#3370 add dependency checking to gradle build

[planetf1]

Signed-off-by: Nigel Jones nigel.l.jones+git@gmail.com

Description

Adds some additional checks based on https://newsletter.gradle.com/2022/05

• Adds dependency checking to the gradle build, similar to the function in the maven build. This checks for unused Dependencies. Exceptions are added in the top level build.gradle. The build will fail if any unnecessary dependencies are added
• Adds capability checking for log implementations - detects, reports, and aids in resolving log class implementation problems (ie slf/commons logging/logback etc)
• Adds capability checking for common clashes - ie javax/jakarta - prevents duplicate classes with different implementations on the classpath (unpredictable behaviour)
• Adds validation of gradle wrapper checksum to ci/cd to prevent malicious injection attack

Related Issue(s)

Issue #3370 aims to bring the gradle build to parity with the maven build

Testing

Fixed up bad dependencies. Checked for clean reports. Ensured build fails with invalid dependency. Run FVT

Release Notes & Documentation

Additional notes

Still to do:

• Add apache RAT license checker

• this will be added in a later PR