Add Gradle registries for dependabot

[reta]

Description

Add explicit registry to Gradle package manager so dependabot should be able to update the dependencies:

+------------------------------------------------------------------------------------------------------------------------------------+
updater | |                                                Changes to Dependabot Pull Requests                                                 |
updater | +---------+--------------------------------------------------------------------------------------------------------------------------+
updater | | created | org.jruby.joni:joni ( from 2.2.1 to 2.2.3 )                                                                              |
updater | | created | org.locationtech.spatial4j:spatial4j ( from 0.7 to 0.8 )                                                                 |
updater | | created | org.apache.logging.log4j:log4j-api ( from 2.21.0 to 2.24.3 ), org.apache.logging.log4j:log4j-jul ( from 2.21.0 to 2.2... |
updater | | created | org.spockframework:spock-core ( from 2.3-groovy-3.0 to 2.3-groovy-4.0 )                                                  |
updater | | created | com.google.protobuf:protobuf-java ( from 3.25.5 to 4.29.3 )                                                              |
updater | | created | org.apache.rat:apache-rat ( from 0.15 to 0.16.1 )                                                                        |
updater | | created | com.avast.gradle:gradle-docker-compose-plugin ( from 0.17.6 to 0.17.12 )                                                 |
updater | | created | com.gradleup.shadow:shadow-gradle-plugin ( from 8.3.5 to 8.3.6 )                                                         |
updater | | created | org.apache.ant:ant ( from 1.10.14 to 1.10.15 )                                                                           |
updater | | created | org.apache.maven:maven-model ( from 3.9.6 to 3.9.9 )                                                                     |
updater | | created | org.wiremock:wiremock-standalone ( from 3.6.0 to 3.11.0 )                                                                |
updater | | created | jakarta.annotation:jakarta.annotation-api ( from 1.3.5 to 3.0.0 )                                                        |
updater | | created | net.java.dev.jna:jna ( from 5.13.0 to 5.16.0 )                                                                           |
updater | | created | com.netflix.nebula:gradle-extra-configurations-plugin ( from 10.0.0 to 10.0.1 )                                          |
updater | | created | com.networknt:json-schema-validator ( from 1.2.0 to 1.5.5 )                                                              |
updater | | created | joda-time:joda-time ( from 2.12.7 to 2.13.1 )                                                                            |
updater | | created | com.diffplug.spotless ( from 6.25.0 to 7.0.2 )                                                                           |
updater | | created | com.netflix.nebula:gradle-info-plugin ( from 12.1.6 to 13.3.0 )                                                          |
updater | | created | org.ajoberstar.grgit:grgit-core ( from 5.2.1 to 5.3.0 )                                                                  |
updater | | created | org.jruby.jcodings:jcodings ( from 1.0.58 to 1.0.61 )                                                                    |
updater | | created | io.projectreactor:reactor-core ( from 3.5.20 to 3.7.2 )                                                                  |
updater | | created | org.locationtech.jts:jts-core ( from 1.15.0 to 1.20.0 )                                                                  |
updater | +---------+--------------------------------------------------------------------------------------------------------------------------+

Related Issues

N/A

Check List

• Functionality includes testing.
• API changes companion pull request created, if applicable.
• Public documentation issue/PR created, if applicable.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[cwperks]

Good find @reta! Did you find any official documentation on this?

[reta]

Good find @reta! Did you find any official documentation on this?

Yeah, thanks @cwperks , the registries are documented here [1], I think the problem basically comes from the complexity of our build that dependabot could not decipher, so helping the tool here a bit.

[1] https://docs.github.com/en/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot

[owaiskazi19]

This is great. Thanks @reta