Port outside repo usage elimination

Ports da223671a5e5d0107d502234d7378522db162e3c from WorldEdit to Worldguard and updates Gradle.

Co-authored-by: octylFractal <octavia.togami@gmail.com>

Author: 2 people

build-logic/build.gradle.kts

@@ -4,6 +4,10 @@ plugins {
 
 repositories {
     gradlePluginPortal()
+    maven {
+        name = "EngineHub Repository"
+        url = uri("https://maven.enginehub.org/repo/")
+    }
 }
 
 dependencies {

build-logic/src/main/kotlin/buildlogic.common.gradle.kts

@@ -10,11 +10,14 @@ group = rootProject.group
 version = rootProject.version
 
 repositories {
-    mavenCentral()
     maven {
         name = "EngineHub"
         url = uri("https://maven.enginehub.org/repo/")
     }
+    mavenCentral()
+    afterEvaluate {
+        killNonEngineHubRepositories()
+    }
 }
 
 configurations.all {

build-logic/src/main/kotlin/repositoriesHelper.kt

@@ -0,0 +1,26 @@
+import org.gradle.api.artifacts.dsl.RepositoryHandler
+import org.gradle.api.artifacts.repositories.MavenArtifactRepository
+import org.gradle.api.logging.Logging
+
+// The primary point of this is repository up-time. We replace most other repositories with EngineHub's repository.
+// This is because we have stronger up-time guarantees for our repository. However, Maven Central and Sonatype are
+// clearly even better, so we allow those as well. We also allow Gradle's plugin repository.
+private val ALLOWED_PREFIXES = listOf(
+    "https://maven.enginehub.org",
+    "https://repo.maven.apache.org/maven2/",
+    "https://s01.oss.sonatype.org/content/repositories/snapshots/",
+    "https://plugins.gradle.org",
+    "file:"
+)
+private val LOGGER = Logging.getLogger("repositoriesHelper")
+
+fun RepositoryHandler.killNonEngineHubRepositories() {
+    val toRemove = mutableListOf<MavenArtifactRepository>()
+    for (repo in this) {
+        if (repo is MavenArtifactRepository && !ALLOWED_PREFIXES.any { repo.url.toString().startsWith(it) }) {
+            LOGGER.info("Removing non-EngineHub repository: {}", repo.url)
+            toRemove.add(repo)
+        }
+    }
+    toRemove.forEach { remove(it) }
+}

gradle/libs.versions.toml

@@ -1,5 +1,5 @@
 [versions]
-worldedit = "7.3.0"
+worldedit = "7.3.9"
 
 # Minimum versions we apply to make dependencies support newer Java
 minimumAsm = "9.7"

gradle/wrapper/gradle-wrapper.properties

@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.8-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.12-bin.zip
 networkTimeout=10000
 validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME

gradlew

@@ -1,11 +1,40 @@
 pluginManagement {
     repositories {
         gradlePluginPortal()
+        maven {
+            name = "EngineHub"
+            url = uri("https://maven.enginehub.org/repo/")
+        }
     }
 }
 plugins {
     id("org.gradle.toolchains.foojay-resolver-convention") version "0.8.0"
 }
+dependencyResolutionManagement {
+    repositories {
+        maven {
+            name = "EngineHub"
+            url = uri("https://maven.enginehub.org/repo/")
+        }
+        gradle.settingsEvaluated {
+            // Duplicates repositoriesHelper.kt, since we can't import it
+            val allowedPrefixes = listOf(
+                "https://maven.enginehub.org",
+                "https://repo.maven.apache.org/maven2/",
+                "file:"
+            )
+
+            for (repo in this@repositories) {
+                if (repo is MavenArtifactRepository) {
+                    val urlString = repo.url.toString()
+                    check(allowedPrefixes.any { urlString.startsWith(it) }) {
+                        "Only EngineHub/Central repositories are allowed: ${repo.url} found"
+                    }
+                }
+            }
+        }
+    }
+}
 
 logger.lifecycle("""
 *******************************************