Committed Gradle wrappers do not validate with the official GitHub Action

[sschuberth]

Expected Behavior

All gradle-wrapper.jar files commit to this repository, e.g. kotlin-dsl-samples/samples/multi-kotlin-project/gradle/wrapper/gradle-wrapper.jar, should validate with the official GitHub Action, see https://blog.gradle.org/gradle-wrapper-checksum-verification-github-action.

Current Behavior

At least kotlin-dsl-samples/samples/multi-kotlin-project/gradle/wrapper/gradle-wrapper.jar does not pass validation.

Context

We are using multi-kotlin-project as a Git submodule in a project that uses the GitHub Action to validate all Gradle wrappers.

I'm not sure whether the fix is to update the wrapper JARs, or to add their SHA-256 hashes as valid, but in any case I'd appreciate if this could be fixed.

[sschuberth]

or to add their SHA-256 hashes as valid

That probably depends on gradle/wrapper-validation-action#8.

[JLLeitschuh]

I'm guessing that you are probably right. @eskatos @bamboo, can we transition our samples in that repository to always use non-snapshot versions, or is it not a safe assumption that we won't ever use snapshot versions in that repository?

[eskatos]

Yes. PR updating the wrappers and adding the wrapper validation action #1399

[eskatos]

PR merged, closing