feat(manager/gradle): Use dependencies task when generating verification metadata

[raphiz]

Changes

As discussed here, use dependencies task when generating verification metadata.

Context

Currently, the help task is called to generate the verification-metadata.xml (e.g. ./gradlew --write-verification-metadata sha256 help). Gradle is lazy and may not evaluate the required dependencies:

[...] Gradle may discover more dependencies and artifacts depending on the tasks you execute. [...]

In my tests, using the built-in dependencies task instead of help works quite well (./gradlew --write-verification-metadata sha256 dependencies). The dependencies task is also called for lockfile generation.

Documentation (please check one with an [x])

• I have updated the documentation, or
• No documentation update is required

How I've tested my work (please select one)

I have verified these changes via:

• Code inspection only, or
• Newly added/modified unit tests, or
• No unit tests but ran on a real repository, or
• Both unit tests + ran on a real repository

[secustor]

Thanks for your first contribution and the investigation!

[renovate-release]

🎉 This PR is included in version 37.403.0 🎉

The release is available on:

• GitHub release
• npm package (@latest dist-tag)
• 37.403.0

Your semantic-release bot 📦🚀