Daniel Chao 07c68239b9 Remove lockfiles, manage Gradle dependencies with Dependabot (#1535) ...

Dependabot currently does not update lockfiles in multi-module projects
(see https://github.com/dependabot/dependabot-core/issues/14633)

To work around this issue, we will simply remove our lockfiles, and
change our version catalog to use fully specified versions.
The removal of lockfiles introduces two issues:

1. It is less visible what our dependency graph is
2. Our builds are potentially non-reproducible

To work around this, two mitigations are in place:

1. Enable `failOnDynamicVersions()`, which causes Gradle to fail the
build if any dependencies declare a version range
2. Enable GitHub dependency submission, which provides insight into the
project SBOM

2026-04-20 09:29:33 -07:00

..

src

Upgrade JVM toolchain to 25 and Kotlin toolchain to 2.3.20 (#1516)

2026-04-14 11:57:09 -07:00

pkl-doc.gradle.kts

Fix dependency scopes (#1534)

2026-04-20 08:54:49 -07:00