Vulnerable Gradle plugin-publish plugin reveals sensitive information

A vulnerability (CVE-2020-7599) in Gradle's com.gradle.plugin-publish plugin caused pre-signed AWS URLs to be written to build logs when run with --info or more verbose logging; those URLs are valid for one hour and could be reused to replace recently uploaded plugin artifacts. Gradle released version 0.11.0 to reduce the logged visibility of the URL, shortened the URL lifespan, and advises updating the plugin and avoiding verbose log levels on public CI systems.