GoogleCloudPlatform / GoogleCloudPlatform/cloud-opensource-java
Discussion: tool for noticing difference between BOM and explicit dependencies
Đang mở
blocked
documentation
enhancement
good first issue
help wanted
- Ngôn ngữ chính
- Java
- Star
- 163
- Fork
- 80
- Chỉ số merge pull request
- Không có pull request nào được merge trong 30 ngày
Mô tả
Customer issues in b/146130570 are making me think it might be too hard in large projects that extend past GCP to tell which versions can and cannot be set by the BOM. Two ideas:
1. Docs listing what's covered in the BOM.
2. An automated tool to suggest changes to a pom.xml when a dependency has an explicit version that is also set by the BOM.
Perhaps an enforcer rule could warn about #2?
**DO NOT START IMPLEMENTING THIS. IT HAS NOT BEEN PRIORITIZED OR PLANNED. THIS IS FOR DISCUSSION ONLY**
Hướng dẫn đóng góp
Đánh giá
Issue này chưa được đánh giá.