 in IDEA config (#38721), GitHub
Check that the IDEA project SDK supports the project language level.idea/misc.xml is committed on purpose (see .gitignore, which whitelistsit next to codeStyles and inspectionProfiles), and its ProjectRootManagercomponent carries two values that have to agree: the project languagelevel and the name of the project SDK.Only one of them maintains itself. IntelliJ derives languageLevel fromthe Gradle model and rewrites the file on sync, which is how it arrivedat JDK_25 in c83961e9112 and why that commit was made at all – anuncommitted value produces a dirty working tree for every developer afterevery import. project-jdk-name is not derived: it is a reference into thedeveloper's global SDK table, keyed by a free-form name, so nothing inthe Gradle model can supply it and IntelliJ leaves it alone.The result is drift in one direction only. c83961e9112 raised thelanguage level to 25 and left the SDK pointing at 17, and the repositorystayed in a state where importing it reported "Module JDK ismisconfigured" until 1bb2f7ced74 corrected the SDK by hand, three weekslater. Nothing in the build noticed.Add a checkIdeaJdkConfiguration task that fails when the committed SDKcannot support the committed language level, and wire it intosanityCheck so the drift surfaces as a build failure rather than as abroken IDE import. Because project-jdk-name is a label and not a version,the task infers a version from it by convention and skips the comparisonwhen it cannot, rather than failing developers whose SDK happens to benamed something like "temurin-25".Two deliberate limitations: – The task compares the two values in misc.xml against each other rather than against gradle/gradle-daemon-jvm.properties, which would be the more obvious source of truth for "the JDK this build uses". That file is not usable here: Gradleception overwrites it with `echo 'toolchainVersion=<major>' > …` whenever its build JVM differs from BuildToolBuildJvm, and then runs sanityCheck in the same checkout. GradleceptionWithMaxJdk does exactly that (Java 26 against a build tool JVM of 25), so keying the check off that file would fail that build on every run. – Consequently the task does not catch both values drifting downwards together. Since IntelliJ maintains languageLevel from the Gradle model, that state is unlikely and corrects itself on the next sync, whereas a stale project-jdk-name does not., Christoph Obexer
Extract createSecureDocumentBuilder into build logic basicsBuild logic parses XML in several places and cannot useorg.gradle.internal.xml.XmlFactories for it, because that class lives in:base-services, i.e. in the distribution this build produces rather thanin the build logic that produces it.AbstractVersionsUpdateTask therefore grew its own hardened factory, whichis in fact stricter than XmlFactories: besides FEATURE_SECURE_PROCESSINGit disallows doctype declarations outright and denies access to externalgeneral entities, parameter entities, DTDs and schemas. That is thebehaviour build logic should get everywhere it parses XML, so leaving itas a protected method on one task base class means the next caller eitherreaches for a bare DocumentBuilderFactory.newInstance() or copies eightlines of security-sensitive configuration.Move it verbatim to gradlebuild:basics, which every build logic modulealready depends on, and have AbstractVersionsUpdateTask's only subclasscall site import it directly. No behaviour change: the factoryconfiguration and the resulting DocumentBuilder are identical., Christoph Obexer

Check it out!

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

Linux Shtuff

Was this post helpful?

Leave a Reply Cancel reply

Recent Posts

Archives

Meta