For #505. Enable Enforcer for Gradle

There are caveats. The wiki page needs to discuss these.

Author: binkley

build.gradle

@@ -3,7 +3,6 @@ import com.github.spotbugs.snom.Confidence
 import com.github.spotbugs.snom.Effort
 
 plugins {
-    alias libs.plugins.org.kordamp.gradle.project.enforcer
     id "build-dashboard" // See build/reports/buildDashboard/index.html
     // TODO: project-report is presently broken because of pitest task
     id "project-report" // Try the `projectReport` task
@@ -26,16 +25,6 @@ plugins {
 version = "0-SNAPSHOT"
 group = "demo"
 
-// Do read the documentation on Enforcer to pick what makes sense to you:
-// https://kordamp.org/enforcer-gradle-plugin/#_rule_dsl
-// TODO: Follow-up with plugin GitHub: https://github.com/kordamp/enforcer-gradle-plugin/issues/17#issuecomment-2169301864
-/*
-enforce {
-     configure()
-     rule()
-}
-*/
-
 repositories {
     mavenCentral()
 }

gradle.properties

@@ -5,6 +5,7 @@ checkstyleVersion=10.17.0
 coverageBranches=1.00
 coverageInstructions=1.00
 coverageLines=1.00
+enforcerPluginVersion=0.13.0
 findsecbugsPluginVersion=1.13.0
 # Hey! This is important. This property sets your Gradle version.
 gradleWrapperVersion=8.9

gradle/libs.versions.toml

@@ -10,7 +10,6 @@ org-gaul-modernizer = "2.9.0"
 org-jacoco = "0.8.12"
 org-junit-jupiter = "5.11.0-RC1"
 org-kordamp-gradle-jdeps-plugin = "0.20.0"
-org-kordamp-gradle-project-enforcer-plugin = "0.13.0"
 org-mockito = "5.12.0"
 org-owasp-dependencycheck-plugin = "10.0.3"
 org-pitest-pitest-command-line = "1.16.1"
@@ -41,6 +40,5 @@ com-dorongold-task-tree = { id = "com.dorongold.task-tree", version.ref = "com-d
 com-github-andygoossens-gradle-modernizer-plugin = { id = "com.github.andygoossens.gradle-modernizer-plugin", version.ref = "com-github-andygoossens-gradle-modernizer-plugin" }
 com-github-ben-manes-versions = { id = "com.github.ben-manes.versions", version.ref = "com-github-ben-manes-versions-plugin" }
 org-kordamp-gradle-jdeps = { id = "org.kordamp.gradle.jdeps", version.ref = "org-kordamp-gradle-jdeps-plugin" }
-org-kordamp-gradle-project-enforcer = { id = "org.kordamp.gradle.project-enforcer", version.ref = "org-kordamp-gradle-project-enforcer-plugin" }
 org-owasp-dependencycheck = { id = "org.owasp.dependencycheck", version.ref = "org-owasp-dependencycheck-plugin" }
 nl-littlerobots-version-catalog-update = { id = "nl.littlerobots.version-catalog-update", version.ref = "nl-littlerobots-version-catalog-update-plugin" }

settings.gradle

@@ -1,8 +1,39 @@
+// Note:
+// When you see "$fooVersion", those are versions pulled from
+// "gradle.properties".
+
+// TODO: Migrate these to use the version catalog (like other plugins in
+// "build.gradle").
 pluginManagement {
     plugins {
         id "com.github.spotbugs" version "$spotbugsPluginVersion"
         id "info.solidsoft.pitest" version "$pitestPluginVersion"
     }
 }
 
+buildscript {
+    repositories {
+        gradlePluginPortal()
+        mavenCentral()
+    }
+
+    dependencies {
+        // Enforcer plugin uses an older version of commons-lang3 that breaks
+        // DependencyCheck. Force a current version.
+        // TODO: Look for an updated Enforcer plugin that does not clash.
+        classpath "org.apache.commons:commons-lang3:3.15.0"
+        classpath "org.kordamp.gradle:enforcer-gradle-plugin:$enforcerPluginVersion"
+    }
+}
+
+apply plugin: "org.kordamp.gradle.enforcer"
+
+// See https://kordamp.org/enforcer-gradle-plugin/#_rules for the kinds of
+// rules you can set up.
+enforce {
+    rule(enforcer.rules.RequireGradleVersion) { r ->
+        r.version = "$gradleWrapperVersion"
+    }
+}
+
 rootProject.name = "modern-java-practices"