Make use of dependency verification feature of Gradle v6.2

[danilovesky]

Dependency verification is automatically enabled once the configuration file for dependency verification is discovered. This configuration file is located at $PROJECT_ROOT/gradle/verification-metadata.xml. This file minimally consists of the following:

<?xml version="1.0" encoding="UTF-8"?>
<verification-metadata>
   <configuration>
      <verify-metadata>true</verify-metadata>
      <verify-signatures>false</verify-signatures>
    </configuration>
</verification-metadata>

With such a minimal configuration file, a project using any external dependency or plugin would immediately start failing because it doesn’t contain any checksum to verify.

This file can be automatically generated with all the checksums as follows:

gradle --write-verification-metadata sha256 help

It may be necessary to clear Gradle caches:

rm -rf ~/.gradle/caches/

More details on dependency verification:
https://docs.gradle.org/6.2/userguide/dependency_verification.html