Use dependency locking for buildscript dependencies

Author: lukebemish

buildscript-gradle.lockfile

@@ -0,0 +1,27 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.fasterxml.woodstox:woodstox-core:7.1.0=classpath
+com.gradleup.shadow:com.gradleup.shadow.gradle.plugin:9.3.0=classpath
+com.gradleup.shadow:shadow-gradle-plugin:9.3.0=classpath
+commons-codec:commons-codec:1.20.0=classpath
+commons-io:commons-io:2.21.0=classpath
+org.apache.ant:ant-launcher:1.10.15=classpath
+org.apache.ant:ant:1.10.15=classpath
+org.apache.logging.log4j:log4j-api:2.25.2=classpath
+org.apache.logging.log4j:log4j-core:2.25.2=classpath
+org.apache.maven:maven-api-annotations:4.0.0-rc-3=classpath
+org.apache.maven:maven-api-xml:4.0.0-rc-3=classpath
+org.apache.maven:maven-xml:4.0.0-rc-3=classpath
+org.codehaus.plexus:plexus-utils:4.0.2=classpath
+org.codehaus.plexus:plexus-xml:4.1.0=classpath
+org.codehaus.woodstox:stax2-api:4.2.2=classpath
+org.jdom:jdom2:2.0.6.1=classpath
+org.jetbrains.kotlin:kotlin-metadata-jvm:2.3.0-RC2=classpath
+org.jetbrains.kotlin:kotlin-stdlib:2.3.0-RC2=classpath
+org.jetbrains:annotations:13.0=classpath
+org.ow2.asm:asm-commons:9.9=classpath
+org.ow2.asm:asm-tree:9.9=classpath
+org.ow2.asm:asm:9.9=classpath
+org.vafer:jdependency:2.14=classpath
+empty=

settings-gradle-buildscript.lockfile

@@ -0,0 +1,24 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+com.gradle.develocity:com.gradle.develocity.gradle.plugin:4.0.1=classpath
+com.gradle:develocity-gradle-plugin:4.0.1=classpath
+com.squareup.okhttp3:okhttp:4.12.0=classpath
+com.squareup.okio:okio-jvm:3.6.0=classpath
+com.squareup.okio:okio:3.6.0=classpath
+dev.lukebemish.central-portal-publishing:dev.lukebemish.central-portal-publishing.gradle.plugin:0.1.3=classpath
+dev.lukebemish.conventions:dev.lukebemish.conventions.gradle.plugin:0.2.0-beta.2=classpath
+dev.lukebemish.managedversioning:dev.lukebemish.managedversioning.gradle.plugin:2.0.0-beta.7=classpath
+dev.lukebemish:central-portal-publishing:0.1.3=classpath
+dev.lukebemish:conventions:0.2.0-beta.2=classpath
+dev.lukebemish:managedversioning:2.0.0-beta.7=classpath
+org.apache.commons:commons-lang3:3.12.0=classpath
+org.apache.commons:commons-text:1.10.0=classpath
+org.gradle.toolchains.foojay-resolver-convention:org.gradle.toolchains.foojay-resolver-convention.gradle.plugin:1.0.0=classpath
+org.gradle.toolchains:foojay-resolver:1.0.0=classpath
+org.jetbrains.kotlin:kotlin-stdlib-common:1.9.10=classpath
+org.jetbrains.kotlin:kotlin-stdlib-jdk7:1.9.10=classpath
+org.jetbrains.kotlin:kotlin-stdlib-jdk8:1.9.10=classpath
+org.jetbrains.kotlin:kotlin-stdlib:1.9.10=classpath
+org.jetbrains:annotations:13.0=classpath
+empty=

settings-gradle.lockfile

@@ -0,0 +1,5 @@
+# This is a Gradle generated file for dependency locking.
+# Manual edits can break the build and are not advised.
+# This file is expected to be part of source control.
+dev.lukebemish:conventions:0.2.0-beta.2=incomingCatalogForCLibs0
+empty=incomingCatalogForLibs0

settings.gradle

@@ -6,15 +6,31 @@ pluginManagement {
         }
     }
     plugins {
-        id 'com.gradleup.shadow' version '8.3.0'
-        id 'dev.lukebemish.central-portal-publishing' version '0.1.7'
+        id 'com.gradleup.shadow' version '+'
+    }
+}
+
+buildscript {
+    dependencyLocking {
+        lockMode = LockMode.STRICT
+        lockAllConfigurations()
+        lockFile.set file("settings-gradle-buildscript.lockfile")
     }
 }
 
 plugins {
-    id 'org.gradle.toolchains.foojay-resolver-convention' version '1.0.0'
-    id 'dev.lukebemish.managedversioning' version '2.0.0-beta.7'
-    id 'dev.lukebemish.conventions' version '0.2.0-beta.2'
+    id 'org.gradle.toolchains.foojay-resolver-convention' version '+'
+    id 'dev.lukebemish.managedversioning' version '+'
+    id 'dev.lukebemish.conventions' version '+'
+}
+
+gradle.lifecycle.beforeProject {
+    it.buildscript{
+        dependencyLocking {
+            lockMode = LockMode.STRICT
+            lockAllConfigurations()
+        }
+    }
 }
 
 managedVersioning {