Merge pull request #599 from rundeck/upgrade-gradle-8

Upgrade to Gradle 8.11.1 to fix PGP verification issues

Author: fdevans

README.md

@@ -56,21 +56,21 @@ rundeck-cli-VERS-all.jar (shadowed jar)
 
     ./gradlew build
 
-## Build Lenient
+## Update Dependency Verification
 
-Build with lenient mode dependency verification
+Dependency verification is automatically updated by Renovate when dependencies change.
 
-	./gradlew build --dependency-verification lenient
+**If you manually update a dependency**, you must regenerate verification metadata:
 
-## Write Dependency Verification
+    ./gradlew --write-verification-metadata pgp,sha256 --export-keys help
 
-Update dependency verification metadata and export any new keys.
+This updates both `gradle/verification-metadata.xml` (trusted keys) and `gradle/verification-keyring.keys` (PGP keyring). Commit both files.
 
-    ./gradlew --write-verification-metadata sha256 --refresh-dependencies help
-    ./gradlew --write-verification-metadata pgp,sha256 --refresh-keys --export-keys --refresh-dependencies help
-    rm gradle/verification-keyring.gpg
-    git add gradle/verification-metadata.xml
-    git add gradle/verification-keyring.keys
+## Refresh Dependency Verification Keys
+
+After a failed build.
+
+    ./gradlew --write-verification-metadata pgp,sha256 --refresh-keys --export-keys help
 
 ## Install Locally
 

gradle/libs.versions.toml

@@ -9,8 +9,8 @@ groovy = "3.0.25"
 spock = "2.1-groovy-3.0"
 axion = "1.15.5"
 nexusPublish = "1.3.0"
-shadow = "7.1.2"
-ospackage = "9.1.1"
+shadow = "8.1.1"
+ospackage = "11.11.2"
 buildInfo = "0.9"
 buildConfig = "3.1.0"
 jacksonDatabind = "2.19.2"
@@ -65,6 +65,6 @@ rundeckAuthz = ["rundeckAuthzCore", "rundeckAuthzApi", "rundeckAuthzYaml"]
 axion = { id = "pl.allegro.tech.build.axion-release", version.ref = "axion" }
 nexusPublish = { id = "io.github.gradle-nexus.publish-plugin", version.ref = "nexusPublish" }
 shadow = { id = "com.github.johnrengelman.shadow", version.ref = "shadow" }
-ospackage = { id = "nebula.ospackage", version.ref = "ospackage" }
+ospackage = { id = "com.netflix.nebula.ospackage", version.ref = "ospackage" }
 buildInfo = { id = "org.dvaske.gradle.git-build-info", version.ref = "buildInfo" }
 buildConfig = { id = 'com.github.gmazzo.buildconfig', version.ref = "buildConfig" }