add verification-metadata.xml file to verify vlcj artifacts (#4159)

Update kotlin and dependencies and add verification-metadata.xml file to
verify vlcj artifacts

---------

Co-authored-by: Igor Demin <igor.demin@jetbrains.com>

experimental/components/VideoPlayer/library/build.gradle.kts

@@ -18,7 +18,7 @@ kotlin {
         }
         named("desktopMain") {
             dependencies {
-                implementation("uk.co.caprica:vlcj:4.7.0")
+                implementation("uk.co.caprica:vlcj:4.8.2")
             }
         }
     }

experimental/components/VideoPlayer/library/src/commonMain/kotlin/org/jetbrains/compose/videoplayer/VideoPlayer.kt

@@ -31,6 +31,7 @@ fun VideoPlayer(
     onFinish = onFinish
 )
 
+@Composable
 internal expect fun VideoPlayerImpl(
     url: String,
     isResumed: Boolean,

experimental/components/build.gradle.kts

@@ -1,27 +1,11 @@
-buildscript {
+plugins {
-    val composeVersion = property("compose.version")
+    kotlin("multiplatform").apply(false)
-
+    id("org.jetbrains.compose").apply(false)
-    repositories {
-        google()
-        mavenCentral()
-        maven("https://maven.pkg.jetbrains.space/public/p/compose/dev")
-    }
-
-    dependencies {
-        classpath("org.jetbrains.compose:compose-gradle-plugin:$composeVersion")
-        classpath(kotlin("gradle-plugin", version = "1.5.31"))
-    }
 }
 
 subprojects {
     version = findProperty("deploy.version") ?: property("compose.version")!!
 
-    repositories {
-        google()
-        mavenCentral()
-        maven("https://maven.pkg.jetbrains.space/public/p/compose/dev")
-    }
-
     plugins.withId("java") {
         configureIfExists<JavaPluginExtension> {
             sourceCompatibility = JavaVersion.VERSION_11

experimental/components/gradle.properties

@@ -1,5 +1,8 @@
-org.gradle.jvmargs=-Xmx2048m -Dfile.encoding=UTF-8
+org.gradle.jvmargs=-Xmx2048M -Dfile.encoding=UTF-8 -Dkotlin.daemon.jvm.options\="-Xmx2048M"
-android.useAndroidX=true
+org.gradle.caching=true
-android.enableJetifier=true
+org.gradle.configuration-cache=true
+
+compose.version=1.5.11
+kotlin.version=1.9.21
+
 kotlin.code.style=official
-compose.version=1.0.0

experimental/components/gradle/verification-metadata.xml

@@ -0,0 +1,67 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<verification-metadata xmlns="https://schema.gradle.org/dependency-verification" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="https://schema.gradle.org/dependency-verification https://schema.gradle.org/dependency-verification/dependency-verification-1.3.xsd">
+   <configuration>
+      <verify-metadata>true</verify-metadata>
+      <verify-signatures>true</verify-signatures>
+      <ignored-keys>
+         <ignored-key id="4A3DA032DA2BBE01" reason="vlcj key is not certified with a trusted signature"/>
+      </ignored-keys>
+      <trusted-keys>
+         <trusted-key id="1BD97A6A154E7810EE0BC832E2F38302C8075E3D" group="org.gradle.kotlin" name="gradle-kotlin-dsl-plugins" version="4.2.1"/>
+         <trusted-key id="20723A6399BC060154283B37CFAE163B64AC9189" group="^org[.]jetbrains($|([.].*))" regex="true"/>
+         <trusted-key id="2E3A1AFFE42B5F53AF19F780BCF4173966770193" group="org.jetbrains" name="annotations" version="13.0"/>
+         <trusted-key id="33FD4BFD33554634053D73C0C2148900BCD3C2AF" group="org.jetbrains" name="annotations" version="23.0.0"/>
+         <trusted-key id="6F538074CCEBF35F28AF9B066A0975F8B1127B83" group="org.jetbrains.kotlin"/>
+         <trusted-key id="8756C4F765C9AC3CB6B85D62379CE192D401AB61" group="org.jetbrains.intellij.deps" name="trove4j" version="1.0.20200330"/>
+         <trusted-key id="E7DC75FC24FB3C8DFE8086AD3D5839A2262CBBFB" group="org.jetbrains.kotlinx"/>
+         <trusted-key id="FA7929F83AD44C4590F6CC6815C71C0A4E0B8EDD" group="net.java.dev.jna"/>
+      </trusted-keys>
+   </configuration>
+   <components>
+      <component group="org.gradle.kotlin.kotlin-dsl" name="org.gradle.kotlin.kotlin-dsl.gradle.plugin" version="4.2.1">
+         <artifact name="org.gradle.kotlin.kotlin-dsl.gradle.plugin-4.2.1.pom">
+            <sha256 value="311ff9eca17b0f6c9cc8104ebb88c73d38a4985a0488b01670bc2be09e5a2320" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
+      <component group="org.jetbrains.compose" name="compose-gradle-plugin" version="1.5.11">
+         <artifact name="compose-gradle-plugin-1.5.11.jar">
+            <ignored-keys>
+               <ignored-key id="20723A6399BC060154283B37CFAE163B64AC9189" reason="PGP verification failed"/>
+            </ignored-keys>
+            <sha256 value="d54be424f035dd452f2317b56ed54e0080135bed1936fc84f7371f59b9e9edea" origin="Generated by Gradle" reason="PGP signature verification failed!"/>
+         </artifact>
+         <artifact name="compose-gradle-plugin-1.5.11.module">
+            <ignored-keys>
+               <ignored-key id="20723A6399BC060154283B37CFAE163B64AC9189" reason="PGP verification failed"/>
+            </ignored-keys>
+            <sha256 value="e74b7aedc30d01e7b8e3d53280b5a67e168b3cd44632e340f094560e8364c7f5" origin="Generated by Gradle" reason="PGP signature verification failed!"/>
+         </artifact>
+      </component>
+      <component group="org.jetbrains.compose" name="org.jetbrains.compose.gradle.plugin" version="1.5.11">
+         <artifact name="org.jetbrains.compose.gradle.plugin-1.5.11.pom">
+            <sha256 value="0915dc92e751288db3b6ced9b24d4c786f940e68a1d7fff4a0ce151d5f19fbc4" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
+      <component group="org.jetbrains.kotlin.multiplatform" name="org.jetbrains.kotlin.multiplatform.gradle.plugin" version="1.9.21">
+         <artifact name="org.jetbrains.kotlin.multiplatform.gradle.plugin-1.9.21.pom">
+            <sha256 value="4c7095d560a1c73dcff7b4d4d3b58a3ba5e895d10075f8fde24b7d6b300d6856" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
+      <component group="uk.co.caprica" name="vlcj" version="4.8.2">
+         <artifact name="vlcj-4.8.2.jar">
+            <sha256 value="304d585e780be8765baa4fa83b376c21920789f9e570aecf888912d40eedabb5" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+         <artifact name="vlcj-4.8.2.pom">
+            <sha256 value="ef72f58a845a737e948b015213db48b69f9c5137f73b507cfd978e545c5b2009" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+      </component>
+      <component group="uk.co.caprica" name="vlcj-natives" version="4.8.1">
+         <artifact name="vlcj-natives-4.8.1.jar">
+            <sha256 value="f47cef91dfdf335611b6d11945c9d1794e85811b3884c1fd31f9ed76ab19da50" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+         <artifact name="vlcj-natives-4.8.1.pom">
+            <sha256 value="a676774073e4ee3d782e47129679877f7d7c0ae72e9dd4b04025d56672292edc" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+         </artifact>
+      </component>
+   </components>
+</verification-metadata>

experimental/components/gradle/wrapper/gradle-wrapper.properties

@@ -1,5 +1,5 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-7.1.1-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.5-bin.zip
 zipStoreBase=GRADLE_USER_HOME
 zipStorePath=wrapper/dists

experimental/components/settings.gradle.kts

@@ -1,2 +1,22 @@
+pluginManagement {
+    repositories {
+        google()
+        gradlePluginPortal()
+        mavenCentral()
+    }
+
+    plugins {
+        kotlin("multiplatform").version(extra["kotlin.version"] as String)
+        id("org.jetbrains.compose").version(extra["compose.version"] as String)
+    }
+}
+
+dependencyResolutionManagement {
+    repositories {
+        google()
+        mavenCentral()
+    }
+}
+
 include(":VideoPlayer:library")
 include(":VideoPlayer:demo")