eclipse-score / eclipse-score/tooling
Version 1.2.0 unusable due to broken `grpc-java` transitive dependency
- Dominant language
- Rust
- Stars
- 8
- Forks
- 37
- Avg merge
- 2d 13h
- Merged PRs (30d)
- 22
Description
### Description
I'm unable to update to the `score_tooling@1.2.0` in https://github.com/eclipse-score/baselibs/
Running `bazel mod deps --lockfile_mode=update` fails immediately with:
```
ERROR: module extension @@grpc+//bazel:grpc_deps.bzl%grpc_repo_deps_ext does not generate repository "com_envoyproxy_protoc_gen_validate", yet it is imported as "com_envoyproxy_protoc_gen_validate" in the usage at https://bcr.bazel.build/modules/grpc-java/1.66.0/MODULE.bazel:68:35
(score_baselibs@_)
ERROR: Results may be incomplete as 1 extension failed.
```
### Analysis results
The dependency chain that introduces this broken module is:
```
score_tooling@1.2.0
└── flatbuffers@25.9.23
└── grpc@1.70.1
└── googleapis@0.0.0-20240819-fe8ba054a
└── grpc-java@1.66.0 ← broken
```
Looks like a recent dependency to `flatbuffers` is causing an issue.
### Solution
_No response_
### Error Occurrence Rate
None
### How to reproduce
Update to `1.2.0` in baselibs module and run `bazel mod deps --lockfile_mode=update`
### Supporting Information
_No response_
### Classification
Major
### First Affected Release
not released (main)
### Last Affected Release
not released (main)
### Expected Fixed Release
before release (main)
### Category
- [ ] Safety Relevant
- [ ] Security Relevant
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.