GoogleContainerTools / GoogleContainerTools/jib

Dependencies are added twice with different versions when I try to update a dependency version

Open
#3,966 4 comments 0 reactions 0 assignees View on GitHub
area/jib-gradle-plugin priority:p3 type: feature request
Dominant language
Java
Stars
14.5k
Forks
1.5k
PR merge metrics
No merged PRs in 30d

Description

**Environment**:

- *Jib version:* 3.3.1
- *Build tool:* jib-gradle-plugin:3.3.1
- *OS:* ubuntu/docker-container

**Description of the issue**: When I update a dependency (for example due to a security vulnerability), jib added the old and the new versions of the same dependency to the container. This also leads to failing of container-scanner stage in my pipeline, since the old vulnerable dependency still in the container.

**Expected behavior**: Only the new version of the dependency should be in the container.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.