apache / apache/beam

[Feature Request]: Provide comprehensive Bill of Materials/BOM for Java

Open
#25,340 0 comments 0 reactions 0 assignees View on GitHub
java new feature P2
Dominant language
Java
Stars
8.7k
Forks
4.7k
Avg merge
1d 20h
Merged PRs (30d)
196

Description

### What would you like to happen?

Is it possible to provide an additional / comprehensive [Bill of Materials/BOM](https://maven.apache.org/guides/introduction/introduction-to-dependency-mechanism.html#bill-of-materials-bom-poms) with Beam?

Beam / IOs contain many dependencies, which often conflict with other dependencies on the same project.
Beam provides [beam-sdks-java-bom](https://mvnrepository.com/artifact/org.apache.beam/beam-sdks-java-bom) which is very helpful, but it could also be prescriptive on many other dependencies.

For example, every time that we update our reference to a version of Beam, we have to check [BeamModulePlugin.groovy](https://github.com/apache/beam/blob/master/buildSrc/src/main/groovy/org/apache/beam/gradle/BeamModulePlugin.groovy) so we can compare/match with our versions.

The most notable one / source of issues is when `google_cloud_platform_libraries_bom` doesn't match - so I'm wondering if there's a way to provide a more comprehensive BOM so it becomes easier to stay up to date with Beam releases.

### Issue Priority

Priority: 2 (default / most feature requests should be filed as P2)

### Issue Components

- [ ] Component: Python SDK
- [X] Component: Java SDK
- [ ] Component: Go SDK
- [ ] Component: Typescript SDK
- [ ] Component: IO connector
- [ ] Component: Beam examples
- [ ] Component: Beam playground
- [ ] Component: Beam katas
- [ ] Component: Website
- [ ] Component: Spark Runner
- [ ] Component: Flink Runner
- [ ] Component: Samza Runner
- [ ] Component: Twister2 Runner
- [ ] Component: Hazelcast Jet Runner
- [ ] Component: Google Cloud Dataflow Runner

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.