From 2fd609ed03d9e4aec2cab23051993104720211b3 Mon Sep 17 00:00:00 2001
From: gbrodman <gbrodman@google.com>
Date: Tue, 14 Jul 2026 16:52:22 -0400
Subject: [PATCH] Error out if Gradle hashes don't match (#3154)

this seems like it's probably safer
---
 release/cloudbuild-release.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/release/cloudbuild-release.yaml b/release/cloudbuild-release.yaml
index b3a4cb94b..cf69a18be 100644
--- a/release/cloudbuild-release.yaml
+++ b/release/cloudbuild-release.yaml
@@ -272,7 +272,8 @@ steps:
       remote_md5=$(gcloud storage hash -h gs://${gcs_loc}/${gradle_bin} | grep md5 | awk '{print $3}')
       if [[ ${local_md5} != ${remote_md5} ]]
       then
-        echo "${gradle_bin} HAS CHANGED ON GRADLE WEBSITE, USING THE BINARY ON GCS."
+        echo "ERROR: MD5 hash mismatch for ${gradle_bin}! Local (official): ${local_md5}, Remote (GCS cache): ${remote_md5}. Aborting build." >&2
+        exit 1
       fi
     else
       gcloud storage cp $gradle_bin gs://${gcs_loc}/