How to Fix Gradle Dependency Verification With Renovate

My current company has settled on using Gradle. It doesn't make me very happy, but you need to learn to work with constraints. Plus, I must admit that the developers who actually implemented the build files did a pretty good job overall: they used Kotlin instead of Groovy, they moved code to regular plugins, etc.

This week, I worked on improvements to a new project and set up Renovate. Renovate is similar to Dependabot in that it checks for new versions of your dependencies and automatically creates PRs for you. However, I quickly noticed that merges of new dependency versions failed the build. Here's the full story on why, and how I fixed the issue.

Supply chain hardening

In the last few years, one of the big issues in the IT world has been supply chain attacks. Depending on others' work isn't a new thing:

The woolen coat, for...

Copyright of this story solely belongs to hackernoon.com. To see the full text click HERE