bazelbuild / bazelbuild/bazel-worker-api
bazel_worker_java uses explicit versions of Maven artifacts instead of BOMs
Open
- Dominant language
- Java
- Stars
- 8
- Forks
- 8
- PR merge metrics
- No merged PRs in 30d
Description
Explicit artifact dependencies take precedence over BOMs, at least as of rules_jvm_external@6.9. This means that if a downstream module uses `com.google.protobuf:protobuf-bom`, the version specified there will be overridden by the artifact versions specified by bazel_worker_java. The fix is for bazel_worker_java to use `com.google.protobuf:protobuf-bom` instead.
The same is true for guava and `com.google.guava:guava-bom`
Contributor guide
Assessment
This issue has not been assessed yet.